*.hapitas.jp
Issued by GlobalSign Domain Validation CA - SHA256 - G2
About this certificate
This digital certificate with serial number 25:10:68:43:6d:f7:28:3f:1c:b4:1c:aa was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.hapitas.jp,OU=Domain Control Validated
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 25:10:68:43:6d:f7:28:3f:1c:b4:1c:aaSerial Number (int): 11470780546473519312165674154
Serial Number lenght: 94 bits, 12 octets
SubjectKeyId: 5f:48:e9:94:62:86:96:38:22:c0:be:ec:17:4c:ad:87:4b:13:bb:2e
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f
Fingerprint (sha1): 50:cf:f9:99:72:88:87:15:a8:ac:af:8a:33:e6:98:5a:1b:70:50:38
Fingerprint (sha256): 34:0a:2a:4f:8f:1b:f0:dc:be:56:35:0a:99:2f:f4:57:a4:16:2f:45:d0:fc:b2:e5:8d:1c:a0:69:78:09:eb:ef
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl
Check the revocation status for certificate *.hapitas.jp
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.hapitas.jp
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.hapitas.jp
hapitas.jp
hapitas.jp
Other certificates including the domain name hapitas.jp
(limited to 100 certificates)
*.hapitas.jp
hapitas.jp
hapitas.jp
hapitas.jp
hapitas.jp
rc-comic.hapitas.jp
comic.hapitas.jp
rhm.hapitas.jp
hapitas.jp
hapitas.jp
*.hapitas.jp
expires20200211-rc-spitz.hapitas.jp
*.hapitas.jp
*.hapitas.jp
faq.hapitas.jp
rc-comic.hapitas.jp
hapitas.jp
hapitas.jp
rc-comic.hapitas.jp
faq.hapitas.jp
static-contents-dev.hapitas.jp
rcm.hapitas.jp
*.hapitas.jp
faq.hapitas.jp
comic.hapitas.jp
*.hapitasu.jp
hapitas.jp
comic.hapitas.jp
*.hapitas.jp
hapitas.jp
hapitas.jp
hapitas.jp
hapitas.jp
*.hapitasu.jp
hapitas.jp
hapitas.jp
faq.hapitas.jp
static-contents-dev.hapitas.jp
hapitas.jp
hapitas.jp
*.hapitas.jp
hapitas.jp
*.hapitas.jp
*.hapitas.jp
hapitas.jp
hapitas.jp
hapitas.jp
dev.hapitas.jp
faq.hapitas.jp
*.hapitas.jp
hapitas.jp
hapitas.jp
rhm.hapitas.jp
hapitas.jp
*.hapitas.jp
comic.hapitas.jp
img.hapitas.jp
*.hapitas.jp
hapitas.jp
hapitas.jp
hapitas.jp
hapitas.jp
rc-comic.hapitas.jp
comic.hapitas.jp
rhm.hapitas.jp
hapitas.jp
hapitas.jp
*.hapitas.jp
expires20200211-rc-spitz.hapitas.jp
*.hapitas.jp
*.hapitas.jp
faq.hapitas.jp
rc-comic.hapitas.jp
hapitas.jp
hapitas.jp
rc-comic.hapitas.jp
faq.hapitas.jp
static-contents-dev.hapitas.jp
rcm.hapitas.jp
*.hapitas.jp
faq.hapitas.jp
comic.hapitas.jp
*.hapitasu.jp
hapitas.jp
comic.hapitas.jp
*.hapitas.jp
hapitas.jp
hapitas.jp
hapitas.jp
hapitas.jp
*.hapitasu.jp
hapitas.jp
hapitas.jp
faq.hapitas.jp
static-contents-dev.hapitas.jp
hapitas.jp
hapitas.jp
*.hapitas.jp
hapitas.jp
*.hapitas.jp
*.hapitas.jp
hapitas.jp
hapitas.jp
hapitas.jp
dev.hapitas.jp
faq.hapitas.jp
*.hapitas.jp
hapitas.jp
hapitas.jp
rhm.hapitas.jp
hapitas.jp
*.hapitas.jp
comic.hapitas.jp
img.hapitas.jp
*.hapitas.jp
Certificate
The complete raw certificate details for *.hapitas.jp in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgIMJRBoQ233KD8ctByqMA0GCSqGSIb3DQEBCwUAMGAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTYwNAYDVQQDEy1H bG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzIwHhcN MTgwNzI0MDYzMDM0WhcNMTkwOTA1MTQ1OTU5WjA6MSEwHwYDVQQLExhEb21haW4g Q29udHJvbCBWYWxpZGF0ZWQxFTATBgNVBAMMDCouaGFwaXRhcy5qcDCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMiDMhm/5MpR7HSYgku0d1bgcoPPTj2J Rz0s90n00DY3sJfKLa7PAVf7NwTSgvI15R6Mf8/9HbYsceXXtjYC24KIpFtGrwTZ A1bEo8tQXu7menO1Z3vImBTNWbn11YC6ZcmSqAIw8nPtYXhmjbcN2QWhK+IadnBu CTEVPMKFjm7jClMCeYGAB1Aw2W46nUquc5tU3GQP1OG0E1/aOD7z02I/vmEgviuN 7ppkh2UkqQuHS+X7K47OKJTH9Xxzvn2/7Qysw4CCOP4jXsksH+rFfWSnNScB+Nd6 GmLbkSlmefziPeBm53bKeEqAJPvMQogqjGD4jbAvlCxAYDhoIMzz18sCAwEAAaOC