www.atsugi-ankan-k.aecl.ntt.co.jp

- Nippon Telegraph and Telephone Corporation -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 79:8f:6f:44:07:36:ff:15:11:82:69:08:6f:26:52:22 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Nippon Telegraph and Telephone Corporation

Organization: Nippon Telegraph and Telephone Corporation
Organization unit: Science and Core Technology Laboratory Group
State / Province: TOKYO
Locality: CHIYODA-KU
Country: JP

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 79:8f:6f:44:07:36:ff:15:11:82:69:08:6f:26:52:22
Serial Number (int): 161581342677959238932737578869381812770
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): fc:88:6e:60:d6:bf:9b:33:61:68:e1:64:a9:16:3f:c5:f3:86:b3:27
Fingerprint (sha256): 00:42:43:6b:da:7a:86:aa:bc:0f:a3:cb:6c:9e:98:27:d7:b8:af:ef:46:b6:c0:42:00:52:39:e6:9f:29:04:fc

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.atsugi-ankan-k.aecl.ntt.co.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.atsugi-ankan-k.aecl.ntt.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.atsugi-ankan-k.aecl.ntt.co.jp

Other certificates including the domain name ntt.co.jp

(limited to 100 certificates)
www.atsugi-ankan-k.aecl.ntt.co.jp
securemap.west.ntt.co.jp
labevent.ecl.ntt.co.jp
dishsfmermsnf.is.ntt-finance.co.jp
rms-nttud.ddreams.jp
labevent.ecl.ntt.co.jp
www.oss.ecl.ntt.co.jp
*.shareholder.ntt.co.jp
mail.is.nttdocomo.co.jp
dishsfme.is.nttdocomo.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
sip.hco.ntt.co.jp
www.sirocco.hil.ntt.co.jp
ipweb01.ipass.ntt.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
dishsfmermsnd.is.nttdocomo.co.jp
www.ntt.co.jp
rms-nttrec.ddreams.jp
info.isl.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
www.sic.ecl.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
*.ecl.hco.ntt.co.jp
info.isl.ntt.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
*.ocrc.west.ntt.co.jp
ansl.ntt.co.jp
www.ntt.co.jp
sp-tsm.ecl.ntt.co.jp
info.isl.ntt.co.jp
mail.is.nttdocomo.co.jp
www.fdv.gis-crisis.sys.east.ntt.co.jp
rms-nttba-g.ddreams.jp
fletscsc.bch.east.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
www.ntt.co.jp
illusion-forum.ilab.ntt.co.jp
ipweb01.ipass.ntt.co.jp
rms-nttba-g.ddreams.jp
mobile.ecl.ntt.co.jp
dishsfmermsnh.hco.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
ipweb01.ipass.ntt.co.jp
info.isl.ntt.co.jp
securemap.west.ntt.co.jp
ipweb01.ipass.ntt.co.jp
journal.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
mobile.ecl.ntt.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
ipweb01.ipass.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
sip.hco.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
info.isl.ntt.co.jp
www.brl.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
*.brl.ntt.co.jp
sports-brain.ilab.ntt.co.jp
*.ecl.ntt.co.jp
oemfinder.ilab.ntt.co.jp
denshiki.securemap.west.ntt.co.jp
dishsfmermsnh.hco.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
sip.hco.ntt.co.jp
www.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
www.ntt.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
ipweb01.ipass.ntt.co.jp
www.ntt.co.jp
rms-ntt-f-dreams.ddreams.jp
labevent.ecl.ntt.co.jp
*.brl.ntt.co.jp
nlp.hil.ntt.co.jp
www.ntt.co.jp
www.mvisit.ecl.ntt.co.jp
www.ntt.co.jp
rms-ntt-f-dreams.ddreams.jp
www.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
www.mvisit.ecl.ntt.co.jp
labevent.ecl.ntt.co.jp
mailwise.tokyo.east.ntt.co.jp
illusion-forum.ilab.ntt.co.jp
www.ntt.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
mail-m.is.nttdocomo.co.jp
senyo.securemap.west.ntt.co.jp
mailwise.tokyo.east.ntt.co.jp
www.ntt.co.jp
sip.hco.ntt.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
www.ntt.co.jp
info.isl.ntt.co.jp
bch-wise.bch.east.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
www.brl.ntt.co.jp
www.ntt.co.jp

Certificate

The complete raw certificate details for www.atsugi-ankan-k.aecl.ntt.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOtvniY3mOCmez3cVzmG
86TFv9axaY+Xb5DJhilVrDFVgXMTbMBpYeDkr+wmE9NWE7MRhxrrYxOAzeR5uyGg
J5eH+0Wa2EkOl3mwbiPL6fvsTmlX71U81ge/ioe6t8erkl5R+lnZs5bETNErSR//
5HUBzZXmqKJ41V2UTQfWtDhUnDWLLhTBngwBb28dz6KHCgU8eaMxvBIiaYkmgF/R
wXjKvI81ih/3Y+rLedTSiQiHZ07VGi+IWLUZ9peZ+xEz+c7fb5O8ML3EA2iUl4AV
5yhN89cnTxsk331i/ImiHMgm2nDyU2Lr1NGjLJVtw5nF/0Ly07xDx2PYi4GJDlAD
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 161581342677959238932737578869381812770
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TOKYO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CHIYODA-KU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nippon Telegraph and Telephone Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Science and Core Technology Laboratory Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.atsugi-ankan-k.aecl.ntt.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23343945935790442619566950087662388439307771267641086086435532566720295254373176557594225998927675931041880950519391640183349529484628320529914031816804375215231417821051927887510244960222342286549590324513530087202410520346830336434227383379168292238323971143859984327383570609800566864978820149457383304088485824328269721968672750067440864733851463671435285630218028640877441337869548343512779427863405244423505315474056554356017085432669539312659191490786562710585578134325274304547378504569535984075587737389761171648114473354306531720342235762239875831533436193089399192365337408722150562949737357793513285092273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atsugi-ankan-k.aecl.ntt.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015dc9cc6c3f0000040300483046022100a504e75a63876f7e76ed626ee7fb64b48d6cd8c601ecc1bd2f13ecedba2e92ac02210081c27dbc15e2bba4b749887fb79970461b199bb8a8f1e76931c2dc90b1d51dcd007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015dc9cc6c7e0000040300483046022100dd1ade29fb07b59a85020a145f8e240b17fe30def6c157052281c8a23d79cacb022100e59d41eb164166f4f92ffdd3f962d6ed12c105dc485f6d417cb4ef852e52f42b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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