www.rri.kyoto-u.ac.jp

- Kyoto University -

Issued by NII Open Domain CA - G4

About this certificate

This digital certificate with serial number 36:b7:bc:a2:06:cc:bb:33 was issued on by National Institute of Informatics.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Kyoto University

Organization: Kyoto University
Organization unit: Kyoto University Research Reactor Institute
Locality: Academe
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Locality: Academe
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 36:b7:bc:a2:06:cc:bb:33
Serial Number (int): 3942827402870962995
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 38:2b:15:35:e9:43:c3:79:ca:c4:ff:48:2d:f5:fe:c4:c1:8b:0b:77
AuthorityKeyId: 19:0b:6f:39:1f:31:03:34:5f:e4:d2:40:1f:37:e6:8d:e7:62:39:7c

Fingerprint (sha1): 79:9b:af:8d:c3:26:76:15:7b:3c:32:cd:ad:82:74:31:70:e1:59:82
Fingerprint (sha256): 06:0f:28:58:a3:d4:4b:b1:67:42:88:44:b5:df:30:25:95:c9:77:ce:6a:90:a0:d7:33:d8:77:77:6e:25:e2:5c


Revocation information

OCSP Server: http://niig4.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg4.crl

Check the revocation status for certificate www.rri.kyoto-u.ac.jp

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rri.kyoto-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.rri.kyoto-u.ac.jp
l.rri.kyoto-u.ac.jp
hlweb.rri.kyoto-u.ac.jp

Other certificates including the domain name kyoto-u.ac.jp

(limited to 100 certificates)
student-notifier-dev.rd.iimc.kyoto-u.ac.jp
home.kurims.kyoto-u.ac.jp
history.cseas.kyoto-u.ac.jp
www.qnmc.icems.kyoto-u.ac.jp
kuhp.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
meibo.i.kyoto-u.ac.jp
jl.net.ist.i.kyoto-u.ac.jp
genome2.cohort.med.kyoto-u.ac.jp
www.anim.med.kyoto-u.ac.jp
koukai.shomubu.kyoto-u.ac.jp
ris-orcid.iimc.kyoto-u.ac.jp
elam.kais.kyoto-u.ac.jp
educo.bell.ee.t.kyoto-u.ac.jp
my.kulib.kyoto-u.ac.jp
kar.gakusei.kyoto-u.ac.jp
www.africa.kyoto-u.ac.jp
ikeda-xrp.gsais.kyoto-u.ac.jp
vdp.cseas.kyoto-u.ac.jp
zoo.zool.kyoto-u.ac.jp
agri-history.kais.kyoto-u.ac.jp
inter3.kuicr.kyoto-u.ac.jp
www.rish.kyoto-u.ac.jp
