www.iuj.ac.jp

- International University of Japan -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 44:a0:2c:67:a9:44:16:16:70:e4:d8:58 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

International University of Japan

Organization: International University of Japan
State / Province: Niigata
Locality: Minamiuonuma-shi
Country: JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 44:a0:2c:67:a9:44:16:16:70:e4:d8:58
Serial Number (int): 21238618495326589174176602200
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 92:72:53:32:b0:4a:d2:50:0d:99:34:f1:8d:6e:da:88:6c:dc:1f:1e
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 70:95:1b:d5:2d:c2:a1:c8:e4:99:e4:e2:00:19:b6:ab:d3:c0:85:58
Fingerprint (sha256): b1:ed:ce:69:43:79:97:5b:51:45:86:d6:fe:3c:3b:bf:34:bd:ad:e4:69:6d:1d:1c:c2:af:49:85:20:71:c0:3a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate www.iuj.ac.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.iuj.ac.jp

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.iuj.ac.jp
iuj.ac.jp

Other certificates including the domain name iuj.ac.jp

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.iuj.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21238618495326589174176602200
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-13 03:03:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-14 03:03:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.iuj.ac.jp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'International University of Japan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minamiuonuma-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niigata'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 886980158500581935930963513193435243536229056560382986957840462281071814942150633655318518110209575168606257628780219739210106987025050822801484011307164933351937878242880914389669401310160656258181497813170372225496805983623135287698416927269319172574973886244279362186243153524333712110520937857935261455566033710368521724348453884063002333704662564354487571891427646310987184378526197899888496546954269190442983007815141819818668959360193668421893256039517750582987667955465703043129784443350215279832610854870797501224041287158009403237891003583496373600342457359299678833526451970730572861153099396500104548282042366649038426671217805865771973346997106305746240973904841596218837081432153479952586143031114939615912583575888574776377664325286422586212538263192265518740762378432018702079016813113065862369010030147687812884063870929906870646008377634846749546822888968618658832685203153857720434703775259796805623305622123676020491023700835072544403476820781906104043658398366737922243314728652034607327849942458537397854552419384628719813609735957504452890543716533296718214885366588551255966945321224185000763740078706758475368754651590148234522285011398794799602462682279194555639854381414986121370811918700144344685717561501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iuj.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iuj.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92725332b04ad2500d9934f18d6eda886cdc1f1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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