info.isl.ntt.co.jp

- NIPPON TELEGRAPH AND TELEPHONE CORPORATION -

Issued by SECOM Passport for Web SR 3.0 CA

About this certificate

This digital certificate with serial number 36:79:65:a5:65:e3:5b:df:4a:28:01:2e:f4:01:d0:ef was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

NIPPON TELEGRAPH AND TELEPHONE CORPORATION

Organization: NIPPON TELEGRAPH AND TELEPHONE CORPORATION
Organization unit: NTT Secure Platform Laboratories
State / Province: Tokyo
Locality: Chiyoda-ku
Country: JP

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 36:79:65:a5:65:e3:5b:df:4a:28:01:2e:f4:01:d0:ef
Serial Number (int): 72408641319817800959512057515960553711
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 19:f3:58:6a:ec:93:b6:a8:78:81:33:ce:8b:a6:62:19:65:70:1f:e5
AuthorityKeyId: cb:ef:3d:ef:83:74:a1:a8:42:f0:3b:40:36:fa:6d:82:94:a9:27:36

Fingerprint (sha1): c0:e2:87:fb:a9:38:32:a7:90:c9:a5:72:93:8b:27:4e:29:bb:a7:26
Fingerprint (sha256): 3c:2c:1f:ac:3b:1c:9f:78:cf:fa:33:e2:f7:77:6a:66:43:5c:d9:fb:9c:67:9b:35:f7:eb:4a:3b:78:bc:36:48


Revocation information

OCSP Server: http://sr30.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/fullcrl2.crl

Check the revocation status for certificate info.isl.ntt.co.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for info.isl.ntt.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

info.isl.ntt.co.jp

Other certificates including the domain name ntt.co.jp

(limited to 100 certificates)
www.atsugi-ankan-k.aecl.ntt.co.jp
securemap.west.ntt.co.jp
labevent.ecl.ntt.co.jp
dishsfmermsnf.is.ntt-finance.co.jp
rms-nttud.ddreams.jp
labevent.ecl.ntt.co.jp
www.oss.ecl.ntt.co.jp
*.shareholder.ntt.co.jp
mail.is.nttdocomo.co.jp
dishsfme.is.nttdocomo.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
sip.hco.ntt.co.jp
www.sirocco.hil.ntt.co.jp
ipweb01.ipass.ntt.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
dishsfmermsnd.is.nttdocomo.co.jp
www.ntt.co.jp
rms-nttrec.ddreams.jp
info.isl.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
www.sic.ecl.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
*.ecl.hco.ntt.co.jp
info.isl.ntt.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
*.ocrc.west.ntt.co.jp
ansl.ntt.co.jp
www.ntt.co.jp
sp-tsm.ecl.ntt.co.jp
info.isl.ntt.co.jp
mail.is.nttdocomo.co.jp
www.fdv.gis-crisis.sys.east.ntt.co.jp
rms-nttba-g.ddreams.jp
fletscsc.bch.east.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
www.ntt.co.jp
illusion-forum.ilab.ntt.co.jp
ipweb01.ipass.ntt.co.jp
rms-nttba-g.ddreams.jp
mobile.ecl.ntt.co.jp
dishsfmermsnh.hco.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
ipweb01.ipass.ntt.co.jp
info.isl.ntt.co.jp
securemap.west.ntt.co.jp
ipweb01.ipass.ntt.co.jp
journal.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
mobile.ecl.ntt.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
ipweb01.ipass.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
sip.hco.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
info.isl.ntt.co.jp
www.brl.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
*.brl.ntt.co.jp
sports-brain.ilab.ntt.co.jp
*.ecl.ntt.co.jp
oemfinder.ilab.ntt.co.jp
denshiki.securemap.west.ntt.co.jp
dishsfmermsnh.hco.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
sip.hco.ntt.co.jp
www.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
www.ntt.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
ipweb01.ipass.ntt.co.jp
www.ntt.co.jp
rms-ntt-f-dreams.ddreams.jp
labevent.ecl.ntt.co.jp
*.brl.ntt.co.jp
nlp.hil.ntt.co.jp
www.ntt.co.jp
www.mvisit.ecl.ntt.co.jp
www.ntt.co.jp
rms-ntt-f-dreams.ddreams.jp
www.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
www.mvisit.ecl.ntt.co.jp
labevent.ecl.ntt.co.jp
mailwise.tokyo.east.ntt.co.jp
illusion-forum.ilab.ntt.co.jp
www.ntt.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
mail-m.is.nttdocomo.co.jp
senyo.securemap.west.ntt.co.jp
mailwise.tokyo.east.ntt.co.jp
www.ntt.co.jp
sip.hco.ntt.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
www.ntt.co.jp
info.isl.ntt.co.jp
bch-wise.bch.east.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
www.brl.ntt.co.jp
www.ntt.co.jp

