www-math.ias.tokushima-u.ac.jp

- Tokushima University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 38:c1:48:fa:cf:30:53:9c:cb:38:b9:a9:08:86:4c:36 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Tokushima University

Organization: Tokushima University
Organization unit: Mathematical Sciences
State / Province: Tokushima
Locality: Tokushima-City
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 38:c1:48:fa:cf:30:53:9c:cb:38:b9:a9:08:86:4c:36
Serial Number (int): 75440361262306422422388247185016114230
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 5a:d9:12:a3:96:85:0e:db:2f:8f:3f:16:83:2a:72:b5:d4:a0:30:27
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): c0:c2:4f:7f:8c:88:c0:f0:69:84:59:78:54:46:5a:6a:4a:35:da:d1
Fingerprint (sha256): 2b:60:21:8d:86:3a:6b:c4:1d:f5:b1:04:02:b9:3d:1c:5e:69:8e:45:f2:b3:9e:b5:10:83:d6:80:0e:4b:d0:cb


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate www-math.ias.tokushima-u.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-math.ias.tokushima-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-math.ias.tokushima-u.ac.jp

Other certificates including the domain name tokushima-u.ac.jp

(limited to 100 certificates)
ZAIMU-TOKUDAI.jim.tokushima-u.ac.jp
kjm.medsci.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
repo.lib.tokushima-u.ac.jp
industal.tokushima-u.ac.jp
tocms.hosp.med.tokushima-u.ac.jp
iaso.ait231.tokushima-u.ac.jp
www.cue.tokushima-u.ac.jp
pch91.ait.tokushima-u.ac.jp
uzu.ias.tokushima-u.ac.jp
web-apply.ait.tokushima-u.ac.jp
uls01.ulc.tokushima-u.ac.jp
kangoportal.hosp.med.tokushima-u.ac.jp
rad91.ait.tokushima-u.ac.jp
sihep.ait231.tokushima-u.ac.jp
www.awasapo.tokushima-u.ac.jp
kaigi.hosp.med.tokushima-u.ac.jp
kouza.cue.tokushima-u.ac.jp
taiwa.honbu.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
shikin.ccr.tokushima-u.ac.jp
web-apply.ait.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
sv4x5.ait231.tokushima-u.ac.jp
moo3.chi.tokushima-u.ac.jp
goukaku.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
study.ait231.tokushima-u.ac.jp
gidp.ait230.tokushima-u.ac.jp
femto.me.tokushima-u.ac.jp
zsysap.jim.tokushima-u.ac.jp
eweb92.stud.tokushima-u.ac.jp
ldap.ait.tokushima-u.ac.jp
eweb91.stud.tokushima-u.ac.jp
cluster.tokushima-u.ac.jp
cws.ocs.tokushima-u.ac.jp
ek4lms01.ulc.tokushima-u.ac.jp
irud.med.tokushima-u.ac.jp
adas.ait231.tokushima-u.ac.jp
kj.medsci.tokushima-u.ac.jp
kj.medsci.tokushima-u.ac.jp
am.ait.tokushima-u.ac.jp
www2.e.tokushima-u.ac.jp
www.isc.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
www2.e.tokushima-u.ac.jp
sns.ait230.tokushima-u.ac.jp
lyncsip.ait230.tokushima-u.ac.jp
moo.chi.tokushima-u.ac.jp
frigg.db.tokushima-u.ac.jp
bml.me.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
iccsv.ait.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
risa.is.tokushima-u.ac.jp
gidp.ait230.tokushima-u.ac.jp
math0.pm.tokushima-u.ac.jp
adas.ait230.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
bun.honbu.tokushima-u.ac.jp
uls01.ulc.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
kjw.medsci.tokushima-u.ac.jp
www.tokushima-u.ac.jp
cidp.ait.tokushima-u.ac.jp
cluster.tokushima-u.ac.jp
iccsv-s.ait.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
cidp.ait.tokushima-u.ac.jp
ce.ce.tokushima-u.ac.jp
moo.chi.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
uzu.ias.tokushima-u.ac.jp
web.ph.tokushima-u.ac.jp
www-math.ias.tokushima-u.ac.jp
www.pled.tokushima-u.ac.jp
medinfo.ait231.tokushima-u.ac.jp
kangoportal.hosp.med.tokushima-u.ac.jp
hub.tokushima-u.ac.jp
moo2.chi.tokushima-u.ac.jp
tocms.hosp.med.tokushima-u.ac.jp
www.ee.tokushima-u.ac.jp
kjm.medsci.tokushima-u.ac.jp
avian.aitre.tokushima-u.ac.jp
els.stud.tokushima-u.ac.jp
moo2.chi.tokushima-u.ac.jp
www-me.ait231.tokushima-u.ac.jp
cbtph.ait.tokushima-u.ac.jp
twf.ait.tokushima-u.ac.jp
www.cue.tokushima-u.ac.jp
www2.isc.tokushima-u.ac.jp
rad01.ait.tokushima-u.ac.jp
web-ias.ait231.tokushima-u.ac.jp
ed.st.tokushima-u.ac.jp
weierstrass.is.tokushima-u.ac.jp
web2.ias.tokushima-u.ac.jp
dev.ipc2.tokushima-u.ac.jp
vdi.ait.tokushima-u.ac.jp

