sds.rikkyo.ac.jp

- Rikkyo University -

Issued by NII Open Domain CA - G7 RSA

About this certificate

This digital certificate with serial number 6c:a8:32:95:96:2e:e4:a2:21:13:ed:77:4f:84:ab:6b was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rikkyo University

Organization: Rikkyo University
State / Province: Tokyo
Locality: Toshima-ku
Country: JP

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 6c:a8:32:95:96:2e:e4:a2:21:13:ed:77:4f:84:ab:6b
Serial Number (int): 144429955388960604275329961889508928363
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d7:f9:8d:c7:41:b5:d5:f5:90:2e:75:ec:16:fe:1b:dd:65:d5:41:61
AuthorityKeyId: b0:2e:e5:51:ed:fc:4a:cf:a3:87:f1:13:90:76:2d:9d:8e:94:a1:e3

Fingerprint (sha1): 44:3b:3f:8f:7c:a0:9f:27:dd:96:a0:ee:0e:3b:fb:e3:0f:a8:3a:cb
Fingerprint (sha256): 20:d5:e4:2b:ab:a7:82:0a:fa:ae:96:8a:ee:84:67:49:e2:0f:64:7c:b5:10:64:aa:8b:d9:b1:42:46:69:b2:4f

Issuing Certificate URL: http://repo1.secomtrust.net/sppca/nii/odca4/nii-odca4g7rsa.cer

Revocation information

OCSP Server: http://niig7rsa.ocsp.secom-cert.jp
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca4/fullcrlg7rsa.crl

Check the revocation status for certificate sds.rikkyo.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sds.rikkyo.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sds.rikkyo.ac.jp

Other certificates including the domain name rikkyo.ac.jp

(limited to 100 certificates)
sy.rikkyo.ac.jp
www.rikkyo.ac.jp
score.rikkyo.ac.jp
servicedesk.6dca.flcourts.gov
sy.rikkyo.ac.jp
www.rikkyo.ac.jp
redic.rikkyo.ac.jp
*.rikkyo.ac.jp
rt.rikkyo.ac.jp
upki-idp.rikkyo.ac.jp
rproxy.rikkyo.ac.jp
v5dcradius-01.rikkyo.ac.jp
r.rikkyo.ac.jp
vcs-ms.mo.rikkyo.ac.jp
www3.rikkyo.ac.jp
mspirit.rikkyo.ac.jp
socio.rikkyo.ac.jp
it-support.perimeter81.com
r.rikkyo.ac.jp
sso.rikkyo.ac.jp
r-jikan-t.rikkyo.ac.jp
wac.rikkyo.ac.jp
portfolio-t.rikkyo.ac.jp
business-school.rikkyo.ac.jp
rproxy.rikkyo.ac.jp
wwwj.rikkyo.ac.jp
a-station.rikkyo.ac.jp
lp.rikkyo.ac.jp
opac.rikkyo.ac.jp
cp.rikkyo.ac.jp
niiza.rikkyo.ac.jp
blpcob.rikkyo.ac.jp
webq-t.rikkyo.ac.jp
mls.rikkyo.ac.jp
icc.rikkyo.ac.jp
emp.rikkyo.ac.jp
mailgate.rikkyo.ac.jp
univdb.rikkyo.ac.jp
csi-shoumeisho.rikkyo.ac.jp
sdp.rikkyo.ac.jp
311help.seminolecountyfl.gov
webq.rikkyo.ac.jp
qa-sso.rikkyo.ac.jp
gakuseibu.rikkyo.ac.jp
mls.rikkyo.ac.jp
tourism.rikkyo.ac.jp
netacademy.rikkyo.ac.jp
opac.rikkyo.ac.jp
brix.rikkyo.ac.jp
wlc.rikkyo.ac.jp
r-jikan-t.rikkyo.ac.jp
sds.rikkyo.ac.jp
socio.rikkyo.ac.jp
mpma.rikkyo.ac.jp
mediasite.rikkyo.ac.jp
databank.rikkyo.ac.jp
www.rikkyo.ac.jp
upki-idp-test.rikkyo.ac.jp
sdp.rikkyo.ac.jp
upki-idp.rikkyo.ac.jp
idm.rikkyo.ac.jp
sy.rikkyo.ac.jp
real.rikkyo.ac.jp
csi-vpn.rikkyo.ac.jp
webfolder.rikkyo.ac.jp
spirittest.rikkyo.ac.jp
spirit-t.rikkyo.ac.jp
icc.rikkyo.ac.jp
sds.rikkyo.ac.jp
rpp.rikkyo.ac.jp
portfolio.rikkyo.ac.jp
icc.rikkyo.ac.jp
311help.seminolecountyfl.gov
*.staging.mobile.rikkyo.ac.jp
niiza.rikkyo.ac.jp
recruit.rikkyo.ac.jp
311help.seminolecountyfl.gov
cl.rikkyo.ac.jp
bb.rikkyo.ac.jp
r.rikkyo.ac.jp
socio.rikkyo.ac.jp
economics.rikkyo.ac.jp
real.rikkyo.ac.jp
sy.rikkyo.ac.jp
qa-sso.rikkyo.ac.jp
databank.rikkyo.ac.jp
csi-seminar.rikkyo.ac.jp
cjle.rikkyo.ac.jp
cp.rikkyo.ac.jp
discovery.rikkyo.ac.jp
archives.rikkyo.ac.jp
www.rikkyo.ac.jp
discovery.rikkyo.ac.jp
mls.rikkyo.ac.jp
150th.rikkyo.ac.jp
ry.rikkyo.ac.jp
servicedesk.6dca.flcourts.gov
*.rikkyo.ac.jp
opac.rikkyo.ac.jp
mynumber.rikkyo.ac.jp

