na2-sv.cc.miyakonojo-nct.ac.jp

Issued by GlobalSign RSA DV SSL CA 2018

About this certificate

This digital certificate with serial number 77:83:97:92:82:a3:04:2c:e6:ca:91:07 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=na2-sv.cc.miyakonojo-nct.ac.jp,OU=Domain Control Validated,C=JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 77:83:97:92:82:a3:04:2c:e6:ca:91:07
Serial Number (int): 36987801231086499915188834567
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 1c:2e:1d:ac:2b:1b:0e:3d:d3:93:f0:8a:a4:60:b4:f7:b9:98:01:e8
AuthorityKeyId: 81:80:d6:28:79:35:4a:5b:79:35:89:39:8f:12:17:6e:11:7b:2c:11

Fingerprint (sha1): b6:9a:43:e0:08:0b:c9:0c:ac:c6:d3:18:dd:18:42:b4:74:de:05:20
Fingerprint (sha256): 2c:db:e0:fa:1a:be:62:a3:37:81:07:9d:7d:60:70:a6:a2:be:2d:74:e8:00:4b:db:90:c3:0c:64:93:d5:12:ae

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsadvsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsadvsslca2018.crl

Check the revocation status for certificate na2-sv.cc.miyakonojo-nct.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for na2-sv.cc.miyakonojo-nct.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

na2-sv.cc.miyakonojo-nct.ac.jp

Other certificates including the domain name miyakonojo-nct.ac.jp

(limited to 100 certificates)
kidp.miyakonojo-nct.ac.jp
www.beken.miyakonojo-nct.ac.jp
na2-sv.cc.miyakonojo-nct.ac.jp
kidp.miyakonojo-nct.ac.jp
mail.miyakonojo-nct.ac.jp
kidp.miyakonojo-nct.ac.jp
na2-sv.cc.miyakonojo-nct.ac.jp
tls.automattic.com
ldap.chem.miyakonojo-nct.ac.jp
na2-sv.cc.miyakonojo-nct.ac.jp
na2-sv.cc.miyakonojo-nct.ac.jp
kidp.miyakonojo-nct.ac.jp
fc.miyakonojo-nct.ac.jp
ldap.chem.miyakonojo-nct.ac.jp
www.sys.miyakonojo-nct.ac.jp
beken.cc.miyakonojo-nct.ac.jp
tls.automattic.com
mail.miyakonojo-nct.ac.jp
fc.miyakonojo-nct.ac.jp
tls.automattic.com
fc.miyakonojo-nct.ac.jp
tls.automattic.com
www.sys.miyakonojo-nct.ac.jp
na2-sv.cc.miyakonojo-nct.ac.jp
academy.miyakonojo-nct.ac.jp
auth.chem.miyakonojo-nct.ac.jp
na2-sv.cc.miyakonojo-nct.ac.jp
na2-sv.cc.miyakonojo-nct.ac.jp
www.miyakonojo-nct.ac.jp
beken.cc.miyakonojo-nct.ac.jp
kidauthsv.miyakonojo-nct.ac.jp
tls.automattic.com
kwlc.miyakonojo-nct.ac.jp
kidp.miyakonojo-nct.ac.jp
kfw.miyakonojo-nct.ac.jp
nas.sys.miyakonojo-nct.ac.jp
www.miyakonojo-nct.ac.jp
beken.cc.miyakonojo-nct.ac.jp
kauthsv.miyakonojo-nct.ac.jp
kidp.miyakonojo-nct.ac.jp
academy.miyakonojo-nct.ac.jp
na2-sv.cc.miyakonojo-nct.ac.jp
na2-sv.cc.miyakonojo-nct.ac.jp
na2-sv.cc.miyakonojo-nct.ac.jp
kidp.miyakonojo-nct.ac.jp
na2-sv.cc.miyakonojo-nct.ac.jp
mail.miyakonojo-nct.ac.jp
beken.cc.miyakonojo-nct.ac.jp