Certificate

The complete raw certificate details for www-math.ias.tokushima-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwDyEksQEQeiIW839eeQ
oaMR2bxXuT/e8kU+TRWtPF3bt56yhY/EmMq/O7EmXJCjawlUSYwIaepHYgWhK9Rf
AZ4d1V00s8idIbATEal5I2OtLZ1gFWq3zDRRf/TeqnXoqok+6YR1RLBdwxHurzFD
OMWuT1b6JKNoBZpT0Rji7UntC5ZnmNUgUObyrAKmaUNFQn6FSiHJJ8pqcEthfHmD
2ddEsmzEqHQKbnWJv57DXWrqhCZDHhoMNypH8r0vMuHp1yRxR34ds6Hu7jwUnQLZ
+iWy/ZO6MFZjV5VhOjw9uhz21b5XcoDJD6hUat6k+I34YqX9jE2oNgK0tiBy1OiG
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 75440361262306422422388247185016114230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 10:22:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-17 10:22:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokushima'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokushima-City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokushima University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mathematical Sciences'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-math.ias.tokushima-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24111982537129894758480295267615923017040811264124045513783203349118544216982821649883870759553019146054145601724030717427423140088176881445424330626645658288226075283347235645402310113929702816527720187120733649682202425753546938190521980810086337335780406887548659828718227998071993196634311117225665192009109021162502871031955975842599656281365787486273027610468309925853486895951891927075742655545641570240779476303293895484688440971715097143649698632001662576188608877160142477645740655084429257192390530144920856241779933141065258707680937545776636214446247004559459435089966832585784184816417852156812215223897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-math.ias.tokushima-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ad912a396850edb2f8f3f16832a72b5d4a03027
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016dd9465824000004030047304502200452bf8c0d56abbb8dad211c0daaf500fabbdf1ee5da7ef700a8c1a3f85d024e022100bf8bad80fbde7ea73386e0b49774f1cabb1188c98a36384dfc4265512f1acf60007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016dd9465fa60000040300483046022100b8cf6c65ffb164a3b8c34759b75e85d3a6db0fe088dcf0b695b2e5c30a76962a0221009b6a08259b19dd2b68f88e9532dfa063ebe7dbba4ca2fd5ea69325df2ed6daa70076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dd946654d000004030047304502202a27ecd9be1b5fea58f9c9f2961d2282ec3f6562b336130c1f234ee8a3d6cda2022100b0fc18950b1fa5cbfe53139df71e77842669eaa87605494c3f13cc440579d6b3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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