regist.ms.u-tokyo.ac.jp

- The University of Tokyo -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 60:84:ef:dd:17:29:a2:63 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

The University of Tokyo

Organization: The University of Tokyo
Organization unit: Graduate School of Mathematical Sciences
State / Province: Tokyo
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 60:84:ef:dd:17:29:a2:63
Serial Number (int): 6954947457422303843
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 5a:4f:ce:be:70:39:6d:5a:c0:bb:57:ab:2e:26:11:f3:b5:1c:3f:e6
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 27:5a:2e:b5:b2:40:52:f4:42:c0:6f:fb:0f:5e:0b:32:a0:6e:7a:44
Fingerprint (sha256): 05:b4:ef:91:d7:75:19:9d:dd:c5:cf:98:88:c7:10:02:c9:94:20:6b:5c:b8:4f:1f:55:f8:dd:4b:74:49:9f:a7


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate regist.ms.u-tokyo.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for regist.ms.u-tokyo.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

regist.ms.u-tokyo.ac.jp

Other certificates including the domain name u-tokyo.ac.jp

(limited to 100 certificates)
s07.seminar2017.ecc.u-tokyo.ac.jp
qa.esc.u-tokyo.ac.jp
hagi.is.s.u-tokyo.ac.jp
ms.ecc.u-tokyo.ac.jp
secure.flight.t.u-tokyo.ac.jp
panelsrv.p.u-tokyo.ac.jp
*.eidos.ic.i.u-tokyo.ac.jp
hagi.is.s.u-tokyo.ac.jp
www.cad.t.u-tokyo.ac.jp
www.flight.t.u-tokyo.ac.jp
www.eve.phys.s.u-tokyo.ac.jp
komaba-alert.c.u-tokyo.ac.jp
cge.t.u-tokyo.ac.jp
shibayamalab.issp.u-tokyo.ac.jp
www.aml.t.u-tokyo.ac.jp
ocw.u-tokyo.ac.jp
www.tanaka.ecc.u-tokyo.ac.jp
sendfile.s.u-tokyo.ac.jp
www.ct.u-tokyo.ac.jp
tokyo.tkl.iis.u-tokyo.ac.jp
sso.adm.u-tokyo.ac.jp
graphics.c.u-tokyo.ac.jp
www.ict.mech.t.u-tokyo.ac.jp
www.ict.mech.t.u-tokyo.ac.jp
freut.u-tokyo.ac.jp
as2.c.u-tokyo.ac.jp
www.nagai-2.iis.u-tokyo.ac.jp
cb.genome.rcast.u-tokyo.ac.jp
*.cyber.t.u-tokyo.ac.jp
ovdtest.aori.u-tokyo.ac.jp
www.tanaka.ecc.u-tokyo.ac.jp
ir3s.u-tokyo.ac.jp
yayoi-man.cc.u-tokyo.ac.jp
smtp.ee.t.u-tokyo.ac.jp
gateway.itc.u-tokyo.ac.jp
sugino.issp.u-tokyo.ac.jp
cardiovasc.m.u-tokyo.ac.jp
mail.l.u-tokyo.ac.jp
qi.m.u-tokyo.ac.jp
www.neumis.iis.u-tokyo.ac.jp
www.is.s.u-tokyo.ac.jp
utop-ice.he.u-tokyo.ac.jp
ovd.aori.u-tokyo.ac.jp
www.genome.rcast.u-tokyo.ac.jp
biomech.c.u-tokyo.ac.jp
www.mi.t.u-tokyo.ac.jp
mail.cspp.cc.u-tokyo.ac.jp
tuk.t.u-tokyo.ac.jp
lsen-web.c.u-tokyo.ac.jp
structure.m.u-tokyo.ac.jp
blog.ocw.u-tokyo.ac.jp
k1.k2.t.u-tokyo.ac.jp
nsl.issp.u-tokyo.ac.jp
www.carf.e.u-tokyo.ac.jp
www.one-earth-g.a.u-tokyo.ac.jp
www.keisu.t.u-tokyo.ac.jp
gwdoc.icrr.u-tokyo.ac.jp
monozemi.akg.t.u-tokyo.ac.jp
iiif.dl.itc.u-tokyo.ac.jp
saiyo.adm.u-tokyo.ac.jp
www.genome.rcast.u-tokyo.ac.jp
rcme.oa.u-tokyo.ac.jp
koseki.t.u-tokyo.ac.jp
wwweic.eri.u-tokyo.ac.jp
idaten.c.u-tokyo.ac.jp
apps-mgmt.adm.s.u-tokyo.ac.jp
nsl.issp.u-tokyo.ac.jp
www.hulab.iis.u-tokyo.ac.jp
utcp.c.u-tokyo.ac.jp
mx.eps.s.u-tokyo.ac.jp
isspmail.issp.u-tokyo.ac.jp
www.lib.u-tokyo.ac.jp
www.aori.u-tokyo.ac.jp
www.aviation.u-tokyo.ac.jp
www.os.ecc.u-tokyo.ac.jp
ml.c.u-tokyo.ac.jp
joras.csis.u-tokyo.ac.jp
hagi.is.s.u-tokyo.ac.jp
usis.mtl.t.u-tokyo.ac.jp
oakleaf-fx-5.cc.u-tokyo.ac.jp
proposal.ducr.u-tokyo.ac.jp
www.yamagula.ic.i.u-tokyo.ac.jp
adventure.sys.t.u-tokyo.ac.jp
takeyama.issp.u-tokyo.ac.jp
www.gdm.iis.u-tokyo.ac.jp
dch.iii.u-tokyo.ac.jp
tls.automattic.com
www.gcl.i.u-tokyo.ac.jp
adventure.sys.t.u-tokyo.ac.jp
www.lib.f.u-tokyo.ac.jp
www.dl.itc.u-tokyo.ac.jp
regist.ms.u-tokyo.ac.jp
k1.k2.t.u-tokyo.ac.jp
radphys4.c.u-tokyo.ac.jp
tuk.t.u-tokyo.ac.jp
www.ai.u-tokyo.ac.jp
www.energy.iis.u-tokyo.ac.jp
www.fly.c.u-tokyo.ac.jp
news.muographix.u-tokyo.ac.jp
announce.cc.u-tokyo.ac.jp

