www.ddi.ncgm.go.jp

Issued by JPRS Domain Validation Authority - G3

About this certificate

This digital certificate with serial number 46:0d:bb:46:07:6c:5c:5a:1e:fd:3f:16:a1:bc:31:a5 was issued on by Japan Registry Services Co., Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ddi.ncgm.go.jp

Japan Registry Services Co., Ltd.

Organization: Japan Registry Services Co., Ltd.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 46:0d:bb:46:07:6c:5c:5a:1e:fd:3f:16:a1:bc:31:a5
Serial Number (int): 93117257922969717900734496785812959653
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 82:d1:2b:51:1a:d1:40:20:7d:d6:22:16:a9:d0:05:ac:32:43:da:09
AuthorityKeyId: d0:17:ff:a0:61:bd:50:8c:27:6b:c9:96:c1:4e:18:5e:ef:78:62:d9

Fingerprint (sha1): cc:f0:51:46:e1:60:b6:71:83:50:c7:32:51:b1:55:65:de:19:6e:42
Fingerprint (sha256): 81:8c:78:9f:d2:d6:4a:27:4f:52:53:2b:aa:39:09:b8:aa:45:6c:a1:7e:71:77:32:fe:61:19:a8:a3:3c:cc:4b

Issuing Certificate URL: http://repo.pubcert.jprs.jp/sppca/jprs/dvca_g3/JPRS_DVCA_G3_DER.cer

Revocation information

OCSP Server: http://dv.g3.ocsp.pubcert.jprs.jp
CRL Distribution Point: http://repo.pubcert.jprs.jp/sppca/jprs/dvca_g3/fullcrl.crl

Check the revocation status for certificate www.ddi.ncgm.go.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ddi.ncgm.go.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ddi.ncgm.go.jp
ddi.ncgm.go.jp

Other certificates including the domain name ncgm.go.jp

(limited to 100 certificates)
www.ddi.ncgm.go.jp
cinc.ncgm.go.jp
www.hosp.ncgm.go.jp
*.ncgm.go.jp
j-siphe-m.ncgm.go.jp
webmail.ri.ncgm.go.jp
hrc-gh.ncgm.go.jp
hrc-gh.ncgm.go.jp
www.ncgm.go.jp
j-siphe.ncgm.go.jp
hrc-gh.ncgm.go.jp
mgen.ncgm.go.jp
*.ncgm.go.jp
kan-navi.ncgm.go.jp
www.hosp.ncgm.go.jp
kanen-soudan.ncgm.go.jp
www.ncgm.go.jp
amr-onehealth.ncgm.go.jp
ghaines.net
www.ncgm.go.jp
ariseportal.ncgm.go.jp
kan-navi.ncgm.go.jp
www.ncgm.go.jp
labnote.ncgm.go.jp
j-siphe.ncgm.go.jp
yaosurvey2023.ncgm.go.jp
www.dharmaresearchlab.com
amr-onehealth.ncgm.go.jp
acclearning.ncgm.go.jp
hrc-gh-system.ncgm.go.jp
rebind.ncgm.go.jp
j-siphe.ncgm.go.jp
mgen.ncgm.go.jp
coi.ncgm.go.jp
covid-registry.ncgm.go.jp
www.ddi.ncgm.go.jp
*.ncgm.go.jp
www.ncgm.go.jp
www.hosp.ncgm.go.jp
j-siphe.ncgm.go.jp
www.ddi.ncgm.go.jp
biostat-wiki.ncgm.go.jp
*.ncgm.go.jp
amr-onehealth.ncgm.go.jp
amrlearning.ncgm.go.jp
amr-onehealth-platform.ncgm.go.jp
www.ddi.ncgm.go.jp
amr-onehealth-platform.ncgm.go.jp
mgend.ncgm.go.jp
www.hosp.ncgm.go.jp
www.hosp.ncgm.go.jp
windsapp.com
web.authorize.ncgm.go.jp
www.hosp.ncgm.go.jp
library-acc.ncgm.go.jp
rebind-ic.ncgm.go.jp
galaxy.ncgm.go.jp
hrc-gh.ncgm.go.jp
hrc-gh.ncgm.go.jp
girlsquiz.jp
kanen-soudan.ncgm.go.jp
cinc.ncgm.go.jp
crese-nt.ncgm.go.jp
lnob.ncgm.go.jp
mgen.ncgm.go.jp
amrlearning.ncgm.go.jp
www.hosp.ncgm.go.jp
amr-onehealth-platform-d.ncgm.go.jp
mgend.ncgm.go.jp
www.hosp.ncgm.go.jp
asknamer.com
lightstripper.app
amr-onehealth.ncgm.go.jp
galaxy.ncgm.go.jp
*.ncgm.go.jp
amr-onehealth.ncgm.go.jp
hrc-gh-system.ncgm.go.jp
www.ddi.ncgm.go.jp
amrlearning.ncgm.go.jp
rebind-verify.ncgm.go.jp
www.iradio.world
rebind.ncgm.go.jp
*.ncgm.go.jp
mgend.ncgm.go.jp

Certificate

The complete raw certificate details for www.ddi.ncgm.go.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+0LLv664L7j2DOQfL+h
aG71/57Ae4UIqcP2srYrXHUmVLNMCaNEmCNi/d2F154L9A4PTnWYpQxhDqUW+HmL
PXBKNOhdVZ86KmSD9SUaLwIysXF6En0nEmlryiDrjQ5oChmxC39Zlk0Y0n2RDfrb
Kgq45UkYJmyBQ7Svx0Mi7x8Qssy5T1r1SznlzAjpFyfR5XGrA36dyQGlwuDIBu9i
rGO1uB+3uWHbBE2UKFxh3fE7hgiq0P9V6k4AEFbgfTu6pqqry21smT5L4yHgqncm
DPgZqzUOmvj+K2r28KoyS5VvquDp48xR0sNhHISCQTnxWJPW2lBhSd7vWJfrlbR4
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 93117257922969717900734496785812959653
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Japan Registry Services Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JPRS Domain Validation Authority - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 02:05:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-31 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ddi.ncgm.go.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20693734307526222308642497297010205914029720737135555393415014297711527445424017976089145290756858459623867470026598282605768983193418799188957832051879551716872852351960435637781661785153191744233760983904312710180128352253619487469345789148243120151960258494902835430126065773132914224976329786560947052083846658741742211000887834747165414756211792683653940693583291813541407281591240457763793639889300415508874133512230861423551683492858272568071335841777800316257367130622472352515709635057362875532469765418191371169039345311759057706424533174323422933936525117185254292512738476916291377335312092335845909231681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d017ffa061bd508c276bc996c14e185eef7862d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo.pubcert.jprs.jp/sppca/jprs/dvca_g3/JPRS_DVCA_G3_DER.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://dv.g3.ocsp.pubcert.jprs.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ddi.ncgm.go.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddi.ncgm.go.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53827.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://jprs.jp/pubcert/info/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo.pubcert.jprs.jp/sppca/jprs/dvca_g3/fullcrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82d12b511ad140207dd62216a9d005ac3243da09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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