daiyu-kaitai.nats.tokyo
Issued by AlphaSSL CA - SHA256 - G2
About this certificate
This digital certificate with serial number 50:94:b2:e3:30:e3:3c:df:62:d0:82:28 was issued on by GlobalSign nv-sa.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=daiyu-kaitai.nats.tokyo,OU=Domain Control Validated,C=JP
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 50:94:b2:e3:30:e3:3c:df:62:d0:82:28Serial Number (int): 24938566579178152408422318632
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 8f:65:ab:e7:c1:84:d7:60:a3:ca:85:95:82:b2:c0:9b:c8:39:08:ac
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7
Fingerprint (sha1): 78:44:c4:66:0c:4d:24:f8:5b:0a:e7:ac:3d:73:df:99:03:8c:24:33
Fingerprint (sha256): 4d:24:00:14:6f:81:cf:d3:c5:ac:e9:35:fe:2c:1c:14:41:8b:bf:be:d4:70:c9:d4:6c:75:f6:26:19:4f:37:c0
Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl
Check the revocation status for certificate daiyu-kaitai.nats.tokyo
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for daiyu-kaitai.nats.tokyo
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
daiyu-kaitai.nats.tokyo
Other certificates including the domain name nats.tokyo
(limited to 100 certificates)
katou-t.nats.tokyo
mitoyo.nats.tokyo
mitoyo.nats.tokyo
f-eiken.nats.tokyo
green-grace.nats.tokyo
3-r2.nats.tokyo
chita-kougyo.nats.tokyo
m-tsuda.nats.tokyo
itsuki-group.nats.tokyo
s-and-g.nats.tokyo
*.nats.tokyo
shinada.nats.tokyo
*.nats.tokyo
*.nats.tokyo
kyushu-ad.nats.tokyo
orwak.nats.tokyo
harukarainbow.nats.tokyo
tk-union.nats.tokyo
yusho-co.nats.tokyo
maruhishi.nats.tokyo
hai-f.nats.tokyo
*.nats.tokyo
*.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
sawadatekkin.nats.tokyo
hirano-tire.nats.tokyo
yusho-co.nats.tokyo
usami-kenkou.nats.tokyo
109sai.nats.tokyo
*.nats.tokyo
hayashida-d-s.nats.tokyo
lim-eiya.nats.tokyo
kamakuranozomikai.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
*.nats.tokyo
sawadatekkin.nats.tokyo
boh-chubu.nats.tokyo
kyushu-ad.nats.tokyo
orwak.nats.tokyo
nankai-road.nats.tokyo
car-life.nats.tokyo
miyoshikai.nats.tokyo
s-and-g.nats.tokyo
ichiki-setsubi.nats.tokyo
keick.nats.tokyo
pianoservice2.nats.tokyo
3-r2.nats.tokyo
act-sp.nats.tokyo
activeplan.nats.tokyo
f-eiken.nats.tokyo
maedago.nats.tokyo
hanakawah.nats.tokyo
green-grace.nats.tokyo
straight.nats.tokyo
*.nats.tokyo
systems.nats.tokyo
miyoshikai.nats.tokyo
sf092.nats.tokyo
sf092.nats.tokyo
boh-chubu.nats.tokyo
green-grace.nats.tokyo
*.nats.tokyo
towa-k.nats.tokyo
towa-k.nats.tokyo
nanseikikou.nats.tokyo
kaza-design.nats.tokyo
kashiwa-b.nats.tokyo
ando-s.nats.tokyo
zhiservice.nats.tokyo
eco-runner.nats.tokyo
kyushu-ad.nats.tokyo
kaza-design.nats.tokyo
