prserv.ied.inf.uec.ac.jp

- The University of Electro-Communications -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 0c:9a:c8:96:ea:0f:ca:cd was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

The University of Electro-Communications

Organization: The University of Electro-Communications
Locality: Academe
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:9a:c8:96:ea:0f:ca:cd
Serial Number (int): 908258825366129357
Serial Number lenght: 60 bits, 8 octets

SubjectKeyId: 37:e8:8b:d2:b1:89:34:0c:d2:89:b3:ff:dc:ba:1c:f1:4c:11:1b:7b
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 93:76:34:3d:12:de:b8:75:25:c8:55:99:c0:b9:66:de:cc:1c:8d:75
Fingerprint (sha256): 0f:c3:b2:95:c7:a4:6a:88:80:25:c2:20:b9:e2:6d:dc:74:5a:db:0e:9e:07:23:e3:08:51:da:de:55:95:69:a4


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate prserv.ied.inf.uec.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prserv.ied.inf.uec.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prserv.ied.inf.uec.ac.jp

Other certificates including the domain name uec.ac.jp

(limited to 100 certificates)
shibboleth.cc.uec.ac.jp
ipl.cs.uec.ac.jp
www.han-zemi.bunka.uec.ac.jp
portalweb.uec.ac.jp
den2moken.club.uec.ac.jp
www.ced.cei.uec.ac.jp
bss2.office.uec.ac.jp
ipl.cs.uec.ac.jp
campusap.office.uec.ac.jp
www.az.lab.uec.ac.jp
jsb.cs.uec.ac.jp
kiwi04.fedu.uec.ac.jp
www.lib.uec.ac.jp
den2moken.club.uec.ac.jp
uecdisk.cc.uec.ac.jp
igtee.g-edu.uec.ac.jp
enq.edu.uec.ac.jp
www.ce.uec.ac.jp
www.inaba.aix.uec.ac.jp
thetis.f-lab.tech.uec.ac.jp
thetis.f-lab.tech.uec.ac.jp
repo.inf.uec.ac.jp
den2moken.club.uec.ac.jp
www.inaba.aix.uec.ac.jp
post-8.cc.uec.ac.jp
thetis.f-lab.tech.uec.ac.jp
webclass.cdel.uec.ac.jp
aae.office.uec.ac.jp
app.cdel.uec.ac.jp
post-3.cc.uec.ac.jp
packetix01.cc.uec.ac.jp
townsend.ee.uec.ac.jp
thetis.f-lab.tech.uec.ac.jp
comp.lab.uec.ac.jp
post-4.cc.uec.ac.jp
cf.arc.uec.ac.jp
uecdisk.cc.uec.ac.jp
www.ied.inf.uec.ac.jp
prserv.ied.inf.uec.ac.jp
yoyaku.cia.uec.ac.jp
imap.cc.uec.ac.jp
den2moken.club.uec.ac.jp
en.funato.lab.uec.ac.jp
buzzard.fedu.uec.ac.jp
www.media.lab.uec.ac.jp
tls.automattic.com
www.funato.lab.uec.ac.jp
www.inf.uec.ac.jp
video.websys.edu.uec.ac.jp
gozkap.office.uec.ac.jp
campusweb.office.uec.ac.jp
ryohi.office.uec.ac.jp
www.funato.lab.uec.ac.jp
wfs01.office.uec.ac.jp
www2.nm.cs.uec.ac.jp
tls.automattic.com
repo.inf.uec.ac.jp
webmail.cc.uec.ac.jp
comp.is.uec.ac.jp
campusweb.office.uec.ac.jp
eve.cc.uec.ac.jp
bb.csirt.uec.ac.jp
www.ohsuga.lab.uec.ac.jp
nic.lab.uec.ac.jp
jnns2015.im.uec.ac.jp
www.uecwings.club.uec.ac.jp
nc2.office.uec.ac.jp
giken26.cc.uec.ac.jp
radish.ee.uec.ac.jp
www.gozk.office.uec.ac.jp
wlgate.inf.uec.ac.jp
en.funato.lab.uec.ac.jp
chikuwa.ce.uec.ac.jp
kiwi04.fedu.uec.ac.jp
wlan.cc.uec.ac.jp
nas2015.im.uec.ac.jp
www.lib.uec.ac.jp
campusap.office.uec.ac.jp
portfolio-serv.edu.uec.ac.jp
wlan.cc.uec.ac.jp
www.ce.uec.ac.jp
www.edu.cc.uec.ac.jp
kintai.office.uec.ac.jp
www.az.lab.uec.ac.jp
www.ce.uec.ac.jp
gakumu.office.uec.ac.jp
www.ced.cei.uec.ac.jp
*.uec.ac.jp
moon.mma.club.uec.ac.jp
*.uec.ac.jp
m.ils.uec.ac.jp
post-1.cc.uec.ac.jp
na.cal.edu.uec.ac.jp
ftth10.ice.uec.ac.jp
www.inaba.aix.uec.ac.jp
wlan.cc.uec.ac.jp
mm.cs.uec.ac.jp
www.ils.uec.ac.jp
www.websys.edu.uec.ac.jp
post-4.cc.uec.ac.jp