Certificate

The complete raw certificate details for info.isl.ntt.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHDTCCBfWgAwIBAgIQNnllpWXjW99KKAEu9AHQ7zANBgkqhkiG9w0BAQsFADBf
MQswCQYDVQQGEwJKUDElMCMGA1UEChMcU0VDT00gVHJ1c3QgU3lzdGVtcyBDTy4s
TFRELjEpMCcGA1UEAxMgU0VDT00gUGFzc3BvcnQgZm9yIFdlYiBTUiAzLjAgQ0Ew
HhcNMjEwMzI2MDcxODI1WhcNMjIwNDE4MTQ1OTU5WjCBrzELMAkGA1UEBhMCSlAx
DjAMBgNVBAgTBVRva3lvMRMwEQYDVQQHEwpDaGl5b2RhLWt1MTMwMQYDVQQKEypO
SVBQT04gVEVMRUdSQVBIIEFORCBURUxFUEhPTkUgQ09SUE9SQVRJT04xKTAnBgNV
BAsTIE5UVCBTZWN1cmUgUGxhdGZvcm0gTGFib3JhdG9yaWVzMRswGQYDVQQDExJp
bmZvLmlzbC5udHQuY28uanAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDC3qEkZqYbMoC40VGNHaHdmvC3GyGAGIH5FIE79DrUmvLKvl+OVTLFw6WUXq/o
LkdVWiEv4h2Z8rtJoZX5EeerFSFY+IaxFqqerz59ZHzFG0fktlmzG6W6e9/05erx
id3Bk0J/RoS48l53IpyUHWU9laFajlbS+hVFPzRObCAovQaAPLrK5lszgXGbyA4C
a0Td3U+O5KulcstLCHtQD3POv4/lafDW/zxhLkQ4VdUJH+Nwcqvz5gP/8kIoutPr
iwhHwm7o5URtLVnz7lVXy3WqafDA0tWKo5s8jebRa2a5FfgiDiWlv8O4D3887ne0
cfDNRpxVY671kIZkR7SKSSy/AgMBAAGjggNyMIIDbjAfBgNVHSMEGDAWgBTL7z3v
g3ShqELwO0A2+m2ClKknNjA7BggrBgEFBQcBAQQvMC0wKwYIKwYBBQUHMAGGH2h0
dHA6Ly9zcjMwLm9jc3Auc2Vjb210cnVzdC5uZXQwHQYDVR0RBBYwFIISaW5mby5p
c2wubnR0LmNvLmpwMGEGA1UdIARaMFgwTAYKKoMIjJsbZIVvATA+MDwGCCsGAQUF
BwIBFjBodHRwczovL3JlcG8xLnNlY29tdHJ1c3QubmV0L3NwY3BwL3Bmdy9wZndz
cjNjYS8wCAYGZ4EMAQICMBMGA1UdJQQMMAoGCCsGAQUFBwMBMEwGA1UdHwRFMEMw
QaA/oD2GO2h0dHA6Ly9yZXBvMS5zZWNvbXRydXN0Lm5ldC9zcGNwcC9wZncvcGZ3
c3IzY2EvZnVsbGNybDIuY3JsMB0GA1UdDgQWBBQZ81hq7JO2qHiBM86LpmIZZXAf
5TAOBgNVHQ8BAf8EBAMCBaAwggH4BgorBgEEAdZ5AgQCBIIB6ASCAeQB4gB2ACl5
vvCeOTkh8FZzn2Old+W+V32cYAr4+U1dJlwlXceEAAABeG1vLcwAAAQDAEcwRQIh
AMl+r1mWxy3Y81nv9ZGdTabRDOG8beHSEHdZ9eewQ9bUAiAH8Jtcq5SNYabokUhz
oMYfinIDrBaBVhpBGMPeTJ+QUgB2AEalVet1+pEgMLWiiWn0830RLEF0vv1JuIWr
8vxw/m1HAAABeG1vM1wAAAQDAEcwRQIgM5/s/AxBO+Hitpsmqp3E77dcsE5sLPsx
/IahGpjeuRcCIQCajFP1mJXewY/6IZ5f1gfPz8Zs6ONavBl+PslqDpay3wB3ACJF
RQdZVSRWlj+hL/H3bYbgIyZjrcBLf13Gg1xu4g8CAAABeG1vNikAAAQDAEgwRgIh
AIPByIgcjgz/iMh137ZEdSr1OmWXeuRr2IuagG1XXOvxAiEAywK40ZbG+MgebVDx
YoM6jbTMiVRhbtb58+ditxy2AtMAdwBByMqx3yJGShDGoToJQodeTjGLGwPr60vH
aPCQYpYG9gAAAXhtbzckAAAEAwBIMEYCIQDnlVqkhJ5j2e3gc2V4uIrakfIwp8Dc
sTgtFWQGjPRhYgIhAJtWHU8kBNxjizTpuFXwJHLlEVN7ZX8wmToA1f2C4pbYMA0G
CSqGSIb3DQEBCwUAA4IBAQCgtdE/REUWU0LqvYH5bFpGXv//5n0orlGfMXRZuUEQ
8/8XOVHkqmCmi9rdDaPwb2/McvkI9vINEa1OL2VuoNeF7U2sZ6VDAE/ReYKlrnsi
QExqisVbskQ+KFfZ/3shaq3J0c88U+yrjQ/2v4+BCJynrTf8yWYF8vfSihPTKth2
HB2mloTLbOlbTC8wU6iJeS+SisTeUU9gLybeJsD9zxVsBJL9c4i+rqmRb1rGjjow
QXU1D1xOebSnE1eGogJIvvgMusQ9+z5oXUuj5vFc31ueTJsSjfjIJb+1N3O0PR+7
UmtfjcYPYISYM2VKZ/e1cXNhcATchVUziTVW80Gc2D44
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt6hJGamGzKAuNFRjR2h
3ZrwtxshgBiB+RSBO/Q61Jryyr5fjlUyxcOllF6v6C5HVVohL+IdmfK7SaGV+RHn
qxUhWPiGsRaqnq8+fWR8xRtH5LZZsxulunvf9OXq8YndwZNCf0aEuPJedyKclB1l
PZWhWo5W0voVRT80TmwgKL0GgDy6yuZbM4Fxm8gOAmtE3d1PjuSrpXLLSwh7UA9z
zr+P5Wnw1v88YS5EOFXVCR/jcHKr8+YD//JCKLrT64sIR8Ju6OVEbS1Z8+5VV8t1
