qa-sso.rikkyo.ac.jp

- Rikkyo University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 57:73:d0:12:ed:2e:6a:dd was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Rikkyo University

Organization: Rikkyo University
Organization unit: CSI
State / Province: Tokyo
Locality: Toshima-ku
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 57:73:d0:12:ed:2e:6a:dd
Serial Number (int): 6301609083328686813
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: d8:50:60:a1:77:e7:01:98:0d:48:f1:93:50:66:04:40:d5:9b:5a:ba
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 73:8f:20:46:13:a1:13:f7:c9:ee:e6:c9:22:5e:29:fb:86:f2:10:ff
Fingerprint (sha256): 10:a8:f2:55:4d:af:08:5a:af:78:bb:ab:cf:b3:5e:9b:be:ad:11:66:ca:26:f7:ac:f8:42:40:a6:19:7e:a9:93


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate qa-sso.rikkyo.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa-sso.rikkyo.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa-sso.rikkyo.ac.jp

Other certificates including the domain name rikkyo.ac.jp

(limited to 100 certificates)
sy.rikkyo.ac.jp
www.rikkyo.ac.jp
score.rikkyo.ac.jp
servicedesk.6dca.flcourts.gov
sy.rikkyo.ac.jp
www.rikkyo.ac.jp
redic.rikkyo.ac.jp
*.rikkyo.ac.jp
rt.rikkyo.ac.jp
upki-idp.rikkyo.ac.jp
rproxy.rikkyo.ac.jp
v5dcradius-01.rikkyo.ac.jp
r.rikkyo.ac.jp
vcs-ms.mo.rikkyo.ac.jp
www3.rikkyo.ac.jp
mspirit.rikkyo.ac.jp
socio.rikkyo.ac.jp
it-support.perimeter81.com
r.rikkyo.ac.jp
sso.rikkyo.ac.jp
r-jikan-t.rikkyo.ac.jp
wac.rikkyo.ac.jp
portfolio-t.rikkyo.ac.jp
business-school.rikkyo.ac.jp
rproxy.rikkyo.ac.jp
wwwj.rikkyo.ac.jp
a-station.rikkyo.ac.jp
lp.rikkyo.ac.jp
opac.rikkyo.ac.jp
cp.rikkyo.ac.jp
niiza.rikkyo.ac.jp
blpcob.rikkyo.ac.jp
webq-t.rikkyo.ac.jp
mls.rikkyo.ac.jp
icc.rikkyo.ac.jp
emp.rikkyo.ac.jp
mailgate.rikkyo.ac.jp
univdb.rikkyo.ac.jp
csi-shoumeisho.rikkyo.ac.jp
sdp.rikkyo.ac.jp
311help.seminolecountyfl.gov
webq.rikkyo.ac.jp
qa-sso.rikkyo.ac.jp
gakuseibu.rikkyo.ac.jp
mls.rikkyo.ac.jp
tourism.rikkyo.ac.jp
netacademy.rikkyo.ac.jp
opac.rikkyo.ac.jp
brix.rikkyo.ac.jp
wlc.rikkyo.ac.jp
r-jikan-t.rikkyo.ac.jp
sds.rikkyo.ac.jp
socio.rikkyo.ac.jp
mpma.rikkyo.ac.jp
mediasite.rikkyo.ac.jp
databank.rikkyo.ac.jp
www.rikkyo.ac.jp
upki-idp-test.rikkyo.ac.jp
sdp.rikkyo.ac.jp
upki-idp.rikkyo.ac.jp
idm.rikkyo.ac.jp
sy.rikkyo.ac.jp
real.rikkyo.ac.jp
csi-vpn.rikkyo.ac.jp
webfolder.rikkyo.ac.jp
spirittest.rikkyo.ac.jp
spirit-t.rikkyo.ac.jp
icc.rikkyo.ac.jp
sds.rikkyo.ac.jp
rpp.rikkyo.ac.jp
portfolio.rikkyo.ac.jp
icc.rikkyo.ac.jp
311help.seminolecountyfl.gov
*.staging.mobile.rikkyo.ac.jp
niiza.rikkyo.ac.jp
recruit.rikkyo.ac.jp
311help.seminolecountyfl.gov
cl.rikkyo.ac.jp
bb.rikkyo.ac.jp
r.rikkyo.ac.jp
socio.rikkyo.ac.jp
economics.rikkyo.ac.jp
real.rikkyo.ac.jp
sy.rikkyo.ac.jp
qa-sso.rikkyo.ac.jp
databank.rikkyo.ac.jp
csi-seminar.rikkyo.ac.jp
cjle.rikkyo.ac.jp
cp.rikkyo.ac.jp
discovery.rikkyo.ac.jp
archives.rikkyo.ac.jp
www.rikkyo.ac.jp
discovery.rikkyo.ac.jp
mls.rikkyo.ac.jp
150th.rikkyo.ac.jp
ry.rikkyo.ac.jp
servicedesk.6dca.flcourts.gov
*.rikkyo.ac.jp
opac.rikkyo.ac.jp
mynumber.rikkyo.ac.jp

Certificate

The complete raw certificate details for qa-sso.rikkyo.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKH9QpsWssVaFv3TWnnn
xjDWnr4Nwn6M/hASnE9MlNPON/xNTGdXUn8IAptR4/0KAOwlijSQCv5SwjKZe3M7
LlHojcYUp+XAS+ZiHnQW7zfx2KYHycAn1Sf8pCyI9mm6yGVgP7g8lQqe3khcaiYM
UFo09Dl0+dXA7YY5Fm8NfaB1MZ8LG4pAwL9wFKJ38Zam52p14x+4W4YvERjlWWrh
mQxPdwL+DLyuJcuMS1d4NAyER37vQLu31XzKre8/oaiQfL9m15Xm8BLeb8F5fG+T
vcnfaVNu/BJQjKMvajbgITv7QlR94jMMnOb1dQdZcu7CJ42UHPtsVRpJMPdZS0vW
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6301609083328686813
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 05:47:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-12 05:47:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toshima-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rikkyo University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa-sso.rikkyo.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19773055474503561875213264702687168977546855079779197618658175065255926805461907619523716325380925319915859426534224727504337334718839091345184958416839496985168603821773956561890800768030019697432878194740951458172446146086256323000802031651955098476196360607871328179057017727196102772973453808534973540621664326894983645691009122148235124855638258867521648011150492518681873813091518749338453933026412282853312364234225120315228345249737788877886089424763139364120624550344158516125446975108523088407989318345506916782022920479857448405728883238634927491501742799918977442358359397488397296704096311240012178642683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-sso.rikkyo.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d85060a177e701980d48f19350660440d59b5aba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016a0af8a9990000040300483046022100baf06cb229aae66ee9b80be5ab4a862d755af7ef0a12d317fe32ab0142c8ac5d022100f86fae7c921dd1b7f2cbe3846b32b75ee2d3d893be0b0b7790ac84bd3f213de6007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016a0af8b180000004030047304502202c2717e6fecc67d13e85bba2dc8e6895830084eb0acc1ddd53b88c187cd06eaa02210088b24810ea120ca46b9dafe0601da2f9bf22122949ed0de914a334aec37b79f40077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016a0af8bade000004030048304602210094ce0e423d601d19f9562518b23279641a764ac1b23022498ee1e0bb06787e6e022100b0b859fdf313d58f99cba5332a0f864929f172cc9d81a40db35150912c735a19
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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