Certificate

The complete raw certificate details for regist.ms.u-tokyo.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGejCCBWKgAwIBAgIIYITv3RcpomMwDQYJKoZIhvcNAQELBQAwWzELMAkGA1UE
BhMCSlAxKjAoBgNVBAoTIU5hdGlvbmFsIEluc3RpdHV0ZSBvZiBJbmZvcm1hdGlj
czEgMB4GA1UEAxMXTklJIE9wZW4gRG9tYWluIENBIC0gRzUwHhcNMTkwMzA4MDIx
MjQyWhcNMjEwNDA4MDIxMjQyWjCBlDELMAkGA1UEBhMCSlAxDjAMBgNVBAgTBVRv
a3lvMSAwHgYDVQQKExdUaGUgVW5pdmVyc2l0eSBvZiBUb2t5bzExMC8GA1UECxMo
R3JhZHVhdGUgU2Nob29sIG9mIE1hdGhlbWF0aWNhbCBTY2llbmNlczEgMB4GA1UE
AxMXcmVnaXN0Lm1zLnUtdG9reW8uYWMuanAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQaOEUX6Acq/9xQYBI9fbB41GKtQCkEEjacvWrPbcH9pgunC8w
lYfNT7KKqkCY99L6iQxabTVSab44Pkv10D/VTwHGGJPPlPFR3/f7vNBg/uzpQUPY
O32fFVPvAqA9UBeSGR/KU8b26qsIP8vL23rSjlYrXCAUkvVqG29EAcyCc/Dh45Yl
9KLaOKfhOZRkjom/wBMm+4qXCwM7+Rjlco9tR4JN8EddGgb2o30n+w6OnqvOly6S
hdwAouWrFXjTci8A5IQPaThlTDFLhUkECEWFJhyGxdQRPZprKySwHy6omYFagQLS
1pt3by++LF+khnEakjB6nFhSYu93yTDL3zxNAgMBAAGjggMGMIIDAjAfBgNVHSME
GDAWgBRnOjrBa7ccpkFGOTCEyGkAWRFYwTA8BggrBgEFBQcBAQQwMC4wLAYIKwYB
BQUHMAGGIGh0dHA6Ly9uaWlnNS5vY3NwLnNlY29tdHJ1c3QubmV0MCIGA1UdEQQb
MBmCF3JlZ2lzdC5tcy51LXRva3lvLmFjLmpwMGAGA1UdIARZMFcwSwYMKwYBBAGB
/AgDAgEBMDswOQYIKwYBBQUHAgEWLWh0dHBzOi8vcmVwbzEuc2Vjb210cnVzdC5u
ZXQvc3BwY2EvbmlpL29kY2EzLzAIBgZngQwBAgIwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMEoGA1UdHwRDMEEwP6A9oDuGOWh0dHA6Ly9yZXBvMS5zZWNv
bXRydXN0Lm5ldC9zcHBjYS9uaWkvb2RjYTMvZnVsbGNybGc1LmNybDAdBgNVHQ4E
FgQUWk/OvnA5bVrAu1erLiYR87UcP+YwDgYDVR0PAQH/BAQDAgWgMIIBfwYKKwYB
BAHWeQIEAgSCAW8EggFrAWkAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80O
yA3cEAAAAWlbHBy9AAAEAwBHMEUCIQCHzEyxmO9FkBtuY3sOCgvTMXI62o1i+Rj1
0l34R4zBOQIgf9l77jGoqebxhswH11oM+HXUXp0SynQZcRbHdh0zgvMAdwDuS723
dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWlbHCCgAAAEAwBIMEYCIQDS
DttYm5EEPmcfOyeeBm8J4FUvQpdyO07K0Y4+iOTkKAIhAOoasyrA5BhqWzE6tu8M
27YVblFjaw9oivASnjYkxfwQAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2y
CJo32RMAAAFpWxwoYwAABAMARzBFAiB9J2G/87RDPRdnwAMODZQIknQcwR9c66D6
4jyz1Xi+NwIhAKPLwgZtCjW+ym4Ew0SgWPbm1kt1TCfHYwbvWLTmAIIsMA0GCSqG