Certificate

The complete raw certificate details for prserv.ied.inf.uec.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgIIDJrIluoPys0wDQYJKoZIhvcNAQELBQAwWzELMAkGA1UE
BhMCSlAxKjAoBgNVBAoTIU5hdGlvbmFsIEluc3RpdHV0ZSBvZiBJbmZvcm1hdGlj
czEgMB4GA1UEAxMXTklJIE9wZW4gRG9tYWluIENBIC0gRzUwHhcNMTgwMzI4MDY1
ODA4WhcNMjAwNDI4MDY1ODA4WjB1MQswCQYDVQQGEwJKUDEQMA4GA1UEBxMHQWNh
ZGVtZTExMC8GA1UEChMoVGhlIFVuaXZlcnNpdHkgb2YgRWxlY3Ryby1Db21tdW5p
Y2F0aW9uczEhMB8GA1UEAxMYcHJzZXJ2LmllZC5pbmYudWVjLmFjLmpwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIov/sJ23jXCNJbMAb1E5SrqKbAI
ZI0CANn80t2WFgCSm+lsNf3L99xww5xKMryVICcdy0uzW+C/I99DftZ1Oxmun20h
EnzGRoPbvJXtSS78j08DNAGxVqFoOFuQmZej5t/u0wg4x/4bbipwA7Gw80iMGxCY
ml25BkYAy38BJmVGVop0AjFye6MbYsuUvYMGsgFwT8P2YQ42mTDXTRp81JQPmfml
RwbSFARA0HiiLNRrXwmDBIVKul2DllMZ/6JZVnE5vf/49QgOUb15oR48VS7kpUXP
yJzbaod55J1JoSSPrAouQ9h8bHZytPKP2nhkZplxHpFzNFFwPX+aPZTEtQIDAQAB
o4IBmTCCAZUwHwYDVR0jBBgwFoAUZzo6wWu3HKZBRjkwhMhpAFkRWMEwPAYIKwYB
BQUHAQEEMDAuMCwGCCsGAQUFBzABhiBodHRwOi8vbmlpZzUub2NzcC5zZWNvbXRy
dXN0Lm5ldDAjBgNVHREEHDAaghhwcnNlcnYuaWVkLmluZi51ZWMuYWMuanAwYAYD
VR0gBFkwVzBLBgwrBgEEAYH8CAMCAQEwOzA5BggrBgEFBQcCARYtaHR0cHM6Ly9y
ZXBvMS5zZWNvbXRydXN0Lm5ldC9zcHBjYS9uaWkvb2RjYTMvMAgGBmeBDAECAjAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSgYDVR0fBEMwQTA/oD2gO4Y5
aHR0cDovL3JlcG8xLnNlY29tdHJ1c3QubmV0L3NwcGNhL25paS9vZGNhMy9mdWxs
Y3JsZzUuY3JsMB0GA1UdDgQWBBQ36IvSsYk0DNKJs//cuhzxTBEbezAOBgNVHQ8B
Af8EBAMCBaAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB
AAM7yxjnILofRW8P4QyKZBzbsk3kyAuAWza1eoBxw79kiqAAPokRNK/jxfxJSrKK
5Gg/2C2SLQWlvQiDhKC0jsu650KCfYSDnfSLp08GIXwv6IStHtDibcNHkJpNI4S5
33oDQfTqtruj412VyYSPGK4u9SPOdE/nD7gAzD6nWsq8RXddp9DpLY/xz1dmLAIN
S2G0h35o/b+lCjccRnYTvdexiLiJM53GTAQeRjbz6p+SlwHDHgxDBGJ/tTdnU+62
CIAPn3wVfIS5ViuwlR96mzrMhS5l/U0/k9Hunzh38VGn/XllkXCxr3mFXx8I9d7Z
CDAevszZBUR2fhc/oOcCaN8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIov/sJ23jXCNJbMAb1E
5SrqKbAIZI0CANn80t2WFgCSm+lsNf3L99xww5xKMryVICcdy0uzW+C/I99DftZ1
Oxmun20hEnzGRoPbvJXtSS78j08DNAGxVqFoOFuQmZej5t/u0wg4x/4bbipwA7Gw
80iMGxCYml25BkYAy38BJmVGVop0AjFye6MbYsuUvYMGsgFwT8P2YQ42mTDXTRp8
1JQPmfmlRwbSFARA0HiiLNRrXwmDBIVKul2DllMZ/6JZVnE5vf/49QgOUb15oR48
VS7kpUXPyJzbaod55J1JoSSPrAouQ9h8bHZytPKP2nhkZplxHpFzNFFwPX+aPZTE
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 908258825366129357
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-28 06:58:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-28 06:58:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Academe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Electro-Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prserv.ied.inf.uec.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24305897340116986750824693463595187218695300051375726663535337322896784515379287711101313413913694134120406254429898385691017881823576342381693396615384544799055257496787975790844130647244241542999930012530057527425872356275163823869144382008587787373694471051078966223858335508734127855983221695352769645239091077831573575805210454681935900189073154979069544528997214487773897731867245378222793502694897502349745745285769472251458630544945806439421232125716873304848561473711309891746967030767811755872857827153661585415478127872043374108228280488140208966221704126256704107256906186643363771617787954633505240302773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prserv.ied.inf.uec.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37e88bd2b189340cd289b3ffdcba1cf14c111b7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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