shop.sanrio.co.jp

- Sanrio Company, Ltd. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 50:0c:a5:a5:bc:a6:61:31:79:b9:b4:62 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sanrio Company, Ltd.

Organization: Sanrio Company, Ltd.
State / Province: Tokyo
Locality: Shinagawa-ku
Country: JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 50:0c:a5:a5:bc:a6:61:31:79:b9:b4:62
Serial Number (int): 24774090143319086092003161186
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: be:1b:ca:cb:cc:bc:4c:cb:c8:8c:5f:3e:b0:12:ba:67:23:e2:64:54
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 4a:a8:4f:12:78:68:b6:7f:3f:e8:5e:3a:70:54:ad:0e:22:80:30:ee
Fingerprint (sha256): 6d:67:46:5e:9e:28:4a:a1:9a:06:10:a9:45:13:b8:4b:01:17:09:cb:0a:de:67:8f:78:86:41:f1:0d:45:de:eb

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate shop.sanrio.co.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.sanrio.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.sanrio.co.jp

Other certificates including the domain name sanrio.co.jp

(limited to 100 certificates)
pages.friends.sanrio.co.jp
akamai-san10.exacttarget.com
ec-stg.sanrio.co.jp
akamai-san10.exacttarget.com
akamai-san10.exacttarget.com
www.sanrio.co.jp
akamai-san10.exacttarget.com
shared-certificate.user-space.cdn.idcfcloud.net
locations.corelifeeatery.com
sanrio.co.jp
akamai-san10.exacttarget.com
shared-certificate.user-space.cdn.idcfcloud.net
www.sanrio.co.jp
oma-ia.sanrio.co.jp
plus.sanrio.co.jp
www.sanrio.co.jp
akamai-san10.exacttarget.com
stores.tesco.com.pagescdn.com
search.sanrio.co.jp
english.sanrio.co.jp
license.sanrio.co.jp
shop.sanrio.co.jp
shared-certificate.user-space.cdn.idcfcloud.net
shared-certificate.user-space.cdn.idcfcloud.net
shared-certificate.user-space.cdn.idcfcloud.net
ranking.sanrio.co.jp
corporate.sanrio.co.jp
www.sanrio.co.jp
adfs.sanrio.co.jp
akamai-san10.exacttarget.com
ec-stg.sanrio.co.jp
click.friends.sanrio.co.jp
www.sanrio.co.jp
stores.sanrio.co.jp
akamai-san10.exacttarget.com
pub.friends.sanrio.co.jp
faq.sanrio.co.jp
ec-stg.sanrio.co.jp
akamai-san10.exacttarget.com
oma-ia.sanrio.co.jp
admin.ranking.sanrio.co.jp
ftdev.test.sanrio.co.jp
mailmag.sanrio.co.jp
www.sanrio.co.jp
faq.sanrio.co.jp
pages.friends.sanrio.co.jp
view.friends.sanrio.co.jp
shop.sanrio.co.jp
stores.sanrio.co.jp
license.sanrio.co.jp
locations.gwwade.com
www.shop.sanrio.co.jp
akamai-san10.exacttarget.com
ec-stg.sanrio.co.jp
tensaikansai.sanrio.co.jp
mailmag.sanrio.co.jp
oma-ia.sanrio.co.jp
www.sanrio.co.jp
*.sanrio.co.jp
faq.sanrio.co.jp
akamai-san10.exacttarget.com
ec-stg.sanrio.co.jp
pub.friends.sanrio.co.jp
www.sanrio.co.jp
akamai-san10.exacttarget.com
faq.sanrio.co.jp
www.sanrio.co.jp
www.sanrio.co.jp
search.sanrio.co.jp
shared-certificate.user-space.cdn.idcfcloud.net
oma-ia.sanrio.co.jp
locations.telemus.com
shared-certificate.user-space.cdn.idcfcloud.net
shared-certificate.user-space.cdn.idcfcloud.net
stores.ippudo.co.id
stores.sanrio.co.jp
shop.sanrio.co.jp
*.sanrio.co.jp
license.sanrio.co.jp
shop.sanrio.co.jp
pages.friends.sanrio.co.jp
click.friends.sanrio.co.jp
view.friends.sanrio.co.jp
license.sanrio.co.jp
click.friends.sanrio.co.jp
akamai-san10.exacttarget.com
view.friends.sanrio.co.jp
shared-certificate.user-space.cdn.idcfcloud.net
license.sanrio.co.jp
pages.friends.sanrio.co.jp
akamai-san10.exacttarget.com
view.friends.sanrio.co.jp
mailmag.sanrio.co.jp
click.friends.sanrio.co.jp
www.sanrio.co.jp
sp.shop.sanrio.co.jp
stores.ippudo.co.id
akamai-san10.exacttarget.com
admin.ranking.sanrio.co.jp
oma-ia.sanrio.co.jp

