OV SSL/TLS Certificate for www.tokyomirai.ac.jp Issued to Tokyo Future University

Certificate is witin its validity period

Issued by DigiCert Inc (GeoTrust TLS RSA CA G1)

About the www.tokyomirai.ac.jp OV SSL/TLS Certificate

This certificate with serial number 06:cf:4a:04:27:91:2b:c2:bf:cb:64:dc:fa:0c:9d:75 for www.tokyomirai.ac.jp was issued on by DigiCert Inc.

With 21 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for www.tokyomirai.ac.jp provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert Inc

Organization: DigiCert Inc
Organizational unit: www.digicert.com
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:cf:4a:04:27:91:2b:c2:bf:cb:64:dc:fa:0c:9d:75
Serial Number (int): 9051674651894941118321320959364865397
Serial Number Length: 123 bits, 16 octets

Subject Key Identifier: 4f:a3:fe:40:2e:25:53:bc:66:46:b8:01:c2:fc:d8:63:83:ab:04:d8
Authority Key Identifier: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (SHA-1): 15:07:32:79:5f:e3:1e:e6:53:cc:1f:94:24:5d:17:f9:70:d4:66:e1
Fingerprint (SHA-256): 5b:61:ac:16:50:9a:09:a9:55:cd:4b:e9:8b:47:72:35:97:d0:ea:4c:73:6c:d8:b5:3c:dd:00:0b:11:68:92:2c

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation Information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate www.tokyomirai.ac.jp
21
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.tokyomirai.ac.jp

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

www.tokyomirai.ac.jp
tokyomirai.ac.jp
www.freeschool.tokyomirai.ac.jp
corres.tokyomirai.ac.jp
www.sanko-group.info
miraien.tokyomirai.ac.jp
jhs.sanko.ac.jp
humans.tokyomirai.ac.jp
www01.tokyomirai.net
www02.tokyomirai.net
www.odawara.ac.jp
cols.odawara.ac.jp
rishu-web.odawara.ac.jp
tsushin.odawara.ac.jp
www.sanko.ac.jp
helpdesk.sanko.ac.jp
sankoshinjukai.sanko.ac.jp
form.sanko.ac.jp
foreign.sanko.ac.jp
cdsc.sanko.ac.jp
nihongo.sanko.ac.jp

X.509 Certificate

The complete raw X.509 certificate details for www.tokyomirai.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j4czftEpSCXkWtcMRTk
3BzBhfzKRDTViH3DlBUgEBPSG9WVywFf1V4vA17SD3UQLw7hZDaV3DSCMmB6TQt8
NWYOl3cVfo4qYmQZSq+mHYrzMX2HpEr+TH0M80P8+TMuLl0eWl/CZOKkxwXhR8XA
rFHH/FyOnjsPn2L6o6OhPlM7ADeNx00yBNx+Wt4hRyvUAi6nF2Ij3vlIRzppmC9V
VTJelpB4unQ8sf6Xk5On8Pm/nLWwPtJJ+MeTr9V4LLBo7HCdrdxttSSBCXDImMHJ
54JLydnuhFJ5wNtCjjAfbhGF5Uj3R8anaLUpkG8LcNuNZkvirUugET5piQYTQqTZ
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9051674651894941118321320959364865397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-07-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Adachi-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo Future University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tokyomirai.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26540672867064077843330306916589753723332743461186988098581408741730151689165583512944204715389665326807072501065302902855916584454699126240375541522695394129696541757816576347888967245996377970340393973653684348936728586400299813289579860075226974230191488685671953695062277812029759906599243292944367341115526269602692590239233451957781792062966051001147219423778733834586163459556224798961992839703389247603170400629710090713953647895361748442279481924613419910832344108867766674997207669980785109158004097047273317425278207016012938932906123668631743901175977637894574070395543895522826362063542292324331890727277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fa3fe402e2553bc6646b801c2fcd86383ab04d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (468 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freeschool.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corres.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanko-group.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miraien.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhs.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humans.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01.tokyomirai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02.tokyomirai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odawara.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cols.odawara.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rishu-web.odawara.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsushin.odawara.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sankoshinjukai.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'form.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreign.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdsc.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nihongo.sanko.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a7f2282b3de82e0f5b9a035e849a42b2df52b3c40056d7f326b16b5993334862cf981389385f5fef57af26eff15095e36d1e27233f8c231470e1bf837ec6756368af46584b38b4d054e0493d394102202c30181375ea682424a0ce067a7fc78334b30055af9d5e9c4856929ba00f677a7f1ee76a3341ca489d1604235bee801147f5000f9417b14e4a37734203d4e4ac9810284ddd540fb3ec714a3780999c5c8383ea75684be6d2f80148d36b593be565a77719578f25c43bf2e77d6bb91886e9e0cad2e4fbd95e284b74a84e6c1bbe2038e18fc06232ac07fd9ca2287bd5b2177b23e0659652b1b0555c627d81eb0f3c5e832a233c62ce812afec40630b6fe