At8wggLbMA4GA1UdDwEB/wQEAwIFoDCBlAYIKwYBBQUHAQEEgYcwgYQwRwYIKwYB BQUHMAKGO2h0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzZG9t YWludmFsc2hhMmcycjEuY3J0MDkGCCsGAQUFBzABhi1odHRwOi8vb2NzcDIuZ2xv YmFsc2lnbi5jb20vZ3Nkb21haW52YWxzaGEyZzIwVgYDVR0gBE8wTTBBBgkrBgEE AaAyAQowNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20v cmVwb3NpdG9yeS8wCAYGZ4EMAQIBMAkGA1UdEwQCMAAwQwYDVR0fBDwwOjA4oDag NIYyaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9ncy9nc2RvbWFpbnZhbHNoYTJn Mi5jcmwwIwYDVR0RBBwwGoIMKi5oYXBpdGFzLmpwggpoYXBpdGFzLmpwMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUX0jplGKGljgiwL7s F0yth0sTuy4wHwYDVR0jBBgwFoAU6k581IAt5RWBhiaMgm3AmKTPlw8wggEEBgor BgEEAdZ5AgQCBIH1BIHyAPAAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80O yA3cEAAAAWTK+4BYAAAEAwBHMEUCIQCc7EizOq/wFmi4ZPwvx+bJqP0anGTYeQqC X1a9cq+3WwIgLT4q8fy+OtLZSQUJl2KXLxH0TCatigLcMsAdZoC/MA8AdgBvU3as MfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWTK+4BDAAAEAwBHMEUCIAkW 3/J8z/baHtEMP4s8nVhqlAitQJAby/q5YmDsI1n9AiEApsDpFHVBHbWO0nF5ujFU zRbfYdvT40S2ZnoKODZzpAcwDQYJKoZIhvcNAQELBQADggEBAEmoETc/1qZTRbyu 61cHJPhcclTnlZbGe1pLQ9OQnjqpS7xA/r5Gm5Y7fXScHSR73rMLoJAO+AuW/D13 GCnPG227Lx+jmKzqBtkcTL4JJdtoZuhvsy3m0oFGLTN4TXJ4o5kRcyJX8ReMtREK auCIPOAsQ0CFXiC4Bmcf8PF210f6S7NENv95JtkWW7d/aaOA11HY8heR/vN1kLQr ic7zo/gAIWupyDIJO8ITZYET8ejLCn74YO7i4SNeCBgOACwHIXLeNe+foEUm+7tE JQZ3JoSQ4CtXAXa6Gp7X4UueygfvPh/DGT045dcTNqYWuVzN9XXEh5gcd8+zMCLz hFeBgpA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIMyGb/kylHsdJiCS7R3 VuByg89OPYlHPSz3SfTQNjewl8otrs8BV/s3BNKC8jXlHox/z/0dtixx5de2NgLb goikW0avBNkDVsSjy1Be7uZ6c7Vne8iYFM1ZufXVgLplyZKoAjDyc+1heGaNtw3Z BaEr4hp2cG4JMRU8woWObuMKUwJ5gYAHUDDZbjqdSq5zm1TcZA/U4bQTX9o4PvPT Yj++YSC+K43ummSHZSSpC4dL5fsrjs4olMf1fHO+fb/tDKzDgII4/iNeySwf6sV9 ZKc1JwH413oaYtuRKWZ5/OI94Gbndsp4SoAk+8xCiCqMYPiNsC+ULEBgOGggzPPX ywIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11470780546473519312165674154 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-24 06:30:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-05 14:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hapitas.jp' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25312356006764330075443896065586278202603018731520112061278054754576204059044524397004517760566381287286887633237618987007389843419734404842126290708845216236942023646931588035847126209426907018279552017791900604648470834346752180511855652649112402221989383664721439431847702691148647854663265287127655859339819726007219521712240611428692737028317151667021226538567933598859622603179284494515348014678231404626105732854867097244560224353531846816379407070100695331766804996530331265415499785494072463383716985998651833220319524705037801045060659396245980141367670647758054477449551322750467983730704493834084333901771 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hapitas.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hapitas.jp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5f48e9946286963822c0beec174cad874b13bb2e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000164cafb805800000403004730450221009cec48b33aaff01668b864fc2fc7e6c9a8fd1a9c64d8790a825f56bd72afb75b02202d3e2af1fcbe3ad2d94905099762972f11f44c26ad8a02dc32c01d6680bf300f0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000164cafb8043000004030047304502200916dff27ccff6da1ed10c3f8b3c9d586a9408ad40901bcbfab96260ec2359fd022100a6c0e91475411db58ed27179ba3154cd16df61dbd3e344b6667a0a383673a407 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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