www.bic.kyoto-u.ac.jp

- Kyoto University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 37:04:b3:49:06:2c:cf:d1 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Kyoto University

Organization: Kyoto University
Organization unit: Institute for Chemical Research
State / Province: Kyoto
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 37:04:b3:49:06:2c:cf:d1
Serial Number (int): 3964490698210463697
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: aa:fa:06:bd:68:ef:46:3c:49:28:d9:56:ae:4e:74:e6:65:5d:f8:ee
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 86:3e:a5:a9:79:90:e1:aa:1a:2e:01:b7:58:de:d9:52:0a:30:64:14
Fingerprint (sha256): 07:b8:71:42:cc:04:35:23:dc:95:8f:0e:19:c7:00:2e:40:ac:f8:83:44:ee:62:d3:b0:2d:66:42:6c:00:fb:a9


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate www.bic.kyoto-u.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bic.kyoto-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bic.kyoto-u.ac.jp

Other certificates including the domain name kyoto-u.ac.jp

(limited to 100 certificates)
student-notifier-dev.rd.iimc.kyoto-u.ac.jp
home.kurims.kyoto-u.ac.jp
history.cseas.kyoto-u.ac.jp
www.qnmc.icems.kyoto-u.ac.jp
kuhp.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
meibo.i.kyoto-u.ac.jp
jl.net.ist.i.kyoto-u.ac.jp
genome2.cohort.med.kyoto-u.ac.jp
www.anim.med.kyoto-u.ac.jp
koukai.shomubu.kyoto-u.ac.jp
ris-orcid.iimc.kyoto-u.ac.jp
elam.kais.kyoto-u.ac.jp
educo.bell.ee.t.kyoto-u.ac.jp
my.kulib.kyoto-u.ac.jp
kar.gakusei.kyoto-u.ac.jp
www.africa.kyoto-u.ac.jp
ikeda-xrp.gsais.kyoto-u.ac.jp
vdp.cseas.kyoto-u.ac.jp
zoo.zool.kyoto-u.ac.jp
agri-history.kais.kyoto-u.ac.jp
inter3.kuicr.kyoto-u.ac.jp
www.rish.kyoto-u.ac.jp
www.ee.t.kyoto-u.ac.jp
www.esho.kyoto-u.ac.jp
kyutubebio.sci.kyoto-u.ac.jp
db.kudpc.kyoto-u.ac.jp
pas.cseas.kyoto-u.ac.jp
cls.iimc.kyoto-u.ac.jp
SC2-20A-1.kuins.kyoto-u.ac.jp
lawschool.law.kyoto-u.ac.jp
socio.k.kyoto-u.ac.jp
demo3.cseas.kyoto-u.ac.jp
www.al.media.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
kupe.med.kyoto-u.ac.jp
cinq.lif.kyoto-u.ac.jp
www.tech.t.kyoto-u.ac.jp
www.maizuru.marine.kais.kyoto-u.ac.jp
www.cn.call.iimc.kyoto-u.ac.jp
vmm.cc.iimc.kyoto-u.ac.jp
www.rri.kyoto-u.ac.jp
www.s-ar.t.kyoto-u.ac.jp
mgend.med.kyoto-u.ac.jp
ris-orcid.iimc.kyoto-u.ac.jp
tls.automattic.com
utrecht.kuicr.kyoto-u.ac.jp
gisurg.kuhp.kyoto-u.ac.jp
www2.kulib.kyoto-u.ac.jp
www04s.ufinity.jp
ikev2-i.kuins.kyoto-u.ac.jp
mail.st.kyoto-u.ac.jp
www.suzuki.icems.kyoto-u.ac.jp
mhost2.iimc.kyoto-u.ac.jp
kudpc.kudpc.kyoto-u.ac.jp
www.s-ge.t.kyoto-u.ac.jp
www.rri.kyoto-u.ac.jp
dksrp.hs.med.kyoto-u.ac.jp
ufinity04.jp.fujitsu.com
sp.rd.iimc.kyoto-u.ac.jp
dia.kuicr.kyoto-u.ac.jp
authidp1.iimc.kyoto-u.ac.jp
gssfolio.iimc.kyoto-u.ac.jp
www.yukawa.kyoto-u.ac.jp
100nin.cpier.kyoto-u.ac.jp
jisedai.asafas.kyoto-u.ac.jp
gcoe.biol.sci.kyoto-u.ac.jp
www-nh.scphys.kyoto-u.ac.jp
ap.rieki-souhan.kyoto-u.ac.jp
www.blog.ist.i.kyoto-u.ac.jp
gssfolio.gss.kyoto-u.ac.jp
fundexapp.jp
www.emc.t.kyoto-u.ac.jp
vds2.iimc.kyoto-u.ac.jp
enq.gakusei.kyoto-u.ac.jp
iccert.adm.kyoto-u.ac.jp
www.bic.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
clinsub.raddarj.genome.med.kyoto-u.ac.jp
coc.educ.kyoto-u.ac.jp
www.iimc.kyoto-u.ac.jp
agrohort.kais.kyoto-u.ac.jp
educo.work.t.kyoto-u.ac.jp
www-nh.scphys.kyoto-u.ac.jp
www.icems.kyoto-u.ac.jp
www.cit.t.kyoto-u.ac.jp
ts-mhs.iimc.kyoto-u.ac.jp
database.rish.kyoto-u.ac.jp
www.ii.ist.i.kyoto-u.ac.jp
mail.iimc.kyoto-u.ac.jp
www.coc.kyoto-u.ac.jp
www.lif.kyoto-u.ac.jp
educo.yamakawa-lab.ee.t.kyoto-u.ac.jp
plesk.hosts18b.iimc.kyoto-u.ac.jp
incmac-20.kais.kyoto-u.ac.jp
kamitani-lab.ist.i.kyoto-u.ac.jp
125th.kyoto-u.ac.jp
www-nh.scphys.kyoto-u.ac.jp
www.maizuru.marine.kais.kyoto-u.ac.jp
corpus.kanji.zinbun.kyoto-u.ac.jp

