websrv.tcu.ac.jp

- TOKYO CITY UNIVERSITY -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 0f:43:69:2c:4f:0c:55:73:f5:97:ee:a8:c1:b2:e9:e6 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

TOKYO CITY UNIVERSITY

Organization: TOKYO CITY UNIVERSITY
Organization unit: Information Technology Center
Locality: tokyo
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:43:69:2c:4f:0c:55:73:f5:97:ee:a8:c1:b2:e9:e6
Serial Number (int): 20288436989807332023639141780724836838
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ae:dd:65:c1:8d:a9:f1:16:73:d0:81:89:2f:90:7f:12:fb:3b:e1:d6
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 93:c2:d0:29:e5:52:c1:d8:b1:04:d9:4c:4a:ef:eb:96:ec:94:90:b4
Fingerprint (sha256): 3a:97:38:3d:47:dc:cf:63:44:cd:5c:91:5d:e4:f6:a0:98:f4:78:97:a8:ab:d4:9e:ea:25:00:4c:f0:fe:d5:4e


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate websrv.tcu.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for websrv.tcu.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

websrv.tcu.ac.jp

Other certificates including the domain name tcu.ac.jp

(limited to 100 certificates)
it.tcu.ac.jp
athena.vm.cs.tcu.ac.jp
yumecampus.tcu.ac.jp
pobox.ns.tcu.ac.jp
www.tcu.ac.jp
www.eng.tcu.ac.jp
www.comm.tcu.ac.jp
www.cs.tcu.ac.jp
websrv.tcu.ac.jp
vpn.yc.tcu.ac.jp
ldap.yc.tcu.ac.jp
vpn.sc.tcu.ac.jp
www.comm.tcu.ac.jp
portal.off.tcu.ac.jp
meibo.tcu.ac.jp
www05s.ufinity.jp
cpf.tcu.ac.jp
tc-poweb.tc.tcu.ac.jp
www.tc.tcu.ac.jp
ufinity03.jp.fujitsu.com
90th.tcu.ac.jp
ycwzstream01.win.tcu.ac.jp
webclass.tcu.ac.jp
mail.tcu.ac.jp
www.cs.tcu.ac.jp
minakanusi.ns.tcu.ac.jp
supply2.tcu.ac.jp
www.itc.tcu.ac.jp
www.ns.tcu.ac.jp
minakanusi.ns.tcu.ac.jp
meibo.tcu.ac.jp
amateras.ma.ns.tcu.ac.jp
supply2.tcu.ac.jp
www.csac.tcu.ac.jp
www.imc.ese.tcu.ac.jp
vgl.cs.tcu.ac.jp
ekessai.tcu.ac.jp
pobox.ns.tcu.ac.jp
ufinity03.jp.fujitsu.com
pa1.sc.tcu.ac.jp
www.tcu.ac.jp
www.cs.tcu.ac.jp
www.risys.gl.tcu.ac.jp
www.tc.tcu.ac.jp
ipsc2.itc.tcu.ac.jp
cn.yc.tcu.ac.jp
cpf.tcu.ac.jp
tsap.tcu.ac.jp
www.sc.tcu.ac.jp
apuer.tcu.ac.jp
kinkyu.tcu.ac.jp
vpn.tcu.ac.jp
portal.off.tcu.ac.jp
scnwmon.itc.tcu.ac.jp
www.ma.ns.tcu.ac.jp
anpi.tcu.ac.jp
pobox.ns.tcu.ac.jp
mail.tcu.ac.jp
koyu-online.tcu.ac.jp
pw.tcu.ac.jp
web-yc.tcu.ac.jp
athena.vm.cs.tcu.ac.jp
minakanusi.ns.tcu.ac.jp
ws.sc.tcu.ac.jp
meibo2.itc.tcu.ac.jp
call.off.tcu.ac.jp
sav-web.off.tcu.ac.jp
websrv.tcu.ac.jp
call.off.tcu.ac.jp
informatics.tcu.ac.jp
www.ke.tcu.ac.jp
www.it.tcu.ac.jp
vgl.cs.tcu.ac.jp
www.arl.tcu.ac.jp
vgl.cs.tcu.ac.jp
koyu-online.tcu.ac.jp
www.tcu.ac.jp
www.itc.tcu.ac.jp
www.risys.gl.tcu.ac.jp
www.ipc.tcu.ac.jp
www.it.tcu.ac.jp
www.arl.tcu.ac.jp
www.tcu.ac.jp
koyu-online.tcu.ac.jp
vgl.cs.tcu.ac.jp
cgi.yc.tcu.ac.jp
mail.tcu.ac.jp
force.tcu.ac.jp
webentry.tcu.ac.jp
print.itc.tcu.ac.jp
www05s.ufinity.jp
www.arl.tcu.ac.jp
swan.yc.tcu.ac.jp
ldap.ns.tcu.ac.jp
www.cs.tcu.ac.jp
lecture.vm.cs.tcu.ac.jp
ufinity03.jp.fujitsu.com
vgl.cs.tcu.ac.jp
apuer.tcu.ac.jp
www.tcu.ac.jp

