netacademy.rikkyo.ac.jp

- Rikkyo University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 6c:a9:e4:4a:47:0d:5a:55:a7:c7:ae:08:89:c0:b0:05 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Rikkyo University

Organization: Rikkyo University
Organization unit: Media Center
State / Province: Tokyo
Locality: Toshima-ku
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 6c:a9:e4:4a:47:0d:5a:55:a7:c7:ae:08:89:c0:b0:05
Serial Number (int): 144438751988126537105267475953966166021
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ae:f2:55:68:de:94:5f:8b:6a:be:b1:de:8e:97:fd:0c:89:b8:b0:09
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 4d:c2:2c:7d:fb:a1:cb:7b:80:83:4d:c6:59:68:79:ff:e4:b2:0b:a4
Fingerprint (sha256): 14:55:72:01:8d:36:b3:b6:53:91:b8:d8:61:22:67:d0:ba:d7:28:4a:05:4d:83:c3:40:61:d5:7f:f6:d4:ba:9b


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate netacademy.rikkyo.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for netacademy.rikkyo.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

netacademy.rikkyo.ac.jp

Other certificates including the domain name rikkyo.ac.jp

(limited to 100 certificates)
sy.rikkyo.ac.jp
www.rikkyo.ac.jp
score.rikkyo.ac.jp
servicedesk.6dca.flcourts.gov
sy.rikkyo.ac.jp
www.rikkyo.ac.jp
redic.rikkyo.ac.jp
*.rikkyo.ac.jp
rt.rikkyo.ac.jp
upki-idp.rikkyo.ac.jp
rproxy.rikkyo.ac.jp
v5dcradius-01.rikkyo.ac.jp
r.rikkyo.ac.jp
vcs-ms.mo.rikkyo.ac.jp
www3.rikkyo.ac.jp
mspirit.rikkyo.ac.jp
socio.rikkyo.ac.jp
it-support.perimeter81.com
r.rikkyo.ac.jp
sso.rikkyo.ac.jp
r-jikan-t.rikkyo.ac.jp
wac.rikkyo.ac.jp
portfolio-t.rikkyo.ac.jp
business-school.rikkyo.ac.jp
rproxy.rikkyo.ac.jp
wwwj.rikkyo.ac.jp
a-station.rikkyo.ac.jp
lp.rikkyo.ac.jp
opac.rikkyo.ac.jp
cp.rikkyo.ac.jp
niiza.rikkyo.ac.jp
blpcob.rikkyo.ac.jp
webq-t.rikkyo.ac.jp
mls.rikkyo.ac.jp
icc.rikkyo.ac.jp
emp.rikkyo.ac.jp
mailgate.rikkyo.ac.jp
univdb.rikkyo.ac.jp
csi-shoumeisho.rikkyo.ac.jp
sdp.rikkyo.ac.jp
311help.seminolecountyfl.gov
webq.rikkyo.ac.jp
qa-sso.rikkyo.ac.jp
gakuseibu.rikkyo.ac.jp
mls.rikkyo.ac.jp
tourism.rikkyo.ac.jp
netacademy.rikkyo.ac.jp
opac.rikkyo.ac.jp
brix.rikkyo.ac.jp
wlc.rikkyo.ac.jp
r-jikan-t.rikkyo.ac.jp
sds.rikkyo.ac.jp
socio.rikkyo.ac.jp
mpma.rikkyo.ac.jp
mediasite.rikkyo.ac.jp
databank.rikkyo.ac.jp
www.rikkyo.ac.jp
upki-idp-test.rikkyo.ac.jp
sdp.rikkyo.ac.jp
upki-idp.rikkyo.ac.jp
idm.rikkyo.ac.jp
sy.rikkyo.ac.jp
real.rikkyo.ac.jp
csi-vpn.rikkyo.ac.jp
webfolder.rikkyo.ac.jp
spirittest.rikkyo.ac.jp
spirit-t.rikkyo.ac.jp
icc.rikkyo.ac.jp
sds.rikkyo.ac.jp
rpp.rikkyo.ac.jp
portfolio.rikkyo.ac.jp
icc.rikkyo.ac.jp
311help.seminolecountyfl.gov
*.staging.mobile.rikkyo.ac.jp
niiza.rikkyo.ac.jp
recruit.rikkyo.ac.jp
311help.seminolecountyfl.gov
cl.rikkyo.ac.jp
bb.rikkyo.ac.jp
r.rikkyo.ac.jp
socio.rikkyo.ac.jp
economics.rikkyo.ac.jp
real.rikkyo.ac.jp
sy.rikkyo.ac.jp
qa-sso.rikkyo.ac.jp
databank.rikkyo.ac.jp
csi-seminar.rikkyo.ac.jp
cjle.rikkyo.ac.jp
cp.rikkyo.ac.jp
discovery.rikkyo.ac.jp
archives.rikkyo.ac.jp
www.rikkyo.ac.jp
discovery.rikkyo.ac.jp
mls.rikkyo.ac.jp
150th.rikkyo.ac.jp
ry.rikkyo.ac.jp
servicedesk.6dca.flcourts.gov
*.rikkyo.ac.jp
opac.rikkyo.ac.jp
mynumber.rikkyo.ac.jp

