www.iuj.ac.jp

- International University of Japan -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 24:e0:44:08:86:4e:c3:61:c7:4f:09:9d was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

International University of Japan

Organization: International University of Japan
State / Province: Niigata
Locality: Minamiuonuma-shi
Country: JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 24:e0:44:08:86:4e:c3:61:c7:4f:09:9d
Serial Number (int): 11412581015334774608766110109
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: a3:28:1e:28:e9:a3:ef:3c:3d:fe:79:cc:5b:d1:ad:69:be:12:20:f2
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): ca:3a:cc:17:f6:88:f1:7a:11:fb:54:f1:fc:10:94:fc:cf:a3:37:b3
Fingerprint (sha256): 28:84:f8:18:db:3f:47:68:cd:5c:83:97:a9:f6:b6:cb:5f:b8:66:13:b1:e9:a1:74:49:51:6f:a8:93:ab:ee:22

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate www.iuj.ac.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.iuj.ac.jp

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.iuj.ac.jp
iuj.ac.jp

Other certificates including the domain name iuj.ac.jp

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.iuj.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHpTCCBo2gAwIBAgIMJOBECIZOw2HHTwmdMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMjA5MDEwMDIwMjZaFw0y
MzEwMDMwMDIwMjVaMH4xCzAJBgNVBAYTAkpQMRAwDgYDVQQIEwdOaWlnYXRhMRkw
FwYDVQQHExBNaW5hbWl1b251bWEtc2hpMSowKAYDVQQKEyFJbnRlcm5hdGlvbmFs
IFVuaXZlcnNpdHkgb2YgSmFwYW4xFjAUBgNVBAMTDXd3dy5pdWouYWMuanAwggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCxwrXVULkMGI5ub4QA1jYQCbd5
h+JBZ8aHlINI3AGlPjtQJO02OJLjoyFDxMrJiKV00zlk5NMgHT/hF8IGA+XFwqTd
nKFCdsL2CLcLp5SaeO4Z0d09J8rP1kXjEdxw+uAT89iBylmCnYVXYjZypEssQTNL
brx2qxU6ww5spXza6izAGJgDrqSa8Iml+IpfSw3AhwxQToJp1eQy8vhH8CPOXPYf
ROG18WEmghXh3d5evjzRidyfjzwIlB0O2xSxepbSlqrFqnABlGNU8kSRxPfu1ybW
Pjz7iwOTdMmIXqS+wPvBRxRT8LZhwypETHZ6ukxHHTnYUeRdRHd1vYLdwwsmcB70
7hlfCQjlIEz2e0CeNQyd71qTDdFzGhf18MJeGA2TiOS3Eyhx++DvjEGOWkr3HC7P
Und9FLmPFnMwGlbnL2ZhS98tHDrl3ucHkB1IkuEIcN6h0HKCBw7DMLurfauNHV5z
omQEEtRO1/6hQH15mjfTtbs1codXpmwvU+BgiKjJnJp5B8VZsNxCTw/jSK+iiv2u
tO9+7DrD4Fpup9fvfG0EdVJ/k9O0xtHA/VqbMB56lovIPPjpbTJfuskshP49IPhK
WqZste8QseW+ZlypqQ3yVGyD8I6HAxevDks4FN4CEBzq57Hcu/3rfBn8gIcB1sSW
kwiYoOVB/NeUJ1yJxQIDAQABo4IDTzCCA0swDgYDVR0PAQH/BAQDAgWgMIGOBggr
BgEFBQcBAQSBgTB/MEQGCCsGAQUFBzAChjhodHRwOi8vc2VjdXJlLmdsb2JhbHNp
Z24uY29tL2NhY2VydC9nc3JzYW92c3NsY2EyMDE4LmNydDA3BggrBgEFBQcwAYYr
aHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNhMjAxODBWBgNV
HSAETzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5n
bG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgIwCQYDVR0TBAIwADA/
BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzcnNh
b3Zzc2xjYTIwMTguY3JsMCMGA1UdEQQcMBqCDXd3dy5pdWouYWMuanCCCWl1ai5h
Yy5qcDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU
+O9/8s14Z6jeb48kjYjxhwMCs+swHQYDVR0OBBYEFKMoHijpo+88Pf55zFvRrWm+
EiDyMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDoPtDaPvUGNTLnVyi8iWvJ
A9PL0RFr7Otp4Xd9bQa9bgAAAYL2a642AAAEAwBHMEUCIDmrB0+6WVYDW5xkVjWu
WTii2kEB1JdNQ+RIfX2QdwYvAiEAgwrOwd/EPZKyUpclfLBI9ILr3vvW3xyXnnTG
+0qjNW4AdQBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAYL2a619
AAAEAwBGMEQCIE5kB2Xd6+qoxQUmMqYs6KtcQP01hIS5duHFnwDBK499AiBTBCjJ
Spx6JrPhKdObte+sx3nTzfg3hT+vYh79xzyHfQB3ALNzdwfhhFD4Y4bWBancEQlK
eS2xZwwLh9zwAw55NqWaAAABgvZrriwAAAQDAEgwRgIhAKNTWb6krT532kZhrL47
7EVsP83XFBtAImZ3+tmfR79fAiEAzC0f2PzAffE5qC95C0omXltWsjK6gGRkBE/1
xd7EzoowDQYJKoZIhvcNAQELBQADggEBAHj16DqEaz/ATl9cxuBqJIVdsvg7x52L
u6OcWf2QYRSI0eNij+Nc2eaRka0aCRSKQoingYU29c1esLzR6K/cU620rX/U3bCH
0b4r0vlgNlS1NtVoPQGoAP79RIV+OORstDvHxe9zpVk7DF/3vAUs8XfGYM/QiYyc
aCBM9cj9ve+vdUE1oBITsF0//wzcD5GDkcuKkDGFcWw5i+g4kSVOtbeF6EbwF5gp
dCPlh1Nlg9tk+4bvDg5lFO25n9AslphQ+dAwf+hR+EEZW4JKDzNP2PJ00WW3rYiC
/JitrwDlh6a409GnCPyoiXXisr5LGcdxKy2pVd8PwMXckzODVcbR4ag=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11412581015334774608766110109
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-01 00:20:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-03 00:20:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niigata'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minamiuonuma-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'International University of Japan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.iuj.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 725199924508355934076875110464316655703760246807179096933262121679427341208583496975307201553826209499444391261386082707616794664912598678544694661756373411330043019624437888414349577626931083589804409352629398272765743105628946324110963164416358251325677220615935914144243857635072257875550262157721068210018129886505478763168955120114394402209888117653081644379560517091464524190762634893265374311154709488673317083566144573763307683148428371693812505109754876190915169333413259065630848946977592083352130907697285827432467173214731715324983545987609098527117977898379334721774802124945695576623730872441374775366780542718953010504323686898644604726356661126477925788599852567233764423755929281143222230476898989829720344782620859062863131927002356432540967673334032505163367167965821848211741245039250660180768272587021070667271496923645859751381126787554923731182538009232429066246246442656588060256728824078565795528585357044785600853804444079078617357543055139535878801369051706313796290885830234508740996732035134152956356813755946269663698788455848296452331372942110369787205699611367648733357364963027235037558498272497445323328197001031044154474216008882355049984461037401266395670915726371775103683288633222705793149471173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iuj.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iuj.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3281e28e9a3ef3c3dfe79cc5bd1ad69be1220f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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