qmnwwNLViqObPI3m0WtmuRX4Ig4lpb/DuA9/PO53tHHwzUacVWOu9ZCGZEe0ikks
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 72408641319817800959512057515960553711
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Passport for Web SR 3.0 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-26 07:18:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-18 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chiyoda-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NIPPON TELEGRAPH AND TELEPHONE CORPORATION'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NTT Secure Platform Laboratories'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'info.isl.ntt.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24600013842628613030250085674073926961063225993189144053115003033394830776040750900628888525226858504650988696741533384508832548619003510129076357670324327469920178336851447039126242641386642590927507463024698150767267352579375441218813656288634177206467832268377751506273439997143744836063162910681580016843548856826583185412819654132513243395599896567481232405902369898696736273223833996557440673870605454517969278744752895191892264019320203912294866663763362438312248464195546220467102704132811762087747383994791277109367864001140582340236689986848878177339321079703853455215113235626110815929581336912005136198847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cbef3def8374a1a842f03b4036fa6d8294a92736
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr30.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.isl.ntt.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.100.751.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/fullcrl2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19f3586aec93b6a8788133ce8ba6621965701fe5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							01e20076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001786d6f2dcc0000040300473045022100c97eaf5996c72dd8f359eff5919d4da6d10ce1bc6de1d2107759f5e7b043d6d4022007f09b5cab948d61a6e8914873a0c61f8a7203ac1681561a4118c3de4c9f905200760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001786d6f335c00000403004730450220339fecfc0c413be1e2b69b26aa9dc4efb75cb04e6c2cfb31fc86a11a98deb9170221009a8c53f59895dec18ffa219e5fd607cfcfc66ce8e35abc197e3ec96a0e96b2df0077002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f02000001786d6f3629000004030048304602210083c1c8881c8e0cff88c875dfb644752af53a65977ae46bd88b9a806d575cebf1022100cb02b8d196c6f8c81e6d50f162833a8db4cc8954616ed6f9f3e762b71cb602d300770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001786d6f37240000040300483046022100e7955aa4849e63d9ede0736578b88ada91f230a7c0dcb1382d1564068cf461620221009b561d4f2404dc638b34e9b855f02472e511537b657f30993a00d5fd82e296d8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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