siteserve.jp
- Estore Corporation -
Issued by CrossTrust OV CA5
About this certificate
This digital certificate with serial number 26:5d:2d:91:05:44:2e:8b was issued on by SECOM Trust Systems CO.,LTD..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)
Estore Corporation
Organization:
Estore Corporation
Organization unit: Operation Division
Organization unit: Operation Division
State / Province:
Tokyo
Locality: Minato-ku Nishi-shinbashi 1-10-2
Country: JP
Locality: Minato-ku Nishi-shinbashi 1-10-2
Country: JP
SECOM Trust Systems CO.,LTD.
Organization:
SECOM Trust Systems CO.,LTD.
Country:
JP
This certificate has expire since
Certificate Details
Serial Number (hex): 26:5d:2d:91:05:44:2e:8bSerial Number (int): 2764415847157214859
Serial Number lenght: 62 bits, 8 octets
SubjectKeyId: 92:ae:28:b0:51:f2:bb:14:d9:a6:1c:ea:e0:04:af:e3:1b:52:dd:13
AuthorityKeyId: 24:b7:b4:41:d4:32:4f:c4:19:ff:5e:62:64:3b:5e:69:27:61:17:dc
Fingerprint (sha1): e2:91:e2:21:c7:1e:62:b8:e1:a5:ae:a9:72:44:07:14:af:7d:db:8f
Fingerprint (sha256): 37:e1:6f:f2:fa:bf:d4:56:e4:29:b7:95:54:4e:9d:90:85:13:a3:cf:9d:13:30:52:c1:00:cd:11:b7:80:19:0e
Revocation information
OCSP Server: http://ovca5.ocsp.secomtrust.netCRL Distribution Point: http://repo1.secomtrust.net/sppca/xtov5/fullcrl.crl
Check the revocation status for certificate siteserve.jp
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for siteserve.jp
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
siteserve.jp
Other certificates including the domain name siteserve.jp
(limited to 100 certificates)
siteserve.jp
*.siteserve.jp
cart.siteserve.jp
siteserve.jp
cart.siteserve.jp
*.siteserve.jp
pup.siteserve.jp
shop.siteserve.jp
*.siteserve.jp
siteserve.jp
cart.siteserve.jp
siteserve.jp
*.siteserve.jp
*.siteserve.jp
siteserve.jp
siteserve.jp
*.siteserve.jp
cart.siteserve.jp
*.siteserve.jp
*.siteserve.jp
siteserve.jp
*.siteserve.jp
siteserve.jp
siteserve.jp
pup.siteserve.jp
siteserve.jp
shop.siteserve.jp
shop.siteserve.jp
*.siteserve.jp
cart.siteserve.jp
cart.siteserve.jp
*.siteserve.jp
*.siteserve.jp
cart.siteserve.jp
shop.siteserve.jp
shop.siteserve.jp
cart.siteserve.jp
pup.siteserve.jp
cart.siteserve.jp
cart.siteserve.jp
*.siteserve.jp
siteserve.jp
*.siteserve.jp
cart.siteserve.jp
pup.siteserve.jp
shop.siteserve.jp
shop.siteserve.jp
pup.siteserve.jp
pup.siteserve.jp
pup.siteserve.jp
shop.siteserve.jp
pup.siteserve.jp
shop.siteserve.jp
siteserve.jp
*.siteserve.jp
siteserve.jp
shop.siteserve.jp
shop.siteserve.jp
siteserve.jp
siteserve.jp
siteserve.jp
shop.siteserve.jp
shop.siteserve.jp
*.siteserve.jp
cart.siteserve.jp
siteserve.jp
cart.siteserve.jp
*.siteserve.jp
pup.siteserve.jp
shop.siteserve.jp
*.siteserve.jp
siteserve.jp
cart.siteserve.jp
siteserve.jp
*.siteserve.jp
*.siteserve.jp
siteserve.jp
siteserve.jp
*.siteserve.jp
cart.siteserve.jp
*.siteserve.jp
*.siteserve.jp
siteserve.jp