Certificate

The complete raw certificate details for www.bic.kyoto-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIINwSzSQYsz9EwDQYJKoZIhvcNAQELBQAwWzELMAkGA1UE
BhMCSlAxKjAoBgNVBAoTIU5hdGlvbmFsIEluc3RpdHV0ZSBvZiBJbmZvcm1hdGlj
czEgMB4GA1UEAxMXTklJIE9wZW4gRG9tYWluIENBIC0gRzUwHhcNMTkwMzE4MDYx
MjEwWhcNMjEwNDE4MDYxMjEwWjCBgjELMAkGA1UEBhMCSlAxDjAMBgNVBAgTBUt5
b3RvMRkwFwYDVQQKExBLeW90byBVbml2ZXJzaXR5MSgwJgYDVQQLEx9JbnN0aXR1
dGUgZm9yIENoZW1pY2FsIFJlc2VhcmNoMR4wHAYDVQQDExV3d3cuYmljLmt5b3Rv
LXUuYWMuanAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCvVmXxMA/
8uwFDFU2ECCx8geGIRtm21UeJveaD5cEgxwKgHLYVbmcQBZyzZ+WzYCxGlS4lgJe
JVwfWASeumoFXZjKGC7pbcnTlfdekGH5hQoOhk+Nz2Xamb+toWtlvnduVESUsEE6
4fr0oX38hFGbIGWDFEjBO7yKGctu1y37gupD3oO0GtYECbhgFrqjKYXzwpcVV4yc
tp4VKrGK00tSQrx0lhhX3dbQ288+ggtqc2WZ0jpQ1ULqdgiDIKtMJcFBSve/56xJ
f0qpbOMMjnnUy4Y2OtwNdFYMDWphqH5jrTstN4XtdSgkSTsljQmWkMoAA5Lzwc6Q
86BCJOV4P3NrAgMBAAGjggMDMIIC/zAfBgNVHSMEGDAWgBRnOjrBa7ccpkFGOTCE
yGkAWRFYwTA8BggrBgEFBQcBAQQwMC4wLAYIKwYBBQUHMAGGIGh0dHA6Ly9uaWln
NS5vY3NwLnNlY29tdHJ1c3QubmV0MCAGA1UdEQQZMBeCFXd3dy5iaWMua3lvdG8t
dS5hYy5qcDBgBgNVHSAEWTBXMEsGDCsGAQQBgfwIAwIBATA7MDkGCCsGAQUFBwIB
Fi1odHRwczovL3JlcG8xLnNlY29tdHJ1c3QubmV0L3NwcGNhL25paS9vZGNhMy8w
CAYGZ4EMAQICMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBKBgNVHR8E
QzBBMD+gPaA7hjlodHRwOi8vcmVwbzEuc2Vjb210cnVzdC5uZXQvc3BwY2Evbmlp
L29kY2EzL2Z1bGxjcmxnNS5jcmwwHQYDVR0OBBYEFKr6Br1o70Y8SSjZVq5OdOZl
XfjuMA4GA1UdDwEB/wQEAwIFoDCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYA
pLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFpj3bzZgAABAMARzBF
AiAr6R18MuxP9eSAScRroWGSAxg7Vqs6Bj5qt1gZhQq9cgIhANBLYx7+0Ed9bJaL
VMa5h2CY6BQNCl0LG9KedAikVCm0AHcA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiD
AMR7iXqo/csAAAFpj3b7IgAABAMASDBGAiEA/Vott//up+0wEdng/cKU/ff3xfSB
eoQAD88h0+eApBUCIQDqnY8qTdWLBJxSXl3MNfD1g49b4yz3kONl+bG7HZsLUgB1
AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABaY93BFoAAAQDAEYw
RAIgZcJTstVc2TQW0CMz620Tsi0wqKUJC17EmSHNd4f/Z4ICIGx0+vnfeOUBeqEb
gw1+rHPFp2O9tDvvggwDhJremFUFMA0GCSqGSIb3DQEBCwUAA4IBAQBZ553NDKlj
UcycMwJSXwOF2b4SokQG4iwBdHj4kfMgbcRfHVkIBfNv03lvxR/BjKeauviQL6Q8
