backoffice-atec.zozo.jp

- ZOZO, Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 45:77:5e:6a:b0:0b:ae:bc:5b:9f:08:23 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ZOZO, Inc.

Organization: ZOZO, Inc.
Organization unit: System
State / Province: CHIBA
Locality: CHIBA-SHI
Country: JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 45:77:5e:6a:b0:0b:ae:bc:5b:9f:08:23
Serial Number (int): 21498773720696637073095854115
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 79:9c:c4:39:46:6f:c0:45:dd:5b:a9:c0:e2:05:e2:b8:a2:82:95:19
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 10:3c:b8:b9:1c:e1:49:ef:6d:bd:4e:a3:e2:57:f8:06:bc:be:dc:75
Fingerprint (sha256): a5:d9:d0:dd:7a:aa:87:44:bf:4c:7a:6b:f1:c9:85:a0:7c:89:78:5a:ff:60:a7:76:ca:58:8d:c2:98:68:3a:31

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate backoffice-atec.zozo.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for backoffice-atec.zozo.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

backoffice-atec.zozo.jp

Other certificates including the domain name zozo.jp

(limited to 100 certificates)
az.zozo.jp
rtm.zozo.jp
navi.zozo.jp
apib.zozo.jp
az.zozo.jp
g.bandit.lab.zozo.jp
az.zozo.jp
lpc.zozo.jp
zozo.jp
rtm.zozo.jp
az.zozo.jp
w2.zozo.jp
w2.zozo.jp
w2.zozo.jp
n2.zozo.jp
lpc.zozo.jp
zozo.jp
assets.bandit.lab.zozo.jp
assets.bandit.lab.zozo.jp
rtm-tracking-staging.zozo.jp
img4.zozo.jp
hisdofolyt08.zozo.jp
img5.zozo.jp
lab.zozo.jp
zozo.jp
*.zozo.jp
i-api.zozo.jp
w2.zozo.jp
zozo.jp
navi.zozo.jp
zozo.jp
i-api.zozo.jp
g.bandit.lab.zozo.jp
g.bandit.lab.zozo.jp
img4.zozo.jp
api.zozo.jp
sell.zozo.jp
backoffice-stec.zozo.jp
*.zozo.jp
backoffice-stec.zozo.jp
lab.zozo.jp
img4.zozo.jp
people.zozo.jp
lpc.zozo.jp
backoffice-srv.zozo.jp
img4.zozo.jp
g.bandit.lab.zozo.jp
w2.zozo.jp
azq.zozo.jp
p2.zozo.jp
imgc.zozo.jp
p2.zozo.jp
azb.zozo.jp
ambientweaving.lab.zozo.jp
rtm-tracking.zozo.jp
zozo.jp
zozo.jp
rtm.zozo.jp
sell.zozo.jp
*.zozo.jp
navi.zozo.jp
imgc.zozo.jp
backoffice-stec.zozo.jp
api.zozo.jp
hisdofolyt08.zozo.jp
i-api.zozo.jp
w2.zozo.jp
t.zozo.jp
t.bandit.lab.zozo.jp
*.zozo.jp
backoffice-atec.zozo.jp
backoffice-srv.zozo.jp
snap-bo.zozo.jp
lp.zozo.jp
assets.bandit.lab.zozo.jp
img5.zozo.jp
zozo.jp
api.zozo.jp
backoffice-srv.zozo.jp
*.zozo.jp
zozo.jp
t.bandit.lab.zozo.jp
rtm-tracking.zozo.jp
sell.zozo.jp
people.zozo.jp
azb.zozo.jp
az.zozo.jp
backoffice-srv.zozo.jp
sell.zozo.jp
rtm.zozo.jp
zozo.jp
backoffice-atec.zozo.jp
n2.zozo.jp
navi.zozo.jp
hisdofolyt08.zozo.jp
p2.zozo.jp
azb.zozo.jp
i-api.zozo.jp
backoffice-atec.zozo.jp
backoffice-srv.zozo.jp

