info.isl.ntt.co.jp

- Nippon Telegraph and Telephone Corporation -

Issued by SECOM Passport for Web SR 3.0 CA

About this certificate

This digital certificate with serial number 41:81:94:00:7d:04:90:e3:e8:e7:3c:86:1e:41:95:94 was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Nippon Telegraph and Telephone Corporation

Organization: Nippon Telegraph and Telephone Corporation
State / Province: Tokyo to
Locality: Chiyoda ku
Country: JP

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 41:81:94:00:7d:04:90:e3:e8:e7:3c:86:1e:41:95:94
Serial Number (int): 87072627856083011105964116289307907476
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 56:60:c7:ae:0b:18:f8:d2:d4:b3:c1:a3:2f:84:de:08:d3:e6:cf:09
AuthorityKeyId: cb:ef:3d:ef:83:74:a1:a8:42:f0:3b:40:36:fa:6d:82:94:a9:27:36

Fingerprint (sha1): 03:41:75:f8:d4:a8:03:4f:f4:9d:81:52:03:e9:7f:14:1a:7f:5a:30
Fingerprint (sha256): 5d:31:8a:39:df:2e:d4:c8:e1:bc:1c:e7:2d:a3:02:25:66:03:7a:a5:f9:b3:25:96:c6:4e:5d:41:36:12:e7:cc

Issuing Certificate URL: http://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/ca2-der.cer

Revocation information

OCSP Server: http://sr30.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/fullcrl2.crl

Check the revocation status for certificate info.isl.ntt.co.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for info.isl.ntt.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

info.isl.ntt.co.jp

Other certificates including the domain name ntt.co.jp

(limited to 100 certificates)
www.atsugi-ankan-k.aecl.ntt.co.jp
securemap.west.ntt.co.jp
labevent.ecl.ntt.co.jp
dishsfmermsnf.is.ntt-finance.co.jp
rms-nttud.ddreams.jp
labevent.ecl.ntt.co.jp
www.oss.ecl.ntt.co.jp
*.shareholder.ntt.co.jp
mail.is.nttdocomo.co.jp
dishsfme.is.nttdocomo.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
sip.hco.ntt.co.jp
www.sirocco.hil.ntt.co.jp
ipweb01.ipass.ntt.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
dishsfmermsnd.is.nttdocomo.co.jp
www.ntt.co.jp
rms-nttrec.ddreams.jp
info.isl.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
www.sic.ecl.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
*.ecl.hco.ntt.co.jp
info.isl.ntt.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
*.ocrc.west.ntt.co.jp
ansl.ntt.co.jp
www.ntt.co.jp
sp-tsm.ecl.ntt.co.jp
info.isl.ntt.co.jp
mail.is.nttdocomo.co.jp
www.fdv.gis-crisis.sys.east.ntt.co.jp
rms-nttba-g.ddreams.jp
fletscsc.bch.east.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
www.ntt.co.jp
illusion-forum.ilab.ntt.co.jp
ipweb01.ipass.ntt.co.jp
rms-nttba-g.ddreams.jp
mobile.ecl.ntt.co.jp
dishsfmermsnh.hco.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
ipweb01.ipass.ntt.co.jp
info.isl.ntt.co.jp
securemap.west.ntt.co.jp
ipweb01.ipass.ntt.co.jp
journal.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
mobile.ecl.ntt.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
ipweb01.ipass.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
sip.hco.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
info.isl.ntt.co.jp
www.brl.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
*.brl.ntt.co.jp
sports-brain.ilab.ntt.co.jp
*.ecl.ntt.co.jp
oemfinder.ilab.ntt.co.jp
denshiki.securemap.west.ntt.co.jp
dishsfmermsnh.hco.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
sip.hco.ntt.co.jp
www.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
www.ntt.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
ipweb01.ipass.ntt.co.jp
www.ntt.co.jp
rms-ntt-f-dreams.ddreams.jp
labevent.ecl.ntt.co.jp
*.brl.ntt.co.jp
nlp.hil.ntt.co.jp
www.ntt.co.jp
www.mvisit.ecl.ntt.co.jp
www.ntt.co.jp
rms-ntt-f-dreams.ddreams.jp
www.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
www.mvisit.ecl.ntt.co.jp
labevent.ecl.ntt.co.jp
mailwise.tokyo.east.ntt.co.jp
illusion-forum.ilab.ntt.co.jp
www.ntt.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
mail-m.is.nttdocomo.co.jp
senyo.securemap.west.ntt.co.jp
mailwise.tokyo.east.ntt.co.jp
www.ntt.co.jp
sip.hco.ntt.co.jp
www.atsugi-ankan-k.aecl.ntt.co.jp
www.ntt.co.jp
info.isl.ntt.co.jp
bch-wise.bch.east.ntt.co.jp
dishsfme.is.nttdocomo.co.jp
www.brl.ntt.co.jp
www.ntt.co.jp

