demo.slab.ces.kyutech.ac.jp

- Kyushu Institute of Technology -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 16:2c:3f:59:9b:aa:65:5e was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Kyushu Institute of Technology

Organization: Kyushu Institute of Technology
Organization unit: Department of Systems Design and Informatics
State / Province: Fukuoka
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 16:2c:3f:59:9b:aa:65:5e
Serial Number (int): 1597721621905958238
Serial Number lenght: 61 bits, 8 octets

SubjectKeyId: c9:97:19:d0:0a:cb:d6:94:ae:d3:c2:37:da:3b:fd:0a:85:d0:11:00
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 52:b8:12:7e:ea:12:b2:4f:cb:e8:dd:1a:bb:3c:8a:51:64:eb:34:d9
Fingerprint (sha256): 0a:9f:ec:71:a0:0c:50:42:a6:6c:e7:2a:14:50:66:3c:54:c5:4f:39:bc:5e:9e:01:60:d7:0d:cd:59:ed:40:be


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate demo.slab.ces.kyutech.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for demo.slab.ces.kyutech.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

demo.slab.ces.kyutech.ac.jp

Other certificates including the domain name kyutech.ac.jp

(limited to 100 certificates)
hyokadb02.jimu.kyutech.ac.jp
mikity3d.mk.ces.kyutech.ac.jp
www.melt.kyutech.ac.jp
www.lib.kyutech.ac.jp
www.mk.ces.kyutech.ac.jp
mountain.elcs.kyutech.ac.jp
www.c3.club.kyutech.ac.jp
imap.lai.kyutech.ac.jp
*.ipl-e.ai.kyutech.ac.jp
idm.kyutech.ac.jp
www.ylab.ai.kyutech.ac.jp
mail.tech-i.kyutech.ac.jp
mail.bio.kyutech.ac.jp
*.club.kyutech.ac.jp
edu.iizuka.isc.kyutech.ac.jp
kiso.mns.kyutech.ac.jp
md-tobata-01.kiban.kyutech.ac.jp
ohio.jimu.kyutech.ac.jp
pluto44.pluto.ai.kyutech.ac.jp
www.ksl.ci.kyutech.ac.jp
edu.tobata.isc.kyutech.ac.jp
t.el.kyutech.ac.jp
leo10.cse.kyutech.ac.jp
edu-git2.bio.kyutech.ac.jp
vpn-i.kiban.kyutech.ac.jp
hoken.jimu.kyutech.ac.jp
www.ai.kyutech.ac.jp
www.ipl-e.ai.kyutech.ac.jp
www.ltc.kyutech.ac.jp
vbc.kiban-i.kyutech.ac.jp
edragon-demo.jimu.kyutech.ac.jp
research01.jimu.kyutech.ac.jp
webmail.lsse.kyutech.ac.jp
demo.slab.ces.kyutech.ac.jp
webmail.lsse.kyutech.ac.jp
icpserv.isc.kyutech.ac.jp
pmu.ele.kyutech.ac.jp
www.admission.kyutech.ac.jp
zodiac30.cse.kyutech.ac.jp
gw.jimu.kyutech.ac.jp
www.ai.kyutech.ac.jp
mail.bio.kyutech.ac.jp
www.irisa-lab.bio.kyutech.ac.jp
virginia.jimu.kyutech.ac.jp
secure.jimu.el.kyutech.ac.jp
research02.jimu.kyutech.ac.jp
ex.melt.kyutech.ac.jp
www2.slab.ces.kyutech.ac.jp
edragon-syllabus.jimu.kyutech.ac.jp
www.ipl-e.ai.kyutech.ac.jp
securesv.kiban.kyutech.ac.jp
gds.tom.ai.kyutech.ac.jp
ltc-apa.el.kyutech.ac.jp
leo10.cse.kyutech.ac.jp
www.iizuka.kyutech.ac.jp
*.ipl-e.ai.kyutech.ac.jp
www.pl.ai.kyutech.ac.jp
idp.idm.kyutech.ac.jp
gcl.ltc.kyutech.ac.jp
www.ces.kyutech.ac.jp
www.isc.kyutech.ac.jp
leo10.cse.kyutech.ac.jp
www.lai.kyutech.ac.jp
onlineguide.isc.kyutech.ac.jp
sec.kyutech.ac.jp
www.irisa-lab.bio.kyutech.ac.jp
www.mk.ces.kyutech.ac.jp
mail1.dhs.kyutech.ac.jp
inohira.mns.kyutech.ac.jp
mail.pl.ai.kyutech.ac.jp
*.club.kyutech.ac.jp
www.ai.kyutech.ac.jp
www.taskit.mk.ces.kyutech.ac.jp
www.ksl.ci.kyutech.ac.jp
www.irisa-lab.bio.kyutech.ac.jp
sec.kyutech.ac.jp
rabbit.mns.kyutech.ac.jp
sheep.tech-t.kyutech.ac.jp
sog-sien.jimu.kyutech.ac.jp
koh-career-ext.tobata.kyutech.ac.jp
edragon-portal.jimu.kyutech.ac.jp
dragon.civil.kyutech.ac.jp
sheep.civil.kyutech.ac.jp
idm.kyutech.ac.jp
www4.dumbo.ai.kyutech.ac.jp
virusbuster3.tobata.kyutech.ac.jp
onlineguide.isc.kyutech.ac.jp
hiko.isc.kyutech.ac.jp
www4.dumbo.ai.kyutech.ac.jp
www.yasunaga-lab.bio.kyutech.ac.jp
idm.kyutech.ac.jp
ml.tech.kyutech.ac.jp
ppl2017.ipl-e.ai.kyutech.ac.jp
account.compsys.brain.kyutech.ac.jp
www3.isc.kyutech.ac.jp
www.iizuka.kyutech.ac.jp
leo10.cse.kyutech.ac.jp
sog-sien.jimu.kyutech.ac.jp
nursing.mns.kyutech.ac.jp
www.pl.ai.kyutech.ac.jp

Certificate

The complete raw certificate details for demo.slab.ces.kyutech.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj80Eh5zxzo51g3sI3d7
A13ACnUZJ4/UuEsr9jEoRzwPYjILwjx98HMY0/qOOW5WMORjvMHCKaVkZyRiglGW
oobOxWhtYjyEnjD12MBj8qRwocbrECNJk/K1GYQ9xCAIHMi83wPmxemSCixgF6YH
jz9Md2wVm6XD28imIqXDnLLW9im7K6CY+7pVC1SzbC6sTxqvJLsz4/d6otV7crnA
bj4Ujg56muS4OWc2Zb9EbTx7M328mVaxHipDqxofNEIaj5RL43+vNlKrN1jiiIeh
5d32ZXi2EAKN3MZ0jSc5tMYrGsKhaO7KdNeoIwGUy3VUfxzYdxE4EZyaG7ozkuiL
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1597721621905958238
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-21 04:03:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-21 04:03:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fukuoka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyushu Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Systems Design and Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'demo.slab.ces.kyutech.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24521397922282867180236459593717260492825860372818056423748867162563229240528098508240703675077438962867685126229638622396632128382448089407720171336118077572954553730311054480328035762957088545182471610253834365623290175795178366799097430666507658822783574884416953943372345306684909609739312261000876615712517619713430276439178431903550655581640786933238407600816774095178528327655350791770949765731409987001789781278658088390775473778915792489820203827290277965799359522037795807810353351658438472219267310987923201092536086167234655304594286284284981466385413823102185405604936631556282288589013468015358565190647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.slab.ces.kyutech.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c99719d00acbd694aed3c237da3bfd0a85d01100
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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