Certificate

The complete raw certificate details for backoffice-atec.zozo.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIMRXdearALrrxbnwgjMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0xOTA3MjYwMTIxMDZaFw0y
MTA0MjYxNDU5NTlaMHkxCzAJBgNVBAYTAkpQMQ4wDAYDVQQIEwVDSElCQTESMBAG
A1UEBxMJQ0hJQkEtU0hJMQ8wDQYDVQQLEwZTeXN0ZW0xEzARBgNVBAoTClpPWk8s
IEluYy4xIDAeBgNVBAMTF2JhY2tvZmZpY2UtYXRlYy56b3pvLmpwMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcmZWxBihWbjEJpJBIfTERC9gzz4TqVa
pX6mlCSjxNDtMOSKhic2zHwX9g0CjryzUePchUOXPN3x31QGTjIdUEbTR6QfazPP
QvMcFdCKawQPD0u2Th0TE7yOTWlbjhcdXLcet6HXDx4AadjA8wTlGtZVmegmQMAm
snWFHPGKac2c0ERpI8NrBsC6eDq1RJ+LmxSpoIeI06/4pVmiVV+lCXhF17BYpiRJ
NyXNYwfZ1Kwkh4szfRCDTknJZtuuwdqSkJbqA+31Qgxuw3ea5Tg59E/my3lCZYvv
whVexHMNaJO2G76EQu01k7yE4g9sIEMHonJ9WS1dfclCQ8BelM38OwIDAQABo4IB
4TCCAd0wDgYDVR0PAQH/BAQDAgWgMIGOBggrBgEFBQcBAQSBgTB/MEQGCCsGAQUF
BzAChjhodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc3JzYW92
c3NsY2EyMDE4LmNydDA3BggrBgEFBQcwAYYraHR0cDovL29jc3AuZ2xvYmFsc2ln
bi5jb20vZ3Nyc2FvdnNzbGNhMjAxODBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0
MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0
b3J5LzAIBgZngQwBAgIwCQYDVR0TBAIwADA/BgNVHR8EODA2MDSgMqAwhi5odHRw
Oi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzcnNhb3Zzc2xjYTIwMTguY3JsMCIGA1Ud
EQQbMBmCF2JhY2tvZmZpY2UtYXRlYy56b3pvLmpwMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBT473/yzXhnqN5vjySNiPGHAwKz6zAd
BgNVHQ4EFgQUeZzEOUZvwEXdW6nA4gXiuKKClRkwEwYKKwYBBAHWeQIEAwEB/wQC
BQAwDQYJKoZIhvcNAQELBQADggEBAG0Cp62J6q36DGySuqAGaYyQO3LYGM/IQNIC
Vh/amLvpftUaCaBxaRVjQChKlBWIOgZTaaYzYYmRD4TP5jZDQa9bbvnyaiM/1CKe
aduL43iL4D01w6I/eihfFRHSV4tJ1Pvz9Td30covG0PD3FQqyTWUl279hIUyvisu
YJaezv3V8AC9RzV3ylyjF7Ds7o17GubLY6HHY8nFWVFDrkaBV8hD4MODrKn2HIFq
ly1BqD8vPTlivmZbmuROA5f9QYjLZ2pQ81qCmFQrXDJc92XbtMN3vc/VWBKNAZDP
EdjRC86OzpoYCDyxgUxZMceZPoYOCVZ4CHoaCZkDe15gMvef94Y=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcmZWxBihWbjEJpJBIfT
ERC9gzz4TqVapX6mlCSjxNDtMOSKhic2zHwX9g0CjryzUePchUOXPN3x31QGTjId
UEbTR6QfazPPQvMcFdCKawQPD0u2Th0TE7yOTWlbjhcdXLcet6HXDx4AadjA8wTl
GtZVmegmQMAmsnWFHPGKac2c0ERpI8NrBsC6eDq1RJ+LmxSpoIeI06/4pVmiVV+l
CXhF17BYpiRJNyXNYwfZ1Kwkh4szfRCDTknJZtuuwdqSkJbqA+31Qgxuw3ea5Tg5
9E/my3lCZYvvwhVexHMNaJO2G76EQu01k7yE4g9sIEMHonJ9WS1dfclCQ8BelM38
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21498773720696637073095854115
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 01:21:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-26 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHIBA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHIBA-SHI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'System'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZOZO, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'backoffice-atec.zozo.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24463405053064899388875467102153246861986418060989927178789783859351428025334769561149241380967810898550840676886654330667143381211400783932639321179055999678423426782977971238628345212582185293341002537367384544821798700775176135271727280803072328873942201849294896551220392450388370425988900894460431665843144770069087026255904907376462706936005359171788705827348717135629684336657713789671726591623169780176217740041483688222841375216825343975117024283928583525443033352937359709883782309489834979574262796336225011940822182898378759096838193148871274714012175021951938638363974815257748968512331769669654225484859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice-atec.zozo.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							799cc439466fc045dd5ba9c0e205e2b8a2829519
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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