www.mirai.info.hiroshima-cu.ac.jp

- Hiroshima City University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 6a:6a:0c:ea:9b:43:40:2f:f5:7b:ec:bf:49:d0:fa:89 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Hiroshima City University

Organization: Hiroshima City University
Organization unit: HCU
State / Province: hiroshima
Locality: hiroshima
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 6a:6a:0c:ea:9b:43:40:2f:f5:7b:ec:bf:49:d0:fa:89
Serial Number (int): 141448812996562524082691398453351742089
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c2:c7:00:ba:7e:42:09:3b:06:df:72:54:0b:a1:11:a6:f6:35:b2:d8
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 53:7b:33:c3:a9:84:5d:e1:c4:e2:8e:bb:e7:c5:fe:3d:3a:c6:54:27
Fingerprint (sha256): 1d:3d:5b:65:56:8a:a8:15:a1:25:b3:88:17:9e:66:c4:b7:8f:c7:87:38:9c:2d:31:50:c3:0b:95:e6:8b:8e:13


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate www.mirai.info.hiroshima-cu.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mirai.info.hiroshima-cu.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mirai.info.hiroshima-cu.ac.jp

Other certificates including the domain name hiroshima-cu.ac.jp

(limited to 100 certificates)
beta.cm.info.hiroshima-cu.ac.jp
eduroam.ipc.hiroshima-cu.ac.jp
www.cd.info.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
www.netsci.info.hiroshima-cu.ac.jp
vmcs.office.hiroshima-cu.ac.jp
www2.lib.hiroshima-cu.ac.jp
vcd.art.hiroshima-cu.ac.jp
beta.cm.info.hiroshima-cu.ac.jp
hcuwww.ipc.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
hcuwww.ipc.hiroshima-cu.ac.jp
adfs.ipc.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
www2.lib.hiroshima-cu.ac.jp
intl.hiroshima-cu.ac.jp
phys.info.hiroshima-cu.ac.jp
triathlon.hiroshima-cu.ac.jp
castle.csl.info.hiroshima-cu.ac.jp
www.mirai.info.hiroshima-cu.ac.jp
vc04.hiroshima-cu.ac.jp
hculdud.ipc.hiroshima-cu.ac.jp
gate.ipc.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
opac.lib.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
wiki.v6.inet.info.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
nysnx.office.hiroshima-cu.ac.jp
ichipol.hiroshima-cu.ac.jp
apnasv1.intl.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
www2.lib.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
ichipol.hiroshima-cu.ac.jp
phys.info.hiroshima-cu.ac.jp
itssrv.edu.ipc.hiroshima-cu.ac.jp
intl.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
adfs.ipc.hiroshima-cu.ac.jp
triathlon.hiroshima-cu.ac.jp
m45ma.ipc.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
rct.office.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
www.hiroshima-cu.ac.jp
mailchk.ipc.hiroshima-cu.ac.jp
m45ma.ipc.hiroshima-cu.ac.jp
hpc51a.mc.info.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
hcuidm.ipc.hiroshima-cu.ac.jp
webclass.ipc.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
phys.info.hiroshima-cu.ac.jp
mail.sos.info.hiroshima-cu.ac.jp
www.prl.info.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
gdep.sos.info.hiroshima-cu.ac.jp
vcd.art.hiroshima-cu.ac.jp
www.cd.info.hiroshima-cu.ac.jp
www.mirai.info.hiroshima-cu.ac.jp
aokin.lang.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
gate.ipc.hiroshima-cu.ac.jp
www.v6.netsci.info.hiroshima-cu.ac.jp
mssa.ipc.hiroshima-cu.ac.jp
phys.info.hiroshima-cu.ac.jp
kss.office.hiroshima-cu.ac.jp
apnasv1.office.hiroshima-cu.ac.jp
mail.sos.info.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
fed.ipc.hiroshima-cu.ac.jp
renew.triathlon.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
info.hiroshima-cu.ac.jp
info.hiroshima-cu.ac.jp
vc02.hiroshima-cu.ac.jp
aokin.lang.hiroshima-cu.ac.jp
beta.cm.info.hiroshima-cu.ac.jp
ats2021.info.hiroshima-cu.ac.jp
mailchk.ipc.hiroshima-cu.ac.jp
wm45ma.ipc.hiroshima-cu.ac.jp
hpc51a.mc.info.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
www.cd.info.hiroshima-cu.ac.jp
gate.ipc.hiroshima-cu.ac.jp
fed.ipc.hiroshima-cu.ac.jp
fed.ipc.hiroshima-cu.ac.jp
info.hiroshima-cu.ac.jp
vc-office.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
adfs.ipc.hiroshima-cu.ac.jp
aburae.art.hiroshima-cu.ac.jp

Certificate

The complete raw certificate details for www.mirai.info.hiroshima-cu.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7Po6z/29wvrDIscfYLw
FMWFZaw70LEN2jzudU7infF6VDWKaynD3r7zdoylBg2OAdQlzE3subpI/nZz+x9T
NoszV5HDzQ2+sxNr73sAAB6ANISkGN/z854bDZfBgKDhau2z5uI8fqAw8k+0Ca8q
oUP05vADUaijB8DdcjdWjMq4Aij5z6j3dzqEEfwIhfbm2n3bVsTFcnS1PvIhcsvq
t4vVM3z9nJRQYsxeoRj0m3YkFoP5rrhgMV95Kqp9Z+o1YpSxgcbG+EQ8BCZP252y
LlNBOaf1gf0ri453SEAgwXMFb+1N0FaEgEH3Ug0g2y+c0QcYMULSRthbhlMEBlrK
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 141448812996562524082691398453351742089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-04 01:47:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-05 01:47:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hiroshima'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hiroshima'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hiroshima City University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HCU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mirai.info.hiroshima-cu.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22685373437367294590687907305472207791538233179111795277846786027495399126757662246918816842551028090279798406611701858688333135345791394904349853946301365484325179316597432635467342047470625153198376630266927902586100657179530961199723512772160987734240409033485133217716932248243149718018990554650369409699386758007781081235545223865580878691437524898428405741359476588888643542101227554863699314773039355367714090512821479141993612867813167413149048438895994280450995115464487485713085409968210070937820099620419022482077477639360260566369792193447740436153549576709545306268872769773752650415643404851043970501239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mirai.info.hiroshima-cu.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2c700ba7e42093b06df72540ba111a6f635b2d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016b203445ca0000040300473045022100908770f39ade6e913a858adfadcfb294e706077969faf393f2eb22680cba1b8d0220675ed8bec36998cc5d11848b8348f47a81b77f9ee4df1649102d07f452d9b27e007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016b20344e860000040300473045022100b44effa5e9dc8bc57845bbf5493463842dbfda410d8864010f0809a4f7e0952602206915ee119393ab47c63541ea08b26ca0c5d376b309e42f2ca7187876698d418d0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b203457c10000040300483046022100cf8f2d66037cd4822ff17020207ec955370ef1a6db7528493ee532e410a13fe70221008ea13ffc8f0bbfa00c75487e4805b6c1bd12125f58f38b4d7c02c8be2b14c88c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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