niiza.rikkyo.ac.jp

- Rikkyo University -

Issued by NII Open Domain CA - G7 RSA

About this certificate

This digital certificate with serial number 0a:89:c3:1c:22:59:33:98:d8:f6:32:86:57:4d:32:de was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rikkyo University

Organization: Rikkyo University
State / Province: Tokyo
Locality: Toshima-ku
Country: JP

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:89:c3:1c:22:59:33:98:d8:f6:32:86:57:4d:32:de
Serial Number (int): 14007581926360020981381769531122070238
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a8:0c:6e:e9:b7:81:d2:d4:be:91:30:6c:c4:17:84:80:f1:04:b3:05
AuthorityKeyId: b0:2e:e5:51:ed:fc:4a:cf:a3:87:f1:13:90:76:2d:9d:8e:94:a1:e3

Fingerprint (sha1): 2b:e1:ec:60:ea:4f:b5:1d:b1:70:84:3e:7a:5f:f2:7f:17:48:98:d6
Fingerprint (sha256): 21:cb:11:3f:c1:c8:76:09:82:7b:65:eb:6e:c2:e2:37:bb:42:d5:46:cb:c6:ad:e9:56:e5:f7:e5:fb:9b:37:da

Issuing Certificate URL: http://repo1.secomtrust.net/sppca/nii/odca4/nii-odca4g7rsa.cer

Revocation information

OCSP Server: http://niig7rsa.ocsp.secom-cert.jp
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca4/fullcrlg7rsa.crl

Check the revocation status for certificate niiza.rikkyo.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for niiza.rikkyo.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

niiza.rikkyo.ac.jp

Other certificates including the domain name rikkyo.ac.jp

(limited to 100 certificates)
sy.rikkyo.ac.jp
www.rikkyo.ac.jp
score.rikkyo.ac.jp
servicedesk.6dca.flcourts.gov
sy.rikkyo.ac.jp
www.rikkyo.ac.jp
redic.rikkyo.ac.jp
*.rikkyo.ac.jp
rt.rikkyo.ac.jp
upki-idp.rikkyo.ac.jp
rproxy.rikkyo.ac.jp
v5dcradius-01.rikkyo.ac.jp
r.rikkyo.ac.jp
vcs-ms.mo.rikkyo.ac.jp
www3.rikkyo.ac.jp
mspirit.rikkyo.ac.jp
socio.rikkyo.ac.jp
it-support.perimeter81.com
r.rikkyo.ac.jp
sso.rikkyo.ac.jp
r-jikan-t.rikkyo.ac.jp
wac.rikkyo.ac.jp
portfolio-t.rikkyo.ac.jp
business-school.rikkyo.ac.jp
rproxy.rikkyo.ac.jp
wwwj.rikkyo.ac.jp
a-station.rikkyo.ac.jp
lp.rikkyo.ac.jp
opac.rikkyo.ac.jp
cp.rikkyo.ac.jp
niiza.rikkyo.ac.jp
blpcob.rikkyo.ac.jp
webq-t.rikkyo.ac.jp
mls.rikkyo.ac.jp
icc.rikkyo.ac.jp
emp.rikkyo.ac.jp
mailgate.rikkyo.ac.jp
univdb.rikkyo.ac.jp
csi-shoumeisho.rikkyo.ac.jp
sdp.rikkyo.ac.jp
311help.seminolecountyfl.gov
webq.rikkyo.ac.jp
qa-sso.rikkyo.ac.jp
gakuseibu.rikkyo.ac.jp
mls.rikkyo.ac.jp
tourism.rikkyo.ac.jp
netacademy.rikkyo.ac.jp
opac.rikkyo.ac.jp
brix.rikkyo.ac.jp
wlc.rikkyo.ac.jp
r-jikan-t.rikkyo.ac.jp
sds.rikkyo.ac.jp
socio.rikkyo.ac.jp
mpma.rikkyo.ac.jp
mediasite.rikkyo.ac.jp
databank.rikkyo.ac.jp
www.rikkyo.ac.jp
upki-idp-test.rikkyo.ac.jp
sdp.rikkyo.ac.jp
upki-idp.rikkyo.ac.jp
idm.rikkyo.ac.jp
sy.rikkyo.ac.jp
real.rikkyo.ac.jp
csi-vpn.rikkyo.ac.jp
webfolder.rikkyo.ac.jp
spirittest.rikkyo.ac.jp
spirit-t.rikkyo.ac.jp
icc.rikkyo.ac.jp
sds.rikkyo.ac.jp
rpp.rikkyo.ac.jp
portfolio.rikkyo.ac.jp
icc.rikkyo.ac.jp
311help.seminolecountyfl.gov
*.staging.mobile.rikkyo.ac.jp
niiza.rikkyo.ac.jp
recruit.rikkyo.ac.jp
311help.seminolecountyfl.gov
cl.rikkyo.ac.jp
bb.rikkyo.ac.jp
r.rikkyo.ac.jp
socio.rikkyo.ac.jp
economics.rikkyo.ac.jp
real.rikkyo.ac.jp
sy.rikkyo.ac.jp
qa-sso.rikkyo.ac.jp
databank.rikkyo.ac.jp
csi-seminar.rikkyo.ac.jp
cjle.rikkyo.ac.jp
cp.rikkyo.ac.jp
discovery.rikkyo.ac.jp
archives.rikkyo.ac.jp
www.rikkyo.ac.jp
discovery.rikkyo.ac.jp
mls.rikkyo.ac.jp
150th.rikkyo.ac.jp
ry.rikkyo.ac.jp
servicedesk.6dca.flcourts.gov
*.rikkyo.ac.jp
opac.rikkyo.ac.jp
mynumber.rikkyo.ac.jp

