yoyaku.cia.uec.ac.jp

- The University of Electro-Communications -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 79:12:31:eb:8c:59:f2:9f was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

The University of Electro-Communications

Organization: The University of Electro-Communications
Organization unit: Coordinated Center for UEC Research Facilities
State / Province: tokyo
Locality: chofu
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 79:12:31:eb:8c:59:f2:9f
Serial Number (int): 8724090315911852703
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 15:bd:a9:dd:4a:c2:f6:75:ac:d3:6d:a6:b6:7d:3c:76:0b:57:32:2b
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 39:f6:10:09:af:42:81:ba:6c:57:8d:6a:08:df:68:fe:ad:6b:60:98
Fingerprint (sha256): 11:8a:01:aa:30:b3:33:73:50:35:d4:ac:cf:f2:db:91:7f:81:8c:8e:9f:9f:fc:cd:2d:40:f1:b7:f4:df:f1:68


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate yoyaku.cia.uec.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yoyaku.cia.uec.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

yoyaku.cia.uec.ac.jp

Other certificates including the domain name uec.ac.jp

(limited to 100 certificates)
shibboleth.cc.uec.ac.jp
ipl.cs.uec.ac.jp
www.han-zemi.bunka.uec.ac.jp
portalweb.uec.ac.jp
den2moken.club.uec.ac.jp
www.ced.cei.uec.ac.jp
bss2.office.uec.ac.jp
ipl.cs.uec.ac.jp
campusap.office.uec.ac.jp
www.az.lab.uec.ac.jp
jsb.cs.uec.ac.jp
kiwi04.fedu.uec.ac.jp
www.lib.uec.ac.jp
den2moken.club.uec.ac.jp
uecdisk.cc.uec.ac.jp
igtee.g-edu.uec.ac.jp
enq.edu.uec.ac.jp
www.ce.uec.ac.jp
www.inaba.aix.uec.ac.jp
thetis.f-lab.tech.uec.ac.jp
thetis.f-lab.tech.uec.ac.jp
repo.inf.uec.ac.jp
den2moken.club.uec.ac.jp
www.inaba.aix.uec.ac.jp
post-8.cc.uec.ac.jp
thetis.f-lab.tech.uec.ac.jp
webclass.cdel.uec.ac.jp
aae.office.uec.ac.jp
app.cdel.uec.ac.jp
post-3.cc.uec.ac.jp
packetix01.cc.uec.ac.jp
townsend.ee.uec.ac.jp
thetis.f-lab.tech.uec.ac.jp
comp.lab.uec.ac.jp
post-4.cc.uec.ac.jp
cf.arc.uec.ac.jp
uecdisk.cc.uec.ac.jp
www.ied.inf.uec.ac.jp
prserv.ied.inf.uec.ac.jp
yoyaku.cia.uec.ac.jp
imap.cc.uec.ac.jp
den2moken.club.uec.ac.jp
en.funato.lab.uec.ac.jp
buzzard.fedu.uec.ac.jp
www.media.lab.uec.ac.jp
tls.automattic.com
www.funato.lab.uec.ac.jp
www.inf.uec.ac.jp
video.websys.edu.uec.ac.jp
gozkap.office.uec.ac.jp
campusweb.office.uec.ac.jp
ryohi.office.uec.ac.jp
www.funato.lab.uec.ac.jp
wfs01.office.uec.ac.jp
www2.nm.cs.uec.ac.jp
tls.automattic.com
repo.inf.uec.ac.jp
webmail.cc.uec.ac.jp
comp.is.uec.ac.jp
campusweb.office.uec.ac.jp
eve.cc.uec.ac.jp
bb.csirt.uec.ac.jp
www.ohsuga.lab.uec.ac.jp
nic.lab.uec.ac.jp
jnns2015.im.uec.ac.jp
www.uecwings.club.uec.ac.jp
nc2.office.uec.ac.jp
giken26.cc.uec.ac.jp
radish.ee.uec.ac.jp
www.gozk.office.uec.ac.jp
wlgate.inf.uec.ac.jp
en.funato.lab.uec.ac.jp
chikuwa.ce.uec.ac.jp
kiwi04.fedu.uec.ac.jp
wlan.cc.uec.ac.jp
nas2015.im.uec.ac.jp
www.lib.uec.ac.jp
campusap.office.uec.ac.jp
portfolio-serv.edu.uec.ac.jp
wlan.cc.uec.ac.jp
www.ce.uec.ac.jp
www.edu.cc.uec.ac.jp
kintai.office.uec.ac.jp
www.az.lab.uec.ac.jp
www.ce.uec.ac.jp
gakumu.office.uec.ac.jp
www.ced.cei.uec.ac.jp
*.uec.ac.jp
moon.mma.club.uec.ac.jp
*.uec.ac.jp
m.ils.uec.ac.jp
post-1.cc.uec.ac.jp
na.cal.edu.uec.ac.jp
ftth10.ice.uec.ac.jp
www.inaba.aix.uec.ac.jp
wlan.cc.uec.ac.jp
mm.cs.uec.ac.jp
www.ils.uec.ac.jp
www.websys.edu.uec.ac.jp
post-4.cc.uec.ac.jp

Certificate

The complete raw certificate details for yoyaku.cia.uec.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/lziIXP+7HtifHBMKR8
7QYxd5/kR0G7zMXv5Od/Sn0V4ykK1AOh/8J5xEa1jfXvwD0tHzTT+rwuiMYPV4Fh
zSf5b/DJbE3DXx01N9mgIc8iqG8Gu1C0KTqWYSU3XX239ddmRi3aFWIAmEoVNpvs
YM0i1BOLDmG9ARzOKI6ME2ReQ//76nuuRrFhDPUE0Saet2SmrD9Xs/fCZEyAvdFv
3Up0ajJpr+n8bxSjyNrpQPw8fQt3XwTQGjecDtJAkQ9S0KCIc2QJr+54QAkuQld2
29VfzUssvU6Zihdy5bntg1l59g/80X4rajVxuw9Ob0G/AOcOIr8nfZTgRuI66LnT
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8724090315911852703
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-27 06:07:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-27 06:07:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chofu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Electro-Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coordinated Center for UEC Research Facilities'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yoyaku.cia.uec.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30293963908474351129676840483240294486494460205146571424977944671185392834114871283879971607253634987277358453339707494725693341092113196959103237505371453126443196583950929816871643330306343948241964293087924321569868297451819418634190224493536540238044348669341855376007328177299205744490336872073405278104169293351577730164829620900121560496737267777326997633516406247797512797970154619851214155770047130855033441646986959067718465309762780074601164511003588243405667686962924651991604549316761814408038316627475417482967091197749574967027682774697043463729989620183511068794429836138251386657140466950941630387019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoyaku.cia.uec.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15bda9dd4ac2f675acd36da6b67d3c760b57322b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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