gidp.ait230.tokushima-u.ac.jp

- Tokushima University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 20:c5:d3:df:27:ee:7e:4d:13:12:60:86:d4:6e:9f:51 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Tokushima University

Organization: Tokushima University
Organization unit: Center for Administration of Information Technology
Locality: tokushima
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 20:c5:d3:df:27:ee:7e:4d:13:12:60:86:d4:6e:9f:51
Serial Number (int): 43562475614913516327200211579435917137
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: fe:58:9f:76:e4:fd:cd:b3:ea:8e:0b:21:17:83:82:5b:c6:d8:63:0b
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 7b:68:35:17:70:61:5b:c5:c1:6c:a4:30:74:19:96:4e:dd:35:d7:1c
Fingerprint (sha256): 0f:d0:af:60:38:a0:4b:e7:3c:b4:d9:50:99:a5:58:50:92:d9:c1:d5:71:ce:6f:b6:40:77:cc:64:fa:88:fd:47


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate gidp.ait230.tokushima-u.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gidp.ait230.tokushima-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gidp.ait230.tokushima-u.ac.jp

Other certificates including the domain name tokushima-u.ac.jp

(limited to 100 certificates)
ZAIMU-TOKUDAI.jim.tokushima-u.ac.jp
kjm.medsci.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
repo.lib.tokushima-u.ac.jp
industal.tokushima-u.ac.jp
tocms.hosp.med.tokushima-u.ac.jp
iaso.ait231.tokushima-u.ac.jp
www.cue.tokushima-u.ac.jp
pch91.ait.tokushima-u.ac.jp
uzu.ias.tokushima-u.ac.jp
web-apply.ait.tokushima-u.ac.jp
uls01.ulc.tokushima-u.ac.jp
kangoportal.hosp.med.tokushima-u.ac.jp
rad91.ait.tokushima-u.ac.jp
sihep.ait231.tokushima-u.ac.jp
www.awasapo.tokushima-u.ac.jp
kaigi.hosp.med.tokushima-u.ac.jp
kouza.cue.tokushima-u.ac.jp
taiwa.honbu.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
shikin.ccr.tokushima-u.ac.jp
web-apply.ait.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
sv4x5.ait231.tokushima-u.ac.jp
moo3.chi.tokushima-u.ac.jp
goukaku.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
study.ait231.tokushima-u.ac.jp
gidp.ait230.tokushima-u.ac.jp
femto.me.tokushima-u.ac.jp
zsysap.jim.tokushima-u.ac.jp
eweb92.stud.tokushima-u.ac.jp
ldap.ait.tokushima-u.ac.jp
eweb91.stud.tokushima-u.ac.jp
cluster.tokushima-u.ac.jp
cws.ocs.tokushima-u.ac.jp
ek4lms01.ulc.tokushima-u.ac.jp
irud.med.tokushima-u.ac.jp
adas.ait231.tokushima-u.ac.jp
kj.medsci.tokushima-u.ac.jp
kj.medsci.tokushima-u.ac.jp
am.ait.tokushima-u.ac.jp
www2.e.tokushima-u.ac.jp
www.isc.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
www2.e.tokushima-u.ac.jp
sns.ait230.tokushima-u.ac.jp
lyncsip.ait230.tokushima-u.ac.jp
moo.chi.tokushima-u.ac.jp
frigg.db.tokushima-u.ac.jp
bml.me.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
iccsv.ait.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
risa.is.tokushima-u.ac.jp
gidp.ait230.tokushima-u.ac.jp
math0.pm.tokushima-u.ac.jp
adas.ait230.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
bun.honbu.tokushima-u.ac.jp
uls01.ulc.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
kjw.medsci.tokushima-u.ac.jp
www.tokushima-u.ac.jp
cidp.ait.tokushima-u.ac.jp
cluster.tokushima-u.ac.jp
iccsv-s.ait.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
cidp.ait.tokushima-u.ac.jp
ce.ce.tokushima-u.ac.jp
moo.chi.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
uzu.ias.tokushima-u.ac.jp
web.ph.tokushima-u.ac.jp
www-math.ias.tokushima-u.ac.jp
www.pled.tokushima-u.ac.jp
medinfo.ait231.tokushima-u.ac.jp
kangoportal.hosp.med.tokushima-u.ac.jp
hub.tokushima-u.ac.jp
moo2.chi.tokushima-u.ac.jp
tocms.hosp.med.tokushima-u.ac.jp
www.ee.tokushima-u.ac.jp
kjm.medsci.tokushima-u.ac.jp
avian.aitre.tokushima-u.ac.jp
els.stud.tokushima-u.ac.jp
moo2.chi.tokushima-u.ac.jp
www-me.ait231.tokushima-u.ac.jp
cbtph.ait.tokushima-u.ac.jp
twf.ait.tokushima-u.ac.jp
www.cue.tokushima-u.ac.jp
www2.isc.tokushima-u.ac.jp
rad01.ait.tokushima-u.ac.jp
web-ias.ait231.tokushima-u.ac.jp
ed.st.tokushima-u.ac.jp
weierstrass.is.tokushima-u.ac.jp
web2.ias.tokushima-u.ac.jp
dev.ipc2.tokushima-u.ac.jp
vdi.ait.tokushima-u.ac.jp

Certificate

The complete raw certificate details for gidp.ait230.tokushima-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupOMqjnDuw7P9ZoAYEnI
1ikC6TipqunEuf0kGumvC26z6EAWBUrT7UIgWbZaculmiSQbGct7BK8zadtT7Uwq
rPYD7RvuLenR76l30khRt6YKNFKMU5/vHoFzJ+/wbwj1oOUF+onD0sQpS4XGQj3l
fD9wVC4hUDYqAE7tiy50iPgnZ3Oj+G9EDRIqyLS9D5JAEkxQ/kIcCRpkkDGKA9Gy
Hxwdm9U62p16Qf4DdrPVsfvmM97JwHvLDrdMUk85jUixSkQZlOf8I05p31q7E2oq
sz1sq/o3XcT5I21HJUo8+ZS68SR1t82JfqyuSlHNzt7lavifvbHb5jO1qwtYIDUo
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 43562475614913516327200211579435917137
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-24 01:12:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-24 01:12:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tokushima'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokushima University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Center for Administration of Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gidp.ait230.tokushima-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23553084080324034491096377262705254732267246831056928286033388230164064448650593706893867749612202020767841039838535897623873249349485754271341400127063070259324554636120971597769275602688617800566573485694243167176863046291889171236657102005270325852393751747364545566394723707775546937372072354585572758661230049749193110674527296677939739969654006401464675001326374407628557619752292846641645131500022100634671643425844561876084012318681832522969654175235124877213592457863213112227262389382564441987488068409824788719447738317746596019662645147750312721379751470279302407777961237646001848414790570370152912988271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gidp.ait230.tokushima-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe589f76e4fdcdb3ea8e0b211783825bc6d8630b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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