Certificate

The complete raw certificate details for sds.rikkyo.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHEzCCBfugAwIBAgIQbKgylZYu5KIhE+13T4SrazANBgkqhkiG9w0BAQsFADBa
MQswCQYDVQQGEwJKUDElMCMGA1UEChMcU0VDT00gVHJ1c3QgU3lzdGVtcyBDTy4s
TFRELjEkMCIGA1UEAxMbTklJIE9wZW4gRG9tYWluIENBIC0gRzcgUlNBMB4XDTIz
MDMyODA2MjMwMVoXDTI0MDQyNzA2MjMwMVowaTELMAkGA1UEBhMCSlAxDjAMBgNV
BAgTBVRva3lvMRMwEQYDVQQHEwpUb3NoaW1hLWt1MRowGAYDVQQKExFSaWtreW8g
VW5pdmVyc2l0eTEZMBcGA1UEAxMQc2RzLnJpa2t5by5hYy5qcDCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAMWjXJq74I5BFt8uEFEx336XZ5DkhrFlYLq2
2sCJ+rtKqj/4o9lVlIUssxJ7wFVdpleN2MtEVFg8UbziXHmLj0AX148j5L4ie1N/
24bLVE010Pa265MpW4MdkUMKaXnCKJO3KNJd+V25FBLBYxkmyhSR6mof5eWuyADh
Kwyp1kdD2sxG6yxln8KOm3IUzHUOwMDJnPavSle1SgTkY4VKMyHcx+6QRal9CxiV
A7uwFu3o+lTR5lXFMoyM9vUXxofxVDAqos5dv+6INRigO8/nn1MI/5Q8TYqbz874
ZtyRKGu426vHeWTTxqtiG8TFGS8L1R8OqLcYaH9Wjy2W54mtAjECAwEAAaOCA8Qw
ggPAMB8GA1UdIwQYMBaAFLAu5VHt/ErPo4fxE5B2LZ2OlKHjMIGKBggrBgEFBQcB
AQR+MHwwSgYIKwYBBQUHMAKGPmh0dHA6Ly9yZXBvMS5zZWNvbXRydXN0Lm5ldC9z
cHBjYS9uaWkvb2RjYTQvbmlpLW9kY2E0Zzdyc2EuY2VyMC4GCCsGAQUFBzABhiJo
dHRwOi8vbmlpZzdyc2Eub2NzcC5zZWNvbS1jZXJ0LmpwMBsGA1UdEQQUMBKCEHNk
cy5yaWtreW8uYWMuanAwXQYDVR0gBFYwVDBIBgoqgwiMmxtugVYDMDowOAYIKwYB
BQUHAgEWLGh0dHA6Ly9yZXBvMS5zZWNvbXRydXN0Lm5ldC9zcHBjYS9uaWkvb2Rj
YTQvMAgGBmeBDAECAjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTQYD
VR0fBEYwRDBCoECgPoY8aHR0cDovL3JlcG8xLnNlY29tdHJ1c3QubmV0L3NwcGNh
L25paS9vZGNhNC9mdWxsY3JsZzdyc2EuY3JsMB0GA1UdDgQWBBTX+Y3HQbXV9ZAu
dewW/hvdZdVBYTAOBgNVHQ8BAf8EBAMCBaAwggH1BgorBgEEAdZ5AgQCBIIB5QSC
AeEB3wB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABhybrhtsA
AAQDAEcwRQIhAKj9gzWcEACzubG1g3gdpLxmwcKYumwHhz0cGjH2VmedAiAHjN2n
vr+rZAx9pBDTJllNh6nAhzCOi/P+UDUoO0AP4gB2AHb/iD8KtvuVUcJhzPWHujS0
pM27KdxoQgqf5mdMWjp0AAABhybriFQAAAQDAEcwRQIhANcYnGQVMxBwJYBOJ7PN
b74HcsUA5LSswspkrbcqlS9AAiBr8EKTPTm+8+sntK2MM4D1kaB+MHAGQkO6iN2x
JUGPjwB2AHPZnokbTJZ4oCB9R53mssYc0FFecRkqjGuAEHrBd3K1AAABhybritsA
AAQDAEcwRQIhAPTRoW7scUrlSJ7pgyC+HHVUOjclFl81CVx8sleJ/ItAAiAf61gN
YSY4p9V5J543sb4jyZtffK3t+6jM+ewR42tD2wB1ANq2v2s/tbYin5vCu1xr6HCR
cWy7UYSFNL2kPTBI1/urAAABhybrjJEAAAQDAEYwRAIgMO4CKHSm5mmOXvUXHF/G
0ioebC1mFF1Zj4p9FOxC3G0CIEOjzCS3ZVi7/DMm6xGnlMcScnjESwzWoKSgyZ9z
O7OVMA0GCSqGSIb3DQEBCwUAA4IBAQBAyHAjhQKidp34FwuxZvqAwVwX4CmTOJzr
g6sFIDtF2+iQbbbXg9CWgckmO6dV3T/fyEzeOELpKBWqOs516RVJJW2C8Evcz3KA
f1HZNynUiPU8QXHHXCQ/+ZJL+QgYvBYCf3X1OP7l9spf/LdO/s1je2R/CR7OQmJ0
RB4OXcyszmzDoM6qVHMbYB2DGqNVJt4/AHUEWO0aGm3g0UqrTVmMDQFigEF5/rqQ
J/sJiDY9Pgy9BfumZqcMXRsdwQnTgC0KIsfXu5tZ8GnxeOaRT1w/D4DYpyT4XNyY
dviTu6inqYREdtEyaLKlGJjne2npKCHXfW/cMfpbwcQJbMadFJXE
