cluster.tokushima-u.ac.jp

- Tokushima University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 47:02:ef:8f:89:6f:d6:a3 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Tokushima University

Organization: Tokushima University
State / Province: Tokushima
Locality: Tokushima-shi
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 47:02:ef:8f:89:6f:d6:a3
Serial Number (int): 5116915526411474595
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: bb:69:ac:32:7e:f9:fe:23:a2:05:33:45:8f:34:42:62:a2:c4:3c:a3
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): ca:ad:c1:87:33:cf:f2:71:45:9c:a6:ac:18:93:18:dd:c1:89:5b:e8
Fingerprint (sha256): 14:55:ed:b5:13:29:30:9a:d9:f4:59:e5:65:2e:09:0b:ab:f8:d4:f4:14:ce:55:63:67:ce:5e:2d:0d:7e:94:84


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate cluster.tokushima-u.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cluster.tokushima-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cluster.tokushima-u.ac.jp

Other certificates including the domain name tokushima-u.ac.jp

(limited to 100 certificates)
ZAIMU-TOKUDAI.jim.tokushima-u.ac.jp
kjm.medsci.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
repo.lib.tokushima-u.ac.jp
industal.tokushima-u.ac.jp
tocms.hosp.med.tokushima-u.ac.jp
iaso.ait231.tokushima-u.ac.jp
www.cue.tokushima-u.ac.jp
pch91.ait.tokushima-u.ac.jp
uzu.ias.tokushima-u.ac.jp
web-apply.ait.tokushima-u.ac.jp
uls01.ulc.tokushima-u.ac.jp
kangoportal.hosp.med.tokushima-u.ac.jp
rad91.ait.tokushima-u.ac.jp
sihep.ait231.tokushima-u.ac.jp
www.awasapo.tokushima-u.ac.jp
kaigi.hosp.med.tokushima-u.ac.jp
kouza.cue.tokushima-u.ac.jp
taiwa.honbu.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
shikin.ccr.tokushima-u.ac.jp
web-apply.ait.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
sv4x5.ait231.tokushima-u.ac.jp
moo3.chi.tokushima-u.ac.jp
goukaku.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
study.ait231.tokushima-u.ac.jp
gidp.ait230.tokushima-u.ac.jp
femto.me.tokushima-u.ac.jp
zsysap.jim.tokushima-u.ac.jp
eweb92.stud.tokushima-u.ac.jp
ldap.ait.tokushima-u.ac.jp
eweb91.stud.tokushima-u.ac.jp
cluster.tokushima-u.ac.jp
cws.ocs.tokushima-u.ac.jp
ek4lms01.ulc.tokushima-u.ac.jp
irud.med.tokushima-u.ac.jp
adas.ait231.tokushima-u.ac.jp
kj.medsci.tokushima-u.ac.jp
kj.medsci.tokushima-u.ac.jp
am.ait.tokushima-u.ac.jp
www2.e.tokushima-u.ac.jp
www.isc.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
www2.e.tokushima-u.ac.jp
sns.ait230.tokushima-u.ac.jp
lyncsip.ait230.tokushima-u.ac.jp
moo.chi.tokushima-u.ac.jp
frigg.db.tokushima-u.ac.jp
bml.me.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
iccsv.ait.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
risa.is.tokushima-u.ac.jp
gidp.ait230.tokushima-u.ac.jp
math0.pm.tokushima-u.ac.jp
adas.ait230.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
bun.honbu.tokushima-u.ac.jp
uls01.ulc.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
kjw.medsci.tokushima-u.ac.jp
www.tokushima-u.ac.jp
cidp.ait.tokushima-u.ac.jp
cluster.tokushima-u.ac.jp
iccsv-s.ait.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
cidp.ait.tokushima-u.ac.jp
ce.ce.tokushima-u.ac.jp
moo.chi.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
uzu.ias.tokushima-u.ac.jp
web.ph.tokushima-u.ac.jp
www-math.ias.tokushima-u.ac.jp
www.pled.tokushima-u.ac.jp
medinfo.ait231.tokushima-u.ac.jp
kangoportal.hosp.med.tokushima-u.ac.jp
hub.tokushima-u.ac.jp
moo2.chi.tokushima-u.ac.jp
tocms.hosp.med.tokushima-u.ac.jp
www.ee.tokushima-u.ac.jp
kjm.medsci.tokushima-u.ac.jp
avian.aitre.tokushima-u.ac.jp
els.stud.tokushima-u.ac.jp
moo2.chi.tokushima-u.ac.jp
www-me.ait231.tokushima-u.ac.jp
cbtph.ait.tokushima-u.ac.jp
twf.ait.tokushima-u.ac.jp
www.cue.tokushima-u.ac.jp
www2.isc.tokushima-u.ac.jp
rad01.ait.tokushima-u.ac.jp
web-ias.ait231.tokushima-u.ac.jp
ed.st.tokushima-u.ac.jp
weierstrass.is.tokushima-u.ac.jp
web2.ias.tokushima-u.ac.jp
dev.ipc2.tokushima-u.ac.jp
vdi.ait.tokushima-u.ac.jp

Certificate

The complete raw certificate details for cluster.tokushima-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY7DStcnlGvvekQMQvQx
9yGHlRVs50tV+lKfYWBzGynxPIHsIZ38dPpnAglmwOzoHYLFqqBk+G+qfStE9c6P
M+TtjE8DxiC52eCVz2gSx55sYNdMdUSJnWSal4HP44YYWLn+etZx2rUH33cBhddW
fZNmgfp5ZwpvxebEbYRp9LqagxRuGCPOz+H2qYlf2V9liStUITgIVYj8CDJbG+S/
BBmeHlDZ682yvUNurWbXgnuHGohrxh4fajNTYFQ2Rwy3Y9Lqnjn1uSht1uc0On+v
z+0ibtjasbYnrBDwjFEBRBWKZlcop6xCOEIDHrxtYCqRxPXQQTtuntqszfl+NBNO
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5116915526411474595
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 09:27:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-11 09:27:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokushima'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokushima-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokushima University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cluster.tokushima-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25444298288607390860317727648501921388004491812825419767914135548814763461753783861328151908021134926293443256115995296025067634285154277956531942109014535368978493461541458315493912131837566504314088225433592146553879915432185791407797875511400160475296949289057620261637605399071685066800035731918060301732089458017529137130325615685381515460479886404618367264109868102750395782921403152324551010008812124384927587236813093426946998364372189085445577640904716667047526053789832026166352861901717532312863471850322993387198349382432910552243604739701835962154836709342903482074544889962455757732147173508022640266801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluster.tokushima-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb69ac327ef9fe23a20533458f344262a2c43ca3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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