qpost.jimu.kyushu-u.ac.jp

- Kyushu University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 41:0b:a9:97:09:e3:c8:cc:92:56:14:b0:57:3c:12:c8 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Kyushu University

Organization: Kyushu University
Organization unit: Information System Department
State / Province: Fukuoka
Locality: Fukuoka-shi
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 41:0b:a9:97:09:e3:c8:cc:92:56:14:b0:57:3c:12:c8
Serial Number (int): 86460374685199711125299547820565205704
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 95:63:dc:15:81:b3:91:f0:70:c3:01:87:9b:8b:c2:e5:4c:f7:54:2c
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 67:84:52:33:ce:b9:11:7f:c9:c9:c3:38:3c:68:f9:6a:9c:89:a7:ea
Fingerprint (sha256): 0c:77:fe:66:8b:be:f9:ee:10:15:9f:8f:14:44:24:cf:5e:b5:a0:53:e2:da:fb:ab:54:e1:85:95:d6:70:fd:23


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate qpost.jimu.kyushu-u.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qpost.jimu.kyushu-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qpost.jimu.kyushu-u.ac.jp

Other certificates including the domain name kyushu-u.ac.jp

(limited to 100 certificates)
m602.m.kyushu-u.ac.jp
eq.kyushu-u.ac.jp
www.hes.kyushu-u.ac.jp
webmail.math.kyushu-u.ac.jp
hosting3.cc.kyushu-u.ac.jp
storage.iii.kyushu-u.ac.jp
mol.artsci.kyushu-u.ac.jp
konchudb.agr.agr.kyushu-u.ac.jp
sv01.triam.kyushu-u.ac.jp
*.qc.kyushu-u.ac.jp
www.cabas.kyushu-u.ac.jp
beppu.kyushu-u.ac.jp
www.geo.kyushu-u.ac.jp
app.icer.kyushu-u.ac.jp
itonavi.f.ait.kyushu-u.ac.jp
mpoint.cc.kyushu-u.ac.jp
www.icer.kyushu-u.ac.jp
www.cabas.kyushu-u.ac.jp
ku-portal.kyushu-u.ac.jp
message.iii.kyushu-u.ac.jp
storage.design.kyushu-u.ac.jp
okadalab.kyushu-u.ac.jp
career.kyushu-u.ac.jp
jinq-web.jimu.kyushu-u.ac.jp
www-shiken.jimu.kyushu-u.ac.jp
xserve.rche.kyushu-u.ac.jp
www.cabas.kyushu-u.ac.jp
arch.kyushu-u.ac.jp
www3.ir.kyushu-u.ac.jp
www.leds.ait.kyushu-u.ac.jp
ir-bi2.jimu.kyushu-u.ac.jp
ns1.edu.kyushu-u.ac.jp
hosting2.cc.kyushu-u.ac.jp
scmain.sc.kyushu-u.ac.jp
pops.dent.kyushu-u.ac.jp
hyoka.ofc.kyushu-u.ac.jp
setting.m.kyushu-u.ac.jp
www.share.kyushu-u.ac.jp
card.kyushu-u.ac.jp
syllabus.kyushu-u.ac.jp
portal.i3.kyushu-u.ac.jp
hosting4.cc.kyushu-u.ac.jp
sub.et.kyushu-u.ac.jp
auth.icer.kyushu-u.ac.jp
otrx.ed.kyushu-u.ac.jp
ask.jimu.kyushu-u.ac.jp
job.jimu.kyushu-u.ac.jp
sevo.kyushu-u.ac.jp
www.rheumatology.beppu.hosp.kyushu-u.ac.jp
sc003.sc.kyushu-u.ac.jp
fs1.edu.kyushu-u.ac.jp
scserv.sc.kyushu-u.ac.jp
rengeso.edu.kyushu-u.ac.jp
www.leds.ait.kyushu-u.ac.jp
zk1.med.kyushu-u.ac.jp
vpn.jimu.kyushu-u.ac.jp
sc003.sc.kyushu-u.ac.jp
office365.iii.kyushu-u.ac.jp
ueii.kyushu-u.ac.jp
webmail.dent.kyushu-u.ac.jp
yin.cc.kyushu-u.ac.jp
koyukai.kyushu-u.ac.jp
*.math.kyushu-u.ac.jp
ku-cert.kyushu-u.ac.jp
ccl.scc.kyushu-u.ac.jp
arch.kyushu-u.ac.jp
www.artsci.kyushu-u.ac.jp
sw-web.cc.kyushu-u.ac.jp
str3.i.kyushu-u.ac.jp
www.sec.kyushu-u.ac.jp
tutor.isc.kyushu-u.ac.jp
nursing.career.center.med.kyushu-u.ac.jp
medtechs.med.kyushu-u.ac.jp
cs.kyushu-u.ac.jp
gcity4.doc.kyushu-u.ac.jp
gp-card.kyushu-u.ac.jp
imaq2.kyushu-u.ac.jp
qenavi.eng.kyushu-u.ac.jp
ds.s.kyushu-u.ac.jp
web.sso.kyushu-u.ac.jp
wocmn1.gened.kyushu-u.ac.jp
itonavi.f.ait.kyushu-u.ac.jp
rad.dent.kyushu-u.ac.jp
kokusai.hosp.kyushu-u.ac.jp
isc.kyushu-u.ac.jp
dreams-d1.riam.kyushu-u.ac.jp
portal.isee.kyushu-u.ac.jp
soft.iii.kyushu-u.ac.jp
qpost.jimu.kyushu-u.ac.jp
aero.kyushu-u.ac.jp
sv01.triam.kyushu-u.ac.jp
goukaku.jimu.kyushu-u.ac.jp
str3.i.kyushu-u.ac.jp
hosting1.cc.kyushu-u.ac.jp
ud.arch.kyushu-u.ac.jp
www.m.ait.kyushu-u.ac.jp
www.lib.kyushu-u.ac.jp
www.geo.kyushu-u.ac.jp
portal.hq.kyushu-u.ac.jp
hibari.edu.kyushu-u.ac.jp

