www2.seki.cs.it-chiba.ac.jp

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a7:98:08:f2:d4:c1:38:f8:b3:6e:bb:c8:02:42:2a:76:c9 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www2.seki.cs.it-chiba.ac.jp

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a7:98:08:f2:d4:c1:38:f8:b3:6e:bb:c8:02:42:2a:76:c9
Serial Number (int): 318366102190010932847484199180343184094921
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:a5:85:54:45:5e:a5:0f:4b:eb:75:b4:68:d5:9a:84:cf:8b:fd:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 46:41:de:29:e3:18:3d:6f:c8:9b:93:c4:c1:46:4d:70:a1:6b:ec:65
Fingerprint (sha256): 39:f9:c9:5f:0c:2b:f5:96:74:8f:6a:3f:cf:31:50:11:83:67:0c:96:1b:02:8e:ed:40:f6:a8:bd:93:0a:fb:54

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www2.seki.cs.it-chiba.ac.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.seki.cs.it-chiba.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

seki-pc0.seki.cs.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp

Other certificates including the domain name it-chiba.ac.jp

(limited to 100 certificates)
www2.seki.cs.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
www.elt.net.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
citkaikeiap1.it-chiba.ac.jp
www.eee.it-chiba.ac.jp
attendance.is.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
find.is.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
www.it-chiba.ac.jp
find.is.it-chiba.ac.jp
attendance.is.it-chiba.ac.jp
www.hara.net.it-chiba.ac.jp
opac2.lib.it-chiba.ac.jp
kmsk.is.it-chiba.ac.jp
ecomeeting.is.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
hrms.jinji.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
www.ord.it-chiba.ac.jp
ipx.seki.cs.it-chiba.ac.jp
kanri.lib.it-chiba.ac.jp
mac.it-chiba.ac.jp
webentry.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
sso.it-chiba.ac.jp
opac.lib.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
www.appchem.it-chiba.ac.jp
www.elt.net.it-chiba.ac.jp
elt.net.it-chiba.ac.jp
portal.it-chiba.ac.jp
www.net.it-chiba.ac.jp
kmsk.is.it-chiba.ac.jp
mac.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
www.lib.it-chiba.ac.jp
lms.is.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
ssk.is.it-chiba.ac.jp
attendance.is.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
kmsk.is.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
idp.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
ccc.is.it-chiba.ac.jp
ccc.is.it-chiba.ac.jp
kyoumu.is.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
kmsk.is.it-chiba.ac.jp
www.ord.it-chiba.ac.jp
lms.is.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
auth.it-chiba.ac.jp
www.robotics.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
auth.it-chiba.ac.jp
ipx.seki.cs.it-chiba.ac.jp
pop.perc.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
kyoumu.is.it-chiba.ac.jp
kyoumu.is.it-chiba.ac.jp
www.it-chiba.ac.jp
lms.is.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
risyu.is.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
webentry.it-chiba.ac.jp
lms.is.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
ecomeeting.is.it-chiba.ac.jp
c-ad01.cad.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
risyu.is.it-chiba.ac.jp
ad-pass.is.it-chiba.ac.jp
citlcap.it-chiba.ac.jp
lms.is.it-chiba.ac.jp
www.mecheng.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
www.seki.cs.it-chiba.ac.jp
www.pm.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
kyoumu.is.it-chiba.ac.jp
fyi.cs.it-chiba.ac.jp
www.smp.it-chiba.ac.jp
rp.elt.net.it-chiba.ac.jp
www2.seki.cs.it-chiba.ac.jp
kyoumu.is.it-chiba.ac.jp
www.lib.it-chiba.ac.jp

Certificate

The complete raw certificate details for www2.seki.cs.it-chiba.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/2cqDVY42/C0r2iJRWN
2Vr4gPj/n+0oUTw8xbo78QdieMT62GQVWiRTZkpKxiLNRPgro9fKguvd+RDw6gnq
0Jukw89IbzazS+NelWdr3albU0jVRiINGHb8/GqRqRlJvMvcxCRF/hnC1R7C0cg1
tCFy+o9mo9xrOpG2cf2CUkM0sj/ANo9kX8hDK9iIMHOyZo+btyl1Xg2ZbsMgN9ZS
edq33+KpZ4Jz8uXsClAHcpttUkVUcZCqkddtv/EiX0ZQZ2WhPcpSygAwkm9PP/4W
r/BqDFLSwgEGA4qDeTqJy+4/Gx+3CwlXiN9adcJY1Yye7OAU5pC8BiepX6+SoELO
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318366102190010932847484199180343184094921
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-01 01:37:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-30 01:37:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.seki.cs.it-chiba.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26761343057345567928898764605845854776115638182426217955434515677364094728897601923786999546603081760443295457017969190904831660983088014596140998016795192503920857604487907300110819936698772238105826470647148703668049709329632801458731094024177377216177497197893079596357839640570350929595109066298305460652290683550896836240208893101516156469970748544820349101821474156039787023750838942145783608512177736279352045361349412503998024977906139902270869441070070813830993486084219762548434646790558984527633205810308837389063269753218438697041346191561711820523651639403740168088604330903260680004158307065692397162051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24a58554455ea50f4beb75b468d59a84cf8bfddc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seki-pc0.seki.cs.it-chiba.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.seki.cs.it-chiba.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c4b0a1bf90000040300483046022100c5bc68769a6c18e3c746df90ea88274f23079a19dca082a467c9c7b6f69aca0a022100e8bd5515ae8fdd28fc96246c7ff224ad37b69079f2b4cff7da3bcf0fe403df3b00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c4b0a1c18000004030046304402202914467cbd0cda8073cf3910c0cd7e17e27985171ebfd101d3a158d2c6ecb5690220737dd8af79e3d179ec427ab35120abca9dca8173e2072a6252c638badecee325
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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