*.nihon-ma.co.jp

- Nihon M&A Center Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 57:77:c6:bb:8f:fc:1a:75:dd:0e:25:db was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Nihon M&A Center Inc.

Organization: Nihon M&A Center Inc.
State / Province: Tokyo
Locality: Chiyoda ku
Country: JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 57:77:c6:bb:8f:fc:1a:75:dd:0e:25:db
Serial Number (int): 27069996515471108559361418715
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 04:b3:f9:00:38:cc:c4:0f:31:19:78:49:de:96:87:fb:ac:b7:a4:b9
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 39:b6:e5:a9:d3:bc:5d:30:2f:c5:f6:e9:d4:0b:de:1c:04:14:eb:4d
Fingerprint (sha256): 4e:65:14:33:1e:cd:d9:7e:d2:cd:c9:0f:79:fa:90:b2:1e:16:65:c5:9f:62:a8:7c:4b:45:a0:8e:63:f3:e0:a6

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.nihon-ma.co.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nihon-ma.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nihon-ma.co.jp
nihon-ma.co.jp

Other certificates including the domain name nihon-ma.co.jp

(limited to 100 certificates)
search.nihon-ma.co.jp
www.recruit.nihon-ma.co.jp
www1.nihon-ma.co.jp
www.nihon-ma.co.jp
www2.nihon-ma.co.jp
*.nihon-ma.co.jp
www.nihon-ma.co.jp
www1.nihon-ma.co.jp
search.nihon-ma.co.jp
www.nihon-ma.co.jp
www.nihon-ma.co.jp
*.nihon-ma.co.jp
www1.nihon-ma.co.jp
www1.nihon-ma.co.jp
www1.nihon-ma.co.jp
*.nihon-ma.co.jp
search.nihon-ma.co.jp
www.nihon-ma.co.jp
www1.nihon-ma.co.jp
search.nihon-ma.co.jp
dev02.nihon-ma.co.jp
mediation.nihon-ma.co.jp
www1.nihon-ma.co.jp
www1.nihon-ma.co.jp
www.nihon-ma.co.jp
mediation.nihon-ma.co.jp
www2.nihon-ma.co.jp
www.nihon-ma.co.jp
www1.nihon-ma.co.jp
www.nihon-ma.co.jp
search.nihon-ma.co.jp
www1.nihon-ma.co.jp
www2.nihon-ma.co.jp
www2.nihon-ma.co.jp
www.nihon-ma.co.jp
www.nihon-ma.co.jp
www1.nihon-ma.co.jp
www2.nihon-ma.co.jp
mediation.nihon-ma.co.jp
www.recruit.nihon-ma.co.jp
www2.nihon-ma.co.jp
mediation.nihon-ma.co.jp
www1.nihon-ma.co.jp
*.nihon-ma.co.jp
dev02.nihon-ma.co.jp
www.nihon-ma.co.jp
mediation.nihon-ma.co.jp
www2.nihon-ma.co.jp
recruit.nihon-ma.co.jp
www2.nihon-ma.co.jp
www.nihon-ma.co.jp
www2.nihon-ma.co.jp
search.nihon-ma.co.jp
topics.nihon-ma.co.jp

