www.cit.t.kyoto-u.ac.jp

- Kyoto University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 55:be:ec:2e:cd:c8:ea:63:41:17:9f:94:9f:28:ab:93 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Kyoto University

Organization: Kyoto University
Organization unit: Graduate School of Engineering
State / Province: Kyoto
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 55:be:ec:2e:cd:c8:ea:63:41:17:9f:94:9f:28:ab:93
Serial Number (int): 113975706401688722938597687996057168787
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b6:c4:82:23:41:4a:4c:50:b0:17:9f:d5:7f:39:1e:f8:95:b6:60:65
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 9b:f8:24:2c:9b:49:13:cf:df:f0:f7:71:24:e1:84:b4:fe:b2:e2:43
Fingerprint (sha256): 08:d1:56:39:a9:9f:52:77:d1:4f:97:a6:fd:f7:d1:bb:08:36:5d:df:1b:6c:81:fc:e5:7e:75:9f:81:f0:f3:78


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate www.cit.t.kyoto-u.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cit.t.kyoto-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cit.t.kyoto-u.ac.jp

Other certificates including the domain name kyoto-u.ac.jp

(limited to 100 certificates)
student-notifier-dev.rd.iimc.kyoto-u.ac.jp
home.kurims.kyoto-u.ac.jp
history.cseas.kyoto-u.ac.jp
www.qnmc.icems.kyoto-u.ac.jp
kuhp.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
meibo.i.kyoto-u.ac.jp
jl.net.ist.i.kyoto-u.ac.jp
genome2.cohort.med.kyoto-u.ac.jp
www.anim.med.kyoto-u.ac.jp
koukai.shomubu.kyoto-u.ac.jp
ris-orcid.iimc.kyoto-u.ac.jp
elam.kais.kyoto-u.ac.jp
educo.bell.ee.t.kyoto-u.ac.jp
my.kulib.kyoto-u.ac.jp
kar.gakusei.kyoto-u.ac.jp
www.africa.kyoto-u.ac.jp
ikeda-xrp.gsais.kyoto-u.ac.jp
vdp.cseas.kyoto-u.ac.jp
zoo.zool.kyoto-u.ac.jp
agri-history.kais.kyoto-u.ac.jp
inter3.kuicr.kyoto-u.ac.jp
www.rish.kyoto-u.ac.jp
www.ee.t.kyoto-u.ac.jp
www.esho.kyoto-u.ac.jp
kyutubebio.sci.kyoto-u.ac.jp
db.kudpc.kyoto-u.ac.jp
pas.cseas.kyoto-u.ac.jp
cls.iimc.kyoto-u.ac.jp
SC2-20A-1.kuins.kyoto-u.ac.jp
lawschool.law.kyoto-u.ac.jp
socio.k.kyoto-u.ac.jp
demo3.cseas.kyoto-u.ac.jp
www.al.media.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
kupe.med.kyoto-u.ac.jp
cinq.lif.kyoto-u.ac.jp
www.tech.t.kyoto-u.ac.jp
www.maizuru.marine.kais.kyoto-u.ac.jp
www.cn.call.iimc.kyoto-u.ac.jp
vmm.cc.iimc.kyoto-u.ac.jp
www.rri.kyoto-u.ac.jp
www.s-ar.t.kyoto-u.ac.jp
mgend.med.kyoto-u.ac.jp
ris-orcid.iimc.kyoto-u.ac.jp
tls.automattic.com
utrecht.kuicr.kyoto-u.ac.jp
gisurg.kuhp.kyoto-u.ac.jp
www2.kulib.kyoto-u.ac.jp
www04s.ufinity.jp
ikev2-i.kuins.kyoto-u.ac.jp
mail.st.kyoto-u.ac.jp
www.suzuki.icems.kyoto-u.ac.jp
mhost2.iimc.kyoto-u.ac.jp
kudpc.kudpc.kyoto-u.ac.jp
www.s-ge.t.kyoto-u.ac.jp
www.rri.kyoto-u.ac.jp
dksrp.hs.med.kyoto-u.ac.jp
ufinity04.jp.fujitsu.com
sp.rd.iimc.kyoto-u.ac.jp
dia.kuicr.kyoto-u.ac.jp
authidp1.iimc.kyoto-u.ac.jp
gssfolio.iimc.kyoto-u.ac.jp
www.yukawa.kyoto-u.ac.jp
100nin.cpier.kyoto-u.ac.jp
jisedai.asafas.kyoto-u.ac.jp
gcoe.biol.sci.kyoto-u.ac.jp
www-nh.scphys.kyoto-u.ac.jp
ap.rieki-souhan.kyoto-u.ac.jp
www.blog.ist.i.kyoto-u.ac.jp
gssfolio.gss.kyoto-u.ac.jp
fundexapp.jp
www.emc.t.kyoto-u.ac.jp
vds2.iimc.kyoto-u.ac.jp
enq.gakusei.kyoto-u.ac.jp
iccert.adm.kyoto-u.ac.jp
www.bic.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
clinsub.raddarj.genome.med.kyoto-u.ac.jp
coc.educ.kyoto-u.ac.jp
www.iimc.kyoto-u.ac.jp
agrohort.kais.kyoto-u.ac.jp
educo.work.t.kyoto-u.ac.jp
www-nh.scphys.kyoto-u.ac.jp
www.icems.kyoto-u.ac.jp
www.cit.t.kyoto-u.ac.jp
ts-mhs.iimc.kyoto-u.ac.jp
database.rish.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
mail.iimc.kyoto-u.ac.jp
www.coc.kyoto-u.ac.jp
www.lif.kyoto-u.ac.jp
educo.yamakawa-lab.ee.t.kyoto-u.ac.jp
plesk.hosts18b.iimc.kyoto-u.ac.jp
incmac-20.kais.kyoto-u.ac.jp
kamitani-lab.ist.i.kyoto-u.ac.jp
125th.kyoto-u.ac.jp
www-nh.scphys.kyoto-u.ac.jp
www.maizuru.marine.kais.kyoto-u.ac.jp
corpus.kanji.zinbun.kyoto-u.ac.jp

