gcl.ltc.kyutech.ac.jp

- Kyushu Institute of Technology -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 2b:cc:51:e1:7a:00:54:2b:ec:9a:a5:ed:b8:83:fe:7f was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Kyushu Institute of Technology

Organization: Kyushu Institute of Technology
Organization unit: Learning and Teaching Center
State / Province: Fukuoka
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:cc:51:e1:7a:00:54:2b:ec:9a:a5:ed:b8:83:fe:7f
Serial Number (int): 58217693117164517553111999501876592255
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 70:5b:d5:f5:f1:22:f2:da:24:06:f8:b3:fb:0e:e4:75:cd:7c:80:32
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): c2:0e:65:16:97:d8:66:e5:d7:21:9d:63:d3:18:c5:93:cd:0b:2f:b9
Fingerprint (sha256): 0e:a7:ac:5a:fc:ee:3b:46:a9:7f:97:1c:8a:c9:cd:d2:af:84:3a:1c:bf:39:6f:d9:61:8b:be:c8:f7:36:82:cf


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate gcl.ltc.kyutech.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gcl.ltc.kyutech.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gcl.ltc.kyutech.ac.jp

Other certificates including the domain name kyutech.ac.jp

(limited to 100 certificates)
hyokadb02.jimu.kyutech.ac.jp
mikity3d.mk.ces.kyutech.ac.jp
www.melt.kyutech.ac.jp
www.lib.kyutech.ac.jp
www.mk.ces.kyutech.ac.jp
mountain.elcs.kyutech.ac.jp
www.c3.club.kyutech.ac.jp
imap.lai.kyutech.ac.jp
*.ipl-e.ai.kyutech.ac.jp
idm.kyutech.ac.jp
www.ylab.ai.kyutech.ac.jp
mail.tech-i.kyutech.ac.jp
mail.bio.kyutech.ac.jp
*.club.kyutech.ac.jp
edu.iizuka.isc.kyutech.ac.jp
kiso.mns.kyutech.ac.jp
md-tobata-01.kiban.kyutech.ac.jp
ohio.jimu.kyutech.ac.jp
pluto44.pluto.ai.kyutech.ac.jp
www.ksl.ci.kyutech.ac.jp
edu.tobata.isc.kyutech.ac.jp
t.el.kyutech.ac.jp
leo10.cse.kyutech.ac.jp
edu-git2.bio.kyutech.ac.jp
vpn-i.kiban.kyutech.ac.jp
hoken.jimu.kyutech.ac.jp
www.ai.kyutech.ac.jp
www.ipl-e.ai.kyutech.ac.jp
www.ltc.kyutech.ac.jp
vbc.kiban-i.kyutech.ac.jp
edragon-demo.jimu.kyutech.ac.jp
research01.jimu.kyutech.ac.jp
webmail.lsse.kyutech.ac.jp
demo.slab.ces.kyutech.ac.jp
webmail.lsse.kyutech.ac.jp
icpserv.isc.kyutech.ac.jp
pmu.ele.kyutech.ac.jp
www.admission.kyutech.ac.jp
zodiac30.cse.kyutech.ac.jp
gw.jimu.kyutech.ac.jp
www.ai.kyutech.ac.jp
mail.bio.kyutech.ac.jp
www.irisa-lab.bio.kyutech.ac.jp
virginia.jimu.kyutech.ac.jp
secure.jimu.el.kyutech.ac.jp
research02.jimu.kyutech.ac.jp
ex.melt.kyutech.ac.jp
www2.slab.ces.kyutech.ac.jp
edragon-syllabus.jimu.kyutech.ac.jp
www.ipl-e.ai.kyutech.ac.jp
securesv.kiban.kyutech.ac.jp
gds.tom.ai.kyutech.ac.jp
ltc-apa.el.kyutech.ac.jp
leo10.cse.kyutech.ac.jp
www.iizuka.kyutech.ac.jp
*.ipl-e.ai.kyutech.ac.jp
www.pl.ai.kyutech.ac.jp
idp.idm.kyutech.ac.jp
gcl.ltc.kyutech.ac.jp
www.ces.kyutech.ac.jp
www.isc.kyutech.ac.jp
leo10.cse.kyutech.ac.jp
www.lai.kyutech.ac.jp
onlineguide.isc.kyutech.ac.jp
sec.kyutech.ac.jp
www.irisa-lab.bio.kyutech.ac.jp
www.mk.ces.kyutech.ac.jp
mail1.dhs.kyutech.ac.jp
inohira.mns.kyutech.ac.jp
mail.pl.ai.kyutech.ac.jp
*.club.kyutech.ac.jp
www.ai.kyutech.ac.jp
www.taskit.mk.ces.kyutech.ac.jp
www.ksl.ci.kyutech.ac.jp
www.irisa-lab.bio.kyutech.ac.jp
sec.kyutech.ac.jp
rabbit.mns.kyutech.ac.jp
sheep.tech-t.kyutech.ac.jp
sog-sien.jimu.kyutech.ac.jp
koh-career-ext.tobata.kyutech.ac.jp
edragon-portal.jimu.kyutech.ac.jp
dragon.civil.kyutech.ac.jp
sheep.civil.kyutech.ac.jp
idm.kyutech.ac.jp
www4.dumbo.ai.kyutech.ac.jp
virusbuster3.tobata.kyutech.ac.jp
onlineguide.isc.kyutech.ac.jp
hiko.isc.kyutech.ac.jp
www4.dumbo.ai.kyutech.ac.jp
www.yasunaga-lab.bio.kyutech.ac.jp
idm.kyutech.ac.jp
ml.tech.kyutech.ac.jp
ppl2017.ipl-e.ai.kyutech.ac.jp
account.compsys.brain.kyutech.ac.jp
www3.isc.kyutech.ac.jp
www.iizuka.kyutech.ac.jp
leo10.cse.kyutech.ac.jp
sog-sien.jimu.kyutech.ac.jp
nursing.mns.kyutech.ac.jp
www.pl.ai.kyutech.ac.jp

