amr-onehealth-platform-d.ncgm.go.jp

- National Center for Global Health and Medicine -

Issued by NII Open Domain CA - G7 RSA

About this certificate

This digital certificate with serial number 2d:49:11:b1:30:5a:ee:a2:6d:11:56:2b:1c:34:64:9b was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

National Center for Global Health and Medicine

Organization: National Center for Global Health and Medicine
State / Province: Tokyo
Locality: Shinjuku-ku
Country: JP

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:49:11:b1:30:5a:ee:a2:6d:11:56:2b:1c:34:64:9b
Serial Number (int): 60194656320307494515383505514115916955
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 71:c3:1b:27:10:bf:e2:e8:95:a5:b8:a5:2e:97:b9:4f:d6:a5:aa:05
AuthorityKeyId: b0:2e:e5:51:ed:fc:4a:cf:a3:87:f1:13:90:76:2d:9d:8e:94:a1:e3

Fingerprint (sha1): bd:ab:f9:2e:3f:a2:4f:1a:56:52:24:6b:d1:6c:a2:f3:53:52:32:94
Fingerprint (sha256): db:3a:90:df:e5:4b:66:db:dd:80:2d:a3:0f:09:37:88:f6:00:af:3a:18:34:cd:7f:0c:a4:de:4d:2c:26:d1:4d

Issuing Certificate URL: http://repo1.secomtrust.net/sppca/nii/odca4/nii-odca4g7rsa.cer

Revocation information

OCSP Server: http://niig7rsa.ocsp.secom-cert.jp
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca4/fullcrlg7rsa.crl

Check the revocation status for certificate amr-onehealth-platform-d.ncgm.go.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for amr-onehealth-platform-d.ncgm.go.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amr-onehealth-platform-d.ncgm.go.jp

Other certificates including the domain name ncgm.go.jp

(limited to 100 certificates)
www.ddi.ncgm.go.jp
cinc.ncgm.go.jp
www.hosp.ncgm.go.jp
*.ncgm.go.jp
j-siphe-m.ncgm.go.jp
webmail.ri.ncgm.go.jp
hrc-gh.ncgm.go.jp
hrc-gh.ncgm.go.jp
www.ncgm.go.jp
j-siphe.ncgm.go.jp
hrc-gh.ncgm.go.jp
mgen.ncgm.go.jp
*.ncgm.go.jp
kan-navi.ncgm.go.jp
www.hosp.ncgm.go.jp
kanen-soudan.ncgm.go.jp
www.ncgm.go.jp
amr-onehealth.ncgm.go.jp
ghaines.net
www.ncgm.go.jp
ariseportal.ncgm.go.jp
kan-navi.ncgm.go.jp
www.ncgm.go.jp
labnote.ncgm.go.jp
j-siphe.ncgm.go.jp
yaosurvey2023.ncgm.go.jp
www.dharmaresearchlab.com
amr-onehealth.ncgm.go.jp
acclearning.ncgm.go.jp
hrc-gh-system.ncgm.go.jp
rebind.ncgm.go.jp
j-siphe.ncgm.go.jp
mgen.ncgm.go.jp
coi.ncgm.go.jp
covid-registry.ncgm.go.jp
www.ddi.ncgm.go.jp
*.ncgm.go.jp
www.ncgm.go.jp
www.hosp.ncgm.go.jp
j-siphe.ncgm.go.jp
www.ddi.ncgm.go.jp
biostat-wiki.ncgm.go.jp
*.ncgm.go.jp
amr-onehealth.ncgm.go.jp
amrlearning.ncgm.go.jp
amr-onehealth-platform.ncgm.go.jp
www.ddi.ncgm.go.jp
amr-onehealth-platform.ncgm.go.jp
mgend.ncgm.go.jp
www.hosp.ncgm.go.jp
www.hosp.ncgm.go.jp
windsapp.com
web.authorize.ncgm.go.jp
www.hosp.ncgm.go.jp
library-acc.ncgm.go.jp
rebind-ic.ncgm.go.jp
galaxy.ncgm.go.jp
hrc-gh.ncgm.go.jp
hrc-gh.ncgm.go.jp
girlsquiz.jp
kanen-soudan.ncgm.go.jp
cinc.ncgm.go.jp
crese-nt.ncgm.go.jp
lnob.ncgm.go.jp
mgen.ncgm.go.jp
amrlearning.ncgm.go.jp
www.hosp.ncgm.go.jp
amr-onehealth-platform-d.ncgm.go.jp
mgend.ncgm.go.jp
www.hosp.ncgm.go.jp
asknamer.com
lightstripper.app
amr-onehealth.ncgm.go.jp
galaxy.ncgm.go.jp
*.ncgm.go.jp
amr-onehealth.ncgm.go.jp
hrc-gh-system.ncgm.go.jp
www.ddi.ncgm.go.jp
amrlearning.ncgm.go.jp
rebind-verify.ncgm.go.jp
www.iradio.world
rebind.ncgm.go.jp
*.ncgm.go.jp
mgend.ncgm.go.jp