Certificate

The complete raw certificate details for qpost.jimu.kyushu-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGijCCBXKgAwIBAgIQQQuplwnjyMySVhSwVzwSyDANBgkqhkiG9w0BAQsFADBb
MQswCQYDVQQGEwJKUDEqMCgGA1UEChMhTmF0aW9uYWwgSW5zdGl0dXRlIG9mIElu
Zm9ybWF0aWNzMSAwHgYDVQQDExdOSUkgT3BlbiBEb21haW4gQ0EgLSBHNTAeFw0x
OTA2MDcwMDU3MTlaFw0yMTA3MDgwMDU3MTlaMIGdMQswCQYDVQQGEwJKUDEQMA4G
A1UECBMHRnVrdW9rYTEUMBIGA1UEBxMLRnVrdW9rYS1zaGkxGjAYBgNVBAoTEUt5
dXNodSBVbml2ZXJzaXR5MSYwJAYDVQQLEx1JbmZvcm1hdGlvbiBTeXN0ZW0gRGVw
YXJ0bWVudDEiMCAGA1UEAxMZcXBvc3QuamltdS5reXVzaHUtdS5hYy5qcDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK8QwexGyOxsNum1UDNwVdL7hRgw
628fuAZBePoPQrTrPyqp+6AFzDEfOEhCEGEJ+3S4i+pSm2uYzemQlXZCQVuB89St
hdYItWg//IlYLOe2UzyhZu3yJ3MqUmZ9FRlPXPm5VmpHTz5LgDqgb+5w3jl8fLHe
jle26/Ech8hyp6aS1KJa4DPsT7lbGlZYG/oo23rdcGmQkxaCh6HJjNeuKSUZoJ5r
fsrnZG6RRB7o/+/1y7BBP6uwCxvap/Iy/gKycYw257NZAb6gelPnnuOLVFdfsIxt
ukhiNGxch6B+1+S0hTAB7fVdxs7MTj00imI4Pi0irh2cF/bqL2Gv8b6CXDECAwEA
AaOCAwUwggMBMB8GA1UdIwQYMBaAFGc6OsFrtxymQUY5MITIaQBZEVjBMDwGCCsG
AQUFBwEBBDAwLjAsBggrBgEFBQcwAYYgaHR0cDovL25paWc1Lm9jc3Auc2Vjb210
cnVzdC5uZXQwJAYDVR0RBB0wG4IZcXBvc3QuamltdS5reXVzaHUtdS5hYy5qcDBg
BgNVHSAEWTBXMEsGDCsGAQQBgfwIAwIBATA7MDkGCCsGAQUFBwIBFi1odHRwczov
L3JlcG8xLnNlY29tdHJ1c3QubmV0L3NwcGNhL25paS9vZGNhMy8wCAYGZ4EMAQIC
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBKBgNVHR8EQzBBMD+gPaA7
hjlodHRwOi8vcmVwbzEuc2Vjb210cnVzdC5uZXQvc3BwY2EvbmlpL29kY2EzL2Z1
bGxjcmxnNS5jcmwwHQYDVR0OBBYEFJVj3BWBs5HwcMMBh5uLwuVM91QsMA4GA1Ud
DwEB/wQEAwIFoDCCAXwGCisGAQQB1nkCBAIEggFsBIIBaAFmAHUApLkJkLQYWBSH
uxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFrL3nL2AAABAMARjBEAiBkcx0ygGgF
j+t+m+wzpNDKKWqKzd/fYhgK+KrHrEJxdwIgNrOkq81apQ2TtYU2k8pWLiavoAEk
dmP3VIgYIHjLe+4AdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAA
AWsvedGdAAAEAwBHMEUCICABKeFPFXYedtGoqP+Ku6Ogbb0i1ECg6CSE97g1MKkp
AiEAmkYC+VUTH9TZrNpCf1SeRvWQWCY1bTtMUxv+jjmjGIQAdQBvU3asMfAxGdiZ
AKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWsvedZjAAAEAwBGMEQCIDOJenXqNUX4
JbJwD1vasDDkwsZhcxZtwjfeRlW2C8OGAiAKtbfeKMUJLJl57OC7ygAyf5I7fnmN
CSltayV54KQ+gzANBgkqhkiG9w0BAQsFAAOCAQEAlrm1cgppHxz2juOLPj6vbSS6
NLrMetSpQwGvq+FYJNjrE+MWBJst/aRL/l75sNg0zrZAohUKltXs4whXDddNia4x
OdSeACe0Gva7oBRlkGq1Lq9v806zeAwxzQfT+agYLhl7JH+eNrr8fzs2EPqwHGIj
ICRRE3Xams/rY6KcqRBsNIMkfJC0FGSCkarW/oNTxcq/OVe5y/EskabtTKcODvPz
prlERTQVq4xLYbFf3IerY49O+zg+5K8XPAG2pw09yIijR4t1sLw6JTmOVg8Yffuh