www.ee.t.kyoto-u.ac.jp
www.esho.kyoto-u.ac.jp
kyutubebio.sci.kyoto-u.ac.jp
db.kudpc.kyoto-u.ac.jp
pas.cseas.kyoto-u.ac.jp
cls.iimc.kyoto-u.ac.jp
SC2-20A-1.kuins.kyoto-u.ac.jp
lawschool.law.kyoto-u.ac.jp
socio.k.kyoto-u.ac.jp
demo3.cseas.kyoto-u.ac.jp
www.al.media.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
kupe.med.kyoto-u.ac.jp
cinq.lif.kyoto-u.ac.jp
www.tech.t.kyoto-u.ac.jp
www.maizuru.marine.kais.kyoto-u.ac.jp
www.cn.call.iimc.kyoto-u.ac.jp
vmm.cc.iimc.kyoto-u.ac.jp
www.rri.kyoto-u.ac.jp
www.s-ar.t.kyoto-u.ac.jp
mgend.med.kyoto-u.ac.jp
ris-orcid.iimc.kyoto-u.ac.jp
tls.automattic.com
utrecht.kuicr.kyoto-u.ac.jp
gisurg.kuhp.kyoto-u.ac.jp
www2.kulib.kyoto-u.ac.jp
www04s.ufinity.jp
ikev2-i.kuins.kyoto-u.ac.jp
mail.st.kyoto-u.ac.jp
www.suzuki.icems.kyoto-u.ac.jp
mhost2.iimc.kyoto-u.ac.jp
kudpc.kudpc.kyoto-u.ac.jp
www.s-ge.t.kyoto-u.ac.jp
www.rri.kyoto-u.ac.jp
dksrp.hs.med.kyoto-u.ac.jp
ufinity04.jp.fujitsu.com
sp.rd.iimc.kyoto-u.ac.jp
dia.kuicr.kyoto-u.ac.jp
authidp1.iimc.kyoto-u.ac.jp
gssfolio.iimc.kyoto-u.ac.jp
www.yukawa.kyoto-u.ac.jp
100nin.cpier.kyoto-u.ac.jp
jisedai.asafas.kyoto-u.ac.jp
gcoe.biol.sci.kyoto-u.ac.jp
www-nh.scphys.kyoto-u.ac.jp
ap.rieki-souhan.kyoto-u.ac.jp
www.blog.ist.i.kyoto-u.ac.jp
gssfolio.gss.kyoto-u.ac.jp
fundexapp.jp
www.emc.t.kyoto-u.ac.jp
vds2.iimc.kyoto-u.ac.jp
enq.gakusei.kyoto-u.ac.jp
iccert.adm.kyoto-u.ac.jp
www.bic.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
clinsub.raddarj.genome.med.kyoto-u.ac.jp
coc.educ.kyoto-u.ac.jp
www.iimc.kyoto-u.ac.jp
agrohort.kais.kyoto-u.ac.jp
educo.work.t.kyoto-u.ac.jp
www-nh.scphys.kyoto-u.ac.jp
www.icems.kyoto-u.ac.jp
www.cit.t.kyoto-u.ac.jp
ts-mhs.iimc.kyoto-u.ac.jp
database.rish.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
mail.iimc.kyoto-u.ac.jp
www.coc.kyoto-u.ac.jp
www.lif.kyoto-u.ac.jp
educo.yamakawa-lab.ee.t.kyoto-u.ac.jp
plesk.hosts18b.iimc.kyoto-u.ac.jp
incmac-20.kais.kyoto-u.ac.jp
kamitani-lab.ist.i.kyoto-u.ac.jp
125th.kyoto-u.ac.jp
www-nh.scphys.kyoto-u.ac.jp
www.maizuru.marine.kais.kyoto-u.ac.jp
corpus.kanji.zinbun.kyoto-u.ac.jp