Certificate

The complete raw certificate details for *.nihon-ma.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGoDCCBYigAwIBAgIMV3fGu4/8GnXdDiXbMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMzEwMTEwODUwNDNaFw0y
NDExMTEwODUwNDJaMG0xCzAJBgNVBAYTAkpQMQ4wDAYDVQQIDAVUb2t5bzETMBEG
A1UEBwwKQ2hpeW9kYSBrdTEeMBwGA1UECgwVTmlob24gTSZBIENlbnRlciBJbmMu
MRkwFwYDVQQDDBAqLm5paG9uLW1hLmNvLmpwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAv26kRRTUpDtdaB07C8byDxXM0OIHMEFBnKvWCA3abfMTMA7c
if1e8QFWF5u1+QtHSkMWQovcj9AM1A83GvI3LdEdpFM7Jxk5jCP3WubHVEsCQq55
lSBB18rvf5f7kfnME/QArH4JYdBDAmSmQF7s3u4ZajhJV6aK1NSwTdelWmMgaXtF
x8WAFcD8OOaXqDSgWJ+Z3dtZ+pIqB9TRnaxKzDknZ4eeOiDpqKq9pB7y0UwJKUt2
b2Z34ZiWlap48ZzaxSBHwvIZzcvR26m/ajeAhOb1+q1gI2GNTNaTX80ydxzgu37a
cJeyJJQTK2ijtP5HyUh6e5YWw5A5WcjEH0Hs6QIDAQABo4IDWzCCA1cwDgYDVR0P
AQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwgY4GCCsGAQUFBwEBBIGBMH8wRAYIKwYB
BQUHMAKGOGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzcnNh
b3Zzc2xjYTIwMTguY3J0MDcGCCsGAQUFBzABhitodHRwOi8vb2NzcC5nbG9iYWxz
aWduLmNvbS9nc3JzYW92c3NsY2EyMDE4MFYGA1UdIARPME0wQQYJKwYBBAGgMgEU
MDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9z
aXRvcnkvMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY3JsLmds
b2JhbHNpZ24uY29tL2dzcnNhb3Zzc2xjYTIwMTguY3JsMCsGA1UdEQQkMCKCECou
bmlob24tbWEuY28uanCCDm5paG9uLW1hLmNvLmpwMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBT473/yzXhnqN5vjySNiPGHAwKz6zAd
BgNVHQ4EFgQUBLP5ADjMxA8xGXhJ3paH+6y3pLkwggF/BgorBgEEAdZ5AgQCBIIB
bwSCAWsBaQB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABix3u
ZxsAAAQDAEcwRQIgVI1pUOh3D/shYI19nVLGS0fRgDzl07zIj4WiPNFfttUCIQC9
nXFbub5Yv2/cwBjQzL5ZmN5RjKZ/+jCZvuxxKfrlFwB3AO7N0GTV2xrOxVy3nbTN
E6Iyh0Z8vOzew1FIWUZxH7WbAAABix3uZwUAAAQDAEgwRgIhAJ4yuo6Y9ywvXi/q
BbI4s3dlPB3yzsbX76L1n/jpI8l0AiEAoyyHKvNJEqZCQOJqt5y266unT/X3htcU
JzfA4xWm9fEAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYsd
7mcoAAAEAwBHMEUCIAfjvbzvicKBfIryz2sJw8/MFVHCttrAYfN4FlXSRBV8AiEA
wS6gY7b5EqRLVzmYje0vJqn9nzIO33wr7GQn8qaUuKwwDQYJKoZIhvcNAQELBQAD
ggEBAFmXJxmU6tZwp3VEr3XkDOsH1m4xEbdMTU6AnwdZFlIHIp2K8NOZevmRCms/
3Kvr4YRKUodincB0BxXO1aTovjcfeSkgmARht5LiWFSvqI3bNMjpzniJlsZRH8wH
tBfalq6OEdwO7YrMZdHNeIWZ7johsP3PbzcJTVvg3sFp1hhWYK7qO+ey9+yPCDFj
oPP535xAKZA6EDOQiYsN8wXABwJrH387Of4CK1Z8TI/jg2+C7VLZPighXppOUNYx
l9g86pTAikcUDQZuGArwp8aaxLYe+RzahsjZd3agPNdQXHXMccGJIVHRX69fsPVz
5EMyz+NxX3JDHI/sNihsv7gsvhc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv26kRRTUpDtdaB07C8by
DxXM0OIHMEFBnKvWCA3abfMTMA7cif1e8QFWF5u1+QtHSkMWQovcj9AM1A83GvI3
LdEdpFM7Jxk5jCP3WubHVEsCQq55lSBB18rvf5f7kfnME/QArH4JYdBDAmSmQF7s
3u4ZajhJV6aK1NSwTdelWmMgaXtFx8WAFcD8OOaXqDSgWJ+Z3dtZ+pIqB9TRnaxK
zDknZ4eeOiDpqKq9pB7y0UwJKUt2b2Z34ZiWlap48ZzaxSBHwvIZzcvR26m/ajeA
hOb1+q1gI2GNTNaTX80ydxzgu37acJeyJJQTK2ijtP5HyUh6e5YWw5A5WcjEH0Hs
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27069996515471108559361418715
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 08:50:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-11 08:50:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Chiyoda ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nihon M&A Center Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nihon-ma.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24166075693938822384371100374735186725143128909298992401110324856485089554943038132272679772404862248089383174355041637231427704900733352061883018192272131024449572467232531026882232139735969536083587989398026591597360504735578424217618589682753961452220535708654544773673409868958963897048633166075191669829050682291438204838358946347269647250945547872974080642409855571214781001621966063371587940301999840276536437991623556713121342992087294950875032708467522851346405679178795989652342424839887168894291126394270540357251541851675658587204070661316540635559254716014184685163236444560136140213511570884250375941353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nihon-ma.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nihon-ma.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04b3f90038ccc40f31197849de9687fbacb7a4b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005997271994ead670a77544af75e40ceb07d66e3111b74c4d4e809f0759165207229d8af0d3997af9910a6b3fdcabebe1844a5287629dc0740715ced5a4e8be371f792920980461b792e25854afa88ddb34c8e9ce788996c6511fcc07b417da96ae8e11dc0eed8acc65d1cd788599ee3a21b0fdcf6f37094d5be0dec169d6185660aeea3be7b2f7ec8f083163a0f3f9df9c4029903a103390898b0df305c007026b1f7f3b39fe022b567c4c8fe3836f82ed52d93e28215e9a4e50d63197d83cea94c08a47140d066e180af0a7c69ac4b61ef91cda86c8d97776a03cd7505c75cc71c1892151d15faf5fb0f573e44332cfe3715f72431c8fec36286cbfb82cbe17