t.bme.jp
Issued by AlphaSSL CA - SHA256 - G2
About this certificate
This digital certificate with serial number 4f:28:05:11:7e:5a:95:15:43:07:fb:64 was issued on by GlobalSign nv-sa.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=t.bme.jp,OU=Domain Control Validated
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 4f:28:05:11:7e:5a:95:15:43:07:fb:64Serial Number (int): 24497696743202662712768723812
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 30:40:b7:ef:e7:53:ce:30:3c:18:cb:cb:e8:16:09:2b:f5:73:39:14
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7
Fingerprint (sha1): 57:f7:20:31:12:04:4a:d3:20:1c:48:8f:2e:ba:1f:c0:90:6d:81:01
Fingerprint (sha256): 68:92:f2:9a:30:76:13:8d:97:18:84:34:51:2e:0b:41:7e:98:36:ea:00:2e:a5:f3:42:07:6a:05:35:18:f2:19
Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl
Check the revocation status for certificate t.bme.jp
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for t.bme.jp
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
t.bme.jp
Other certificates including the domain name bme.jp
(limited to 100 certificates)
t.bme.jp
hamazushi.bme.jp
api.bme.jp
minoh.bme.jp
r.bme.jp
e.bme.jp
api.bme.jp
h.bme.jp
b.bme.jp
tsi-holdings.bme.jp
h.bme.jp
t.bme.jp
e.bme.jp
n.bme.jp
a.bme.jp
w.bme.jp
e.bme.jp
c.bme.jp
api.tsi-holdings.bme.jp
n.bme.jp
k.bme.jp
minoh.bme.jp
api.bme.jp
k.bme.jp
r.bme.jp
e.bme.jp
w.bme.jp
api.museco.bme.jp
w.bme.jp
b.bme.jp
tobu.bme.jp
a.bme.jp
hamazushi.bme.jp
img.bme.jp
t.bme.jp
n.bme.jp
b.bme.jp
minoh.bme.jp
k.bme.jp
t.bme.jp
w.bme.jp
r.bme.jp
e.bme.jp
w.bme.jp
a.bme.jp
n.bme.jp
hamazushi.bme.jp
r.bme.jp
a.bme.jp
api.bme.jp
api.bme.jp
b.bme.jp
t.bme.jp
n.bme.jp
h.bme.jp
img.bme.jp
api.tsi-holdings.bme.jp
h.bme.jp
t.bme.jp
b.bme.jp
api.tsi-holdings.bme.jp
img.bme.jp
b.bme.jp
h.bme.jp
img.bme.jp
t.bme.jp
minoh.bme.jp
api.bme.jp
img.bme.jp
a.bme.jp
n.bme.jp
n.bme.jp
t.bme.jp
k.bme.jp
h.bme.jp
r.bme.jp
minoh.bme.jp
api.bme.jp
r.bme.jp
tobu.bme.jp
akb.bme.jp
img.bme.jp
*.creema.bme.jp
api.tsi-holdings.bme.jp
akb.bme.jp
api.bme.jp
b.bme.jp
e.bme.jp
api.bme.jp
t.bme.jp
api.tsi-holdings.bme.jp
img.bme.jp
n.bme.jp
t.bme.jp
api.museco.bme.jp
r.bme.jp
a.bme.jp
akb.bme.jp
e.bme.jp
img.bme.jp
hamazushi.bme.jp
api.bme.jp
minoh.bme.jp
r.bme.jp
e.bme.jp
api.bme.jp
h.bme.jp
b.bme.jp
tsi-holdings.bme.jp
h.bme.jp
t.bme.jp
e.bme.jp
n.bme.jp
a.bme.jp
w.bme.jp
e.bme.jp
c.bme.jp
api.tsi-holdings.bme.jp
n.bme.jp
k.bme.jp
minoh.bme.jp
api.bme.jp
k.bme.jp
r.bme.jp
e.bme.jp
w.bme.jp
api.museco.bme.jp
w.bme.jp
b.bme.jp
tobu.bme.jp
a.bme.jp
hamazushi.bme.jp
img.bme.jp
t.bme.jp
n.bme.jp
b.bme.jp
minoh.bme.jp
k.bme.jp
t.bme.jp