saMJKs2w70F+7hgGl2G0kKAh5m/kI5Jw8JudFZl3d7UBhm0UQ7Pf7BaycuL9nw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxDB7EbI7Gw26bVQM3BV
0vuFGDDrbx+4BkF4+g9CtOs/Kqn7oAXMMR84SEIQYQn7dLiL6lKba5jN6ZCVdkJB
W4Hz1K2F1gi1aD/8iVgs57ZTPKFm7fIncypSZn0VGU9c+blWakdPPkuAOqBv7nDe
OXx8sd6OV7br8RyHyHKnppLUolrgM+xPuVsaVlgb+ijbet1waZCTFoKHocmM164p
JRmgnmt+yudkbpFEHuj/7/XLsEE/q7ALG9qn8jL+ArJxjDbns1kBvqB6U+ee44tU
V1+wjG26SGI0bFyHoH7X5LSFMAHt9V3GzsxOPTSKYjg+LSKuHZwX9uovYa/xvoJc
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 86460374685199711125299547820565205704
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-07 00:57:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-08 00:57:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fukuoka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fukuoka-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyushu University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information System Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qpost.jimu.kyushu-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22099966805984784341734471432417294815204358564575656542749630652950740251669774185626255522634991725504760281069931872824704704129996037514273588606519365185318383861754649198849085816315333575599534834872051232261262736657858898369277394878695216054094288989774477477394116938060829101446121870171811451584472454920420514684011463524239385629674638700871628006437943559838090617525976688472750836770216174912731552808726038199479276755814220047639784083157762387867998025835194655299367663201986202139817401152788783572703730352456981344073041519100793036581444564295067172896031985177387176317847263296427076508721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qpost.jimu.kyushu-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9563dc1581b391f070c301879b8bc2e54cf7542c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0096b9b5720a691f1cf68ee38b3e3eaf6d24ba34bacc7ad4a94301afabe15824d8eb13e316049b2dfda44bfe5ef9b0d834ceb640a2150a96d5ece308570dd74d89ae3139d49e0027b41af6bba01465906ab52eaf6ff34eb3780c31cd07d3f9a8182e197b247f9e36bafc7f3b3610fab01c62232024511375da9acfeb63a29ca9106c3483247c90b414648291aad6fe8353c5cabf3957b9cbf12c91a6ed4ca70e0ef3f3a6b944453415ab8c4b61b15fdc87ab638f4efb383ee4af173c01b6a70d3dc888a3478b75b0bc3a25398e560f187dfba1b1a3092acdb0ef417eee18069761b490a021e66fe4239270f09b9d15997777b501866d1443b3dfec16b272e2fd9f