Certificate

The complete raw certificate details for netacademy.rikkyo.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIQbKnkSkcNWlWnx64IicCwBTANBgkqhkiG9w0BAQsFADBb
MQswCQYDVQQGEwJKUDEqMCgGA1UEChMhTmF0aW9uYWwgSW5zdGl0dXRlIG9mIElu
Zm9ybWF0aWNzMSAwHgYDVQQDExdOSUkgT3BlbiBEb21haW4gQ0EgLSBHNTAeFw0x
OTA2MTMwNDQyMTZaFw0yMTA3MTQwNDQyMTZaMIGHMQswCQYDVQQGEwJKUDEOMAwG
A1UECBMFVG9reW8xEzARBgNVBAcTClRvc2hpbWEta3UxGjAYBgNVBAoTEVJpa2t5
byBVbml2ZXJzaXR5MRUwEwYDVQQLEwxNZWRpYSBDZW50ZXIxIDAeBgNVBAMTF25l
dGFjYWRlbXkucmlra3lvLmFjLmpwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1y5YqTBH2v1Q05tcCU4Y1zyaO1VCDOUJDb0X4KxkcPQ49QQ1mWvD9lgI
iNDXg+0VojLPHkxS/Tbh29OKYfv/kvAqtJjuplDURM31ip5lRIz46MKdOfdc0Zwf
F0grXCpKsVsA2TAm5yTld3U3P3Ka17pjEoS+6OYtW7idpvRD7KQlmIJHWqjmW9pH
WF39RHAcEbtKh+m9slaDiFFE6pzW49JGyPnxiRXZph1D8sQqKN8TjrloBaxJdaI8
+qFqIZG1vowxxUhQLnjIjBGkfVpc+671zH8+q5ChR7LLi25o3ajsHaB8cO3jt6Fu
PHf1EDrLlaNVUIYDogNU3d3leFA4MQIDAQABo4IDBjCCAwIwHwYDVR0jBBgwFoAU
Zzo6wWu3HKZBRjkwhMhpAFkRWMEwPAYIKwYBBQUHAQEEMDAuMCwGCCsGAQUFBzAB
hiBodHRwOi8vbmlpZzUub2NzcC5zZWNvbXRydXN0Lm5ldDAiBgNVHREEGzAZghdu
ZXRhY2FkZW15LnJpa2t5by5hYy5qcDBgBgNVHSAEWTBXMEsGDCsGAQQBgfwIAwIB
ATA7MDkGCCsGAQUFBwIBFi1odHRwczovL3JlcG8xLnNlY29tdHJ1c3QubmV0L3Nw
cGNhL25paS9vZGNhMy8wCAYGZ4EMAQICMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjBKBgNVHR8EQzBBMD+gPaA7hjlodHRwOi8vcmVwbzEuc2Vjb210cnVz
dC5uZXQvc3BwY2EvbmlpL29kY2EzL2Z1bGxjcmxnNS5jcmwwHQYDVR0OBBYEFK7y
VWjelF+Lar6x3o6X/QyJuLAJMA4GA1UdDwEB/wQEAwIFoDCCAX8GCisGAQQB1nkC
BAIEggFvBIIBawFpAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAA
AAFrTy3pbAAABAMARzBFAiBCKNN7i5enTQqwhDFXRuRJEpaP8q3xx3Zy7JyEDLvd
swIhAM5j/WDn4/7Fjlc2GqaiTV2vcchDp5L+tbd+cefqc9ERAHYA7ku9t3XOYLrh
Qmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFrTy3uhwAABAMARzBFAiA9FkgVw/Zx
cYsBTTaebj60/UBpsiPZi+3tVb2amutSwwIhAOVFHWs8fBAzm/DWuXJpEccBMTuf
iDskRzqlsk4eib6jAHcAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMA
AAFrTy33ugAABAMASDBGAiEA5UKa8EgJXioq9FTarWarKJKf7lp1V1LRO+k4FOE0
D1QCIQC1lODCv0UajmmTlyoymrHbKrudOwDJRQSBRa5BTEBvfTANBgkqhkiG9w0B
AQsFAAOCAQEAmDfMqgP+/h++F0YYQS9d5iQrgeep3FUeoZx324nfY7tv0rky4XwS
3WwAfXEuPXRNoBjMKoj/F+V3/hI4EM3ow2jv018U4nCQEejMsp9tY/CVNKJL4D9k
AflBkCfVp9eiF2dL2tJklcL8ka9klaVoZwtOoZ7+96hx/nWOdy+QUgCac5kmZYJP
B6Km4aaz9jdYcMZv1mU9Rk7QPmuT3/pY+mkSyC53sVQkgIxtcPJN7OvEvZnP4/w4
jmJhLkqMcFa9QaDp9JUW440vwKSJ2GdkhlYDlqhJajuAO5omiEtbXxXH2S/tsGxU
jez5FWU7N5Hm5xuGxmMBMwX25bbx/Cbv6Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1y5YqTBH2v1Q05tcCU4Y