w.bme.jp
r.bme.jp
e.bme.jp
w.bme.jp
a.bme.jp
n.bme.jp
hamazushi.bme.jp
r.bme.jp
a.bme.jp
api.bme.jp
api.bme.jp
b.bme.jp
t.bme.jp
n.bme.jp
h.bme.jp
img.bme.jp
api.tsi-holdings.bme.jp
h.bme.jp
t.bme.jp
b.bme.jp
api.tsi-holdings.bme.jp
img.bme.jp
b.bme.jp
h.bme.jp
img.bme.jp
t.bme.jp
minoh.bme.jp
api.bme.jp
img.bme.jp
a.bme.jp
n.bme.jp
n.bme.jp
t.bme.jp
k.bme.jp
h.bme.jp
r.bme.jp
minoh.bme.jp
api.bme.jp
r.bme.jp
tobu.bme.jp
akb.bme.jp
img.bme.jp
*.creema.bme.jp
api.tsi-holdings.bme.jp
akb.bme.jp
api.bme.jp
b.bme.jp
e.bme.jp
api.bme.jp
t.bme.jp
api.tsi-holdings.bme.jp
img.bme.jp
n.bme.jp
t.bme.jp
api.museco.bme.jp
r.bme.jp
a.bme.jp
akb.bme.jp
e.bme.jp
img.bme.jp
Certificate
The complete raw certificate details for t.bme.jp in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGujCCBaKgAwIBAgIMTygFEX5alRVDB/tkMA0GCSqGSIb3DQEBCwUAMEwxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTE3MTIwNjA4MDM0NVoXDTE4MTIw NzA4MDM0NVowNjEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMREw DwYDVQQDEwh0LmJtZS5qcDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMGUMY6tPpUb6+rDPZkddtVt4/HRhIOMzUH4uHWd06JKF0rEijcUurxwp7HjKQUf j5tQNU6G3gfJ9A1DU1huZfziUVqU2gzStDS+fmm7zYe9OAQLEoVMUomV35oBt4qo Xg5tCvvettQ1sqkNoxOE0gQuzpGcnNb8zEJf/q4TTj9zagnd1ZOnL6CPrwk/kZpg GFqZ2ePmdL2ERqAifGNGUYKYR26bhCuscKiIVt+VBng//GSuozLMCBMHBPWlA5ej kr9ljck6mcVcnu3ClcPjpnANYSTG3Z+oEC14NILx/4n1VazNAs9dMph/OcQq9Bn1 Dgy0rWs5cxSinGcy+WP2eAUCAwEAAaOCA7AwggOsMA4GA1UdDwEB/wQEAwIFoDCB iQYIKwYBBQUHAQEEfTB7MEIGCCsGAQUFBzAChjZodHRwOi8vc2VjdXJlMi5hbHBo YXNzbC5jb20vY2FjZXJ0L2dzYWxwaGFzaGEyZzJyMS5jcnQwNQYIKwYBBQUHMAGG KWh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9nc2FscGhhc2hhMmcyMFcGA1Ud IARQME4wQgYKKwYBBAGgMgEKCjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5n bG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwCQYDVR0TBAIwADA+ BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY3JsMi5hbHBoYXNzbC5jb20vZ3MvZ3Nh bHBoYXNoYTJnMi5jcmwwEwYDVR0RBAwwCoIIdC5ibWUuanAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBQwQLfv51POMDwYy8voFgkr9XM5 FDAfBgNVHSMEGDAWgBT1zdU8CFD5ak86t5faVoPmadJo9zCCAfQGCisGAQQB1nkC BAIEggHkBIIB4AHeAHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswA AAFgKtoiRAAABAMARzBFAiAsy+7FqynM+2WeUJuSvCrwtqVFXUNHXUYZlwfplq8t 3AIhAONIPhrenbh8zVESQJg9r/8CGD2w7Dzji7YUpJwMsTTDAHYAVhQGmi/XwuzT 9eG9RLI+x0Z2ubyZEVzA75SYVdaJ0N0AAAFgKtoipgAABAMARzBFAiASaAk+gt2t gDfb49/+fkxjrOQXijxdXVt1CELgGQsHggIhAITrAdApkuMIUYcnDlG9lv847knu tWbF8rtrN7rroVfQAHUAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUA AAFgKtol/QAABAMARjBEAiB38w+yfVWYfNl4QKrjgR0pfaYEGSkkqPS7cTlk2L5T /wIgMjpICRV01Mp7zhrf7x+IhVWJpO5arCY6LpMC5Lf7Z4oAdQCkuQmQtBhYFIe7 