nanext.okinawa-u.ac.jp

- Okinawa University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 62:32:c5:18:f8:58:f1:c5:47:89:58:ef:3a:f3:65:33 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Okinawa University

Organization: Okinawa University
Organization unit: Multimedia Education and Research Center
State / Province: Okinawa
Locality: Naha
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 62:32:c5:18:f8:58:f1:c5:47:89:58:ef:3a:f3:65:33
Serial Number (int): 130527956042876126284722604126902641971
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: a7:70:72:95:76:78:0b:5e:72:14:7b:c1:9d:ad:93:a4:71:3d:38:4e
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): dd:e8:c3:3a:86:90:1a:c6:65:fd:24:0e:d0:e1:c7:c9:76:b5:f7:8e
Fingerprint (sha256): 0c:1a:8b:40:64:7e:54:dd:20:ae:18:97:81:41:c4:25:06:67:37:61:e4:89:19:44:65:a8:7d:f9:c2:ee:ed:ec


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate nanext.okinawa-u.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nanext.okinawa-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nanext.okinawa-u.ac.jp

Other certificates including the domain name okinawa-u.ac.jp

(limited to 100 certificates)
www.okinawa-u.ac.jp
ourea.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
nanext.okinawa-u.ac.jp
prismcentral.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
redmine.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
www.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
www.okinawa-u.ac.jp
aip.okinawa-u.ac.jp
*.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
nanext.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
classview.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
aion.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
www.okinawa-u.ac.jp
aip.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
nps1.cr.okinawa-u.ac.jp
www.okinawa-u.ac.jp
moodle19.okinawa-u.ac.jp
sns.okinawa-u.ac.jp
cb.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
aip.okinawa-u.ac.jp
classview.okinawa-u.ac.jp
classview.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
demeter2.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
www.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp

Certificate

The complete raw certificate details for nanext.okinawa-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDLe8xQu6xlyPU3kQ8V7
oitcGjmCrIwLNRt696sBpqTEZvonElJ61JOAw1OUFcxyXsheGFP2pXrs0P6oo0dt
CKy0zn3nOOfHPM5+pNllGWOo3nnQ9JXS7GJxS2g3G5oI5xnPOQcGUwrYvWRCSFdy
qvhgoK1mOeGt3ObPCY2TAwG87OuHBJbDrhytc/X6u4r/HKYv51t4moLdWHkR9JU+
UOww5CJqjXDTGsdRqlQSPvRn45o5HSjl/KZGjf3DYtXrb9kjUK+KEqbuD1T3Ipxf
4eGfaMHxynI1moqL4OzvrY9k6kJYaRMQ9pDhq4Ty26y7zIUKr7+IMpzSdRltdR3c
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 130527956042876126284722604126902641971
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 12:02:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-17 12:02:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Okinawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Naha'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Okinawa University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multimedia Education and Research Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nanext.okinawa-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23757886707671632722097615689208775377694515859772986948165795797941629577241322463804578081846953139383961070500015243688587420160757699549128125608193525693716397350899078773954817519676661917145845586901622247745220534095634951452410774197128372877983126903428735887862659517890963231457627380618242297751583688848071873361788695004361868641341146490951372350080261299295008233931534721102699403788777919291600727057175135337625778558238546123308399064638349615497460273311978031354250305329607566698478185139778935139801231516423323894060344206424418007812739627766073862917849630220877957962720439564010293943479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanext.okinawa-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a770729576780b5e72147bc19dad93a4713d384e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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