netacademy.okinawa-u.ac.jp

- Okinawa University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 55:a6:ca:40:72:1a:ee:d5:bb:e6:17:61:2b:ed:81:fc was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Okinawa University

Organization: Okinawa University
Organization unit: Multimedia Education and Research Center
State / Province: Okinawa
Locality: Naha-shi
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 55:a6:ca:40:72:1a:ee:d5:bb:e6:17:61:2b:ed:81:fc
Serial Number (int): 113850403072890820190365169750767403516
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6a:40:e0:48:4f:51:d4:d9:d1:6a:ae:1c:41:4a:6a:57:0e:a6:45:20
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 92:b4:2c:53:07:fa:00:d9:ed:bc:1d:b6:ba:36:f4:96:52:5b:c8:17
Fingerprint (sha256): ff:db:ed:5f:2a:67:47:81:c5:5f:da:c8:be:a2:15:86:f9:1b:8b:20:12:c0:29:9d:8f:18:95:52:39:bb:de:d7


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate netacademy.okinawa-u.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for netacademy.okinawa-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

netacademy.okinawa-u.ac.jp

Other certificates including the domain name okinawa-u.ac.jp

(limited to 100 certificates)
www.okinawa-u.ac.jp
ourea.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
nanext.okinawa-u.ac.jp
prismcentral.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
redmine.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
www.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
www.okinawa-u.ac.jp
aip.okinawa-u.ac.jp
*.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
nanext.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
classview.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
moodle.okinawa-u.ac.jp
aion.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
www.okinawa-u.ac.jp
aip.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
nps1.cr.okinawa-u.ac.jp
www.okinawa-u.ac.jp
moodle19.okinawa-u.ac.jp
sns.okinawa-u.ac.jp
cb.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
aip.okinawa-u.ac.jp
classview.okinawa-u.ac.jp
classview.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
aip2.okinawa-u.ac.jp
demeter2.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
www.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp
opac.okinawa-u.ac.jp
netacademy.okinawa-u.ac.jp

Certificate

The complete raw certificate details for netacademy.okinawa-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EZIEqAD1PwYhnzJKCBw
dXr+PR5pzWx8SqZQwJ3lH55rKcaTT7RHDUOOEqtqefsW1UnT1lg50K6rKbx1KD3N
CNXkw8Txa0LElOY/1r/9i29n0081IzEbezeBOX+ptu2R5Q5yJ2iVrg8UzCS2E3rj
/9Q5WVwWuRMH8hQ/J/U2Xx6sD3lOMCTmAFeqEWXlMRKXU2T8lAiD4U6s3BusvBLj
aHZDnF6ZmtFaIBn1inKsLAbPbHsMsEQFqmJtMAcb1+UGMG5eDRKEqeZVQ0uO7fH/
2tj7PHVBIvAA0Xx0CJ6TvPUoBiYxSqNVywuGI/4uauUyUer0q95yKma2KyQkQNyV
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 113850403072890820190365169750767403516
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 09:22:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-18 09:22:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Okinawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Naha-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Okinawa University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multimedia Education and Research Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'netacademy.okinawa-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26292224549140571310220847385069757167029491492777657247741532904843843693501505902596060499596922836539452966366161911271768583876881673994294918996328926927306711506709548527855524203901592673160858016567849774475324278869092344459830063554810819027034987309965264540844086864820653376558125075596870180063029274992249000556384153884217999591802083995411003699479808500282824875821665070186668764589819323846793237227264101966703160552857859322164743394215281607803309158340857364710397183902698014025215318282754494745385569015202820214902763379249407165800039054696501194862330243097021010334341915007556196799861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netacademy.okinawa-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a40e0484f51d4d9d16aae1c414a6a570ea64520
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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