repo.prime-strategy.co.jp

Issued by FujiSSL Public Validation Authority - G3

About this certificate

This digital certificate with serial number 52:1d:dc:04:32:f8:ec:79:a5:7d:9c:08:56:b7:f3:16 was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Certificate Subject

CN=repo.prime-strategy.co.jp

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 52:1d:dc:04:32:f8:ec:79:a5:7d:9c:08:56:b7:f3:16
Serial Number (int): 109151734726061245820692712680662233878
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d9:32:8d:ad:0a:65:5c:b9:d8:97:8f:8c:47:fb:13:2f:cd:c1:12:ee
AuthorityKeyId: bc:eb:d9:11:e0:51:64:6f:ff:f0:74:4f:0d:5a:ab:4a:4f:2d:78:27

Fingerprint (sha1): 00:3c:02:79:cf:c2:0c:b0:28:00:03:04:5f:1b:d1:02:63:2d:f9:d4
Fingerprint (sha256): 0d:10:ea:b3:4b:a8:75:b7:aa:8c:6b:71:6b:6b:f1:fc:20:72:94:92:15:6f:3c:5c:ca:51:f8:cd:07:55:99:6a


Revocation information

OCSP Server: http://nijimo3.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nijimo3/fullCRL.crl

Check the revocation status for certificate repo.prime-strategy.co.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for repo.prime-strategy.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

repo.prime-strategy.co.jp

Other certificates including the domain name prime-strategy.co.jp

(limited to 100 certificates)
ssl.prime-strategy.co.jp
repo.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
repo-test.prime-strategy.co.jp
column.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
marketplace.prime-strategy.co.jp
column.prime-strategy.co.jp
repo.prime-strategy.co.jp
alue.prime-strategy.co.jp
*.prime-strategy.co.jp
wpbk2.prime-strategy.co.jp
kusanagi80.prime-strategy.co.jp
wpbk2.prime-strategy.co.jp
onlineshop.prime-strategy.co.jp
yachiyo.prime-strategy.co.jp
column.prime-strategy.co.jp
sociableweaver.prime-strategy.co.jp
blog.prime-strategy.co.jp
wpbk2.prime-strategy.co.jp
yachiyo.prime-strategy.co.jp
recruit.prime-strategy.co.jp
sociableweaver.prime-strategy.co.jp
www.prime-strategy.co.jp
recruit.prime-strategy.co.jp
betabizrepo.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
*.prime-strategy.co.jp
mail2.prime-strategy.co.jp
concrete5.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
kusanagi-hosting.prime-strategy.co.jp
cydesignation.vip-demo.prime-strategy.co.jp
www.prime-strategy.co.jp
column.prime-strategy.co.jp
recruit.prime-strategy.co.jp
column.prime-strategy.co.jp
alue.prime-strategy.co.jp
wpbk2.prime-strategy.co.jp
alue.prime-strategy.co.jp
recruit.prime-strategy.co.jp
sociableweaver.prime-strategy.co.jp
alue.prime-strategy.co.jp
pacific.prime-strategy.co.jp
blog.prime-strategy.co.jp
sociableweaver.prime-strategy.co.jp
sociableweaver.prime-strategy.co.jp
sociableweaver.prime-strategy.co.jp
ssl.prime-strategy.co.jp
yachiyo.prime-strategy.co.jp
recruit.prime-strategy.co.jp
column.prime-strategy.co.jp
sociableweaver.prime-strategy.co.jp
kusanagi-hosting.prime-strategy.co.jp
column.prime-strategy.co.jp
recruit.prime-strategy.co.jp
marketplace.prime-strategy.co.jp
recruit.prime-strategy.co.jp
advrepo.prime-strategy.co.jp
www.prime-strategy.co.jp
repo.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
marketplace.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
alue.prime-strategy.co.jp
sociableweaver.prime-strategy.co.jp
advrepo.prime-strategy.co.jp
column.prime-strategy.co.jp
pacific.prime-strategy.co.jp
column.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
sociableweaver.prime-strategy.co.jp
www.prime-strategy.co.jp
ssl.prime-strategy.co.jp
column.prime-strategy.co.jp
i7-243.prime-strategy.co.jp
kusanagi80.prime-strategy.co.jp
gcpdemo.prime-strategy.co.jp
wpbk2.prime-strategy.co.jp
mail2.prime-strategy.co.jp
marketplace.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
www.prime-strategy.co.jp
alue.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
yachiyo.prime-strategy.co.jp
column.prime-strategy.co.jp
wpbk2.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
mail2.prime-strategy.co.jp
alue.prime-strategy.co.jp
develop.prime-strategy.co.jp
blog.prime-strategy.co.jp
blog.prime-strategy.co.jp
recruit.prime-strategy.co.jp
column.prime-strategy.co.jp
yachiyo.prime-strategy.co.jp
alue.prime-strategy.co.jp
hrd.mynavi.jp.prime-strategy.co.jp

