classview.okinawa-u.ac.jp

- Okinawa University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 61:00:6e:fc:7d:ff:91:6f:24:73:00:50:76:5c:06:5b was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Okinawa University

Organization: Okinawa University
Organization unit: Multimedia Education and Research Center
State / Province: Okinawa
Locality: Naha-shi
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 61:00:6e:fc:7d:ff:91:6f:24:73:00:50:76:5c:06:5b
Serial Number (int): 128937366660684784055053908281644549723
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ca:35:7d:75:b6:4a:a3:86:f5:17:8f:bc:1e:05:e6:52:cd:22:5b:e0
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): e1:4c:f4:b6:cc:6e:d8:fc:a9:ee:84:61:07:29:4d:9f:cf:a9:d6:d3
Fingerprint (sha256): 69:15:85:2a:a9:09:c2:91:f0:ff:32:49:0f:da:43:d6:db:51:e6:69:5b:d3:a2:e9:26:59:0d:68:a7:be:9e:eb


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate classview.okinawa-u.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for classview.okinawa-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

classview.okinawa-u.ac.jp

Other certificates including the domain name okinawa-u.ac.jp

(limited to 100 certificates)
www.okinawa-u.ac.jp
ourea.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
nanext.okinawa-u.ac.jp
prismcentral.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
redmine.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
www.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
www.okinawa-u.ac.jp
aip.okinawa-u.ac.jp
*.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
nanext.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
classview.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
aion.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
www.okinawa-u.ac.jp
aip.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
nps1.cr.okinawa-u.ac.jp
www.okinawa-u.ac.jp
moodle19.okinawa-u.ac.jp
sns.okinawa-u.ac.jp
cb.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
aip.okinawa-u.ac.jp
classview.okinawa-u.ac.jp
classview.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
demeter2.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
www.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp

Certificate

The complete raw certificate details for classview.okinawa-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gWuS03gEHyjTett1cwU
NZOL5T/JuWARoa07sd4uQ9zBd0DbuVQmMr0hvoYi4xPng11NQceFhEbd5up/eQXY
PC0o5FTBfLSkZkAy0gj92WD38fU8VOsT+F6tSuRB20S70UPoNLQ7nPBSeFxd0h8K
FliU4oPEnY6+y82YI6aW8Kju1p4JR/ob0P6/SJmxdmSatC96aHPdE1bDbUo3DL4t
TqTlHtiGuzsE3d6Byy+oVqge+37/AxgBJNjiV358Jh4kSPOPWXa8k4sHVTyZbDok
cMV4gVW1oS6R5+/BGzEolYOEegkiXlEqqFDnRTHWc5G4fdMxQQFTPhjxgOW40HM3
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 128937366660684784055053908281644549723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 09:52:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-17 09:52:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Okinawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Naha-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Okinawa University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multimedia Education and Research Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'classview.okinawa-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28532658247239309781044535151232257651003619579109730582189421414598074218708415571893098748747566674711680326459483937054814560549403866648938206771421074190239388054836083834969037773213659045803566881738006816648550385092950814583391942419615239663341362906743813095392969490900183137147312292398490332078775457456339334035524526583652115550244024797313865562748983425413042174445892268021188520593380023558842056431598428276756075636195575735728307475433650876789648873300955510953786772712412947855849038258826439811448135097019754076976962297632974349633101906073489118046107202483536531434268751540647584020259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classview.okinawa-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca357d75b64aa386f5178fbc1e05e652cd225be0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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