yoboukai-clinic.daiwa-comp.co.jp

- D-solution Co. Ltd. -

Issued by SECOM Passport for Web SR 3.0 CA

About this certificate

This digital certificate with serial number 48:ba:d3:e8:02:d4:5d:fb:ba:3a:1c:58:e4:d4:9c:ca was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

D-solution Co. Ltd.

Organization: D-solution Co. Ltd.
Organization unit: D-solution Co. Ltd.
State / Province: Tokyo
Locality: Chuo-ku
Country: JP

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 48:ba:d3:e8:02:d4:5d:fb:ba:3a:1c:58:e4:d4:9c:ca
Serial Number (int): 96674480882437200716802285338052828362
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 82:b4:73:05:e2:f8:3e:1f:f4:f2:46:8f:a8:b1:85:5a:59:4e:9a:1a
AuthorityKeyId: cb:ef:3d:ef:83:74:a1:a8:42:f0:3b:40:36:fa:6d:82:94:a9:27:36

Fingerprint (sha1): 15:60:ac:7f:a5:2c:90:ab:0a:d3:37:83:df:7f:6d:00:57:b1:15:54
Fingerprint (sha256): 1f:db:14:84:6d:16:a2:f8:63:19:03:eb:a8:31:dc:ea:90:fb:a9:b4:77:9a:ea:93:cf:24:6c:d6:80:66:f0:c4


Revocation information

OCSP Server: http://sr30.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/fullcrl2.crl

Check the revocation status for certificate yoboukai-clinic.daiwa-comp.co.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yoboukai-clinic.daiwa-comp.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

yoboukai-clinic.daiwa-comp.co.jp

Other certificates including the domain name daiwa-comp.co.jp

(limited to 100 certificates)
deos.daiwa-comp.co.jp
regist.daiwa-comp.co.jp
yoboukai-clinic.daiwa-comp.co.jp
regist.daiwa-comp.co.jp
yoboukai-clinic.daiwa-comp.co.jp
order2.daiwa-comp.co.jp
yoboukai-clinic.daiwa-comp.co.jp
deos.daiwa-comp.co.jp
deos.daiwa-comp.co.jp
liquorace.daiwa-comp.co.jp
regist.daiwa-comp.co.jp
yoboukai-clinic.daiwa-comp.co.jp
deos.daiwa-comp.co.jp
edi.daiwa-comp.co.jp
deos.daiwa-comp.co.jp
yoboukai-clinic.daiwa-comp.co.jp
deos.daiwa-comp.co.jp
deos.daiwa-comp.co.jp
deos.daiwa-comp.co.jp
liquorace.daiwa-comp.co.jp
deos.daiwa-comp.co.jp
deos.daiwa-comp.co.jp
yoboukai-clinic.daiwa-comp.co.jp
deos.daiwa-comp.co.jp
deos.daiwa-comp.co.jp
yoboukai-clinic.daiwa-comp.co.jp