*.siteserve.jp
siteserve.jp
siteserve.jp
pup.siteserve.jp
siteserve.jp
shop.siteserve.jp
shop.siteserve.jp
*.siteserve.jp
cart.siteserve.jp
cart.siteserve.jp
*.siteserve.jp
*.siteserve.jp
cart.siteserve.jp
shop.siteserve.jp
shop.siteserve.jp
cart.siteserve.jp
pup.siteserve.jp
cart.siteserve.jp
cart.siteserve.jp
*.siteserve.jp
siteserve.jp
*.siteserve.jp
cart.siteserve.jp
pup.siteserve.jp
shop.siteserve.jp
shop.siteserve.jp
pup.siteserve.jp
pup.siteserve.jp
pup.siteserve.jp
shop.siteserve.jp
pup.siteserve.jp
shop.siteserve.jp
siteserve.jp
*.siteserve.jp
siteserve.jp
shop.siteserve.jp
shop.siteserve.jp
siteserve.jp
siteserve.jp
siteserve.jp
shop.siteserve.jp
shop.siteserve.jp
Certificate
The complete raw certificate details for siteserve.jp in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIIJl0tkQVELoswDQYJKoZIhvcNAQELBQAwUDELMAkGA1UE BhMCSlAxJTAjBgNVBAoTHFNFQ09NIFRydXN0IFN5c3RlbXMgQ08uLExURC4xGjAY BgNVBAMTEUNyb3NzVHJ1c3QgT1YgQ0E1MB4XDTE5MDEyMjAxMjczNloXDTIwMDMz MTE0NTk1OVowgZkxCzAJBgNVBAYTAkpQMQ4wDAYDVQQIEwVUb2t5bzEpMCcGA1UE BxMgTWluYXRvLWt1IE5pc2hpLXNoaW5iYXNoaSAxLTEwLTIxGzAZBgNVBAoTEkVz dG9yZSBDb3Jwb3JhdGlvbjEbMBkGA1UECxMST3BlcmF0aW9uIERpdmlzaW9uMRUw EwYDVQQDEwxzaXRlc2VydmUuanAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC9aiUDVxz3KrHZ35wkihuxlalVs99euC5o5w1x5hLYkLexawIU5yxVPOfB l8vueiRr8gxDW86vHCRDjrmWTHeInYPcxsdKn00sgI8qUJCCpUnbk8a8lEtcCcXz s+DKflOohm2TquBitL2D3DeSgiFokSrVe+KtrTIkv52b3tWkGZmJYTyg9D8S1+Le jQeXmgEHy2rTJ/aB/cYT833UmtPbcRjcjg2JA8LW9lUHtie1krOEVaEj/s3QIrMl HI72R49gY+q9yz/62ziKn6ud3iqu71VykzareaIpD28E8ID/Be5Al2i1CUCXPmgo 3qjnWvn/NHiuc8eC7vXKIUY9OWVvAgMBAAGjggLiMIIC3jAfBgNVHSMEGDAWgBQk t7RB1DJPxBn/XmJkO15pJ2EX3DA8BggrBgEFBQcBAQQwMC4wLAYIKwYBBQUHMAGG IGh0dHA6Ly9vdmNhNS5vY3NwLnNlY29tdHJ1c3QubmV0MBcGA1UdEQQQMA6CDHNp dGVzZXJ2ZS5qcDBaBgNVHSAEUzBRMEUGCiqDCIybG26BVgIwNzA1BggrBgEFBQcC ARYpaHR0cHM6Ly9yZXBvMS5zZWNvbXRydXN0Lm5ldC9zcHBjYS94dG92NS8wCAYG Z4EMAQICMBMGA1UdJQQMMAoGCCsGAQUFBwMBMEQGA1UdHwQ9MDswOaA3oDWGM2h0 dHA6Ly9yZXBvMS5zZWNvbXRydXN0Lm5ldC9zcHBjYS94dG92NS9mdWxsY3JsLmNy bDAdBgNVHQ4EFgQUkq4osFHyuxTZphzq4ASv4xtS3RMwDgYDVR0PAQH/BAQDAgWg MIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdgCkuQmQtBhYFIe7E6LMZ3AKPDWY BPkb37jjd80OyA3cEAAAAWhzNKleAAAEAwBHMEUCIArb8+bbc/DvVHj7NK+UDeEG q2/7GE5A3ye7V4GcFKcEAiEA9YMjQEQFPm6Pa6THS2B6v5apB9LYxpIKdK7KeB7O 3bsAdQDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWhzNLImAAAE AwBGMEQCICV74xWHYsF3wbGO1eWQnRv/STBppnsN+8X/YLhnWBMoAiAY448mo8sK p78/lPgEg5oq3oRhU79zPBeIZjS+AoNZxgB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZ AsEAKQaNsgiaN9kTAAABaHM0ue8AAAQDAEYwRAIgTM6j1J6T6PPv+KQ1U365jLNY bFxuLcXcePzLFbcRqvsCIFv8SvuLtZja+FukEjCc/0psEHc/oCozvaFAWuiXighn MA0GCSqGSIb3DQEBCwUAA4IBAQDKSI2ZOa0GBLG7+lMksKyt5eaLlr1DqXqA6aMw t+Iq1oiCoL6uls6OKRgMZM72Cxj4a8AMNVGO0vTR9EU71OT2PeHPHfWgYzf/vHW/ rP2RUKmsAJsyqCdjmNCjH+leaOH1CqhnT0wgmnHdJnL6WwM65qS1iABhnxTcrU7R 