www.gdm.iis.u-tokyo.ac.jp

- The University of Tokyo -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 07:8c:95:e9:1b:dc:10:1b was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

The University of Tokyo

Organization: The University of Tokyo
Organization unit: Institute of Industrial Science
State / Province: Tokyo
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 07:8c:95:e9:1b:dc:10:1b
Serial Number (int): 543974483432312859
Serial Number lenght: 59 bits, 8 octets

SubjectKeyId: 4b:10:c0:65:0a:e3:da:56:90:84:25:0c:8b:74:ca:1e:cb:e4:73:91
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 03:de:94:84:dc:28:03:ce:0c:b3:97:e9:fe:8d:65:56:7a:77:e3:54
Fingerprint (sha256): 05:7f:da:fb:a8:49:35:23:18:99:20:a3:d0:7f:00:88:43:e6:b1:c5:f1:1a:71:03:e7:06:ab:6c:0d:87:9a:21


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate www.gdm.iis.u-tokyo.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gdm.iis.u-tokyo.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gdm.iis.u-tokyo.ac.jp

Other certificates including the domain name u-tokyo.ac.jp

(limited to 100 certificates)
s07.seminar2017.ecc.u-tokyo.ac.jp
qa.esc.u-tokyo.ac.jp
hagi.is.s.u-tokyo.ac.jp
ms.ecc.u-tokyo.ac.jp
secure.flight.t.u-tokyo.ac.jp
panelsrv.p.u-tokyo.ac.jp
*.eidos.ic.i.u-tokyo.ac.jp
hagi.is.s.u-tokyo.ac.jp
www.cad.t.u-tokyo.ac.jp
www.flight.t.u-tokyo.ac.jp
www.eve.phys.s.u-tokyo.ac.jp
komaba-alert.c.u-tokyo.ac.jp
cge.t.u-tokyo.ac.jp
shibayamalab.issp.u-tokyo.ac.jp
www.aml.t.u-tokyo.ac.jp
ocw.u-tokyo.ac.jp
www.tanaka.ecc.u-tokyo.ac.jp
sendfile.s.u-tokyo.ac.jp
www.ct.u-tokyo.ac.jp
tokyo.tkl.iis.u-tokyo.ac.jp
sso.adm.u-tokyo.ac.jp
graphics.c.u-tokyo.ac.jp
www.ict.mech.t.u-tokyo.ac.jp
www.ict.mech.t.u-tokyo.ac.jp
freut.u-tokyo.ac.jp
as2.c.u-tokyo.ac.jp
www.nagai-2.iis.u-tokyo.ac.jp
cb.genome.rcast.u-tokyo.ac.jp
*.cyber.t.u-tokyo.ac.jp
ovdtest.aori.u-tokyo.ac.jp
www.tanaka.ecc.u-tokyo.ac.jp
ir3s.u-tokyo.ac.jp
yayoi-man.cc.u-tokyo.ac.jp
smtp.ee.t.u-tokyo.ac.jp
gateway.itc.u-tokyo.ac.jp
sugino.issp.u-tokyo.ac.jp
cardiovasc.m.u-tokyo.ac.jp
mail.l.u-tokyo.ac.jp
qi.m.u-tokyo.ac.jp
www.neumis.iis.u-tokyo.ac.jp
www.is.s.u-tokyo.ac.jp
utop-ice.he.u-tokyo.ac.jp
ovd.aori.u-tokyo.ac.jp
www.genome.rcast.u-tokyo.ac.jp
biomech.c.u-tokyo.ac.jp
www.mi.t.u-tokyo.ac.jp
mail.cspp.cc.u-tokyo.ac.jp
tuk.t.u-tokyo.ac.jp
lsen-web.c.u-tokyo.ac.jp
structure.m.u-tokyo.ac.jp
blog.ocw.u-tokyo.ac.jp
k1.k2.t.u-tokyo.ac.jp
nsl.issp.u-tokyo.ac.jp
www.carf.e.u-tokyo.ac.jp
www.one-earth-g.a.u-tokyo.ac.jp
www.keisu.t.u-tokyo.ac.jp
gwdoc.icrr.u-tokyo.ac.jp
monozemi.akg.t.u-tokyo.ac.jp
iiif.dl.itc.u-tokyo.ac.jp
saiyo.adm.u-tokyo.ac.jp
www.genome.rcast.u-tokyo.ac.jp
rcme.oa.u-tokyo.ac.jp
koseki.t.u-tokyo.ac.jp
wwweic.eri.u-tokyo.ac.jp
idaten.c.u-tokyo.ac.jp
apps-mgmt.adm.s.u-tokyo.ac.jp
nsl.issp.u-tokyo.ac.jp
www.hulab.iis.u-tokyo.ac.jp
utcp.c.u-tokyo.ac.jp
mx.eps.s.u-tokyo.ac.jp
isspmail.issp.u-tokyo.ac.jp
www.lib.u-tokyo.ac.jp
www.aori.u-tokyo.ac.jp
www.aviation.u-tokyo.ac.jp
www.os.ecc.u-tokyo.ac.jp
ml.c.u-tokyo.ac.jp
joras.csis.u-tokyo.ac.jp
hagi.is.s.u-tokyo.ac.jp
usis.mtl.t.u-tokyo.ac.jp
oakleaf-fx-5.cc.u-tokyo.ac.jp
proposal.ducr.u-tokyo.ac.jp
www.yamagula.ic.i.u-tokyo.ac.jp
adventure.sys.t.u-tokyo.ac.jp
takeyama.issp.u-tokyo.ac.jp
www.gdm.iis.u-tokyo.ac.jp
dch.iii.u-tokyo.ac.jp
tls.automattic.com
www.gcl.i.u-tokyo.ac.jp
adventure.sys.t.u-tokyo.ac.jp
www.lib.f.u-tokyo.ac.jp
www.dl.itc.u-tokyo.ac.jp
regist.ms.u-tokyo.ac.jp
k1.k2.t.u-tokyo.ac.jp
radphys4.c.u-tokyo.ac.jp
tuk.t.u-tokyo.ac.jp
www.ai.u-tokyo.ac.jp
www.energy.iis.u-tokyo.ac.jp
www.fly.c.u-tokyo.ac.jp
news.muographix.u-tokyo.ac.jp
announce.cc.u-tokyo.ac.jp

