aip2.okinawa-u.ac.jp

- Okinawa University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 09:3a:5b:09:fe:03:96:a9:0a:3b:b2:d3:ff:35:3a:f0 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Okinawa University

Organization: Okinawa University
Organization unit: Multimedia Education and Research Center
State / Province: Okinawa
Locality: Naha-shi
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 09:3a:5b:09:fe:03:96:a9:0a:3b:b2:d3:ff:35:3a:f0
Serial Number (int): 12266051670800188534266699706289961712
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 78:db:df:47:c7:d0:3f:b1:17:fd:81:ae:82:45:b9:22:89:50:dc:4b
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 6a:ab:b9:63:42:f4:2a:28:04:ba:13:95:74:03:a4:f5:11:fb:d0:50
Fingerprint (sha256): 23:ff:6f:82:24:11:dc:8b:48:dd:97:1c:cd:16:ff:04:c4:37:8c:24:54:ea:1e:21:c5:8a:21:cc:2b:3b:26:1f


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate aip2.okinawa-u.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aip2.okinawa-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aip2.okinawa-u.ac.jp

Other certificates including the domain name okinawa-u.ac.jp

(limited to 100 certificates)
www.okinawa-u.ac.jp
ourea.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
nanext.okinawa-u.ac.jp
prismcentral.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
redmine.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
www.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
www.okinawa-u.ac.jp
aip.okinawa-u.ac.jp
*.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
nanext.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
classview.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
aion.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
www.okinawa-u.ac.jp
aip.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
nps1.cr.okinawa-u.ac.jp
www.okinawa-u.ac.jp
moodle19.okinawa-u.ac.jp
sns.okinawa-u.ac.jp
cb.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
aip.okinawa-u.ac.jp
classview.okinawa-u.ac.jp
classview.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
demeter2.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
www.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp

Certificate

The complete raw certificate details for aip2.okinawa-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CseuWX+eVavdd4CmfmH
JbYrbKyN7ZbEfpkd1LhUXYKZTz4DfuschmqoWdUeZ+I/cPXOKvMdY3b9pa8+JJUT
DOxo65jVI903LvieE2OsVGfdlDtIgIPtc5v1Bp6cSoSXYm4fctQTIRbQx5UIpmZj
Iem/apY7kdy1DHH0mlDRgJQXBv+zhrf3G6MM7lQXS6i+kVv68QRJjJYLu+mswS8D
BschHJe2HE2L7utYUyga9ZEMeQ5cnCBKCav9NX83Y5czAJQaEtIVgO56glkm4CcW
0kFv1t1NlgpENczzXVTtMVEy3C9i4xA/qnlFmOYiSFMxw7ZjpBzF5Iw64M7JwX7T
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12266051670800188534266699706289961712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-13 01:02:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-13 01:02:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Okinawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Naha-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Okinawa University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multimedia Education and Research Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aip2.okinawa-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28803596804868494781421924718637190705788747662725009706063658949204317597794362298351436419195078131786170307217122968666886425634768187373702694060543934227516088207805704445875810213165221955779386368552240992635898712558260144536271577993034748573578308608987913479223908184298748867223410889375424447832182280994765828174527993845135698079105110990879822840152486955374385603987865342268346477745303922109328309625994151801027379061561249210497406063328038667509110045087054901465336751785957125789732880604840327229605808708064357460387264563597233307821552728430028979989743805005869128452145295144266720269097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aip2.okinawa-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78dbdf47c7d03fb117fd81ae8245b9228950dc4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a1726c6b2377d1f2e026df652413f04e870088ec3870b75287c185717e1ec0635fe08ef3a52664ce4926ea6b31a6cc4b73117c13b1aa0e43277e22dfe09638c191d96d6d88be5744fb091a3658803c8692d086ddf33fe5d9d6b5452439fe25ef5c97cdba8c52fc34d8ad8b9b2a22d74902445a5c8643cb9a8dae7a8b2deb8804136e546d32347cd90aee3b783f1fa153b0de8d5c47b579ecb8a8a8281548d9196e17b3d28998ad2724b1a96742bd4bbac31be05e492110cca937e4abfa86a778928ed124d25feffafa1ea42b295b3625ec00268e917dd9e9a85d49962590b954e47df8539392b5850dca99f784eda6f8c87089a4c188e9f3b7ff3a0af3a46f76