1zyaO1VCDOUJDb0X4KxkcPQ49QQ1mWvD9lgIiNDXg+0VojLPHkxS/Tbh29OKYfv/
kvAqtJjuplDURM31ip5lRIz46MKdOfdc0ZwfF0grXCpKsVsA2TAm5yTld3U3P3Ka
17pjEoS+6OYtW7idpvRD7KQlmIJHWqjmW9pHWF39RHAcEbtKh+m9slaDiFFE6pzW
49JGyPnxiRXZph1D8sQqKN8TjrloBaxJdaI8+qFqIZG1vowxxUhQLnjIjBGkfVpc
+671zH8+q5ChR7LLi25o3ajsHaB8cO3jt6FuPHf1EDrLlaNVUIYDogNU3d3leFA4
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 144438751988126537105267475953966166021
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 04:42:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-14 04:42:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toshima-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rikkyo University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Media Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'netacademy.rikkyo.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27164089795609764683676494196010589935724511294539582848904841928096739663860735405949352132258189207413667535544573011901883985224019688680666379623306702992779850477083123838369185292538698071505315200310981143790118787434576469545329395430715362154377897490042499069432290376972431698881805928918315098224416113254429617560969612160326961504136659565194765605330204827449322649274400112292762622297199184703514643969135236490487696212286904122103862027199368497544117928106771630505590823964534784478256381009291369439412948302900917766258847063310794175822708795696132326158969594408652298161833272526096657561649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netacademy.rikkyo.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aef25568de945f8b6abeb1de8e97fd0c89b8b009
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016b4f2de96c000004030047304502204228d37b8b97a74d0ab084315746e44912968ff2adf1c77672ec9c840cbbddb3022100ce63fd60e7e3fec58e57361aa6a24d5daf71c843a792feb5b77e71e7ea73d111007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016b4f2dee87000004030047304502203d164815c3f671718b014d369e6e3eb4fd4069b223d98beded55bd9a9aeb52c3022100e5451d6b3c7c10339bf0d6b9726911c701313b9f883b24473aa5b24e1e89bea30077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b4f2df7ba0000040300483046022100e5429af048095e2a2af454daad66ab28929fee5a755752d13be93814e1340f54022100b594e0c2bf451a8e6993972a329ab1db2abb9d3b00c945048145ae414c406f7d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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