amrlearning.ncgm.go.jp

- National Center for Global Health and Medicine -

Issued by NII Open Domain CA - G7 RSA

About this certificate

This digital certificate with serial number 6b:1f:d0:2f:b3:32:8b:40:5b:05:00:f6:96:59:80:98 was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

National Center for Global Health and Medicine

Organization: National Center for Global Health and Medicine
State / Province: Tokyo
Locality: Shinjuku-ku
Country: JP

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:1f:d0:2f:b3:32:8b:40:5b:05:00:f6:96:59:80:98
Serial Number (int): 142392579271980696420156736611022373016
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 65:ae:7e:2a:f9:4a:19:a1:ee:5e:ce:90:9d:d6:ab:37:c1:b0:76:f2
AuthorityKeyId: b0:2e:e5:51:ed:fc:4a:cf:a3:87:f1:13:90:76:2d:9d:8e:94:a1:e3

Fingerprint (sha1): db:02:de:46:ee:d3:76:82:c0:92:f9:a9:d3:d5:0d:ec:44:9a:5b:c3
Fingerprint (sha256): f3:99:62:52:f1:d6:b6:ed:e8:7e:9a:2f:3f:9e:31:d6:fa:82:08:20:2d:4b:44:be:c0:fb:a7:d6:da:e1:0a:92

Issuing Certificate URL: http://repo1.secomtrust.net/sppca/nii/odca4/nii-odca4g7rsa.cer

Revocation information

OCSP Server: http://niig7rsa.ocsp.secom-cert.jp
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca4/fullcrlg7rsa.crl

Check the revocation status for certificate amrlearning.ncgm.go.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for amrlearning.ncgm.go.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amrlearning.ncgm.go.jp

Other certificates including the domain name ncgm.go.jp

(limited to 100 certificates)
www.ddi.ncgm.go.jp
cinc.ncgm.go.jp
www.hosp.ncgm.go.jp
*.ncgm.go.jp
j-siphe-m.ncgm.go.jp
webmail.ri.ncgm.go.jp
hrc-gh.ncgm.go.jp
hrc-gh.ncgm.go.jp
www.ncgm.go.jp
j-siphe.ncgm.go.jp
hrc-gh.ncgm.go.jp
mgen.ncgm.go.jp
*.ncgm.go.jp
kan-navi.ncgm.go.jp
www.hosp.ncgm.go.jp
kanen-soudan.ncgm.go.jp
www.ncgm.go.jp
amr-onehealth.ncgm.go.jp
ghaines.net
www.ncgm.go.jp
ariseportal.ncgm.go.jp
kan-navi.ncgm.go.jp
www.ncgm.go.jp
labnote.ncgm.go.jp
j-siphe.ncgm.go.jp
yaosurvey2023.ncgm.go.jp
www.dharmaresearchlab.com
amr-onehealth.ncgm.go.jp
acclearning.ncgm.go.jp
hrc-gh-system.ncgm.go.jp
rebind.ncgm.go.jp
j-siphe.ncgm.go.jp
mgen.ncgm.go.jp
coi.ncgm.go.jp
covid-registry.ncgm.go.jp
www.ddi.ncgm.go.jp
*.ncgm.go.jp
www.ncgm.go.jp
www.hosp.ncgm.go.jp
j-siphe.ncgm.go.jp
www.ddi.ncgm.go.jp
biostat-wiki.ncgm.go.jp
*.ncgm.go.jp
amr-onehealth.ncgm.go.jp
amrlearning.ncgm.go.jp
amr-onehealth-platform.ncgm.go.jp
www.ddi.ncgm.go.jp
amr-onehealth-platform.ncgm.go.jp
mgend.ncgm.go.jp
www.hosp.ncgm.go.jp
www.hosp.ncgm.go.jp
windsapp.com
web.authorize.ncgm.go.jp
www.hosp.ncgm.go.jp
library-acc.ncgm.go.jp
rebind-ic.ncgm.go.jp
galaxy.ncgm.go.jp
hrc-gh.ncgm.go.jp
hrc-gh.ncgm.go.jp
girlsquiz.jp
kanen-soudan.ncgm.go.jp
cinc.ncgm.go.jp
crese-nt.ncgm.go.jp
lnob.ncgm.go.jp
mgen.ncgm.go.jp
amrlearning.ncgm.go.jp
www.hosp.ncgm.go.jp
amr-onehealth-platform-d.ncgm.go.jp
mgend.ncgm.go.jp
www.hosp.ncgm.go.jp
asknamer.com
lightstripper.app
amr-onehealth.ncgm.go.jp
galaxy.ncgm.go.jp
*.ncgm.go.jp
amr-onehealth.ncgm.go.jp
hrc-gh-system.ncgm.go.jp
www.ddi.ncgm.go.jp
amrlearning.ncgm.go.jp
rebind-verify.ncgm.go.jp
www.iradio.world
rebind.ncgm.go.jp
*.ncgm.go.jp
mgend.ncgm.go.jp

Certificate

The complete raw certificate details for amrlearning.ncgm.go.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F0iH0lSAqFGSsFy0yw+
cWBfPYtywBkWzDNcOUbbyw9j9hI3IAbiBY9trwG0+8yJNGtDFgx+x7kuj4bSSZCS
HLbm86oGDWICp9IA2tAP7YwhotyKm1PRLc+V4UWa8E41oKa43EZKMN1ilAMya9dr
pZGyPIddJsiz3xHxm0QnUxwKAbQZa8BhP6ulpRc5N0t54r+66kzGwouN0RKhsgcl
Df2TzmJTARNzerutLvDAl2hcjMG1JSwxKsgYjGzvLGZEEQTfGqHSgitgazPwi5hB
WDGyknmBO3J6fBnbRZFcXyXS3/ZajkqWbxOK9l0vvOzDrykvM4Qd8nK7y5oxCsjz
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 142392579271980696420156736611022373016
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G7 RSA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-13 03:42:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 03:42:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shinjuku-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Center for Global Health and Medicine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'amrlearning.ncgm.go.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28323306049318874805152757684743442924308169730564083836365413283916969568820427566274398539962161269284046884160677552122071241910855258893810504625072291801335319412890536481520894271280509701435134130407922842245482097314380229082313504457692812486050131800517824809543556284116723524925673496930695007189881451831195076420788063941737597657543031703567143753201048373632082943541806907133408254428745022817874698088602412949890986213563465484813393723795197629002575956162224563909327042811890481213828955691226184614991334751322708722995503775240342016613667131341366278769534433512114812592363343057230909469649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b02ee551edfc4acfa387f11390762d9d8e94a1e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/nii-odca4g7rsa.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig7rsa.ocsp.secom-cert.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amrlearning.ncgm.go.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.214.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/fullcrlg7rsa.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65ae7e2af94a19a1ee5ece909dd6ab37c1b076f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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