tutor.isc.kyushu-u.ac.jp

- Kyushu University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 78:3b:73:f7:db:00:1d:c7:87:36:f4:47:7b:ae:54:1b was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Kyushu University

Organization: Kyushu University
State / Province: Fukuoka
Locality: Fukuoka-shi
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 78:3b:73:f7:db:00:1d:c7:87:36:f4:47:7b:ae:54:1b
Serial Number (int): 159816057123081378324078173426675504155
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: eb:11:9f:b0:2d:fd:9b:d9:29:a2:b4:df:82:e9:0d:25:dd:b9:f6:26
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): e2:88:fe:0d:15:98:ac:d7:e1:95:8c:3c:a6:94:16:f7:34:6a:7f:3b
Fingerprint (sha256): 0a:7f:25:d9:50:a6:27:b4:25:9a:bd:38:8b:f7:a4:dd:72:b9:0e:79:b0:44:bf:7d:18:0c:26:1e:81:6b:7f:2c


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate tutor.isc.kyushu-u.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tutor.isc.kyushu-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tutor.isc.kyushu-u.ac.jp

Other certificates including the domain name kyushu-u.ac.jp

(limited to 100 certificates)
m602.m.kyushu-u.ac.jp
eq.kyushu-u.ac.jp
www.hes.kyushu-u.ac.jp
webmail.math.kyushu-u.ac.jp
hosting3.cc.kyushu-u.ac.jp
storage.iii.kyushu-u.ac.jp
mol.artsci.kyushu-u.ac.jp
konchudb.agr.agr.kyushu-u.ac.jp
sv01.triam.kyushu-u.ac.jp
*.qc.kyushu-u.ac.jp
www.cabas.kyushu-u.ac.jp
beppu.kyushu-u.ac.jp
www.geo.kyushu-u.ac.jp
app.icer.kyushu-u.ac.jp
itonavi.f.ait.kyushu-u.ac.jp
mpoint.cc.kyushu-u.ac.jp
www.icer.kyushu-u.ac.jp
www.cabas.kyushu-u.ac.jp
ku-portal.kyushu-u.ac.jp
message.iii.kyushu-u.ac.jp
storage.design.kyushu-u.ac.jp
okadalab.kyushu-u.ac.jp
career.kyushu-u.ac.jp
jinq-web.jimu.kyushu-u.ac.jp
www-shiken.jimu.kyushu-u.ac.jp
xserve.rche.kyushu-u.ac.jp
www.cabas.kyushu-u.ac.jp
arch.kyushu-u.ac.jp
www3.ir.kyushu-u.ac.jp
www.leds.ait.kyushu-u.ac.jp
ir-bi2.jimu.kyushu-u.ac.jp
ns1.edu.kyushu-u.ac.jp
hosting2.cc.kyushu-u.ac.jp
scmain.sc.kyushu-u.ac.jp
pops.dent.kyushu-u.ac.jp
hyoka.ofc.kyushu-u.ac.jp
setting.m.kyushu-u.ac.jp
www.share.kyushu-u.ac.jp
card.kyushu-u.ac.jp
syllabus.kyushu-u.ac.jp
portal.i3.kyushu-u.ac.jp
hosting4.cc.kyushu-u.ac.jp
sub.et.kyushu-u.ac.jp
auth.icer.kyushu-u.ac.jp
otrx.ed.kyushu-u.ac.jp
ask.jimu.kyushu-u.ac.jp
job.jimu.kyushu-u.ac.jp
sevo.kyushu-u.ac.jp
www.rheumatology.beppu.hosp.kyushu-u.ac.jp
sc003.sc.kyushu-u.ac.jp
fs1.edu.kyushu-u.ac.jp
scserv.sc.kyushu-u.ac.jp
rengeso.edu.kyushu-u.ac.jp
www.leds.ait.kyushu-u.ac.jp
zk1.med.kyushu-u.ac.jp
vpn.jimu.kyushu-u.ac.jp
sc003.sc.kyushu-u.ac.jp
office365.iii.kyushu-u.ac.jp
ueii.kyushu-u.ac.jp
webmail.dent.kyushu-u.ac.jp
yin.cc.kyushu-u.ac.jp
koyukai.kyushu-u.ac.jp
*.math.kyushu-u.ac.jp
ku-cert.kyushu-u.ac.jp
ccl.scc.kyushu-u.ac.jp
arch.kyushu-u.ac.jp
www.artsci.kyushu-u.ac.jp
sw-web.cc.kyushu-u.ac.jp
str3.i.kyushu-u.ac.jp
www.sec.kyushu-u.ac.jp
tutor.isc.kyushu-u.ac.jp
nursing.career.center.med.kyushu-u.ac.jp
medtechs.med.kyushu-u.ac.jp
cs.kyushu-u.ac.jp
gcity4.doc.kyushu-u.ac.jp
gp-card.kyushu-u.ac.jp
imaq2.kyushu-u.ac.jp
qenavi.eng.kyushu-u.ac.jp
ds.s.kyushu-u.ac.jp
web.sso.kyushu-u.ac.jp
wocmn1.gened.kyushu-u.ac.jp
itonavi.f.ait.kyushu-u.ac.jp
rad.dent.kyushu-u.ac.jp
kokusai.hosp.kyushu-u.ac.jp
isc.kyushu-u.ac.jp
dreams-d1.riam.kyushu-u.ac.jp
portal.isee.kyushu-u.ac.jp
soft.iii.kyushu-u.ac.jp
qpost.jimu.kyushu-u.ac.jp
aero.kyushu-u.ac.jp
sv01.triam.kyushu-u.ac.jp
goukaku.jimu.kyushu-u.ac.jp
str3.i.kyushu-u.ac.jp
hosting1.cc.kyushu-u.ac.jp
ud.arch.kyushu-u.ac.jp
www.m.ait.kyushu-u.ac.jp
www.lib.kyushu-u.ac.jp
www.geo.kyushu-u.ac.jp
portal.hq.kyushu-u.ac.jp
hibari.edu.kyushu-u.ac.jp