SIb3DQEBCwUAA4IBAQA4Ki6qyWqeVvyUd1CZp1feXDwSjvt/sQvzc6J9oLzSPuSW
hiWW+EAKxr8wprZWwuB5Plgnno0SXSozVzyMonl5iDrw7A0S8JzmsXxIJdceVO1H
hQBI/OV/6BKjE/MtCMlxCDJy+zeuBX47GDcbZ527ldpnVnOT2pq05si7FENQmxaK
1X95gs2PwHE92sV1YEB4uMJg1jNk80qsLGgloMfuyE8FytUwfT/CHJAkAWlR3vGB
M8gzzjhgNluASXfWtymcKrf453kM0ZjIdApKkCPGV9dWfW/u4kkksEKUdELUuHbY
szWGksJsC5bxOB26X0oo2cec8uRNPCHPTtvQpXeW
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GjhFF+gHKv/cUGASPX2
weNRirUApBBI2nL1qz23B/aYLpwvMJWHzU+yiqpAmPfS+okMWm01Umm+OD5L9dA/
1U8BxhiTz5TxUd/3+7zQYP7s6UFD2Dt9nxVT7wKgPVAXkhkfylPG9uqrCD/Ly9t6
0o5WK1wgFJL1ahtvRAHMgnPw4eOWJfSi2jin4TmUZI6Jv8ATJvuKlwsDO/kY5XKP
bUeCTfBHXRoG9qN9J/sOjp6rzpcukoXcAKLlqxV403IvAOSED2k4ZUwxS4VJBAhF
hSYchsXUET2aaysksB8uqJmBWoEC0tabd28vvixfpIZxGpIwepxYUmLvd8kwy988
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6954947457422303843
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-08 02:12:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-08 02:12:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Graduate School of Mathematical Sciences'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'regist.ms.u-tokyo.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26309285302456172081966076863632087785920254826925741404685853711162883799322743919078217042619816881141516421859906724502050031113692634667187068764775406383494762989295981209178836323797963087224947397107936518291185036496823456318495894930347021607827522278285060310633407345492937883910665445104706074822804835432237028724565711643462602542938321224483673064667541109000645509858511083206452305303172499312361817664925984101873699704497382463818333243937577396578447258749383506987545825173766984042693068011198471794592309034709144018931488404635665544198875039292402436198050047688720836506260380054786190294093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regist.ms.u-tokyo.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a4fcebe70396d5ac0bb57ab2e2611f3b51c3fe6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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