*.nats.tokyo
Issued by GlobalSign RSA DV SSL CA 2018
About this certificate
This digital certificate with serial number 3b:48:81:75:e7:4c:19:1d:f9:53:e0:f0 was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.nats.tokyo,OU=Domain Control Validated
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 3b:48:81:75:e7:4c:19:1d:f9:53:e0:f0Serial Number (int): 18347269598683683101110165744
Serial Number lenght: 94 bits, 12 octets
SubjectKeyId: 2f:32:bf:04:df:f5:de:b8:37:18:09:96:80:55:67:62:c4:7c:9d:8e
AuthorityKeyId: 81:80:d6:28:79:35:4a:5b:79:35:89:39:8f:12:17:6e:11:7b:2c:11
Fingerprint (sha1): 2f:bf:7c:58:01:d0:0c:c5:86:42:f8:64:99:f1:70:2a:59:0b:80:a3
Fingerprint (sha256): 57:4c:34:16:1d:15:4d:07:1b:af:08:83:fc:0b:fb:72:ef:ae:2d:a4:28:85:26:6b:75:ab:ae:1c:bc:df:aa:1e
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsrsadvsslca2018CRL Distribution Point: http://crl.globalsign.com/gsrsadvsslca2018.crl
Check the revocation status for certificate *.nats.tokyo
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.nats.tokyo
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.nats.tokyo
nats.tokyo
nats.tokyo
Other certificates including the domain name nats.tokyo
(limited to 100 certificates)
katou-t.nats.tokyo
mitoyo.nats.tokyo
mitoyo.nats.tokyo
f-eiken.nats.tokyo
green-grace.nats.tokyo
3-r2.nats.tokyo
chita-kougyo.nats.tokyo
m-tsuda.nats.tokyo
itsuki-group.nats.tokyo
s-and-g.nats.tokyo
*.nats.tokyo
cosmokikaku.nats.tokyo
shinada.nats.tokyo
*.nats.tokyo
*.nats.tokyo
kyushu-ad.nats.tokyo
orwak.nats.tokyo
harukarainbow.nats.tokyo
tk-union.nats.tokyo
yusho-co.nats.tokyo
maruhishi.nats.tokyo
hai-f.nats.tokyo
*.nats.tokyo
*.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
sawadatekkin.nats.tokyo
hirano-tire.nats.tokyo
yusho-co.nats.tokyo
usami-kenkou.nats.tokyo
109sai.nats.tokyo
*.nats.tokyo
hayashida-d-s.nats.tokyo
lim-eiya.nats.tokyo
kamakuranozomikai.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
*.nats.tokyo
sawadatekkin.nats.tokyo
boh-chubu.nats.tokyo
kyushu-ad.nats.tokyo
orwak.nats.tokyo
nankai-road.nats.tokyo
car-life.nats.tokyo
*.nats.tokyo
miyoshikai.nats.tokyo
s-and-g.nats.tokyo
ichiki-setsubi.nats.tokyo
keick.nats.tokyo
pianoservice2.nats.tokyo
3-r2.nats.tokyo
act-sp.nats.tokyo
activeplan.nats.tokyo
f-eiken.nats.tokyo
maedago.nats.tokyo
hanakawah.nats.tokyo
green-grace.nats.tokyo
straight.nats.tokyo
*.nats.tokyo
systems.nats.tokyo
miyoshikai.nats.tokyo
sf092.nats.tokyo
sf092.nats.tokyo
boh-chubu.nats.tokyo
green-grace.nats.tokyo
*.nats.tokyo
towa-k.nats.tokyo
towa-k.nats.tokyo
nanseikikou.nats.tokyo
kaza-design.nats.tokyo
kashiwa-b.nats.tokyo
ando-s.nats.tokyo
zhiservice.nats.tokyo
eco-runner.nats.tokyo
kyushu-ad.nats.tokyo
kaza-design.nats.tokyo
kawasuke.nats.tokyo
shinada.nats.tokyo
*.nats.tokyo
yutaka-rr.nats.tokyo
*.nats.tokyo
lim-eiya.nats.tokyo
ast.nats.tokyo
links-c.nats.tokyo
hayashida-d-s.nats.tokyo
nankai-road.nats.tokyo
life-e.nats.tokyo
mitoyo.nats.tokyo
mitoyo.nats.tokyo
f-eiken.nats.tokyo
green-grace.nats.tokyo
