www.okinawa-u.ac.jp

- Okinawa University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 51:71:97:72:85:c8:87:cc was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Okinawa University

Organization: Okinawa University
Organization unit: Multimedia Education and Research Center
State / Province: Okinawa
Locality: Naha-shi
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 51:71:97:72:85:c8:87:cc
Serial Number (int): 5868638307567044556
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 3a:9f:64:a4:a2:00:f2:00:ab:98:50:38:0d:22:5e:97:78:f5:65:6d
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): ed:f4:d3:52:48:ba:d5:bf:99:9f:61:05:ad:1f:ee:12:e3:44:1c:f9
Fingerprint (sha256): f9:2a:94:23:70:54:7e:11:30:7b:ce:97:15:36:3e:7e:7d:db:df:a3:d9:75:51:22:1b:12:9c:fa:4f:a8:97:c0


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate www.okinawa-u.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.okinawa-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.okinawa-u.ac.jp

Other certificates including the domain name okinawa-u.ac.jp

(limited to 100 certificates)
www.okinawa-u.ac.jp
ourea.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
nanext.okinawa-u.ac.jp
prismcentral.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
redmine.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
www.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
www.okinawa-u.ac.jp
aip.okinawa-u.ac.jp
*.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
nanext.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
classview.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
aion.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
www.okinawa-u.ac.jp
aip.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
nps1.cr.okinawa-u.ac.jp
www.okinawa-u.ac.jp
moodle19.okinawa-u.ac.jp
sns.okinawa-u.ac.jp
cb.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
aip.okinawa-u.ac.jp
classview.okinawa-u.ac.jp
classview.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
demeter2.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
www.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp

Certificate

The complete raw certificate details for www.okinawa-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDrHli3sLrHQxz5P77kl
kvCAVsa1NBBvntCATtaXrV8oJo5wcMUdHzXsmtBtvhWfHI5rtE1B572qDBcr4HIz
V1mqHmZ2ulCd1E3Eg+1ZiJWg1P2bQ4oSOtdd2ZlrgJQUtJh/NE5hhgycc46DUfx/
qf0u1gi+iP/QlJ2pUtG6B6PQdyoNHALQUx7sejtQOE0Iwu99fuRc8y/THj5CvNEX
0ny/UNOYSb2PaM52WiB3mqe5gEaf1G8RLkUbSXk/8T4IxX6KvWwCcHrW+BAbuvqO
WxpSPSzT/J/jUOioIJjKpY/IQ7xjiXjbkQGtdp0vmIaNo/rAESzkZBiL6XDqWDaR
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5868638307567044556
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-12 05:37:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-13 05:37:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Okinawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Naha-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Okinawa University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multimedia Education and Research Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.okinawa-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25276646311678509022361839251878791348204752185013328059961274725079514308364009458943896431477146852006775396243518457791006239722190428466222683839918285377716186247100139278636437758992687002477579294082205081508957278731052646101231233753428391012194274530551470123723044146405745673745569102046028913508417189083145717365311891689676110582392935457379096521606377143579534520905649530152293098815993527289329235012956347703305832259944365883225283197819294530186143568358115039706342419245990477392142772490701492080169179363956914292833320844068421544142277521313032671333724149046828881280284823305245391491541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okinawa-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a9f64a4a200f200ab9850380d225e9778f5656d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001670675a2ba0000040300473045022100b849ec3e93b3ca3a7821d2bae96fe4704d6bf0781e03c129fb931a00d80b5a8702201ddc8bbd8f40797d7822738e134b398826e1721c5c383cbc8485640f0804afbc007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001670675aab80000040300463044022025ebdd1544e4a23bd74ecd64ab60a2724c59df864c0d1363baaef71894f2928d0220074c4c29c0f87916627868109d0c58f914a152feb209da13eb5f4863d17fa0ca0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001670675af0a00000403004730450221008790bb76ae770fda8be7913ae423ff6cf6e7a9ecb49b4113e005242a595a229c02205953169758c0f7cb3c5e08e24a0ba095391bfc718951bfa48c6b593622cc9e54
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009252b163c760f97045579ceac00cec29429d4f9e29506047dd26e9871d3590eb4a3bdbd9825a8fed857df865e527c6ee28212c5ee2389d81e9e54a62ecb9e0d95c5a4e7ff6facad56ab8b2cc2252c18f68112717600068598ab7db5d0772d7692afcc82278a960998ad3fe85bb844f0b627b90518006c15f8160b376ce18b87503b0a2dfe92e4ed01d6d1d1e62f5585ea83b54f6694945af0ddf88a948d862a348306fec7555b69cb1d7bace75f2a5003400f265d0e696a1380a40c73bdaf6523952488f17bb0b72c1ca1a6cfee5783cb1bb5c160e3fd95efc8310a64b35b251433719f0e64cd15fe0b19a7f66c9b42fc21ec8e1e0981952191b15ff6d75de90