Certificate

The complete raw certificate details for www.cit.t.kyoto-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLcxNrGq/8jxO+t4eChu
pVCUQ/80dfxuZTBg+ySl8Ti/zSvIa4oXa8H7A49cKPXcfM8oPZEAlhpHXYyz74V/
AF97tf3cNuL78wEoSlvOG4gy0lUebcPPjHNHg3ryVfYkSD9yW8MzNa0Xg7FehsKp
3YW5zkdpWORl43Ogv/dlE77OBCRDBXm8uGHvX67yGPQc8Nnk/QOZeOP9sFQ30rKK
Zn9TRyksXA6ULnBxwfB6Nf8hkZHLkdv9XBqRWmsbpaN//KQb4a4bBDXkBTtv563X
i3dgavVfcysDZDKOPVON770IqKQqzvXa0rh8WLJw0U+NJMFvi0uZnkKr7OSwcIMm
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 113975706401688722938597687996057168787
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-14 07:42:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-14 07:42:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyoto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyoto University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Graduate School of Engineering'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cit.t.kyoto-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22308277134820651905130908262367696102139093902486085965526420447161900086488763022261761275898056809808307922687368281786482284896684146489910839286874588157967984926076068618257590175383060480926860110611570413932507077605356737385935170944175292765199558030837585485712310179007469772890339523846690195580102445939816099261002078115031679425404920739223861495967910752103187456670147247504783809072876783567640198050036555951239262432949018367465384135479048008723391650191812850933141676162291268217741607289006333419279796849228206302116392258614156043403719288327681658818675425053624337957685570328469348492853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cit.t.kyoto-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6c48223414a4c50b0179fd57f391ef895b66065
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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