Certificate

The complete raw certificate details for yoboukai-clinic.daiwa-comp.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGiTCCBXGgAwIBAgIQSLrT6ALUXfu6OhxY5NScyjANBgkqhkiG9w0BAQsFADBf
MQswCQYDVQQGEwJKUDElMCMGA1UEChMcU0VDT00gVHJ1c3QgU3lzdGVtcyBDTy4s
TFRELjEpMCcGA1UEAxMgU0VDT00gUGFzc3BvcnQgZm9yIFdlYiBTUiAzLjAgQ0Ew
HhcNMTkxMTIwMDkwODE1WhcNMjExMTIyMTQ1OTU5WjCBljELMAkGA1UEBhMCSlAx
DjAMBgNVBAgTBVRva3lvMRAwDgYDVQQHEwdDaHVvLWt1MRwwGgYDVQQKExNELXNv
bHV0aW9uIENvLiBMdGQuMRwwGgYDVQQLExNELXNvbHV0aW9uIENvLiBMdGQuMSkw
JwYDVQQDEyB5b2JvdWthaS1jbGluaWMuZGFpd2EtY29tcC5jby5qcDCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAM04CFHqBbNqIsmzK3L7lrX87ilG/+nu
pTg3DqeZyXNM8kk9JlK0oRE7KtZihbAGr1M/6XHAzzJPl2bjhyu3A4KwhqDYvMw9
srcEqX0t99i9qxTpV7OAqNnuCNNzTf/p/Kmqd4KtH5NfcEcsX+PM01HsLwF8aOwC
hUeVWUAKt3BZjOyjJsl2cFXw+S8JAyFm5Gv0dzAoInFrcAYEG1MpSNr4SeciuOJ4
AnMkZXKZ86lPYvsHbDgWEA5iBZK6V+u0MmHkEsBYCEQczeOHXLcVPLuaQfIeQwkF
yYjMII+uGwj61nfFpmL5vJUs+Tcs4B+uePiIYU9qrR5j4mLAszvs4ksCAwEAAaOC
AwcwggMDMB8GA1UdIwQYMBaAFMvvPe+DdKGoQvA7QDb6bYKUqSc2MDsGCCsGAQUF
BwEBBC8wLTArBggrBgEFBQcwAYYfaHR0cDovL3NyMzAub2NzcC5zZWNvbXRydXN0
Lm5ldDArBgNVHREEJDAigiB5b2JvdWthaS1jbGluaWMuZGFpd2EtY29tcC5jby5q
cDBhBgNVHSAEWjBYMEwGCiqDCIybG2SFbwEwPjA8BggrBgEFBQcCARYwaHR0cHM6
Ly9yZXBvMS5zZWNvbXRydXN0Lm5ldC9zcGNwcC9wZncvcGZ3c3IzY2EvMAgGBmeB
DAECAjATBgNVHSUEDDAKBggrBgEFBQcDATBMBgNVHR8ERTBDMEGgP6A9hjtodHRw
Oi8vcmVwbzEuc2Vjb210cnVzdC5uZXQvc3BjcHAvcGZ3L3Bmd3NyM2NhL2Z1bGxj
cmwyLmNybDAdBgNVHQ4EFgQUgrRzBeL4Ph/08kaPqLGFWllOmhowDgYDVR0PAQH/
BAQDAgWgMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdgCkuQmQtBhYFIe7E6LM
Z3AKPDWYBPkb37jjd80OyA3cEAAAAW6IGu0mAAAEAwBHMEUCIG9i2P0/w/z2D1Ey
xeOeB6WDzKfPttAd3tnZdu7yNAZ6AiEA/Yqd8hyAfciddTMfy8Nwk2FdrgqB0Z04
2PkoK7DoGlAAdwDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAW6I
GvSEAAAEAwBIMEYCIQDFmYkkGlfGpilSzTVq9RmKkmCJNTIV+HdqCkVmTQ+eQgIh
AJtVhkRVGlCu2YibZAKYvBl+0zoQyKkrtTZhIfeGwNwvAHYAb1N2rDHwMRnYmQCk
URX/dxUcEdkCwQApBo2yCJo32RMAAAFuiBr4KwAABAMARzBFAiEA++G02FcaCMMD
uL0Gd63fe+nOzMB1uMxgQGSLjf5WboQCIA3JQOUVJyAydi2B9gNjF3ySSyYDa1F4
DLOlGU+h27hFMA0GCSqGSIb3DQEBCwUAA4IBAQAPPm9Y4yKFQTmZWmLsmhal5Wqv
R6cTwge2jayX0EYreZ+NzPh0mQFyNA2JM1nKs7EfGfnWTvvYCP6hZtTrymqJlIJH
ufSNlsOrRfLe9i2sgDbGar2dvHmusAs415L/a93T/h7HXM3TIwlJV/WzmdFqhomA
VwgrCEUAKUAX0xZkWM9y+EdL8t/X+LZtt0aWXMbjtg50xRdf0AU2WjFVA/5m6JpI
bdYU1kUW7cOytaye3GUhJNDQgDi6stFkFAWSGFBlg8trbMpxO9oa0w22soMRXUWL
MBQYvXlBhggcUFH+DTZ0ENsU5LHUMjmfXLYw832lAlIsEaJseZW3tZYeYAZv
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTgIUeoFs2oiybMrcvuW
tfzuKUb/6e6lODcOp5nJc0zyST0mUrShETsq1mKFsAavUz/pccDPMk+XZuOHK7cD
grCGoNi8zD2ytwSpfS332L2rFOlXs4Co2e4I03NN/+n8qap3gq0fk19wRyxf48zT
UewvAXxo7AKFR5VZQAq3cFmM7KMmyXZwVfD5LwkDIWbka/R3MCgicWtwBgQbUylI
2vhJ5yK44ngCcyRlcpnzqU9i+wdsOBYQDmIFkrpX67QyYeQSwFgIRBzN44dctxU8
u5pB8h5DCQXJiMwgj64bCPrWd8WmYvm8lSz5NyzgH654+IhhT2qtHmPiYsCzO+zi
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 96674480882437200716802285338052828362
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Passport for Web SR 3.0 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-20 09:08:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-22 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chuo-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'D-solution Co. Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'D-solution Co. Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yoboukai-clinic.daiwa-comp.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25906483173556631501932273896557116671071953760783570626028340861662306788165634938491748114184044025872567373346978662138217856126713337610270783258248105366975021481356508341036578211448371686725068765784217824080045502733303241896603630547069016601075045104164288885205079345527878254043736190298551452144322208345253790521882343822699218228023542932864990991148152069710631483184782002603302403758026383547403310778354420001181693767254182984315767899457502232833789563373609234341285256826080489929302075595711628347740431445088114075496692048253404432465982684825740563705778756974248818129816346272649226019403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cbef3def8374a1a842f03b4036fa6d8294a92736
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr30.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoboukai-clinic.daiwa-comp.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.100.751.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/fullcrl2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82b47305e2f83e1ff4f2468fa8b1855a594e9a1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016e881aed26000004030047304502206f62d8fd3fc3fcf60f5132c5e39e07a583cca7cfb6d01dded9d976eef234067a022100fd8a9df21c807dc89d75331fcbc37093615dae0a81d19d38d8f9282bb0e81a50007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016e881af4840000040300483046022100c59989241a57c6a62952cd356af5198a926089353215f8776a0a45664d0f9e420221009b558644551a50aed9889b640298bc197ed33a10c8a92bb5366121f786c0dc2f0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e881af82b0000040300473045022100fbe1b4d8571a08c303b8bd0677addf7be9ceccc075b8cc6040648b8dfe566e8402200dc940e515272032762d81f60363177c924b26036b51780cb3a5194fa1dbb845
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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