kawasuke.nats.tokyo
shinada.nats.tokyo
*.nats.tokyo
yutaka-rr.nats.tokyo
*.nats.tokyo
lim-eiya.nats.tokyo
ast.nats.tokyo
links-c.nats.tokyo
hayashida-d-s.nats.tokyo
nankai-road.nats.tokyo
life-e.nats.tokyo
mitoyo.nats.tokyo
mitoyo.nats.tokyo
f-eiken.nats.tokyo
green-grace.nats.tokyo
3-r2.nats.tokyo
chita-kougyo.nats.tokyo
m-tsuda.nats.tokyo
itsuki-group.nats.tokyo
s-and-g.nats.tokyo
*.nats.tokyo
shinada.nats.tokyo
*.nats.tokyo
*.nats.tokyo
kyushu-ad.nats.tokyo
orwak.nats.tokyo
harukarainbow.nats.tokyo
tk-union.nats.tokyo
yusho-co.nats.tokyo
maruhishi.nats.tokyo
hai-f.nats.tokyo
*.nats.tokyo
*.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
sawadatekkin.nats.tokyo
hirano-tire.nats.tokyo
yusho-co.nats.tokyo
usami-kenkou.nats.tokyo
109sai.nats.tokyo
*.nats.tokyo
hayashida-d-s.nats.tokyo
lim-eiya.nats.tokyo
kamakuranozomikai.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
*.nats.tokyo
sawadatekkin.nats.tokyo
boh-chubu.nats.tokyo
kyushu-ad.nats.tokyo
orwak.nats.tokyo
nankai-road.nats.tokyo
car-life.nats.tokyo
miyoshikai.nats.tokyo
s-and-g.nats.tokyo
ichiki-setsubi.nats.tokyo
keick.nats.tokyo
pianoservice2.nats.tokyo
3-r2.nats.tokyo
act-sp.nats.tokyo
activeplan.nats.tokyo
f-eiken.nats.tokyo
maedago.nats.tokyo
hanakawah.nats.tokyo
green-grace.nats.tokyo
straight.nats.tokyo
*.nats.tokyo
systems.nats.tokyo
miyoshikai.nats.tokyo
sf092.nats.tokyo
sf092.nats.tokyo
boh-chubu.nats.tokyo
green-grace.nats.tokyo
*.nats.tokyo
towa-k.nats.tokyo
towa-k.nats.tokyo
nanseikikou.nats.tokyo
kaza-design.nats.tokyo
kashiwa-b.nats.tokyo
ando-s.nats.tokyo
zhiservice.nats.tokyo
eco-runner.nats.tokyo
kyushu-ad.nats.tokyo
kaza-design.nats.tokyo
kawasuke.nats.tokyo
shinada.nats.tokyo
*.nats.tokyo
yutaka-rr.nats.tokyo
*.nats.tokyo
lim-eiya.nats.tokyo
ast.nats.tokyo
links-c.nats.tokyo
hayashida-d-s.nats.tokyo
nankai-road.nats.tokyo
life-e.nats.tokyo
Certificate
The complete raw certificate details for daiyu-kaitai.nats.tokyo in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIMUJSy4zDjPN9i0IIoMA0GCSqGSIb3DQEBCwUAMEwxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTIwMDEwNzAzMzEyMVoXDTIxMDEw NzAzMzEyMVowUjELMAkGA1UEBhMCSlAxITAfBgNVBAsTGERvbWFpbiBDb250cm9s IFZhbGlkYXRlZDEgMB4GA1UEAwwXZGFpeXUta2FpdGFpLm5hdHMudG9reW8wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVg8SyTd5EvCL6TPH9CMflAUgb cFxRxVGJocxpi4Ddc+iHVsqd1Gd6ffZMyA7bmpsylc09zr877GlN1TOE8A8w2o3P hIUMLFUp5XuunQusdlhtMpFl3j6bAB5Y0hspp3xIm1gjJA3fVspV5xx6nG3+GhnT wbDdRCcJj4AT/slyW74XFM6okq3gxEAGBFz6OtUWycu23a8E/S6BACCqyUilZjPJ 4bfUKLGkx6GGF6Xkm/LDl+BvvuiACXG0P7AeVHuestrY0DSTCJ/dgdGDRseiNkcb wvMl7LX6qu3BFr1uImAC308H4dhCHQusv1lt31X5jEm8JWp0HbALSk16BK77AgMB