Certificate

The complete raw certificate details for www.gdm.iis.u-tokyo.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGcjCCBVqgAwIBAgIIB4yV6RvcEBswDQYJKoZIhvcNAQELBQAwWzELMAkGA1UE
BhMCSlAxKjAoBgNVBAoTIU5hdGlvbmFsIEluc3RpdHV0ZSBvZiBJbmZvcm1hdGlj
czEgMB4GA1UEAxMXTklJIE9wZW4gRG9tYWluIENBIC0gRzUwHhcNMTkwNDE3MDgz
MjU0WhcNMjEwNTE4MDgzMjU0WjCBjTELMAkGA1UEBhMCSlAxDjAMBgNVBAgTBVRv
a3lvMSAwHgYDVQQKExdUaGUgVW5pdmVyc2l0eSBvZiBUb2t5bzEoMCYGA1UECxMf
SW5zdGl0dXRlIG9mIEluZHVzdHJpYWwgU2NpZW5jZTEiMCAGA1UEAxMZd3d3Lmdk
bS5paXMudS10b2t5by5hYy5qcDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOASjaVfFe2nsXZZRmtBt84FTo3eY++VEyO5mD/jAEjZf0Y6Vek0BmHNWFP3
QTyt6oiCtvNBa4alj8Cv9rr/HdWlwa37Nhg3daIXI0sDhHz+zwYI7eYyTF4OuauK
0HlzjUGsbG7KicqtQkShEO79Gw/42CWW+nsgZJjV8QSkuGHS9J74ii955o9NYdzN
yqhTQQhxqwqmInHETLgSPy9gJZctxWO0aeE56BWwf0asvcagZcuXceSHaePIpAMX
a8YzLScJKCh2D1qfNfLCNEiG80xS3u0ZlX28sm+m5zSe4D6O7kdc3ppFZPpKIaVp
GVFtksivLs73aSkYokNiD3nDNGsCAwEAAaOCAwUwggMBMB8GA1UdIwQYMBaAFGc6
OsFrtxymQUY5MITIaQBZEVjBMDwGCCsGAQUFBwEBBDAwLjAsBggrBgEFBQcwAYYg
aHR0cDovL25paWc1Lm9jc3Auc2Vjb210cnVzdC5uZXQwJAYDVR0RBB0wG4IZd3d3
LmdkbS5paXMudS10b2t5by5hYy5qcDBgBgNVHSAEWTBXMEsGDCsGAQQBgfwIAwIB
ATA7MDkGCCsGAQUFBwIBFi1odHRwczovL3JlcG8xLnNlY29tdHJ1c3QubmV0L3Nw
cGNhL25paS9vZGNhMy8wCAYGZ4EMAQICMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjBKBgNVHR8EQzBBMD+gPaA7hjlodHRwOi8vcmVwbzEuc2Vjb210cnVz
dC5uZXQvc3BwY2EvbmlpL29kY2EzL2Z1bGxjcmxnNS5jcmwwHQYDVR0OBBYEFEsQ
wGUK49pWkIQlDIt0yh7L5HORMA4GA1UdDwEB/wQEAwIFoDCCAXwGCisGAQQB1nkC
BAIEggFsBIIBaAFmAHUApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAA
AAFqKnaQVQAABAMARjBEAiBm5ISLupp3FXfEDqa5iTmYWMs32VLNL0AOwQ66FpHR
tgIgWUaX7vBURn4rBLC05BN6E3WBK305WajoSAWW6zi3iegAdQDuS723dc5guuFC
aR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWoqdpcIAAAEAwBGMEQCIDhkuNFKv1Mv
oBEIjrJ1Xaro4IzKFmDRco2p+R0Ryme4AiArpXed3JiXCTADZzeKVBq95dL4VAm+
aHgtiyEblZeYngB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAAB
aip2mv4AAAQDAEcwRQIhAPapZ5eVOon8CK5Ksuo2ahOiRn02FBf/gc1sMg356Off
AiAbDEB9jUnLqzDvY6fDdcI83HHTpJ5vYC/bGiGFoGOJtzANBgkqhkiG9w0BAQsF
