www.tokyomirai.ac.jp

- Tokyo Future University -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:e5:19:1f:7d:b9:e9:0e:53:a6:d9:06:b9:27:39:47 was issued on by DigiCert Inc.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tokyo Future University

Organization: Tokyo Future University
State / Province: Tokyo
Locality: Adachi-ku
Country: JP

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:e5:19:1f:7d:b9:e9:0e:53:a6:d9:06:b9:27:39:47
Serial Number (int): 3848001527397814586665671282464864583
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: fd:a6:bf:1d:02:c6:d6:d3:17:ee:1e:7b:fb:d9:35:c0:4e:26:16:0f
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): fd:cd:e3:3e:7c:b5:96:a1:c8:85:5c:4d:b5:e3:20:8d:ac:48:7e:fb
Fingerprint (sha256): 3b:db:5d:e0:2c:60:a5:7f:f1:86:e6:e1:91:ab:5e:33:76:f4:a1:84:61:f2:d5:33:1f:89:a4:d1:91:29:29:00

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.tokyomirai.ac.jp

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tokyomirai.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tokyomirai.ac.jp
tokyomirai.ac.jp
www.freeschool.tokyomirai.ac.jp
corres.tokyomirai.ac.jp
license.tokyomirai.ac.jp
miraien.tokyomirai.ac.jp
license-portal.tokyomirai.ac.jp
humans.tokyomirai.ac.jp
www01.tokyomirai.net
www02.tokyomirai.net
www.odawara.ac.jp
cols.odawara.ac.jp
rishu-web.odawara.ac.jp
tsushin.odawara.ac.jp
www.sanko.ac.jp
helpdesk.sanko.ac.jp
sankoshinjukai.sanko.ac.jp
form.sanko.ac.jp
foreign.sanko.ac.jp
navi.momoiku.jp
www.sanko-group.info

Other certificates including the domain name tokyomirai.ac.jp

(limited to 100 certificates)
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
*.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp
www.tokyomirai.ac.jp

Certificate

The complete raw certificate details for www.tokyomirai.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PJyucYIPHHDpiNkh6w6
jaF6Slb8I8rBkz52QU9cF27wdux12eXzVa2KnhJtBNwXgKaeOhisWYqWykYI1m08
X6N+1no/lTVUF4FrGysmXsmQtOKGyPzwkZ1YDnk4PsCooOKqJypkWuJKkBIijEiC
9b52MurNILCVNxU9ph6msv+h5rP5ozDTX4VcWEh1vvK5ykXmfYwghDrOyo6D65p1
kBZ3rj2hW10QeNZg36zi2w4+/nYLJrMKeGClCyF1NdpugZYMHOMJCs006mV5wU7U
d4sf2ZzEq6jg/GB0rHzFLzvtE0LlglDieRpxCraCu4CB8RpNnsdQzdDPiPwBiE2s
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3848001527397814586665671282464864583
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Adachi-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo Future University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tokyomirai.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27387029509942552872712217218749579903156533061787728295835024395512206221993109298031777793706904273940997492631499595413602464750340465817929441202610452643527731399587673216640920146734066547922081069076180483967846433405627123700240501166459409886116899522100825996614928743344895211300884599594289080955726668932862261216987824330176147922250693939214610462227686559048546229277449934567335023298595989421177636988948922686263412382158945122284453434654046082339804448584004110501618593830564942487340986275295446204365864254305564758474528650105757779549762676284197770857034915149659757592131808981436242701429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fda6bf1d02c6d6d317ee1e7bfbd935c04e26160f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freeschool.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corres.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'license.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miraien.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'license-portal.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humans.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01.tokyomirai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02.tokyomirai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odawara.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cols.odawara.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rishu-web.odawara.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsushin.odawara.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sankoshinjukai.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'form.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreign.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navi.momoiku.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanko-group.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000180faf485180000040300473045022100d53e26021afc7cb694f3510d3d8730c37680ba84b56d432c7bb5c5f29804d21a02205211f6279f4e22750cec859fd77f706d30f0ca31f02bdd596dca45a1316907d200760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c00000180faf4854d00000403004730450220764fa5f4a52dc037c169c50de00b9a17a6f29d0a5502eec8041d49deb66a59f1022100e80de50c6ebd9804a2774acb2c49931b2b95ed5ec69d3f64ca1415152ee6c18f007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000180faf4854d000004030046304402200392b9b32e1009c1827af5bb78cd9209e2132ed1da71ab67fdd4a6cc52cea97b02201e9238430d83c942b9774c0462906157d362d8c73b199def2948cd7434620c1e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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