3-r2.nats.tokyo
chita-kougyo.nats.tokyo
m-tsuda.nats.tokyo
itsuki-group.nats.tokyo
s-and-g.nats.tokyo
*.nats.tokyo
cosmokikaku.nats.tokyo
shinada.nats.tokyo
*.nats.tokyo
*.nats.tokyo
kyushu-ad.nats.tokyo
orwak.nats.tokyo
harukarainbow.nats.tokyo
tk-union.nats.tokyo
yusho-co.nats.tokyo
maruhishi.nats.tokyo
hai-f.nats.tokyo
*.nats.tokyo
*.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
sawadatekkin.nats.tokyo
hirano-tire.nats.tokyo
yusho-co.nats.tokyo
usami-kenkou.nats.tokyo
109sai.nats.tokyo
*.nats.tokyo
hayashida-d-s.nats.tokyo
lim-eiya.nats.tokyo
kamakuranozomikai.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
*.nats.tokyo
sawadatekkin.nats.tokyo
boh-chubu.nats.tokyo
kyushu-ad.nats.tokyo
orwak.nats.tokyo
nankai-road.nats.tokyo
car-life.nats.tokyo
*.nats.tokyo
miyoshikai.nats.tokyo
s-and-g.nats.tokyo
ichiki-setsubi.nats.tokyo
keick.nats.tokyo
pianoservice2.nats.tokyo
3-r2.nats.tokyo
act-sp.nats.tokyo
activeplan.nats.tokyo
f-eiken.nats.tokyo
maedago.nats.tokyo
hanakawah.nats.tokyo
green-grace.nats.tokyo
straight.nats.tokyo
*.nats.tokyo
systems.nats.tokyo
miyoshikai.nats.tokyo
sf092.nats.tokyo
sf092.nats.tokyo
boh-chubu.nats.tokyo
green-grace.nats.tokyo
*.nats.tokyo
towa-k.nats.tokyo
towa-k.nats.tokyo
nanseikikou.nats.tokyo
kaza-design.nats.tokyo
kashiwa-b.nats.tokyo
ando-s.nats.tokyo
zhiservice.nats.tokyo
eco-runner.nats.tokyo
kyushu-ad.nats.tokyo
kaza-design.nats.tokyo
kawasuke.nats.tokyo
shinada.nats.tokyo
*.nats.tokyo
yutaka-rr.nats.tokyo
*.nats.tokyo
lim-eiya.nats.tokyo
ast.nats.tokyo
links-c.nats.tokyo
hayashida-d-s.nats.tokyo
nankai-road.nats.tokyo
life-e.nats.tokyo
Certificate
The complete raw certificate details for *.nats.tokyo in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIMO0iBdedMGR35U+DwMA0GCSqGSIb3DQEBCwUAMFAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H bG9iYWxTaWduIFJTQSBEViBTU0wgQ0EgMjAxODAeFw0xOTA2MjgwODAxMzRaFw0y MTA4MjQwMzA0MjFaMDoxITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRl ZDEVMBMGA1UEAwwMKi5uYXRzLnRva3lvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAo8xT1kXUl9zp0Yk/TmTCkxaYyDsq7qvdreIqUAs1W21VEOEQ7Gzf McnqplT3vM0pGoU3qTZR0qBapW6oIznzyj47sOSrLEAIZC/2Sihkn4JqYgq71w4o vBbJh6QKN+zjxnJmrrus4cfo+kqHdOm/+hsVdjNf2teb02nHj6qcSe28okWPNWcz iAwTFlLODmSOvhdf845GxWWGHE37TD55S/ekhbzr9flYiHZlEWQg3M5P4oxSWqVc 3rHYMz+wMwHzmCcuNbEeMJ+cz8uUA4kDoqpGZVSoMJ80CA4jqqVouXPiY0iuL0yc URhTmkFNDyYNRUSmiex/E9amGqACFdJaIwIDAQABo4IDTDCCA0gwDgYDVR0PAQH/ BAQDAgWgMIGOBggrBgEFBQcBAQSBgTB/MEQGCCsGAQUFBzAChjhodHRwOi8vc2Vj dXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc3JzYWR2c3NsY2EyMDE4LmNydDA3 BggrBgEFBQcwAYYraHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3Nyc2FkdnNz bGNhMjAxODBWBgNVHSAETzBNMEEGCSsGAQQBoDIBCjA0MDIGCCsGAQUFBwIBFiZo dHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEw CQYDVR0TBAIwADA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY3JsLmdsb2JhbHNp Z24uY29tL2dzcnNhZHZzc2xjYTIwMTguY3JsMCMGA1UdEQQcMBqCDCoubmF0cy50 b2t5b4IKbmF0cy50b2t5bzAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw HwYDVR0jBBgwFoAUgYDWKHk1Slt5NYk5jxIXbhF7LBEwHQYDVR0OBBYEFC8yvwTf 9d64NxgJloBVZ2LEfJ2OMIIBewYKKwYBBAHWeQIEAgSCAWsEggFnAWUAdQBvU3as MfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWudGqTaAAAEAwBGMEQCIGVN Ac4fKzRTlycdcLt/qVWAD4jXNUw48RneTEgVL3v7AiAr3NEYFIlN3F4aU+leRteN 1s81kJlHfWKoGmOB8zFKwAB1AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6 qP3LAAABa50apDIAAAQDAEYwRAIgdCqKyCue40vH2HTEOQ/V7Re2CBvqVpKbSkfl UqFUDccCIDs4xXlwgzL176PYNVmNZuG/2q5Hnvi3fe14wLS0pqE8AHUAVYHUwhaQ NgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFrnRqj3QAABAMARjBEAiBPTQeV dzkzNlTg35uEQGNDGzCnv8xXi7eJftK2qyj1wwIgDs1NMn6zCL12bDgZFLFxf8pN 0IHkswvGnVXaAKt/OuowDQYJKoZIhvcNAQELBQADggEBAKTWRvNY/O7lf5e7/Cfk OzGmJ2+dUtAHrCGt2Tj7Zgk5CMn1t15pgquwnG+GoYot9w/Ztab2ejTgbjVLRz8l ZFJLo0s2Azh/maSQjX+y8FVmlpMYnzc3YNt8VU4Y+mWsN+qa8QOZ730IvCkF2C/4 0AwlU9BQYsMj155r1S/b7eRD/4ddgb4XEOZlxAPYcWI2shWO5/d9YWNUXDO+SEZ8 TUZmAToLpaB2oqy7nLlugVJM9+uDOK8cYZg32YhvpepFO8GP/ek51je+Mmy/WiOu Z2J6PZm7sB2xxCB2jibP/DAcuKmGrg+jbFM4qpyyc24aMqBFpFUcph7Y9a8oNM8b xR4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8xT1kXUl9zp0Yk/TmTC kxaYyDsq7qvdreIqUAs1W21VEOEQ7GzfMcnqplT3vM0pGoU3qTZR0qBapW6oIznz yj47sOSrLEAIZC/2Sihkn4JqYgq71w4ovBbJh6QKN+zjxnJmrrus4cfo+kqHdOm/ +hsVdjNf2teb02nHj6qcSe28okWPNWcziAwTFlLODmSOvhdf845GxWWGHE37TD55 S/ekhbzr9flYiHZlEWQg3M5P4oxSWqVc3rHYMz+wMwHzmCcuNbEeMJ+cz8uUA4kD oqpGZVSoMJ80CA4jqqVouXPiY0iuL0ycURhTmkFNDyYNRUSmiex/E9amGqACFdJa IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18347269598683683101110165744 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA DV SSL CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-28 08:01:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-24 03:04:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nats.tokyo' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20677601349233533412281100001724045778678962541934953633721366664516696308937547080664202837345324632959302917896585407297329377143832411488614659609656866958807387903604402761448873788089800188266087587761531093723949117379359026706246571706511220149082319813269582164691919853716980594776367952066144170206703413570582177400414296669159152083767756590512945039093254383414349423711537552322437665754564404559963847586479363696620951796466406148961051462177380791377762670314187647611854238180772998444045393908681467972205591036911083395736189895925653692032873404574925527143023240140055312219629087877596217236003 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsadvsslca2018' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsadvsslca2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nats.tokyo' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nats.tokyo' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8180d62879354a5b793589398f12176e117b2c11 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2f32bf04dff5deb83718099680556762c47c9d8e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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