Certificate

The complete raw certificate details for amr-onehealth-platform-d.ncgm.go.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscikbYSjij9zFS/kRZDS
j1A58ykZu5IPy149KU7rqh6tGaJZJtr2qbu94YJzZZ1JBzoF7iQ/RtAlMU6eY2wQ
Om/AtHq5FjTodB85hURMVMeFFKR3GwSq+Nlzz96D74XqMBzRPqeQfk1/ByfX2div
KwQcEXnRrdqdW4o3UpQzoRYqJ86r27BZIfouN55L9C/Xu3RquOsbt8sw2UZUNWFp
GEgAaJ0Mfgh5B2VcxKjRB9aT0+rcgIzIfkoEYNnu4PKWJP4Vm24ZsCNBsvp3vnji
XALpVnRdFdgE/SaxR862b42EqnMidaHc9ux51DiL0jFKN/DmIumtbsVq7NF5L06s
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 60194656320307494515383505514115916955
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G7 RSA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-17 00:34:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 00:34:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shinjuku-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Center for Global Health and Medicine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'amr-onehealth-platform-d.ncgm.go.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22443120382765487474515770384316731068707909491192786347347776264104042491319305413836074752808564175596362952928209954395671344850886451193042834505500834885641731047380168050139607115191348921721419834479869712901719400742453401095171598940560023590278364215391240111239551050605741124377781606611740052732078777689455336244310987144770175362930989690335119653720237698691977067870859595255687703918774402110973628116409129548614455548645192407522428930746241902231696105531788331206930636540817636571004262064898356095981779801503786644585765817006972949463674301364146673281349451837584831427929259101410967858429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b02ee551edfc4acfa387f11390762d9d8e94a1e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/nii-odca4g7rsa.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig7rsa.ocsp.secom-cert.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amr-onehealth-platform-d.ncgm.go.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.214.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/fullcrlg7rsa.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71c31b2710bfe2e895a5b8a52e97b94fd6a5aa05
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b663e9c9ab76699c777fc10abb81c5d9b5b86fe74a22ee4d62a2612833304e5724ed7566432f97b4c151f55ab09fbd05670706afe860de2e59141f6ed5d5e661b7d2eeb933bd06fad3d721e288384793e0fc35b1278117c37448b622cbf786024dc2b55485090d78d92ba67543291952b23f967cf3130e875711d5c784a0ae838e8ca08dbf342056a29758ff4ab6f44b9411ac5cb38c4c02b7b869ddcb870105adf3dc45a01ca22d26af15da945766bcc0a9b33839649ef006967fb505fb39792c269b6041c322981b750e7eebc881f56f935b13d4d079785cf01e8dd36d96d209ff0bd89002eefd568cb5f44f9c2a75f2d73404cc87cb7905e6fd61b8d3ad64