5ELLCc+8y7XKwRuhnqRlwQVpheD7iB1N8RXmeF+TFCCzaTVh/t44hyBbT9R2XOOi 3HKpVrgrLvy9pFzzW6BSriaIZIwBM4TCq4xA1k/F4Sq5W4XCg4Lc3Qo2UHfbErTd gq97Y6ThJVrQRRtGJca9569a9RnhXFi0EyQUCStiXlMYAYLi -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWolA1cc9yqx2d+cJIob sZWpVbPfXrguaOcNceYS2JC3sWsCFOcsVTznwZfL7noka/IMQ1vOrxwkQ465lkx3 iJ2D3MbHSp9NLICPKlCQgqVJ25PGvJRLXAnF87Pgyn5TqIZtk6rgYrS9g9w3koIh aJEq1Xvira0yJL+dm97VpBmZiWE8oPQ/Etfi3o0Hl5oBB8tq0yf2gf3GE/N91JrT 23EY3I4NiQPC1vZVB7YntZKzhFWhI/7N0CKzJRyO9kePYGPqvcs/+ts4ip+rnd4q ru9VcpM2q3miKQ9vBPCA/wXuQJdotQlAlz5oKN6o51r5/zR4rnPHgu71yiFGPTll bwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2764415847157214859 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CrossTrust OV CA5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-22 01:27:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 14:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minato-ku Nishi-shinbashi 1-10-2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Estore Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Operation Division' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'siteserve.jp' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23911381482884380664078732796787803211442092693918124512314504677742559457305429756527364121569698460137444765578941730321485267412704190415457509978624175887511563574238263710620241055017311256932526551822691055563055133525611706211217674850772423195322432713956809018933509971766226695527102988966075486172532297053359390075699800881165888228670056503143221700677029717781728051813632837948019591740376277582791867412121279690632742997747400165478500054236999239246797245202291804371887368389947822552122353444665038955135312176117241554998747162930117497618999722554389579481602817217727489080200612739809619305839 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 24b7b441d4324fc419ff5e62643b5e69276117dc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ovca5.ocsp.secomtrust.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siteserve.jp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.214.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/xtov5/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/xtov5/fullcrl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 92ae28b051f2bb14d9a61ceae004afe31b52dd13 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00ca488d9939ad0604b1bbfa5324b0acade5e68b96bd43a97a80e9a330b7e22ad68882a0beae96ce8e29180c64cef60b18f86bc00c35518ed2f4d1f4453bd4e4f63de1cf1df5a06337ffbc75bfacfd9150a9ac009b32a8276398d0a31fe95e68e1f50aa8674f4c209a71dd2672fa5b033ae6a4b58800619f14dcad4ed1e442cb09cfbccbb5cac11ba19ea465c1056985e0fb881d4df115e6785f931420b3693561fede3887205b4fd4765ce3a2dc72a956b82b2efcbda45cf35ba052ae2688648c013384c2ab8c40d64fc5e12ab95b85c28382dcdd0a365077db12b4dd82af7b63a4e1255ad0451b4625c6bde7af5af519e15c58b4132414092b625e53180182e2