kanen-soudan.ncgm.go.jp

- National Center for Global Health and Medicine -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 28:8a:a2:a0:c9:02:44:fe was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

National Center for Global Health and Medicine

Organization: National Center for Global Health and Medicine
Organization unit: kanen info
Locality: Academe
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 28:8a:a2:a0:c9:02:44:fe
Serial Number (int): 2921326119754024190
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 3a:35:29:d0:06:20:e6:e8:84:62:39:98:cc:cc:fc:a3:ed:c3:99:01
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): ea:e5:4f:5e:94:4f:6f:ae:30:40:dd:fa:13:99:fe:09:29:66:8f:41
Fingerprint (sha256): bc:2b:1a:07:22:eb:e7:9b:a2:a8:8c:c9:4a:e0:33:0f:8f:38:5d:dd:41:0b:32:5a:2e:96:21:59:d9:b5:59:76


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate kanen-soudan.ncgm.go.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kanen-soudan.ncgm.go.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kanen-soudan.ncgm.go.jp

Other certificates including the domain name ncgm.go.jp

(limited to 100 certificates)
www.ddi.ncgm.go.jp
cinc.ncgm.go.jp
www.hosp.ncgm.go.jp
*.ncgm.go.jp
j-siphe-m.ncgm.go.jp
webmail.ri.ncgm.go.jp
hrc-gh.ncgm.go.jp
hrc-gh.ncgm.go.jp
www.ncgm.go.jp
j-siphe.ncgm.go.jp
hrc-gh.ncgm.go.jp
mgen.ncgm.go.jp
*.ncgm.go.jp
kan-navi.ncgm.go.jp
www.hosp.ncgm.go.jp
kanen-soudan.ncgm.go.jp
www.ncgm.go.jp
amr-onehealth.ncgm.go.jp
ghaines.net
www.ncgm.go.jp
ariseportal.ncgm.go.jp
kan-navi.ncgm.go.jp
www.ncgm.go.jp
labnote.ncgm.go.jp
j-siphe.ncgm.go.jp
yaosurvey2023.ncgm.go.jp
www.dharmaresearchlab.com
amr-onehealth.ncgm.go.jp
acclearning.ncgm.go.jp
hrc-gh-system.ncgm.go.jp
rebind.ncgm.go.jp
j-siphe.ncgm.go.jp
mgen.ncgm.go.jp
coi.ncgm.go.jp
covid-registry.ncgm.go.jp
www.ddi.ncgm.go.jp
*.ncgm.go.jp
www.ncgm.go.jp
www.hosp.ncgm.go.jp
j-siphe.ncgm.go.jp
www.ddi.ncgm.go.jp
biostat-wiki.ncgm.go.jp
*.ncgm.go.jp
amr-onehealth.ncgm.go.jp
amrlearning.ncgm.go.jp
amr-onehealth-platform.ncgm.go.jp
www.ddi.ncgm.go.jp
amr-onehealth-platform.ncgm.go.jp
mgend.ncgm.go.jp
www.hosp.ncgm.go.jp
www.hosp.ncgm.go.jp
windsapp.com
web.authorize.ncgm.go.jp
www.hosp.ncgm.go.jp
library-acc.ncgm.go.jp
rebind-ic.ncgm.go.jp
galaxy.ncgm.go.jp
hrc-gh.ncgm.go.jp
hrc-gh.ncgm.go.jp
girlsquiz.jp
kanen-soudan.ncgm.go.jp
cinc.ncgm.go.jp
crese-nt.ncgm.go.jp
lnob.ncgm.go.jp
mgen.ncgm.go.jp
amrlearning.ncgm.go.jp
www.hosp.ncgm.go.jp
amr-onehealth-platform-d.ncgm.go.jp
mgend.ncgm.go.jp
www.hosp.ncgm.go.jp
asknamer.com
lightstripper.app
amr-onehealth.ncgm.go.jp
galaxy.ncgm.go.jp
*.ncgm.go.jp
amr-onehealth.ncgm.go.jp
hrc-gh-system.ncgm.go.jp
www.ddi.ncgm.go.jp
amrlearning.ncgm.go.jp
rebind-verify.ncgm.go.jp
www.iradio.world
rebind.ncgm.go.jp
*.ncgm.go.jp
mgend.ncgm.go.jp

Certificate

The complete raw certificate details for kanen-soudan.ncgm.go.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOo7Dmh4Ljzv4+rNcNCs
6vdaCmYcrM3qO7GjeK6MuMQfbvjffnElcahTiTu3a06OkOXohICccnU2wR/UgOgr
KkSI4MzwFeER0rP8Fq/TFYfpJCfPPqQZfhYtSJw5l+q/n34C1FSJhaCsWZDClpy1
VYdLjRq9AEUC4m87Sp7WcAdVXJ1QeWltnttzdF9B50LHTTXlmTnwpeZ0+FzwJEP2
GNIhSbjABUHmEsqoMsVigMf4PYdeHNxZQepCUUnkElvJMz+T6MUb/Hh75n9r/8fj
c4QAg1WrnPKgaMSPdeumAp5zjXkt5mFGgEyT6ZSjjuqxOqp8dDXAzPJLiomLHMNz
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2921326119754024190
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-19 08:37:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-20 08:37:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Academe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Center for Global Health and Medicine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kanen info'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kanen-soudan.ncgm.go.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24353258010904683440765023167189972787871346950265682201953986405204670777944150436410268690115996673308376822976465390235840694553718673528013641872954605976480335278933802182521808101012822170052534491099782665582399675432760962234122565991530140804023963565149419146408246417414352906986847042303644402085024318466626208935334301948309010814586363301077898059377995040094154714003265874056137816360992310839757551379549532463287363256770244232497953058342909759480331575660850164757082377461816017449375446841378156562106208444313086059051111613893294323495853543247473436270044145424020881934980240310321774031683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanen-soudan.ncgm.go.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a3529d00620e6e884623998ccccfca3edc39901
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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