AAOCAQEAsFheTTbcz2pY+eTjYVwNFliIFr9RgJF8GedAW0mU1njXlNhu9CbvvBUl
6Erb4SQrC7CinTcG6T/UhnlAHLtqKudlEY1I+KtG0TcdI/l23LnKITK/1zQjf6jg
9n7+1Ou2uimUfpS67kIC/wVeq7NKWXicTjTDUAe6xFfpaKCP6MWnjnDAEA42Laby
dTp6aCnZxaA7QpDstJgr5HyNiBV/zluG3+l3lYCYO7jVv05/Mb8lZP8oAtFQd8w7
5tdQs2zv2knTNbDiDBayAPKWxWGtm3UvbrIvzQgc3QMeJVZ+2tcWWgehyeJtUU6i
3KOjv9zUnYXHU7j3rZpY7/gLz7HKzQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BKNpV8V7aexdllGa0G3
zgVOjd5j75UTI7mYP+MASNl/RjpV6TQGYc1YU/dBPK3qiIK280FrhqWPwK/2uv8d
1aXBrfs2GDd1ohcjSwOEfP7PBgjt5jJMXg65q4rQeXONQaxsbsqJyq1CRKEQ7v0b
D/jYJZb6eyBkmNXxBKS4YdL0nviKL3nmj01h3M3KqFNBCHGrCqYiccRMuBI/L2Al
ly3FY7Rp4TnoFbB/Rqy9xqBly5dx5Idp48ikAxdrxjMtJwkoKHYPWp818sI0SIbz
TFLe7RmVfbyyb6bnNJ7gPo7uR1zemkVk+kohpWkZUW2SyK8uzvdpKRiiQ2IPecM0
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 543974483432312859
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 08:32:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-18 08:32:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Institute of Industrial Science'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gdm.iis.u-tokyo.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28286529287891126380082711992135461308617116955518779555966452156611301021372514757721833254232507845978078781729444393186985492562134074138341590071104755300602678049346688264821561285392951654587068987811805099465761307103499941214208252623664158450621078506984422397087747391137067881756075860065747388682701310318924169197046413635337764564486477253799558066932297478706138242907168972589797010725861481559704463486298011690407902774963867217029408700647383418697167403045447882548845673202774105008860624170607533218023570065822424343548281411435151922819885939309373033005362257496261354911759936948351682163819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gdm.iis.u-tokyo.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b10c0650ae3da569084250c8b74ca1ecbe47391
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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