kan-navi.ncgm.go.jp

- National Center for Global Health and Medicine -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 7e:d3:e7:9c:9a:61:19:04 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

National Center for Global Health and Medicine

Organization: National Center for Global Health and Medicine
Organization unit: kanen-info
Locality: Academe
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:d3:e7:9c:9a:61:19:04
Serial Number (int): 9138902728655837444
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: b5:a6:e3:dc:f2:dc:ea:40:b2:bd:2f:34:56:12:8b:3a:32:51:a4:30
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 37:bd:7a:35:34:15:6c:3a:8f:c1:fb:ee:8b:b3:30:98:49:a4:eb:4a
Fingerprint (sha256): 38:98:cd:87:a8:be:71:98:6e:62:35:1d:fa:bd:4f:c9:21:c5:77:79:fd:d6:50:c7:d9:5c:39:6a:e7:93:3b:b5


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate kan-navi.ncgm.go.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kan-navi.ncgm.go.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kan-navi.ncgm.go.jp

Other certificates including the domain name ncgm.go.jp

(limited to 100 certificates)
www.ddi.ncgm.go.jp
cinc.ncgm.go.jp
www.hosp.ncgm.go.jp
*.ncgm.go.jp
j-siphe-m.ncgm.go.jp
webmail.ri.ncgm.go.jp
hrc-gh.ncgm.go.jp
hrc-gh.ncgm.go.jp
www.ncgm.go.jp
j-siphe.ncgm.go.jp
hrc-gh.ncgm.go.jp
mgen.ncgm.go.jp
*.ncgm.go.jp
kan-navi.ncgm.go.jp
www.hosp.ncgm.go.jp
kanen-soudan.ncgm.go.jp
www.ncgm.go.jp
amr-onehealth.ncgm.go.jp
ghaines.net
www.ncgm.go.jp
ariseportal.ncgm.go.jp
kan-navi.ncgm.go.jp
www.ncgm.go.jp
labnote.ncgm.go.jp
j-siphe.ncgm.go.jp
yaosurvey2023.ncgm.go.jp
www.dharmaresearchlab.com
amr-onehealth.ncgm.go.jp
acclearning.ncgm.go.jp
hrc-gh-system.ncgm.go.jp
rebind.ncgm.go.jp
j-siphe.ncgm.go.jp
mgen.ncgm.go.jp
coi.ncgm.go.jp
covid-registry.ncgm.go.jp
www.ddi.ncgm.go.jp
*.ncgm.go.jp
www.ncgm.go.jp
www.hosp.ncgm.go.jp
j-siphe.ncgm.go.jp
www.ddi.ncgm.go.jp
biostat-wiki.ncgm.go.jp
*.ncgm.go.jp
amr-onehealth.ncgm.go.jp
amrlearning.ncgm.go.jp
amr-onehealth-platform.ncgm.go.jp
www.ddi.ncgm.go.jp
amr-onehealth-platform.ncgm.go.jp
mgend.ncgm.go.jp
www.hosp.ncgm.go.jp
www.hosp.ncgm.go.jp
windsapp.com
web.authorize.ncgm.go.jp
www.hosp.ncgm.go.jp
library-acc.ncgm.go.jp
rebind-ic.ncgm.go.jp
galaxy.ncgm.go.jp
hrc-gh.ncgm.go.jp
hrc-gh.ncgm.go.jp
girlsquiz.jp
kanen-soudan.ncgm.go.jp
cinc.ncgm.go.jp
crese-nt.ncgm.go.jp
lnob.ncgm.go.jp
mgen.ncgm.go.jp
amrlearning.ncgm.go.jp
www.hosp.ncgm.go.jp
amr-onehealth-platform-d.ncgm.go.jp
mgend.ncgm.go.jp
www.hosp.ncgm.go.jp
asknamer.com
lightstripper.app
amr-onehealth.ncgm.go.jp
galaxy.ncgm.go.jp
*.ncgm.go.jp
amr-onehealth.ncgm.go.jp
hrc-gh-system.ncgm.go.jp
www.ddi.ncgm.go.jp
amrlearning.ncgm.go.jp
rebind-verify.ncgm.go.jp
www.iradio.world
rebind.ncgm.go.jp
*.ncgm.go.jp
mgend.ncgm.go.jp

Certificate

The complete raw certificate details for kan-navi.ncgm.go.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAVqhFDJgxtywT3VMx7M
pfShGVnRAHDtcr+eThxGW2xhKPBQB7eVYUcQ5Y94VvAMJ4LQ19FqjzDQv39Vovms
V1sFk84/KZVdY8hhWPhqUrUMIMgw6C3se9rCnEVKBj/dqKfmibPFM9v/O+GsEvTZ
+fKOuNoT0GXI8HAcfFqxdF+i2IIH1C+WqufM6x0XYJ++rlhN9Wzy3mh/j2fb8/x9
fgi2PaoXVCO9oxQV0NHANeVvCvTqpCT+oxUwh78oTM7J+JwHgqnPUk7LF4vDGWae
+tVqFl5bJSnUBlXLx8eWZBY8fUId6N9Rt0oy2fdxvgCuO7MAh41CTIjvC+iqeqM0
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9138902728655837444
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-28 08:22:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-29 08:22:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Academe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Center for Global Health and Medicine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kanen-info'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kan-navi.ncgm.go.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25755284982392436978004437848407819361172949521999534950729801828557665581208079004681297903456282115681578046356740090161980576839412439911225925024788369121304606990280175563298272390907460747475036202047182671688977731309649154680717777562361926364271369022943191955825486777205128192716109821586520202080692769675297163211299443146359891536550865397165128058564561155220422024051015332852971318550223691988715651211925540873863442847413554862440124713158668684913259151599656734347860065828624494723840347537374562917187594359812046623317138852432681651614262208232526909981111966108198357013746686531334198998207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kan-navi.ncgm.go.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5a6e3dcf2dcea40b2bd2f3456128b3a3251a430
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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