twww.ipc.hiroshima-cu.ac.jp

- Hiroshima City University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 35:19:45:03:8f:a1:b6:25:b1:a5:c3:b3:25:cd:84:08 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Hiroshima City University

Organization: Hiroshima City University
Organization unit: Information Processing Center
State / Province: hiroshima-ken
Locality: hiroshima-city
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 35:19:45:03:8f:a1:b6:25:b1:a5:c3:b3:25:cd:84:08
Serial Number (int): 70580290966462905090107867561584329736
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 27:ed:1a:a5:d1:a1:74:a7:8d:4d:41:37:70:6f:a1:df:48:d8:39:18
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 57:5f:3e:d1:7e:0d:2b:00:6f:17:a5:e8:bf:78:c1:6b:e8:13:8e:23
Fingerprint (sha256): 3f:9b:ec:25:21:d1:37:d5:45:87:48:a4:77:16:08:f2:1d:ba:5e:60:e3:50:1d:94:df:f1:2c:a9:b2:fc:60:9a


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate twww.ipc.hiroshima-cu.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for twww.ipc.hiroshima-cu.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

twww.ipc.hiroshima-cu.ac.jp

Other certificates including the domain name hiroshima-cu.ac.jp

(limited to 100 certificates)
beta.cm.info.hiroshima-cu.ac.jp
eduroam.ipc.hiroshima-cu.ac.jp
www.cd.info.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
www.netsci.info.hiroshima-cu.ac.jp
vmcs.office.hiroshima-cu.ac.jp
www2.lib.hiroshima-cu.ac.jp
vcd.art.hiroshima-cu.ac.jp
beta.cm.info.hiroshima-cu.ac.jp
hcuwww.ipc.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
hcuwww.ipc.hiroshima-cu.ac.jp
adfs.ipc.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
www2.lib.hiroshima-cu.ac.jp
intl.hiroshima-cu.ac.jp
phys.info.hiroshima-cu.ac.jp
triathlon.hiroshima-cu.ac.jp
castle.csl.info.hiroshima-cu.ac.jp
www.mirai.info.hiroshima-cu.ac.jp
vc04.hiroshima-cu.ac.jp
hculdud.ipc.hiroshima-cu.ac.jp
gate.ipc.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
opac.lib.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
wiki.v6.inet.info.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
nysnx.office.hiroshima-cu.ac.jp
ichipol.hiroshima-cu.ac.jp
apnasv1.intl.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
www2.lib.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
ichipol.hiroshima-cu.ac.jp
phys.info.hiroshima-cu.ac.jp
itssrv.edu.ipc.hiroshima-cu.ac.jp
intl.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
adfs.ipc.hiroshima-cu.ac.jp
triathlon.hiroshima-cu.ac.jp
m45ma.ipc.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
rct.office.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
www.hiroshima-cu.ac.jp
mailchk.ipc.hiroshima-cu.ac.jp
m45ma.ipc.hiroshima-cu.ac.jp
hpc51a.mc.info.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
hcuidm.ipc.hiroshima-cu.ac.jp
webclass.ipc.hiroshima-cu.ac.jp
call.lang.hiroshima-cu.ac.jp
phys.info.hiroshima-cu.ac.jp
mail.sos.info.hiroshima-cu.ac.jp
www.prl.info.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
gdep.sos.info.hiroshima-cu.ac.jp
vcd.art.hiroshima-cu.ac.jp
www.cd.info.hiroshima-cu.ac.jp
www.mirai.info.hiroshima-cu.ac.jp
aokin.lang.hiroshima-cu.ac.jp
twww.ipc.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
gate.ipc.hiroshima-cu.ac.jp
www.v6.netsci.info.hiroshima-cu.ac.jp
mssa.ipc.hiroshima-cu.ac.jp
phys.info.hiroshima-cu.ac.jp
kss.office.hiroshima-cu.ac.jp
apnasv1.office.hiroshima-cu.ac.jp
mail.sos.info.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
fed.ipc.hiroshima-cu.ac.jp
renew.triathlon.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
info.hiroshima-cu.ac.jp
info.hiroshima-cu.ac.jp
vc02.hiroshima-cu.ac.jp
aokin.lang.hiroshima-cu.ac.jp
beta.cm.info.hiroshima-cu.ac.jp
ats2021.info.hiroshima-cu.ac.jp
mailchk.ipc.hiroshima-cu.ac.jp
wm45ma.ipc.hiroshima-cu.ac.jp
hpc51a.mc.info.hiroshima-cu.ac.jp
host.lang.hiroshima-cu.ac.jp
www.cd.info.hiroshima-cu.ac.jp
gate.ipc.hiroshima-cu.ac.jp
fed.ipc.hiroshima-cu.ac.jp
fed.ipc.hiroshima-cu.ac.jp
info.hiroshima-cu.ac.jp
vc-office.hiroshima-cu.ac.jp
ieeesmchiroshima.ints.info.hiroshima-cu.ac.jp
adfs.ipc.hiroshima-cu.ac.jp
aburae.art.hiroshima-cu.ac.jp