M67tX8plI/zdh7bZ/a1c8gf3BRVNDURx8LU50B5IDFvSl+bZMEwg5ab7Xb+Msxo4
vYlxFzCq4NBzzKb66lD7X38kygGTA5ubPrm46GQmMsTAFIGzejjqdQ60MrTcvBJq
CWE7Jf79PI+L7Y3fegmHUHSSOMsV0zFdwWViJqMyTCaclH9axp4+Wxla9AsbHkG8
SVCw5CcFpVRacqQYnPMwx11qJ2OznzKoEpGZztIzx/dLPYZ6cq1XNZU3xjkBfyBz
j9SpDeemznUB
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr1Zl8TAP/LsBQxVNhAg
sfIHhiEbZttVHib3mg+XBIMcCoBy2FW5nEAWcs2fls2AsRpUuJYCXiVcH1gEnrpq
BV2Yyhgu6W3J05X3XpBh+YUKDoZPjc9l2pm/raFrZb53blRElLBBOuH69KF9/IRR
myBlgxRIwTu8ihnLbtct+4LqQ96DtBrWBAm4YBa6oymF88KXFVeMnLaeFSqxitNL
UkK8dJYYV93W0NvPPoILanNlmdI6UNVC6nYIgyCrTCXBQUr3v+esSX9KqWzjDI55
1MuGNjrcDXRWDA1qYah+Y607LTeF7XUoJEk7JY0JlpDKAAOS88HOkPOgQiTleD9z
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3964490698210463697
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-18 06:12:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-18 06:12:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyoto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyoto University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Institute for Chemical Research'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bic.kyoto-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24583603114655687593052113443871760254880021659332178802492324176204144308817524949696756593311529616110178047646356521349675631713688277198060002006155479327754370703665130856348100523818108336032089541156174798642518286042280436865501278330617052024794040836542843191741163482785804449293930492395399279960775345044001304030683898046784136698652436169498931778010147915591456595398848936150507931118769809918985741545730322034455365378521699574512385929925501720430671274894628200966214021261638291051754191280934572805579764713916716864715815764575325503883129870141179852781762469323577960076443951067530597987179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bic.kyoto-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aafa06bd68ef463c4928d956ae4e74e6655df8ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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