How to check the validity/revoked of the client certificate
Even if a certificate has been imported, it may not be available.
- Expired certificates
The validity period of the currently issued certificate is 25 months. - Certificates that has been revoked
Even if the certificate is still valid, it cannot be used if it has been revoked.
Please check if the certificate has been revoked in the following way. - Certificates issued before December 24, 2020
For more information, please see this news. - Certificates issued for disabled account
Certificates issued by old accounts (for doctoral students, accounts at the time of the master course) will not be available.
[References]
The method of checking the certificate may vary depending on the OS and browser version.
Please refer to "Checking the Certificate (PKCS#12 file)" at the bottom of each page of UPKI manual.
User's Manuals for Installation in Different Web Browsers
Windows 10 (Microsoft Edge, google Chrome)
Check the serial number of the digital certificate you are using
① Open the Internet Options. (You can easily find it by typing "Internet" in the search field at the bottom left.)
② In the "Contents" tab, click "Certificates".
③ Double-click the "... @jaist.ac.jp" certificate in the "Personal" tab.
④ In the "Details" tab, click "Serial Number".
⑤ Remember the serial number (hexadecimal number) that appears in the bottom frame.
Convert serial numbers to decimal numbers
he serial number you checked in STEP 1 is a hexadecimal number (one digit is 0,1,...,9,A,...,E,F). In the J-UPKI system of STEP 3, the serial number is written in decimal (one digit is 0,...,9), so it is necessary to match the bace number. Please use a decimal number conversion site/tool to convert.
*Some sites/tools may not convert well if the number of digits is large. Please use a reliable tool or check various sites/tools.
Example of using a Windows calculator
- Launch the "Calculator" application.
- Click on the "≡ (three horizontal lines)" in the upper left corner, and select "Programmer
- Click "HEX" (hexadecimal number).
- Enter the hexadecimal serial number that you checked in the previous step.
(You can use copy and paste.) - The number displayed in the "DEC" field is the serial number in decimal.
Check the serial number issued by J-UPKI
Please access the J-UPKI system.
*Access is possible only from the campus LAN including SSL-VPN connection.
Check for validity
The serial number (in decimal) of a valid certificate will be displayed in the "Certificate Information" tab.
If it is the same as the serial number you checked, the certificate is valid.
If it is not, please check if it is included in the revoked certificate.
Check for revocation
Please check the serial number of revoked digital certificate in the "Revoked Certificates" tab.
*If you have never revoked your digital certificate, the "Revoked Certificates" tab will not be displayed.
mac OS
Check the serial number of the digital certificate you are using
① Open Keychain Access.
② Open the "My Certificates" tab.
③ Find the certificate for [ctrl]+click the certificate for "@jaist.ac.jp" and click "View Information".
④ The serial number (in decimal) will be displayed in the "Detailed Information" section.
Check the serial number issued by J-UPKI
Please access the J-UPKI system.
*Access is possible only from the campus LAN including SSL-VPN connection.
Check for validity
The serial number (in decimal) of a valid certificate will be displayed in the "Certificate Information" tab.
If it is the same as the serial number you checked, the certificate is valid.
If it is not, please check if it is included in the revoked certificate.
Check for revocation
Please check the serial number of revoked digital certificate in the "Revoked Certificates" tab.
*If you have never revoked your digital certificate, the "Revoked Certificates" tab will not be displayed.
Firefox
Check the serial number of the digital certificate you are using
① Start Firefox, click the "≡" (three horizontal lines) in the upper right corner, and then click [Settings].
② Click [Privacy & Security], scroll down to [View Certificates], and then click [Your Certificates].
③ Click the certificate with "......@jaist.ac.jp" at the end of the certificate name, and then click [View].
④ The hexadecimal serial number will be displayed in "Serial Number" in "Other Information".
Convert serial numbers to decimal numbers
he serial number you checked in STEP 1 is a hexadecimal number (one digit is 0,1,...,9,A,...,E,F). In the J-UPKI system of STEP 3, the serial number is written in decimal (one digit is 0,...,9), so it is necessary to match the bace number. Please use a decimal number conversion site/tool to convert.
*Some sites/tools may not convert well if the number of digits is large. Please use a reliable tool or check various sites/tools.
Example of using a Windows calculator
- Launch the "Calculator" application.
- Click on the "≡ (three horizontal lines)" in the upper left corner, and select "Programmer
- Click "HEX" (hexadecimal number).
- Enter the hexadecimal serial number that you checked in the previous step.
(You can use copy and paste.) - The number displayed in the "DEC" field is the serial number in decimal.
Check the serial number issued by J-UPKI
Please access the J-UPKI system.
*Access is possible only from the campus LAN including SSL-VPN connection.
Check for validity
The serial number (in decimal) of a valid certificate will be displayed in the "Certificate Information" tab.
If it is the same as the serial number you checked, the certificate is valid.
If it is not, please check if it is included in the revoked certificate.
Check for revocation
Please check the serial number of revoked digital certificate in the "Revoked Certificates" tab.
*If you have never revoked your digital certificate, the "Revoked Certificates" tab will not be displayed.
Android
The serial number of the digital certificate cannot be checked on Android devices, so it is impossible to determine whether it is valid or revoked.
If you are unable to use your digital certificate, please import one that you have confirmed is valid on another device.
How to check that the digital certificate has been imported
[Security] -> [Advanced] -> [Encryption and Authentication Information] -> [User Credentials]
iOS
Check the serial number of the digital certificate you are using
1) Open [Settings]->[General]->[Profile].
2) Tap the profile with "@jaist.ac.jp" at the end of the name.
3) Tap [Details], and then tap the certificate.
4) The serial number (decimal number) will be displayed in the [Serial Number] field.
Check the serial number issued by J-UPKI
Please access the J-UPKI system.
*Access is possible only from the campus LAN including SSL-VPN connection.
Check for validity
The serial number (in decimal) of a valid certificate will be displayed in the "Certificate Information" tab.
If it is the same as the serial number you checked, the certificate is valid.
If it is not, please check if it is included in the revoked certificate.
Check for revocation
Please check the serial number of revoked digital certificate in the "Revoked Certificates" tab.
*If you have never revoked your digital certificate, the "Revoked Certificates" tab will not be displayed.