castle.csl.info.hiroshima-cu.ac.jp

- Hiroshima City University -

Issued by

About this certificate

This digital certificate with serial number 13:b9:8a:a8:01:c2:49:dc was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Hiroshima City University

Organization: Hiroshima City University
Organization unit: Computer System Laboratory
Locality: Academe2
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Organization unit: UPKI
Organization unit: NII Open Domain CA - G2
Locality: Academe2
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 13:b9:8a:a8:01:c2:49:dc
Serial Number (int): 1421319611600751068
Serial Number lenght: 61 bits, 8 octets

SubjectKeyId: 7a:09:a1:fe:b5:52:eb:70:c7:69:6b:e1:2e:c5:8a:23:d1:b4:b9:14
AuthorityKeyId: 7b:0a:07:f7:18:ca:8c:0e:d6:da:bc:50:80:6c:2c:47:02:d1:0d:fb

Fingerprint (sha1): 47:5a:f3:4a:71:00:1a:f5:af:60:70:b1:4a:f2:33:86:5c:42:17:da
Fingerprint (sha256): 1c:a6:93:80:03:15:06:43:ab:4a:87:f5:8f:7e:29:86:36:20:68:47:72:9d:82:71:67:f4:50:26:ee:e7:f0:ee


Revocation information

CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca2/fullcrl.crl

Check the revocation status for certificate castle.csl.info.hiroshima-cu.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for castle.csl.info.hiroshima-cu.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

castle.csl.info.hiroshima-cu.ac.jp

Other certificates including the domain name hiroshima-cu.ac.jp

(limited to 100 certificates)
beta.cm.info.hiroshima-cu.ac.jp
eduroam.ipc.hiroshima-cu.ac.jp
www.cd.info.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
www.netsci.info.hiroshima-cu.ac.jp
vmcs.office.hiroshima-cu.ac.jp
www2.lib.hiroshima-cu.ac.jp
vcd.art.hiroshima-cu.ac.jp
beta.cm.info.hiroshima-cu.ac.jp
hcuwww.ipc.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
hcuwww.ipc.hiroshima-cu.ac.jp
adfs.ipc.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
www2.lib.hiroshima-cu.ac.jp
intl.hiroshima-cu.ac.jp
phys.info.hiroshima-cu.ac.jp
triathlon.hiroshima-cu.ac.jp
castle.csl.info.hiroshima-cu.ac.jp
www.mirai.info.hiroshima-cu.ac.jp
vc04.hiroshima-cu.ac.jp
hculdud.ipc.hiroshima-cu.ac.jp
gate.ipc.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
opac.lib.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
wiki.v6.inet.info.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
nysnx.office.hiroshima-cu.ac.jp
ichipol.hiroshima-cu.ac.jp
apnasv1.intl.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
www2.lib.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
ichipol.hiroshima-cu.ac.jp
phys.info.hiroshima-cu.ac.jp
itssrv.edu.ipc.hiroshima-cu.ac.jp
intl.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
adfs.ipc.hiroshima-cu.ac.jp
triathlon.hiroshima-cu.ac.jp
m45ma.ipc.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
rct.office.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
www.hiroshima-cu.ac.jp
mailchk.ipc.hiroshima-cu.ac.jp
m45ma.ipc.hiroshima-cu.ac.jp
hpc51a.mc.info.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
hcuidm.ipc.hiroshima-cu.ac.jp
webclass.ipc.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
phys.info.hiroshima-cu.ac.jp
mail.sos.info.hiroshima-cu.ac.jp
www.prl.info.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
gdep.sos.info.hiroshima-cu.ac.jp
vcd.art.hiroshima-cu.ac.jp
www.cd.info.hiroshima-cu.ac.jp
www.mirai.info.hiroshima-cu.ac.jp
aokin.lang.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
gate.ipc.hiroshima-cu.ac.jp
www.v6.netsci.info.hiroshima-cu.ac.jp
mssa.ipc.hiroshima-cu.ac.jp
phys.info.hiroshima-cu.ac.jp
kss.office.hiroshima-cu.ac.jp
apnasv1.office.hiroshima-cu.ac.jp
mail.sos.info.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
fed.ipc.hiroshima-cu.ac.jp
renew.triathlon.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
info.hiroshima-cu.ac.jp
info.hiroshima-cu.ac.jp
vc02.hiroshima-cu.ac.jp
aokin.lang.hiroshima-cu.ac.jp
beta.cm.info.hiroshima-cu.ac.jp
ats2021.info.hiroshima-cu.ac.jp
mailchk.ipc.hiroshima-cu.ac.jp
wm45ma.ipc.hiroshima-cu.ac.jp
hpc51a.mc.info.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
www.cd.info.hiroshima-cu.ac.jp
gate.ipc.hiroshima-cu.ac.jp
fed.ipc.hiroshima-cu.ac.jp
fed.ipc.hiroshima-cu.ac.jp
info.hiroshima-cu.ac.jp
vc-office.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
adfs.ipc.hiroshima-cu.ac.jp
aburae.art.hiroshima-cu.ac.jp

Certificate

The complete raw certificate details for castle.csl.info.hiroshima-cu.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1od4n7IsH+oPyk1CEHoK
ce+S3jq3JaiUEw13Y+uqXwPHq1E2cwFbdzbLEBQmhovy7z88EOu15HNWaubfkpgr
BJycK3QOZ9TWrb0HA2cWU305Bzm6OL/Adynt2XNusdeVasKV6lgRhs0a4ILM5zaW
1LqC94SSo1Pl1z0XohOSODnt/0dSwaJiK1BKLxAfIt+caQm4MbNQXlqUiB67k9RY
pCThYAWxwvPBHJsWKebId9iI4c3p4mQoXPWjcP5Idzp2U/uSssnDLsR9RPxunkQE
iTVTjj06bCHS315H9Z675WO10zlkma2b4R3MbPiQKKZyMDfgBaZ789kJqDIjPcCi
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1421319611600751068
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Academe2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UPKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-05 00:33:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-05 00:43:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Academe2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hiroshima City University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Computer System Laboratory'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'castle.csl.info.hiroshima-cu.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27081800594725810942028959415083719188868173151517933544412300175431109702112815233365326426632033589540737216384385048484069695627990594456830193726878195183212915633313112901870908095985001494017639407001914674754005227771115280208480561365121964962481592936922133228515784311782006740998886651769147625552909023018112554475747818644829346035383104130172962861810895692944844811682112826147839523431670764150270960328007632026764401397144129128240897638339635422790823395654151588977140782225157900657958239439744897972498954843880257400393150350937241737657118685442541400912190214605163022967444168240776096031309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a09a1feb552eb70c7696be12ec58a23d1b4b914
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7b0a07f718ca8c0ed6dabc50806c2c4702d10dfb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castle.csl.info.hiroshima-cu.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200222.1.2.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/spcpp/cps/index.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.100.901.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca2/fullcrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							0640
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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