webmail.dent.kyushu-u.ac.jp

- Kyushu University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 62:21:27:10:bd:73:b3:90 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Kyushu University

Organization: Kyushu University
Organization unit: Faculty of Dental Science
State / Province: Fukuoka
Locality: Fukuoka-shi
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 62:21:27:10:bd:73:b3:90
Serial Number (int): 7070975842799825808
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: f4:99:67:d5:24:08:27:12:f2:06:f3:79:2b:76:21:fd:4f:26:37:e3
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): ad:27:fd:e8:45:96:8d:70:bc:70:77:2a:48:14:f6:26:c1:9a:56:08
Fingerprint (sha256): 09:1a:ba:f6:7b:23:61:41:5c:32:53:11:db:56:ca:cb:78:0a:38:30:83:94:23:93:98:b3:e9:d8:d1:4b:31:34


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate webmail.dent.kyushu-u.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.dent.kyushu-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.dent.kyushu-u.ac.jp

Other certificates including the domain name kyushu-u.ac.jp

(limited to 100 certificates)
m602.m.kyushu-u.ac.jp
eq.kyushu-u.ac.jp
www.hes.kyushu-u.ac.jp
webmail.math.kyushu-u.ac.jp
hosting3.cc.kyushu-u.ac.jp
storage.iii.kyushu-u.ac.jp
mol.artsci.kyushu-u.ac.jp
konchudb.agr.agr.kyushu-u.ac.jp
sv01.triam.kyushu-u.ac.jp
*.qc.kyushu-u.ac.jp
www.cabas.kyushu-u.ac.jp
beppu.kyushu-u.ac.jp
www.geo.kyushu-u.ac.jp
app.icer.kyushu-u.ac.jp
itonavi.f.ait.kyushu-u.ac.jp
mpoint.cc.kyushu-u.ac.jp
www.icer.kyushu-u.ac.jp
www.cabas.kyushu-u.ac.jp
ku-portal.kyushu-u.ac.jp
message.iii.kyushu-u.ac.jp
storage.design.kyushu-u.ac.jp
okadalab.kyushu-u.ac.jp
career.kyushu-u.ac.jp
jinq-web.jimu.kyushu-u.ac.jp
www-shiken.jimu.kyushu-u.ac.jp
xserve.rche.kyushu-u.ac.jp
www.cabas.kyushu-u.ac.jp
arch.kyushu-u.ac.jp
www3.ir.kyushu-u.ac.jp
www.leds.ait.kyushu-u.ac.jp
ir-bi2.jimu.kyushu-u.ac.jp
ns1.edu.kyushu-u.ac.jp
hosting2.cc.kyushu-u.ac.jp
scmain.sc.kyushu-u.ac.jp
pops.dent.kyushu-u.ac.jp
hyoka.ofc.kyushu-u.ac.jp
setting.m.kyushu-u.ac.jp
www.share.kyushu-u.ac.jp
card.kyushu-u.ac.jp
syllabus.kyushu-u.ac.jp
portal.i3.kyushu-u.ac.jp
hosting4.cc.kyushu-u.ac.jp
sub.et.kyushu-u.ac.jp
auth.icer.kyushu-u.ac.jp
otrx.ed.kyushu-u.ac.jp
ask.jimu.kyushu-u.ac.jp
job.jimu.kyushu-u.ac.jp
sevo.kyushu-u.ac.jp
www.rheumatology.beppu.hosp.kyushu-u.ac.jp
sc003.sc.kyushu-u.ac.jp
fs1.edu.kyushu-u.ac.jp
scserv.sc.kyushu-u.ac.jp
rengeso.edu.kyushu-u.ac.jp
www.leds.ait.kyushu-u.ac.jp
zk1.med.kyushu-u.ac.jp
vpn.jimu.kyushu-u.ac.jp
sc003.sc.kyushu-u.ac.jp
office365.iii.kyushu-u.ac.jp
ueii.kyushu-u.ac.jp
webmail.dent.kyushu-u.ac.jp
yin.cc.kyushu-u.ac.jp
koyukai.kyushu-u.ac.jp
*.math.kyushu-u.ac.jp
ku-cert.kyushu-u.ac.jp
ccl.scc.kyushu-u.ac.jp
arch.kyushu-u.ac.jp
www.artsci.kyushu-u.ac.jp
sw-web.cc.kyushu-u.ac.jp
str3.i.kyushu-u.ac.jp
www.sec.kyushu-u.ac.jp
tutor.isc.kyushu-u.ac.jp
nursing.career.center.med.kyushu-u.ac.jp
medtechs.med.kyushu-u.ac.jp
cs.kyushu-u.ac.jp
gcity4.doc.kyushu-u.ac.jp
gp-card.kyushu-u.ac.jp
imaq2.kyushu-u.ac.jp
qenavi.eng.kyushu-u.ac.jp
ds.s.kyushu-u.ac.jp
web.sso.kyushu-u.ac.jp
wocmn1.gened.kyushu-u.ac.jp
itonavi.f.ait.kyushu-u.ac.jp
rad.dent.kyushu-u.ac.jp
kokusai.hosp.kyushu-u.ac.jp
isc.kyushu-u.ac.jp
dreams-d1.riam.kyushu-u.ac.jp
portal.isee.kyushu-u.ac.jp
soft.iii.kyushu-u.ac.jp
qpost.jimu.kyushu-u.ac.jp
aero.kyushu-u.ac.jp
sv01.triam.kyushu-u.ac.jp
goukaku.jimu.kyushu-u.ac.jp
str3.i.kyushu-u.ac.jp
hosting1.cc.kyushu-u.ac.jp
ud.arch.kyushu-u.ac.jp
www.m.ait.kyushu-u.ac.jp
www.lib.kyushu-u.ac.jp
www.geo.kyushu-u.ac.jp
portal.hq.kyushu-u.ac.jp
hibari.edu.kyushu-u.ac.jp

Certificate

The complete raw certificate details for webmail.dent.kyushu-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSbxfVbtlReJydsde8D3
fMeq/gkCd+lx6lJ8dTkFZ7TYaBUgl/xsmVR4RKHUa1fCOn30mxJCVNQUgmwPAm1W
QwuwGcCrEYren6eugXqMrHJT+hnEtGT9/liTd8DxvGhiXgJD4ijjC+e57Mlzxg5T
IZEKvOcUmGnXRvfqjb/hPERjzrDjeBkNHoaviPxscbARNg0UQ4FP0Jc9tvmDq+Rv
Hk5i6kE9bxWd5lFRFz4Ahjb4daBgsuQa8FBdIdj2s5ehS9LLMF5K80RvEZH+uG5S
QS/7nepqQXoETGTtXfM32gLBGYCfPZcMFfKUlhyZ+e19HDKdrRELcv4Df+tr3T/k
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7070975842799825808
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-12 04:17:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-12 04:17:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fukuoka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fukuoka-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyushu University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Faculty of Dental Science'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.dent.kyushu-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24383196524670148492414003578294381530238141837582362616175417606734761366295864198324516254759247689261812126195300438545493429132794012961569453721042751373184886501174076104255387178502606742205666313360725498840914203023852122409633296293583944913156927272188727502471964085802696370579308655857435386382625446903441623999417209274426611008426461806550833869145386611713843242016046872841467185363143190483827720483407056668100950487245670560766368192463577341084236393102070983844473507459112477167542726062795618016266472776573575536906805707311540246740087491853527368443699730555145162472000445768597000676523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.dent.kyushu-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f49967d524082712f206f3792b7621fd4f2637e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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