AAGjggHcMIIB2DAOBgNVHQ8BAf8EBAMCBaAwgYkGCCsGAQUFBwEBBH0wezBCBggr BgEFBQcwAoY2aHR0cDovL3NlY3VyZTIuYWxwaGFzc2wuY29tL2NhY2VydC9nc2Fs cGhhc2hhMmcycjEuY3J0MDUGCCsGAQUFBzABhilodHRwOi8vb2NzcDIuZ2xvYmFs c2lnbi5jb20vZ3NhbHBoYXNoYTJnMjBXBgNVHSAEUDBOMEIGCisGAQQBoDIBCgow NDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3Np dG9yeS8wCAYGZ4EMAQIBMAkGA1UdEwQCMAAwPgYDVR0fBDcwNTAzoDGgL4YtaHR0 cDovL2NybDIuYWxwaGFzc2wuY29tL2dzL2dzYWxwaGFzaGEyZzIuY3JsMCIGA1Ud EQQbMBmCF2RhaXl1LWthaXRhaS5uYXRzLnRva3lvMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBT1zdU8CFD5ak86t5faVoPmadJo9zAd BgNVHQ4EFgQUj2Wr58GE12CjyoWVgrLAm8g5CKwwEwYKKwYBBAHWeQIEAwEB/wQC BQAwDQYJKoZIhvcNAQELBQADggEBAJR0cWa66OAqWZsDyMli47bB1CTEAPiFTOpF EM6prQmm0+RwUtMKUqZVoAJYK8HPjLbWnbpoYc1tblUFP5r3K2/ucwmxshIK3R0y Ad6+Sr9rnZ7oxCvt2QejrtWPkVAf5eBQESxb/UD7fT9pMtPNdSPV4mB9yRhVMroG YROCPnbj9olafqdduMjM1vff7YGHm1rJyn9MDiYI9SA8gqiEDHQOOl0mCUktTLtX IMMq6VcNT1R18hWxm107C1Jjs+iQ+wL1kk7old2ctvpXRZV/NNKO0fqPgLpv2yUE xHqzYny55/9fVDtFJzEuPUeBeBwt72d0Q3dncbsY7psYsUfGR4E= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YPEsk3eRLwi+kzx/QjH 5QFIG3BcUcVRiaHMaYuA3XPoh1bKndRnen32TMgO25qbMpXNPc6/O+xpTdUzhPAP MNqNz4SFDCxVKeV7rp0LrHZYbTKRZd4+mwAeWNIbKad8SJtYIyQN31bKVeccepxt /hoZ08Gw3UQnCY+AE/7Jclu+FxTOqJKt4MRABgRc+jrVFsnLtt2vBP0ugQAgqslI pWYzyeG31CixpMehhhel5Jvyw5fgb77ogAlxtD+wHlR7nrLa2NA0kwif3YHRg0bH ojZHG8LzJey1+qrtwRa9biJgAt9PB+HYQh0LrL9Zbd9V+YxJvCVqdB2wC0pNegSu +wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 24938566579178152408422318632 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 03:31:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-07 03:31:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'daiyu-kaitai.nats.tokyo' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26953736350778599766760256979567789759217994979342805484685572584681496166803527150547179720515551505234659391568231002635428456688877073423713875809174843653741658705040431945140800716270940018395021072590551468883163130448878267557382817578532756282355107038164931525805348332319088033493117233843866591165977551003845974636939384466930375729083615306197455224477266252350362661167635591018134805166464989878597645446266248589334793580660396767627634706822407331482803953373371433407392738613085928308357703201042716061712317997028989302490017959643797829088890303727164713951515141987448273366544011371493049282299 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daiyu-kaitai.nats.tokyo' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8f65abe7c184d760a3ca859582b2c09bc83908ac . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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