E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWAq2iT4AAAEAwBGMEQCIGneCojZG0CV 8YuD6iJ3s4DXqM3/83Zn+xEhZ7Nj97ryAiBPOGIMtYGQqZ6190fPoS1S9McefXPo KXiFD5h/LGxBUjANBgkqhkiG9w0BAQsFAAOCAQEAr7U9DT2nhzb2OtcJDL+C7uxN L1k1QfUd4dVZKIVHFLtp/4cVUm2ekrSSByNWZy6U0cTBndzxJx6iX2f6PgWDplHg xxKG5VLI3Z6O3PNjRcOBIaZhGWNx52PLMyZq7EAJDFopmWWVBDy606DoQY+0N7n3 24vv+o7gN7GC2M69HvyU8G+PUyufugrHeAUrUm/EXyBEtVmbjWBABdGVLEDxxbEr WGzonuVp9/KtuG8wQ1A350Ok3sLjFiEnrcC56Uhac6pz19SIBVR6LHkMfT5FECdW pBSMyBVwy3Jrh/2ufIiqKRt3elkkFnrPJAv+579+46JuNHAH+a3XctBzQJUX6g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZQxjq0+lRvr6sM9mR12 1W3j8dGEg4zNQfi4dZ3TokoXSsSKNxS6vHCnseMpBR+Pm1A1TobeB8n0DUNTWG5l /OJRWpTaDNK0NL5+abvNh704BAsShUxSiZXfmgG3iqheDm0K+9621DWyqQ2jE4TS BC7OkZyc1vzMQl/+rhNOP3NqCd3Vk6cvoI+vCT+RmmAYWpnZ4+Z0vYRGoCJ8Y0ZR gphHbpuEK6xwqIhW35UGeD/8ZK6jMswIEwcE9aUDl6OSv2WNyTqZxVye7cKVw+Om cA1hJMbdn6gQLXg0gvH/ifVVrM0Cz10ymH85xCr0GfUODLStazlzFKKcZzL5Y/Z4 BQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 24497696743202662712768723812 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-06 08:03:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-07 08:03:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 't.bme.jp' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24437069838002814479165748824495222732796056421822483830970376863266103714024796332553042855245254332724134956168665322716865568948454863024447590875235202404395200557456918169940379386964257808968822947441144111147443569639698230670749984668736210315363755249862650106796511255668409674711897033145971331901606954372108648626079471127404764116629621302164991820004193590834748451815585829672068605822187187367625179047815689013497732570557269240955122962015414266835556413386732225697805392660348160572836014872114146840822113333697876130055122183571214909110461474602815025929026224690669199158368384011541729933317 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.bme.jp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3040b7efe753ce303c18cbcbe816092bf5733914 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00afb53d0d3da78736f63ad7090cbf82eeec4d2f593541f51de1d55928854714bb69ff8715526d9e92b492072356672e94d1c4c19ddcf1271ea25f67fa3e0583a651e0c71286e552c8dd9e8edcf36345c38121a661196371e763cb33266aec40090c5a29996595043cbad3a0e8418fb437b9f7db8beffa8ee037b182d8cebd1efc94f06f8f532b9fba0ac778052b526fc45f2044b5599b8d604005d1952c40f1c5b12b586ce89ee569f7f2adb86f30435037e743a4dec2e3162127adc0b9e9485a73aa73d7d48805547a2c790c7d3e45102756a4148cc81570cb726b87fdae7c88aa291b777a5924167acf240bfee7bf7ee3a26e347007f9add772d073409517ea