Certificate

The complete raw certificate details for tutor.isc.kyushu-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+OX+SzDXrIm4oKcl3q/
7G/MBY9eLcqJj6bxcTnd2c/EB+ea2mxo1eh5qZDvK2xHpEUi4VYn6MmcElKx+EDD
6SuL2oTqtdkfoiRBUvKmCSvaEs8a486C7jsh0CoundN0MoWFGJxEAf3hy1GO57hb
mVp0KSctIv1f+FJKmnud1xoJ/OIo1ComLR0zPgOB2qfxE5HtO4eD7hUKfapb0k3M
uYRstYbs89mbI0Z/pWSWsy1Q72Drs+5fNqMonFXrpFdQvTx/Vj7PU+aLIqL3FYeM
W3uqUYCCWZPFv9NgGFLVECPaNmsj9nu4uVlL+Dez/WC7hudlwpj3fmtMwskhMXnq
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 159816057123081378324078173426675504155
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 01:42:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-16 01:42:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fukuoka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fukuoka-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyushu University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tutor.isc.kyushu-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24728700078045410662685397258587121482002679577724395415698688282828585008272161935823244519560196393197971962213754151713322554035786721534070183686814782670794387187960439987120289025252861505733847083724794451237617108054107034889960331930871313333060673902964760247708815479062151199909481049326384473181950351156136126064719514202307087643019078169639852103410961954384050793229939719344763468945292628371792992062684945126149548112736674087581193012716868091466755674318248384910269953944428487717716384010376981953393165256117682669622832675320656270311473509661725019888579752135135775079186825752960862644973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutor.isc.kyushu-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb119fb02dfd9bd929a2b4df82e90d25ddb9f626
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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