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaNcmrvgjkEW3y4QUTHf
fpdnkOSGsWVgurbawIn6u0qqP/ij2VWUhSyzEnvAVV2mV43Yy0RUWDxRvOJceYuP
QBfXjyPkviJ7U3/bhstUTTXQ9rbrkylbgx2RQwppecIok7co0l35XbkUEsFjGSbK
FJHqah/l5a7IAOErDKnWR0PazEbrLGWfwo6bchTMdQ7AwMmc9q9KV7VKBORjhUoz
IdzH7pBFqX0LGJUDu7AW7ej6VNHmVcUyjIz29RfGh/FUMCqizl2/7og1GKA7z+ef
Uwj/lDxNipvPzvhm3JEoa7jbq8d5ZNPGq2IbxMUZLwvVHw6otxhof1aPLZbnia0C
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 144429955388960604275329961889508928363
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G7 RSA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-28 06:23:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 06:23:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toshima-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rikkyo University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sds.rikkyo.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24949502752749097183668431238823330949270350967809416858036249893987428239989608758312983078931910296891847558511767014843089741115491185122214128811083625931478517306744416176771492839435706288985791367369793893786231659509742333391667333266172945841339603453842081035007457166194699960554933617128026624111781324518554481995626803339037320858794231454407632248007010389073604990348869653938397125085064520581617995681517683737793078823087957951161556082896376929078880930878567537628823733143716221283159484720991645202011986813802380804229001302191015759022300632487139568559113191298301162764226663864334080082481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b02ee551edfc4acfa387f11390762d9d8e94a1e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/nii-odca4g7rsa.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig7rsa.ocsp.secom-cert.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sds.rikkyo.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.214.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/fullcrlg7rsa.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7f98dc741b5d5f5902e75ec16fe1bdd65d54161
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0040c870238502a2769df8170bb166fa80c15c17e02993389ceb83ab05203b45dbe8906db6d783d09681c9263ba755dd3fdfc84cde3842e92815aa3ace75e91549256d82f04bdccf72807f51d93729d488f53c4171c75c243ff9924bf90818bc16027f75f538fee5f6ca5ffcb74efecd637b647f091ece426274441e0e5dccacce6cc3a0ceaa54731b601d831aa35526de3f00750458ed1a1a6de0d14aab4d598c0d0162804179feba9027fb0988363d3e0cbd05fba666a70c5d1b1dc109d3802d0a22c7d7bb9b59f069f178e6914f5c3f0f80d8a724f85cdc9876f893bba8a7a9844476d13268b2a51898e77b69e92821d77d6fdc31fa5bc1c4096cc69d1495c4