Certificate

The complete raw certificate details for gcl.ltc.kyutech.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY9TKcVlpuFUTlr5YTbZ
W2YDZ/AOHm9HfrmzY1LmrdAl/0DO0sl/uKWqpX/2MJG7y4yT1Yu8hIYpe9I2FGR7
5s3spIugMhhK5Y6iKjyARommrI+MIx0wuJYvjSshc9Luzub4VL0LA0m/WDvj1Hnh
8lxTwFQ2OAlLFKPG24SGGOqqar7djrf61WpirvTDPdQb3LtWhMQWiErTUiz6anzb
V2pM0TMhL1O6uQL94dXGybs7iyfv8Z0bgjyF7jZnM1uNyhWxt7Tn+9QaIwVL07IB
xTyJKJQE0iOG6BtmOKhads7DLZOY+p4x9KSs2pKk0lzMNw8TFWnIdXFCpIh2uPTR
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 58217693117164517553111999501876592255
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 01:17:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-04 01:17:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fukuoka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyushu Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Learning and Teaching Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gcl.ltc.kyutech.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24434668979140202423829703911735897575096319480476185107048210872443197020870185245886556812934298483688869655639355331079449129389363242724766285751054580695426554964280507469645196591804181023992445157728973363021479661661211043401773480606532000996245271596124585463223039076342207010066075298082770618360158346360403685944618665782125874153307100359987197197894172885648179898250326260831204493721052261672744858276849556536756049379206676341196647994358326216548748579142783104921125450073342667965257284609528404095522578616093673097004874385736600859065455964546614516006636340223092476661600117894782494495163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcl.ltc.kyutech.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							705bd5f5f122f2da2406f8b3fb0ee475cd7c8032
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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