Certificate

The complete raw certificate details for twww.ipc.hiroshima-cu.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIQNRlFA4+htiWxpcOzJc2ECDANBgkqhkiG9w0BAQsFADBb
MQswCQYDVQQGEwJKUDEqMCgGA1UEChMhTmF0aW9uYWwgSW5zdGl0dXRlIG9mIElu
Zm9ybWF0aWNzMSAwHgYDVQQDExdOSUkgT3BlbiBEb21haW4gQ0EgLSBHNTAeFw0x
OTA1MjMwOTMzMjdaFw0yMTA2MjMwOTMzMjdaMIGwMQswCQYDVQQGEwJKUDEWMBQG
A1UECBMNaGlyb3NoaW1hLWtlbjEXMBUGA1UEBxMOaGlyb3NoaW1hLWNpdHkxIjAg
BgNVBAoTGUhpcm9zaGltYSBDaXR5IFVuaXZlcnNpdHkxJjAkBgNVBAsTHUluZm9y
bWF0aW9uIFByb2Nlc3NpbmcgQ2VudGVyMSQwIgYDVQQDExt0d3d3LmlwYy5oaXJv
c2hpbWEtY3UuYWMuanAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD
WdsGDozPGMzxwwHEWjnP9MEunB9LBbuavg4cVZfIdMVWyo1MEZ6tgz9S/61jzDcd
uCYc+LatrBKcdbQ1Gie+ACnYNz8vTW25dqeG3yi8h/471dqkiPS7OBZ2oFGdvSt8
ytHecL3ItuymnBt8TBafrpMaSPIhNqWxQqeW0qv1Q/tGtJ1+cYUkQIOWwa1daYBK
jzWN/7fOPG4T8UxsIxnBYv7ej3pJVL0I+htKhkk52/0z2JNcVHpHHt6ZKcy3j1Aj
KZelyNI6+zziX8baYplnojdGN3s0BF+iN38ffcLWbDTS2wr8S9WVcjbh7PXuGGBf
fnpYymHNl7M6e1Sf1/5LAgMBAAGjggGcMIIBmDAfBgNVHSMEGDAWgBRnOjrBa7cc
pkFGOTCEyGkAWRFYwTA8BggrBgEFBQcBAQQwMC4wLAYIKwYBBQUHMAGGIGh0dHA6
Ly9uaWlnNS5vY3NwLnNlY29tdHJ1c3QubmV0MCYGA1UdEQQfMB2CG3R3d3cuaXBj
Lmhpcm9zaGltYS1jdS5hYy5qcDBgBgNVHSAEWTBXMEsGDCsGAQQBgfwIAwIBATA7
MDkGCCsGAQUFBwIBFi1odHRwczovL3JlcG8xLnNlY29tdHJ1c3QubmV0L3NwcGNh
L25paS9vZGNhMy8wCAYGZ4EMAQICMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjBKBgNVHR8EQzBBMD+gPaA7hjlodHRwOi8vcmVwbzEuc2Vjb210cnVzdC5u
ZXQvc3BwY2EvbmlpL29kY2EzL2Z1bGxjcmxnNS5jcmwwHQYDVR0OBBYEFCftGqXR
oXSnjU1BN3Bvod9I2DkYMA4GA1UdDwEB/wQEAwIFoDATBgorBgEEAdZ5AgQDAQH/
BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYP4Apejyf4RlGwIQWp12nbfbQwNxHFxl
StUpzqDZ+3NKrW8qV5Z8SJCNe3pTHZq/zQYSzn1Gh83z/NN2SnTe5dEQ3RW+ExuO
zaStMv6nciY5yoFmuZudsGQ+OwoDz2Ri5TKuahmMJzV7654CytdlpfbJ1DXlOAMe
HupCU3y48lI4LBT1Dt/fzBbviX3ioOjtqxXRjEqph7T7EqACq4hPseLHP+04zYqa
WwFcMUIbc7q5jB4VNSO3OtUaRCmc6slLQdUVryxdjlBTfwnVsUJss2MMvpZat+/P
L7EzdqTCumSW+slI1w1o0ENefQDtJb0RKAvgmK1wOrVB90n6ee4cjQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1nbBg6MzxjM8cMBxFo5
z/TBLpwfSwW7mr4OHFWXyHTFVsqNTBGerYM/Uv+tY8w3HbgmHPi2rawSnHW0NRon
vgAp2Dc/L01tuXanht8ovIf+O9XapIj0uzgWdqBRnb0rfMrR3nC9yLbsppwbfEwW