Certificate

The complete raw certificate details for repo.prime-strategy.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIQUh3cBDL47HmlfZwIVrfzFjANBgkqhkiG9w0BAQsFADBn
MQswCQYDVQQGEwJKUDElMCMGA1UEChMcU0VDT00gVHJ1c3QgU3lzdGVtcyBDTy4s
TFRELjExMC8GA1UEAxMoRnVqaVNTTCBQdWJsaWMgVmFsaWRhdGlvbiBBdXRob3Jp
dHkgLSBHMzAeFw0xOTExMTEwMzA5MjhaFw0yMDExMTIxNDU5NTlaMCQxIjAgBgNV
BAMTGXJlcG8ucHJpbWUtc3RyYXRlZ3kuY28uanAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCfG8WLfw77dSa14yxyzI9Wal40qPW3x1VKa52vBA7XM1H
C/E9ShPQOB7EIsSLXOdh1/ZcK/PbpnBx8hW/jhsQe2pE4b+aFs8ByhtrRImVEJwO
soTcowzJ4vKsvoFb8xUxfMT5RW0wJvmjpte3qtucCyiEQy785T73muvrIhv94KXg
rtAaC7U65o31PmCLeWcNlCKuYFtbmhpZrnHsWlcI4pJawBTWX7vWeM5lklPmif9g
0FSDo6qas/a8cIsLicwvJJWlrKxpBhqPzXYOoPyV0fbzqyNO5oo7JwpAWdnFXtSy
12TLQKTHrDPeWTMOHbywKRvPctgn/EIFa7is4M5zAgMBAAGjggL4MIIC9DAfBgNV
HSMEGDAWgBS869kR4FFkb//wdE8NWqtKTy14JzA+BggrBgEFBQcBAQQyMDAwLgYI
KwYBBQUHMAGGImh0dHA6Ly9uaWppbW8zLm9jc3Auc2Vjb210cnVzdC5uZXQwJAYD
VR0RBB0wG4IZcmVwby5wcmltZS1zdHJhdGVneS5jby5qcDBcBgNVHSAEVTBTMEcG
CiqDCIybG26BVQEwOTA3BggrBgEFBQcCARYraHR0cHM6Ly9yZXBvMS5zZWNvbXRy
dXN0Lm5ldC9zcHBjYS9uaWppbW8zLzAIBgZngQwBAgEwEwYDVR0lBAwwCgYIKwYB
BQUHAwEwRgYDVR0fBD8wPTA7oDmgN4Y1aHR0cDovL3JlcG8xLnNlY29tdHJ1c3Qu
bmV0L3NwcGNhL25pamltbzMvZnVsbENSTC5jcmwwHQYDVR0OBBYEFNkyja0KZVy5
2JePjEf7Ey/NwRLuMA4GA1UdDwEB/wQEAwIFoDCCAX8GCisGAQQB1nkCBAIEggFv
BIIBawFpAHcApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFuWHk2
RAAABAMASDBGAiEApg/nkeSua2UkDg0x5pue0emd0jkm3mzMhOQkn8jKpi0CIQCU
hPjGFEyn0UNNbgZJ3o8huk0Bk2dW+RjUIZpweVeZEwB3AO5Lvbd1zmC64UJpH6vh
nmajD35fsHLYgwDEe4l6qP3LAAABblh5PaAAAAQDAEgwRgIhAK6NLZrBLUr1UxSG
jjQzDIyvtonMoUvFgUGaxbsmdCa1AiEAlFNsKny5ancCqhz/vgBKZTMQNvcMvVH9
MK8a+oZSJxAAdQBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAW5Y
eUE8AAAEAwBGMEQCIFguBXZA/gZfYjjo7iX0wCDDcGZ+fzkO+Woj7BmOelc6AiBF
rre8QxCZZfzMFrAe+NT/rr6T6s/ibLUQ5DDAXni1qjANBgkqhkiG9w0BAQsFAAOC
AQEArJcDJYjlboWF9dWG8Polg+y8i9N2xkSK/PaQb6edQ6rEDa6fYThnJR2mQFZf
5WWefv4K1v9dBvk9W2rrda86afuy1OzbwbsqCe8pb/Xdd0dO7Xtoy7hRgN+iskbI
D+MRxDU1ZU8UpH2MX+XoBWOGAo+86tkIeXkKal8m+aJ+pe9pZqgnH7IIiq+XZfeZ
YOnBl1mJNnSuxxLv3b+NJ9+qAj4jeSS3S4j95D+k25UAfmplkfV9SgQ8O3MWQv6G
sn76MHLeIPkrIRz4lZSUKmGmkW/X0n34yMRlsv6gvyFYDDzezGQbqv5Kk0lLeZ14
vH7TJQderOy/GP4Eg6PNqU5E1A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnxvFi38O+3UmteMscsy
PVmpeNKj1t8dVSmudrwQO1zNRwvxPUoT0DgexCLEi1znYdf2XCvz26ZwcfIVv44b
EHtqROG/mhbPAcoba0SJlRCcDrKE3KMMyeLyrL6BW/MVMXzE+UVtMCb5o6bXt6rb
nAsohEMu/OU+95rr6yIb/eCl4K7QGgu1OuaN9T5gi3lnDZQirmBbW5oaWa5x7FpX
COKSWsAU1l+71njOZZJT5on/YNBUg6OqmrP2vHCLC4nMLySVpaysaQYaj812DqD8
ldH286sjTuaKOycKQFnZxV7Ustdky0Ckx6wz3lkzDh28sCkbz3LYJ/xCBWu4rODO
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 109151734726061245820692712680662233878
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FujiSSL Public Validation Authority - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 03:09:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-12 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'repo.prime-strategy.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24551591822318525231734808183531858566462755230526350756127821221830745809664830056964006105444731337145627652984487003632000136410449825962674237413700850311849035762507409924539527483441173157295650008237342429898325821568336297145311767169710403333401246700080567462665431989872775475498720613039087027855653587940381704022086860376653612263101781019997357746771609888371550434541968317781608857680197682525185574966552163300016480311094129332620603264513991376170631046842958362109747594879837403385797032450954503178680007733977014247323497520579277885844767907892066351095702605517889434715367576361886747250291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bcebd911e051646ffff0744f0d5aab4a4f2d7827
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://nijimo3.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repo.prime-strategy.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.213.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nijimo3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nijimo3/fullCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9328dad0a655cb9d8978f8c47fb132fcdc112ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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