Certificate

The complete raw certificate details for niiza.rikkyo.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAVoDu7ditHG49/s8xhU
Z//ORxmpDwmucy0m1lHT9XtqozGIn1xvAVgToPL4MRt2iOxUzTEGbO81oOLBL7Zu
GInVT9njsHq1iMmhSEqsQ7MSop9X8NdaWqFbAdF7KLDykRWCxXuQeR9uxapthcaS
Dvw+vh6QSRDLJteN70Ifh1yzBdMqcgwvDDtEdj+oEuDnu2K0Sru77Cqwl+Lf/L0n
1AsIsRXlU0YQiqL49VxjxFhKxMgufAAxaKoebqsqmNRe3QxjPKcPmaNS8/KSFCX0
0BlACrl1pPtbHhXiFbYQDfQyHAzRlR1UabaKYiht4XgQot0jABW2JiFviUeQFg7p
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14007581926360020981381769531122070238
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G7 RSA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 04:53:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 04:53:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toshima-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rikkyo University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'niiza.rikkyo.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23230514147352248823021608995263356278510071402928510477997629253146410067652656686056939471113522426657224436286262899942099613821996250380452595491926033966668455563450805378957569756488312316367705843115064111409613283996725868537097319243453585447018345736931293266610010220498519117088823833648686498664375547531374373901920429306859687413240680668763560502361647942697020403110598350966642080916146973687627444434045820853578555351094543321208247450765654799981618250458384372812186542587427831767886659269231964946772261829569563274360189507274206876320821716231427725352110700952423854771981696295982274111999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b02ee551edfc4acfa387f11390762d9d8e94a1e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/nii-odca4g7rsa.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig7rsa.ocsp.secom-cert.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niiza.rikkyo.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.214.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/fullcrlg7rsa.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a80c6ee9b781d2d4be91306cc4178480f104b305
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a4bb1966b501ee0c29f5d9c3cd54bc6a4367c3bb8aa9a2b1bb8563e8371f81c191f78c2e11cacb669bbcf8d33115dbe50ba965293572c1e1ee31aa934b6076d971370c772cf08a79de37168b0e438d69af02f8dd2275ab2764262aef9a50e58e9d2b0d2d675e2e1145291d787e312d83be54576a89467e464f516a7bcf8e03622451b440a99a725830a1a0ee7344168f5f966b5a572fe5bd6f1442420e331e8c538aa3c629f0474bb19adeedb2f791baad6f241b12c4f49323fd1f87c55b9024972aeffe45f8ac52d73eae39a96eb69077574b765dc5cd6394dfc9edd0e7e1bdc68668e38495dfb89702f1391ac06b3605167c30170fe99e9c696b351db73baa