Certificate

The complete raw certificate details for info.isl.ntt.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHLDCCBhSgAwIBAgIQQYGUAH0EkOPo5zyGHkGVlDANBgkqhkiG9w0BAQsFADBf
MQswCQYDVQQGEwJKUDElMCMGA1UEChMcU0VDT00gVHJ1c3QgU3lzdGVtcyBDTy4s
TFRELjEpMCcGA1UEAxMgU0VDT00gUGFzc3BvcnQgZm9yIFdlYiBTUiAzLjAgQ0Ew
HhcNMjMwNDEyMDcwMjM3WhcNMjQwNDE4MTQ1OTU5WjCBhzELMAkGA1UEBhMCSlAx
ETAPBgNVBAgTCFRva3lvIHRvMRMwEQYDVQQHEwpDaGl5b2RhIGt1MTMwMQYDVQQK
EypOaXBwb24gVGVsZWdyYXBoIGFuZCBUZWxlcGhvbmUgQ29ycG9yYXRpb24xGzAZ
BgNVBAMTEmluZm8uaXNsLm50dC5jby5qcDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKOda+M/azOwp0xcS8pLnDyeqemcS4xrO36IFS96CP6dqeA8DROu
JQloOh3JERr1ynAE5L1iLG/LImqyAAy6wVvLWnAhEhC3QsGgt8LCCW5eYN9B59jw
m77Haq1fyz9r4mH1VeOj4pyQAaKgtO3bdbKAK1JEac5u3AFmlyo9gY6ax7stXxAB
tk2DvjtBuy2Za3cb6vu6DC/5ht2S43akUOYCMlZPjJtkU0vMSjNVDPdA3f8u6vKZ
/rscQ1wYTaNHXLT+kqdxAbGSxfwTRAaoDUdZkr4tzs0H360UuPBRWRawNTizWsLd
tzhCzb3fysUt0+H4qDfF9RJaVA05Lmr1ADECAwEAAaOCA7kwggO1MB8GA1UdIwQY
MBaAFMvvPe+DdKGoQvA7QDb6bYKUqSc2MIGDBggrBgEFBQcBAQR3MHUwRgYIKwYB
BQUHMAKGOmh0dHA6Ly9yZXBvMS5zZWNvbXRydXN0Lm5ldC9zcGNwcC9wZncvcGZ3
c3IzY2EvY2EyLWRlci5jZXIwKwYIKwYBBQUHMAGGH2h0dHA6Ly9zcjMwLm9jc3Au
c2Vjb210cnVzdC5uZXQwHQYDVR0RBBYwFIISaW5mby5pc2wubnR0LmNvLmpwMGEG
A1UdIARaMFgwTAYKKoMIjJsbZIVvATA+MDwGCCsGAQUFBwIBFjBodHRwczovL3Jl
cG8xLnNlY29tdHJ1c3QubmV0L3NwY3BwL3Bmdy9wZndzcjNjYS8wCAYGZ4EMAQIC
MBMGA1UdJQQMMAoGCCsGAQUFBwMBMEwGA1UdHwRFMEMwQaA/oD2GO2h0dHA6Ly9y
ZXBvMS5zZWNvbXRydXN0Lm5ldC9zcGNwcC9wZncvcGZ3c3IzY2EvZnVsbGNybDIu
Y3JsMB0GA1UdDgQWBBRWYMeuCxj40tSzwaMvhN4I0+bPCTAOBgNVHQ8BAf8EBAMC
BaAwggH2BgorBgEEAdZ5AgQCBIIB5gSCAeIB4AB2AO7N0GTV2xrOxVy3nbTNE6Iy
h0Z8vOzew1FIWUZxH7WbAAABh3RPKccAAAQDAEcwRQIgbLcH4QcDjIrmjqHX8e0U
DBFL0cVQc0G35vGYsOO95foCIQCdl33kKLbWPaKQdcJAZ2auN+QjEG0HrvyRlTDB
38f/HQB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABh3RPL18A
AAQDAEcwRQIhAOmYP2drHLGlTscn8LBwmKbt0R5LcIAHME2HizuB71DcAiBLxKUR
LPnkjh/iWfAFTFTd4rKKWscInwCjrHk9KYj/qQB3AHPZnokbTJZ4oCB9R53mssYc
0FFecRkqjGuAEHrBd3K1AAABh3RPMkwAAAQDAEgwRgIhAJwAoKl9P0DeEcqDnqh9
LM2lLU78I+YisWRxL0iXOIe4AiEAni9EudW4KVF89xlccK9rZgaHwsSs+WftV8PT
tXRHf6IAdQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYd0TzTc
AAAEAwBGMEQCIEJW24eEB5C5jkwtKDm80Q4nAy//2sfwlOpRn0g7BXHPAiBaG836
ql1WPj6pqFlfExzvusm68V0fVdnOxCseuOzRYzANBgkqhkiG9w0BAQsFAAOCAQEA
tfBrw/hFCovajWp+2iPUNlNdDytGHY+f2hkaIsr6BuVUlRGtU3LE0GhIdh1k5WCM
t9wnJwyUZifvMv9M9bVuu9p+eTXyNNYUXBwxyhjH4vyV65wC2pGLAkxIeihdm6Lk