n66TGkjyITalsUKnltKr9UP7RrSdfnGFJECDlsGtXWmASo81jf+3zjxuE/FMbCMZ
wWL+3o96SVS9CPobSoZJOdv9M9iTXFR6Rx7emSnMt49QIymXpcjSOvs84l/G2mKZ
Z6I3Rjd7NARfojd/H33C1mw00tsK/EvVlXI24ez17hhgX356WMphzZezOntUn9f+
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 70580290966462905090107867561584329736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-23 09:33:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-23 09:33:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hiroshima-ken'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hiroshima-city'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hiroshima City University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Processing Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'twww.ipc.hiroshima-cu.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24660778897029371894042313878541780522904843616642129211561294139240668858342801146518261092735472861505073991446931909564413972841838728371682734408253646984566824342499180795035046285137910695402336586797175619166491021762742291295247822625796118510794573107776476646487287206784881563393026340966857642168493538447527867735019902502843522030150586042959286830482720092547183995394858336270419524798905189400664506831717043768249047839732052999232755512388911690785606097132191556894991654517406725109869224585953729919606810154907067600333289423009410801268111963148366066450569086514745042108969375039404883050059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twww.ipc.hiroshima-cu.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27ed1aa5d1a174a78d4d4137706fa1df48d83918
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0060fe00a5e8f27f84651b02105a9d769db7db4303711c5c654ad529cea0d9fb734aad6f2a57967c48908d7b7a531d9abfcd0612ce7d4687cdf3fcd3764a74dee5d110dd15be131b8ecda4ad32fea7722639ca8166b99b9db0643e3b0a03cf6462e532ae6a198c27357beb9e02cad765a5f6c9d435e538031e1eea42537cb8f252382c14f50edfdfcc16ef897de2a0e8edab15d18c4aa987b4fb12a002ab884fb1e2c73fed38cd8a9a5b015c31421b73bab98c1e153523b73ad51a44299ceac94b41d515af2c5d8e50537f09d5b1426cb3630cbe965ab7efcf2fb13376a4c2ba6496fac948d70d68d0435e7d00ed25bd11280be098ad703ab541f749fa79ee1c8d