Certificate

The complete raw certificate details for www.rri.kyoto-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIINre8ogbMuzMwDQYJKoZIhvcNAQELBQAwbTELMAkGA1UE
BhMCSlAxEDAOBgNVBAcTB0FjYWRlbWUxKjAoBgNVBAoTIU5hdGlvbmFsIEluc3Rp
dHV0ZSBvZiBJbmZvcm1hdGljczEgMB4GA1UEAxMXTklJIE9wZW4gRG9tYWluIENB
IC0gRzQwHhcNMTUwNDMwMDIyNzAzWhcNMTcwNTMwMDIyNzAzWjCBkDELMAkGA1UE
BhMCSlAxEDAOBgNVBAcTB0FjYWRlbWUxGTAXBgNVBAoTEEt5b3RvIFVuaXZlcnNp
dHkxNDAyBgNVBAsTK0t5b3RvIFVuaXZlcnNpdHkgUmVzZWFyY2ggUmVhY3RvciBJ
bnN0aXR1dGUxHjAcBgNVBAMTFXd3dy5ycmkua3lvdG8tdS5hYy5qcDCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/9vDCbYG63l23nTN64uS4jrrMJaHPW
i4ZZoJFu+EiGlkmHAx+b8hHSQim4x2w+weJUStpcVkR5+8VyGzNhLQFDGsSDpK0e
aV5GNFsoKJzONHYezoKKvs6XgAHMgvumGJ7aKPX0pGOJJAG8ubek69eYcJQL13gv
KnHEazy0TvD/au3+albxOLV8VRxoinlAJ+Vn17x6TX++Tlv1hNy0nVnP/5ohwgJ1
S+dVVWI7KgOIVHPxAjPEyRmWHvyiKqYdr9DzRYTenX4mLppVru5rZwVPtTLCevTg
fBffvh0q47SI6GFr88+D3MjJY5AFtbbefqdi+is3BE2/nJ14u3AnDA8CAwEAAaOC
AakwggGlMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAW
gBQZC285HzEDNF/k0kAfN+aN52I5fDBKBgNVHR8EQzBBMD+gPaA7hjlodHRwOi8v
cmVwbzEuc2Vjb210cnVzdC5uZXQvc3BwY2EvbmlpL29kY2EzL2Z1bGxjcmxnNC5j
cmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdDgQWBBQ4KxU16UPDecrE/0gt9f7EwYsL
dzBaBgNVHSAEUzBRME8GDCsGAQQBgfwIAwIBATA/MD0GCCsGAQUFBwIBFjFodHRw
czovL3JlcG8xLnNlY29tdHJ1c3QubmV0L3NwY3BwL2Nwcy9pbmRleC5odG1sMDwG
CCsGAQUFBwEBBDAwLjAsBggrBgEFBQcwAYYgaHR0cDovL25paWc0Lm9jc3Auc2Vj
b210cnVzdC5uZXQwTgYDVR0RBEcwRYIVd3d3LnJyaS5reW90by11LmFjLmpwghNs
LnJyaS5reW90by11LmFjLmpwghdobHdlYi5ycmkua3lvdG8tdS5hYy5qcDANBgkq
hkiG9w0BAQsFAAOCAQEADpVkCu+a8aS0EJFlEN1KLBr4Gb2BSRDSpMP8NDca/Kmk
h+whXQNi+eFpV5c8SVRgberl27quPJqH5JZp7OVgohzM1stCa/aGZDeWIyBMViPy
bUiH9R8EbBlOOzLqhvQIcl1xVyW5iP+4OhuFxH6zD10mqwP2IK07ot0xceb7WWxM
S2OPhYQSIYFg1BxGOnPsTCNt34TYSbllOOyXXHtJLfuatsghhEdigmP+9ZjAFOxh
aA8KyNAsREfv0U5Nei0gJAzQGRkmfaDkvzLpew/g/Rf0jaLYYjUQk8moM7jX8ceR
1BHb35OFc1YNTR3rWx6UglcXuLxoM7zCrovYsjU4fw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/28MJtgbreXbedM3ri5
LiOuswloc9aLhlmgkW74SIaWSYcDH5vyEdJCKbjHbD7B4lRK2lxWRHn7xXIbM2Et
AUMaxIOkrR5pXkY0WygonM40dh7Ogoq+zpeAAcyC+6YYntoo9fSkY4kkAby5t6Tr
15hwlAvXeC8qccRrPLRO8P9q7f5qVvE4tXxVHGiKeUAn5WfXvHpNf75OW/WE3LSd
Wc//miHCAnVL51VVYjsqA4hUc/ECM8TJGZYe/KIqph2v0PNFhN6dfiYumlWu7mtn
BU+1MsJ69OB8F9++HSrjtIjoYWvzz4PcyMljkAW1tt5+p2L6KzcETb+cnXi7cCcM
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3942827402870962995
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Academe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-30 02:27:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-30 02:27:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Academe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyoto University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyoto University Research Reactor Institute'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rri.kyoto-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24236637697893888274655649764782311027793677374537322885701242128034243206596219653244507214486576652179837348327924738768331003224135534367850974848094149386025502267000345990281005339743016897994707110030650575881402449584896519401458270228863441790439808011032657785867265416470223060426151643647023754003320857887607113271468961207779568377874390407338620559750808322937807650174680018526605238825263542727546857135382110069896042715020885294826775811475754375814643914351841940073203847983877743399542899290350949026051790584757679468717420632611186271668439122370851033958970955854327223839009770472614899682319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 190b6f391f3103345fe4d2401f37e68de762397c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							382b1535e943c379cac4ff482df5fec4c18b0b77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/spcpp/cps/index.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig4.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rri.kyoto-u.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.rri.kyoto-u.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlweb.rri.kyoto-u.ac.jp'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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