rebind.ncgm.go.jp

- National Center for Global Health and Medicine -

Issued by NII Open Domain CA - G7 RSA

About this certificate

This digital certificate with serial number 2f:4b:a3:6a:3c:92:40:89:d9:96:ac:fe:78:e6:80:0c was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

National Center for Global Health and Medicine

Organization: National Center for Global Health and Medicine
Organization unit: CMII
State / Province: Tokyo
Locality: Shinjuku-ku
Country: JP

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:4b:a3:6a:3c:92:40:89:d9:96:ac:fe:78:e6:80:0c
Serial Number (int): 62866452515977688366199798475669274636
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: ef:02:68:ad:24:41:d7:d3:a4:73:a6:33:17:e3:4c:11:74:f1:56:6e
AuthorityKeyId: b0:2e:e5:51:ed:fc:4a:cf:a3:87:f1:13:90:76:2d:9d:8e:94:a1:e3

Fingerprint (sha1): d3:b7:be:40:f8:99:f2:bc:80:5c:42:f0:0a:f2:d9:c8:91:62:c5:5c
Fingerprint (sha256): 6b:11:80:da:e5:72:10:cc:f8:2d:1c:52:d1:08:af:71:e3:e5:72:a1:c5:52:17:ea:36:7d:64:10:55:80:b2:fc

Issuing Certificate URL: http://repo1.secomtrust.net/sppca/nii/odca4/nii-odca4g7rsa.cer

Revocation information

OCSP Server: http://niig7rsa.ocsp.secom-cert.jp
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca4/fullcrlg7rsa.crl

Check the revocation status for certificate rebind.ncgm.go.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rebind.ncgm.go.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rebind.ncgm.go.jp

Other certificates including the domain name ncgm.go.jp

(limited to 100 certificates)
www.ddi.ncgm.go.jp
cinc.ncgm.go.jp
www.hosp.ncgm.go.jp
*.ncgm.go.jp
j-siphe-m.ncgm.go.jp
webmail.ri.ncgm.go.jp
hrc-gh.ncgm.go.jp
hrc-gh.ncgm.go.jp
www.ncgm.go.jp
j-siphe.ncgm.go.jp
hrc-gh.ncgm.go.jp
mgen.ncgm.go.jp
*.ncgm.go.jp
kan-navi.ncgm.go.jp
www.hosp.ncgm.go.jp
kanen-soudan.ncgm.go.jp
www.ncgm.go.jp
amr-onehealth.ncgm.go.jp
ghaines.net
www.ncgm.go.jp
ariseportal.ncgm.go.jp
kan-navi.ncgm.go.jp
www.ncgm.go.jp
labnote.ncgm.go.jp
j-siphe.ncgm.go.jp
yaosurvey2023.ncgm.go.jp
www.dharmaresearchlab.com
amr-onehealth.ncgm.go.jp
acclearning.ncgm.go.jp
hrc-gh-system.ncgm.go.jp
rebind.ncgm.go.jp
j-siphe.ncgm.go.jp
mgen.ncgm.go.jp
coi.ncgm.go.jp
covid-registry.ncgm.go.jp
www.ddi.ncgm.go.jp
*.ncgm.go.jp
www.ncgm.go.jp
www.hosp.ncgm.go.jp
j-siphe.ncgm.go.jp
www.ddi.ncgm.go.jp
biostat-wiki.ncgm.go.jp
*.ncgm.go.jp
amr-onehealth.ncgm.go.jp
amrlearning.ncgm.go.jp
amr-onehealth-platform.ncgm.go.jp
www.ddi.ncgm.go.jp
amr-onehealth-platform.ncgm.go.jp
mgend.ncgm.go.jp
www.hosp.ncgm.go.jp
www.hosp.ncgm.go.jp
windsapp.com
web.authorize.ncgm.go.jp
www.hosp.ncgm.go.jp
library-acc.ncgm.go.jp
rebind-ic.ncgm.go.jp
galaxy.ncgm.go.jp
hrc-gh.ncgm.go.jp
hrc-gh.ncgm.go.jp
girlsquiz.jp
kanen-soudan.ncgm.go.jp
cinc.ncgm.go.jp
crese-nt.ncgm.go.jp
lnob.ncgm.go.jp
mgen.ncgm.go.jp
amrlearning.ncgm.go.jp
www.hosp.ncgm.go.jp
amr-onehealth-platform-d.ncgm.go.jp
mgend.ncgm.go.jp
www.hosp.ncgm.go.jp
asknamer.com
lightstripper.app
amr-onehealth.ncgm.go.jp
galaxy.ncgm.go.jp
*.ncgm.go.jp
amr-onehealth.ncgm.go.jp
hrc-gh-system.ncgm.go.jp
www.ddi.ncgm.go.jp
amrlearning.ncgm.go.jp
rebind-verify.ncgm.go.jp
www.iradio.world
rebind.ncgm.go.jp
*.ncgm.go.jp
mgend.ncgm.go.jp

Certificate

The complete raw certificate details for rebind.ncgm.go.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HVdsuc0tcGimu4IGWXl
NequxvLLfTHRqdk9cR5KO/gT/2TJlIq7cjdBnvrxy5zvdCJpIiRTDPn51EgumJKB
7WS7K3qza+cfyU5OfBhHtiNQEoaFQQGBwGGdZF8gg5m6rEB4KnUKapjrHjdaAORL
6UdMoQcfVCWHjd4pEAjmauBoOXEzgnbuRO3Jl0OkJAX4KAFTokm7jnO+XjYhttPn
T9uGGAumdnlbHkbCk+eXDJr8qeAWsZTs2zFVDVgcQpfHfYjhAmbEyn9Uh9qHkog0
t+D3QESBwdEP3tYsNaG7gblgifpIwFVjtq8Z1+sguARIcheArfgiqZmoni6P00Z0
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 62866452515977688366199798475669274636
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G7 RSA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-06 10:23:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 10:23:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shinjuku-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Center for Global Health and Medicine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CMII'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rebind.ncgm.go.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26315442770054688527203704139582165861942204993169770688430935506369138458268326870726750771150861464248417542327499043746097981495904708572680917462238737012676757208982600177399208205947651963537859246824453630117014218271889075568341706002550807468191894930213876330223550886028395800894977951266039104528095338972972920098026053792346350980880548230745096798319641650565082872683786368081226797178613191504971379164337081721705479930495531194509099538739579836663464370403534562472422924022451702500890938384157732556364690679389128722237023457650664486965905305762656481965472999936260506584420764726148976768187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b02ee551edfc4acfa387f11390762d9d8e94a1e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/nii-odca4g7rsa.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig7rsa.ocsp.secom-cert.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebind.ncgm.go.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.214.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/fullcrlg7rsa.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef0268ad2441d7d3a473a63317e34c1174f1566e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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