Certificate

The complete raw certificate details for websrv.tcu.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE+TCCA+GgAwIBAgIQD0NpLE8MVXP1l+6owbLp5jANBgkqhkiG9w0BAQsFADBb
MQswCQYDVQQGEwJKUDEqMCgGA1UEChMhTmF0aW9uYWwgSW5zdGl0dXRlIG9mIElu
Zm9ybWF0aWNzMSAwHgYDVQQDExdOSUkgT3BlbiBEb21haW4gQ0EgLSBHNTAeFw0x
OTExMDgwMDE3MDhaFw0yMTEyMDkwMDE3MDhaMIGAMQswCQYDVQQGEwJKUDEOMAwG
A1UEBxMFdG9reW8xHjAcBgNVBAoTFVRPS1lPIENJVFkgVU5JVkVSU0lUWTEmMCQG
A1UECxMdSW5mb3JtYXRpb24gVGVjaG5vbG9neSBDZW50ZXIxGTAXBgNVBAMTEHdl
YnNydi50Y3UuYWMuanAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG
QsS+7fe3qhiYiXSG1+xrsKHVfziUl4zIvPOmeAg2rRl4QFoX/3Y27JChlBGnhobb
nJ79Fa7N7IcI3Bf5XYXjRpS7bmJ/sxcgzr21ueODa8zL7NC6eD0TWw/Cadf4YL/h
12vyM87m55IcM1p0VqGI6zMl5L0AmuTAY32OEp9qrgEwLsoekWOQB31IA8aG13V1
bvFtlWU8uVG5iaiJQOfD6z1P6IRMOakQYauULkWMzCJ8B/Ix8Q0FppGPF9Z4IbZz
PEQt52fAJEsIbmw1w1xiPYtBPf/pr9bdBRt/A/io06qRzLvLi4BqwutKGNcSeXM+
56gmFTKhbdJVn99Q+PgDAgMBAAGjggGRMIIBjTAfBgNVHSMEGDAWgBRnOjrBa7cc
pkFGOTCEyGkAWRFYwTA8BggrBgEFBQcBAQQwMC4wLAYIKwYBBQUHMAGGIGh0dHA6
Ly9uaWlnNS5vY3NwLnNlY29tdHJ1c3QubmV0MBsGA1UdEQQUMBKCEHdlYnNydi50
Y3UuYWMuanAwYAYDVR0gBFkwVzBLBgwrBgEEAYH8CAMCAQEwOzA5BggrBgEFBQcC
ARYtaHR0cHM6Ly9yZXBvMS5zZWNvbXRydXN0Lm5ldC9zcHBjYS9uaWkvb2RjYTMv
MAgGBmeBDAECAjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSgYDVR0f
BEMwQTA/oD2gO4Y5aHR0cDovL3JlcG8xLnNlY29tdHJ1c3QubmV0L3NwcGNhL25p
aS9vZGNhMy9mdWxsY3JsZzUuY3JsMB0GA1UdDgQWBBSu3WXBjanxFnPQgYkvkH8S
+zvh1jAOBgNVHQ8BAf8EBAMCBaAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI
hvcNAQELBQADggEBALtpN3NEvGDKhJdF1a2ERUc8xS41Hho5Mx6KCzbARk/gCerO
YbTVFCpOIMz+aFvZXmgyb3qyaQQB0kBWbGO92r9qqsETIwUessKZoyEFCHhrmjVr
Np5au+QykL94LlLGPnNqkk5ANIQK7WM7z8ijaGM3qSPN1ctJZX+RFJ58SPLJdxQy
U3fjLl0/BR3gKQUZwCVauUXP3RVlD6VgXjkpOJ6BR8YnDxn+4OELqEe6+3J61imH
k8IYH0z3QkudQX0I+vPy+kWLqhhtYFyysYLHttrMrRcw3QKD1+wVq/U9Ekg5/MGE
hdj3Ahr+BvqdO57tepBiIZxO3Kz2UNgaQ/o07zw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkLEvu33t6oYmIl0htfs
a7Ch1X84lJeMyLzzpngINq0ZeEBaF/92NuyQoZQRp4aG25ye/RWuzeyHCNwX+V2F
40aUu25if7MXIM69tbnjg2vMy+zQung9E1sPwmnX+GC/4ddr8jPO5ueSHDNadFah
iOszJeS9AJrkwGN9jhKfaq4BMC7KHpFjkAd9SAPGhtd1dW7xbZVlPLlRuYmoiUDn
w+s9T+iETDmpEGGrlC5FjMwifAfyMfENBaaRjxfWeCG2czxELednwCRLCG5sNcNc
Yj2LQT3/6a/W3QUbfwP4qNOqkcy7y4uAasLrShjXEnlzPueoJhUyoW3SVZ/fUPj4
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20288436989807332023639141780724836838
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-08 00:17:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-09 00:17:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TOKYO CITY UNIVERSITY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'websrv.tcu.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25028109176665769204425617925441246694792816541219531119314465463768607014444018375484435807890237383002445457406220621359650734254041625148798630647085815158706766540461268328960130032895417270912561091696567484230090861151087818392151702819942619447573074217257487909571704029863128685311803001791691815703897257685961149961697653092723416325029149350440843622736795324772386531989483592496293577666451926598884643503326485439690853195782047528552242837743507455000602499958172353709743787705025577145833798666220919813259140078471789044565575815465369405579138947227484480911565160252296155154381176725068886636547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websrv.tcu.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aedd65c18da9f11673d081892f907f12fb3be1d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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