Certificate

The complete raw certificate details for na2-sv.cc.miyakonojo-nct.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGhTCCBW2gAwIBAgIMd4OXkoKjBCzmypEHMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBEViBTU0wgQ0EgMjAxODAeFw0xOTA4MzAwNDU3NTZaFw0y
MDExMjcwMTU5NTdaMFkxCzAJBgNVBAYTAkpQMSEwHwYDVQQLExhEb21haW4gQ29u
dHJvbCBWYWxpZGF0ZWQxJzAlBgNVBAMMHm5hMi1zdi5jYy5taXlha29ub2pvLW5j
dC5hYy5qcDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKkOLLS9k2qC
mzCyZSKNvxxipLzgx77iVipPqCq9qMZpL63rQBiall+hVWiufj63pSg0FxXvxi5Q
WcECnUNTPy2TtH6Y2l9NIg7/PvXOSJ8/nQGRyL6mxhnjbs71SSdDzbGUqjzStd3N
8ih1P8AU9DutB4T0Qy5hVf24IkyP7VeAivyOWvzyUW11hsQAjde0GVC9JYKd5qss
YC9xx2WEYyRYosyJqOwdd+8TH581YLy+3Fz3esidpeF6vhi849RBQGRXD3x291uZ
nPXLg7jUJNy6S4Lz+3P/YJ06SFUOA9Ni5ueYkHjndLq3b2sQo7qw/iYUj8yW52+7
h68JJURpiOsCAwEAAaOCA1QwggNQMA4GA1UdDwEB/wQEAwIFoDCBjgYIKwYBBQUH
AQEEgYEwfzBEBggrBgEFBQcwAoY4aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNv
bS9jYWNlcnQvZ3Nyc2FkdnNzbGNhMjAxOC5jcnQwNwYIKwYBBQUHMAGGK2h0dHA6
Ly9vY3NwLmdsb2JhbHNpZ24uY29tL2dzcnNhZHZzc2xjYTIwMTgwVgYDVR0gBE8w
TTBBBgkrBgEEAaAyAQowNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFs
c2lnbi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMAkGA1UdEwQCMAAwPwYDVR0f
BDgwNjA0oDKgMIYuaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9nc3JzYWR2c3Ns
Y2EyMDE4LmNybDApBgNVHREEIjAggh5uYTItc3YuY2MubWl5YWtvbm9qby1uY3Qu
YWMuanAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaA
FIGA1ih5NUpbeTWJOY8SF24ReywRMB0GA1UdDgQWBBQcLh2sKxsOPdOT8IqkYLT3
uZgB6DCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHUAxlKg7EjOs/yrFwmSxDqH
QTMJ6ABlomJSQBujNioXxWUAAAFs4OMsgAAABAMARjBEAiBwHS+R7zQ5jTGw+O/+
e/JNxyrMx1boYx8BF5lTfALtVgIgB59K8T2rfPiKNHtR5thXE3QiVtoLxyQdC/VJ
f8o6Pa0AdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWzg4y2T
AAAEAwBHMEUCIErrFDCs9Be/Nxrxj9BB5uuui/X+F/kBVnrGXE9r4/z1AiEAgJKM
z5znLi3wEwKGc0tUxLvPWtuh5EFuDoqqL9a6g9gAdgDuS723dc5guuFCaR+r4Z5m
ow9+X7By2IMAxHuJeqj9ywAAAWzg4yzkAAAEAwBHMEUCIF4GNx88tTQ3s8WERiI5
6v2c7WQ8Po+vARYgt7YiVzpMAiEA84OxkcFifNDos9mwL5DIc9S1QL7LpGzhrrKf
fRGm1uswDQYJKoZIhvcNAQELBQADggEBAC99egYzitaInVc9HT1XBc/gAScsAIoY
Mth5PSdq4kXB89UziFb9ftcsAFZJTUzT84TBLPOBsG0uBjmhHM61GmkCamK2htYt
g+ZKTXyRJWiLbL5dsDcyCBRo4IKAlRgH68mqGxUu+lhTnja6HCXhkSHC+R7el3Vc
Pw9BNlHfXPDXUWZ15FHwJWb18gQLm0UqD+DoHNkR1iBy/xh7NEhq+8lsUwVNBJBw
2LH49vAC7ib0XKqXWhaU4eIrMVB+YYvSsf/Gb/CjiHjRnzN909BYsl6doEh83C4I
zMkjzLAFz7tJ5oRCiKuvZNLE7D7Vj6XJx0aK8e7ASqJrx1+fr2gEei8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ4stL2TaoKbMLJlIo2/
HGKkvODHvuJWKk+oKr2oxmkvretAGJqWX6FVaK5+PrelKDQXFe/GLlBZwQKdQ1M/
LZO0fpjaX00iDv8+9c5Inz+dAZHIvqbGGeNuzvVJJ0PNsZSqPNK13c3yKHU/wBT0
O60HhPRDLmFV/bgiTI/tV4CK/I5a/PJRbXWGxACN17QZUL0lgp3mqyxgL3HHZYRj
JFiizImo7B137xMfnzVgvL7cXPd6yJ2l4Xq+GLzj1EFAZFcPfHb3W5mc9cuDuNQk
3LpLgvP7c/9gnTpIVQ4D02Lm55iQeOd0urdvaxCjurD+JhSPzJbnb7uHrwklRGmI
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36987801231086499915188834567
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA DV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-30 04:57:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-27 01:59:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'na2-sv.cc.miyakonojo-nct.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21341263311250209482912391966249306513648276196779986882940791814601845899403356610998356795005080724684364406537457490224141646516051545058292266000888309406097267340712519244441511921664094846067912942537574597690987437648173866866743910931208192688885293655679554161061815968591027848139765119044843555676310718329637226215714312537744769252675857112844697376728697423727220211001743686432267033809666136182154432925487529085555546624043990082853426308857656174249212846215621591406322301160390368687368930837257012472111769143029331039175287784602236552560771341377570597209156683711822665424931402939902624106731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsadvsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsadvsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na2-sv.cc.miyakonojo-nct.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8180d62879354a5b793589398f12176e117b2c11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c2e1dac2b1b0e3dd393f08aa460b4f7b99801e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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