www.ai.kyutech.ac.jp

- Kyushu Institute of Technology -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 2b:14:32:55:a9:8b:15:45 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Kyushu Institute of Technology

Organization: Kyushu Institute of Technology
Organization unit: Department of Artificial Intelligence
State / Province: Fukuoka
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:14:32:55:a9:8b:15:45
Serial Number (int): 3104161386663187781
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 43:fa:69:b2:cb:7c:4a:63:58:eb:46:dc:48:3d:80:80:c8:12:ce:8a
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 77:de:5f:4e:82:a1:93:28:9a:01:84:23:38:a5:a3:85:6d:89:0d:47
Fingerprint (sha256): 0b:16:47:f8:e4:16:bc:8c:bb:8a:d7:c0:33:61:ce:6b:93:48:2c:82:de:a3:eb:11:73:64:7e:56:15:79:40:4f


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate www.ai.kyutech.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ai.kyutech.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ai.kyutech.ac.jp

Other certificates including the domain name kyutech.ac.jp

(limited to 100 certificates)
hyokadb02.jimu.kyutech.ac.jp
mikity3d.mk.ces.kyutech.ac.jp
www.melt.kyutech.ac.jp
www.lib.kyutech.ac.jp
www.mk.ces.kyutech.ac.jp
mountain.elcs.kyutech.ac.jp
www.c3.club.kyutech.ac.jp
imap.lai.kyutech.ac.jp
*.ipl-e.ai.kyutech.ac.jp
idm.kyutech.ac.jp
www.ylab.ai.kyutech.ac.jp
mail.tech-i.kyutech.ac.jp
mail.bio.kyutech.ac.jp
*.club.kyutech.ac.jp
edu.iizuka.isc.kyutech.ac.jp
kiso.mns.kyutech.ac.jp
md-tobata-01.kiban.kyutech.ac.jp
ohio.jimu.kyutech.ac.jp
pluto44.pluto.ai.kyutech.ac.jp
www.ksl.ci.kyutech.ac.jp
edu.tobata.isc.kyutech.ac.jp
t.el.kyutech.ac.jp
leo10.cse.kyutech.ac.jp
edu-git2.bio.kyutech.ac.jp
vpn-i.kiban.kyutech.ac.jp
hoken.jimu.kyutech.ac.jp
www.ai.kyutech.ac.jp
www.ipl-e.ai.kyutech.ac.jp
www.ltc.kyutech.ac.jp
vbc.kiban-i.kyutech.ac.jp
edragon-demo.jimu.kyutech.ac.jp
research01.jimu.kyutech.ac.jp
webmail.lsse.kyutech.ac.jp
demo.slab.ces.kyutech.ac.jp
webmail.lsse.kyutech.ac.jp
icpserv.isc.kyutech.ac.jp
pmu.ele.kyutech.ac.jp
www.admission.kyutech.ac.jp
zodiac30.cse.kyutech.ac.jp
gw.jimu.kyutech.ac.jp
www.ai.kyutech.ac.jp
mail.bio.kyutech.ac.jp
www.irisa-lab.bio.kyutech.ac.jp
virginia.jimu.kyutech.ac.jp
secure.jimu.el.kyutech.ac.jp
research02.jimu.kyutech.ac.jp
ex.melt.kyutech.ac.jp
www2.slab.ces.kyutech.ac.jp
edragon-syllabus.jimu.kyutech.ac.jp
www.ipl-e.ai.kyutech.ac.jp
securesv.kiban.kyutech.ac.jp
gds.tom.ai.kyutech.ac.jp
ltc-apa.el.kyutech.ac.jp
leo10.cse.kyutech.ac.jp
www.iizuka.kyutech.ac.jp
*.ipl-e.ai.kyutech.ac.jp
www.pl.ai.kyutech.ac.jp
idp.idm.kyutech.ac.jp
gcl.ltc.kyutech.ac.jp
www.ces.kyutech.ac.jp
www.isc.kyutech.ac.jp
leo10.cse.kyutech.ac.jp
www.lai.kyutech.ac.jp
onlineguide.isc.kyutech.ac.jp
sec.kyutech.ac.jp
www.irisa-lab.bio.kyutech.ac.jp
www.mk.ces.kyutech.ac.jp
mail1.dhs.kyutech.ac.jp
inohira.mns.kyutech.ac.jp
mail.pl.ai.kyutech.ac.jp
*.club.kyutech.ac.jp
www.ai.kyutech.ac.jp
www.taskit.mk.ces.kyutech.ac.jp
www.ksl.ci.kyutech.ac.jp
www.irisa-lab.bio.kyutech.ac.jp
sec.kyutech.ac.jp
rabbit.mns.kyutech.ac.jp
sheep.tech-t.kyutech.ac.jp
sog-sien.jimu.kyutech.ac.jp
koh-career-ext.tobata.kyutech.ac.jp
edragon-portal.jimu.kyutech.ac.jp
dragon.civil.kyutech.ac.jp
sheep.civil.kyutech.ac.jp
idm.kyutech.ac.jp
www4.dumbo.ai.kyutech.ac.jp
virusbuster3.tobata.kyutech.ac.jp
onlineguide.isc.kyutech.ac.jp
hiko.isc.kyutech.ac.jp
www4.dumbo.ai.kyutech.ac.jp
www.yasunaga-lab.bio.kyutech.ac.jp
idm.kyutech.ac.jp
ml.tech.kyutech.ac.jp
ppl2017.ipl-e.ai.kyutech.ac.jp
account.compsys.brain.kyutech.ac.jp
www3.isc.kyutech.ac.jp
www.iizuka.kyutech.ac.jp
leo10.cse.kyutech.ac.jp
sog-sien.jimu.kyutech.ac.jp
nursing.mns.kyutech.ac.jp
www.pl.ai.kyutech.ac.jp

Certificate

The complete raw certificate details for www.ai.kyutech.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnldww0Dsc0wi1JDoij8
hB+iVtXn0EEcMjXs8CybPGB01g92IxCEuQicm7JuStAX0FnknPomMSCgWkVuZhiZ
c1mcAIOFbY3O3V/4oUtOL2pP57EGekob2U6Zisoh/ORjAdmLLET6Mz5gERbCMcbz
prEali/ql8bZ4Dyo6EBxWTVbDkgRkMnWZlk8KrIcmsD6NAa85JL2fHhx0a2+Vo9P
HLsqV7PMgtx4WVjoWFaTizPFnZC8f1WmZpGaLFChv4WfmOHqI8NGoK4XLZT+mj1o
BSPQsm3C2QAnmipB8Haz8Xo0wBl1QkEOBacLW3vndqadWdFJSI+77Fn3PFdqS0Os
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3104161386663187781
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 06:17:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-17 06:17:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fukuoka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyushu Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Artificial Intelligence'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ai.kyutech.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24045125875682231111378881139105708330225387184973393253003405409448967095250774337679461333531522839269956432542185412677276362773365072294791922600302622377449739440792281416742128578965491633878358697042117583425084556651003476439275380510956929104536565673416433122974550738536828602236297515806628801455162769339556033640632484757191354982325515051067896568825367883426171139126879161780686775528942504340257994415210961360364002455586386888915641373975785952340113809923762415167839918076807175252752141894599106670537019179729327030827013596798776998801382712320160329505652121813872208032981344758251953302783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ai.kyutech.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43fa69b2cb7c4a6358eb46dc483d8080c812ce8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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