pW0IA+DrO2Iv8IBJ12bhrW0jYVChb0I3z8QMAHP2fxyGeGXEvdVmAXyWOfgpWmgG
Ghg85vSG4k5UoQIt+H6FLKYLrvrC8vzJ3L5Sryn/vjoHyHeFJCFFsxgQPHr/iAj6
N3efnkPyPT4uSCa4qJfb+3vCNAfpON8mPN/6pclgQmtRtUbBPcRDzKdMuL4TSolz
DM9gb1Hl8to2fwajfvvJAQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo51r4z9rM7CnTFxLykuc
PJ6p6ZxLjGs7fogVL3oI/p2p4DwNE64lCWg6HckRGvXKcATkvWIsb8siarIADLrB
W8tacCESELdCwaC3wsIJbl5g30Hn2PCbvsdqrV/LP2viYfVV46PinJABoqC07dt1
soArUkRpzm7cAWaXKj2BjprHuy1fEAG2TYO+O0G7LZlrdxvq+7oML/mG3ZLjdqRQ
5gIyVk+Mm2RTS8xKM1UM90Dd/y7q8pn+uxxDXBhNo0dctP6Sp3EBsZLF/BNEBqgN
R1mSvi3OzQffrRS48FFZFrA1OLNawt23OELNvd/KxS3T4fioN8X1ElpUDTkuavUA
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 87072627856083011105964116289307907476
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Passport for Web SR 3.0 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-12 07:02:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo to'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chiyoda ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nippon Telegraph and Telephone Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'info.isl.ntt.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20654471112907789163985373179941965826495668533002631035270663536245020069802450881773828238850802789188303677976214228587060757452098684750204692318119234312889417779909133366704585054065098696433133427708922213854019767334394178784006481164817522757980079763812598270413328432451088017039143281528605209459028474829387247178663405865427777158651756303630676196576817540592351649304460062228665883000539103853253838314770378697745774453936907556120964051241726701537280614987731998511026876051010567470618995887993618817939309612820169800587553702104574668786903196622896202669367442231893349838865528750681697353777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cbef3def8374a1a842f03b4036fa6d8294a92736
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/ca2-der.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr30.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.isl.ntt.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.100.751.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/fullcrl2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5660c7ae0b18f8d2d4b3c1a32f84de08d3e6cf09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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