Certificate

The complete raw certificate details for shop.sanrio.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIMUAylpbymYTF5ubRiMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMzA3MjcwMzIyMDVaFw0y
NDA4MjcwMzIyMDRaMG8xCzAJBgNVBAYTAkpQMQ4wDAYDVQQIEwVUb2t5bzEVMBMG
A1UEBxMMU2hpbmFnYXdhLWt1MR0wGwYDVQQKExRTYW5yaW8gQ29tcGFueSwgTHRk
LjEaMBgGA1UEAxMRc2hvcC5zYW5yaW8uY28uanAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvEQlQBaq9lAolXGVl7n6yVMkLj7T25wC66N2zXWciJJuN
vsZuhvQw9qAyhKl6s4vRGTIwBHP+u3MMuGZTK3Bjtn7PbvLyTB5w2/OQOe8H12GY
pSuW/crgM8qaRIr/xYo1P4RX0WihTSDuvWthe+h66OGjNWbiG0oDnaVvJlUj4ptu
dygSi+B3R00tMHDGE/9jPg44VsdWf72EZ/4fvVvYlA5NrJZqvwE+IHrFC0REAVjI
ZSBhGMKDvNPb3hbRNLFgJQBYIvQV/imaGkWi0MzdN+88a+akJG+PLeQUIm9HGJQJ
tG/2KIU2+xWOlJ4eVEtVHD536UYs7D2ZieJS7iupAgMBAAGjggMJMIIDBTAOBgNV
HQ8BAf8EBAMCBaAwgY4GCCsGAQUFBwEBBIGBMH8wRAYIKwYBBQUHMAKGOGh0dHA6
Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzcnNhb3Zzc2xjYTIwMTgu
Y3J0MDcGCCsGAQUFBzABhitodHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9nc3Jz
YW92c3NsY2EyMDE4MFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUH
AgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeB
DAECAjAJBgNVHRMEAjAAMBwGA1UdEQQVMBOCEXNob3Auc2FucmlvLmNvLmpwMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBT473/yzXhn
qN5vjySNiPGHAwKz6zAdBgNVHQ4EFgQUvhvKy8y8TMvIjF8+sBK6ZyPiZFQwggGA
BgorBgEEAdZ5AgQCBIIBcASCAWwBagB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0s
gdm7v6s52IRzAAABiZVeUcUAAAQDAEcwRQIhAJbtIK4j97M3Hp296kR0so1hn1vl
MttTAcf25EYYCok+AiAhct/Scyd1lr4wsn+hzd1E5/yYMFyC0Gs2PldOyGSZOgB3
AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiZVeU0QAAAQDAEgw
RgIhAK9u73smNML6KZ/gFEPVoQhxA3MKLBuXxoW9zYpADRuTAiEA0wivHEr9P2WS
T2SNAyT7fv0BrJLvct/MnEdo0D+kp90AdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GE
hTS9pD0wSNf7qwAAAYmVXlB3AAAEAwBIMEYCIQDsUeQGR88KGsa71G1O6qNOrj7x
8ZPhuatgistSx/VxSAIhAPsx84CkxFBmZVT1LJeOcq2DZu6L124/vtEN4ePMXrEu
MA0GCSqGSIb3DQEBCwUAA4IBAQCUwLkvjnGwMowBtpPB3dGopj4EOyefDmNZcsud
Ah5uWbPFvaxR4y41LTDNF/8VKHmHJWbc5B4RkfRT8pvDN0kmwemiM4dRF1aPd98s
JZRsckbJSUDjLxAPEKvDeTPl3vNPDdkwXd8u4FCKDxTAdkNd+n4wAHguu91wf9Ix
HXBD0LKv2Dl+m4aUVoNGkWXmzcPqTSNKxtqrCVr9KjM5mMsE9ckvR1e1yOh34Uth
n3CyTIK2/Q/F0ONsFc2rPx9i41NqzgMl1pW4lQDWE31bY+dbZh5PoN+VPqeAPhNL
569lASpwVboYfmim3yn8EYfjarr9JM/xTA6pMhlPRRb0SkSA
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxEJUAWqvZQKJVxlZe5+
slTJC4+09ucAuujds11nIiSbjb7Gbob0MPagMoSperOL0RkyMARz/rtzDLhmUytw
Y7Z+z27y8kwecNvzkDnvB9dhmKUrlv3K4DPKmkSK/8WKNT+EV9FooU0g7r1rYXvo
eujhozVm4htKA52lbyZVI+KbbncoEovgd0dNLTBwxhP/Yz4OOFbHVn+9hGf+H71b
2JQOTayWar8BPiB6xQtERAFYyGUgYRjCg7zT294W0TSxYCUAWCL0Ff4pmhpFotDM
3TfvPGvmpCRvjy3kFCJvRxiUCbRv9iiFNvsVjpSeHlRLVRw+d+lGLOw9mYniUu4r
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24774090143319086092003161186
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-27 03:22:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-27 03:22:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shinagawa-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sanrio Company, Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.sanrio.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22100104319810124927522212380993239660751626483775607402730143246971770402237135466449428974596261884647702907631032181088970445734944452883813916888289545709534527263127413427882818121261046698052928566717807443155630764788229218729289043506465362016366121876401640806315688955465195689852287121631258612873418113926813447313788674450560769726945347583993930459498199138449688049533584001035255704656079950759007273258815849021703100868067417669279187636183836905067763619012812717724143366764258357555948952366129914596338436197082263333023574564830343806240007018050987058791202880685343366112595296731931482139561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sanrio.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be1bcacbccbc4ccbc88c5f3eb012ba6723e26454
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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