*.nats.tokyo
Issued by GlobalSign Domain Validation CA - SHA256 - G2
About this certificate
This digital certificate with serial number 73:f9:d4:cf:13:b3:f1:54:32:55:53:ae was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.nats.tokyo,OU=Domain Control Validated
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 73:f9:d4:cf:13:b3:f1:54:32:55:53:aeSerial Number (int): 35892803620128860841989985198
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 9b:9c:58:0f:b1:6c:67:2f:cc:e5:cf:4f:22:7f:46:4a:b0:98:61:54
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f
Fingerprint (sha1): de:56:25:59:b3:b7:f8:bf:74:5d:f4:71:50:c5:83:2c:ca:22:e9:95
Fingerprint (sha256): ae:68:97:fd:f7:1f:d7:4e:79:46:05:0c:3f:d6:9c:c8:23:ab:38:f3:79:21:dd:1a:9b:0a:aa:d6:5e:c2:91:ae
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl
Check the revocation status for certificate *.nats.tokyo
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.nats.tokyo
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.nats.tokyo
nats.tokyo
nats.tokyo
Other certificates including the domain name nats.tokyo
(limited to 100 certificates)
mitoyo.nats.tokyo
katou-t.nats.tokyo
s-and-g.nats.tokyo
mitoyo.nats.tokyo
orwak.nats.tokyo
mitoyo.nats.tokyo
f-eiken.nats.tokyo
green-grace.nats.tokyo
3-r2.nats.tokyo
chita-kougyo.nats.tokyo
m-tsuda.nats.tokyo
itsuki-group.nats.tokyo
s-and-g.nats.tokyo
nankai-road.nats.tokyo
*.nats.tokyo
cosmokikaku.nats.tokyo
keick.nats.tokyo
shinada.nats.tokyo
*.nats.tokyo
*.nats.tokyo
straight.nats.tokyo
kyushu-ad.nats.tokyo
sawadatekkin.nats.tokyo
act-sp.nats.tokyo
orwak.nats.tokyo
harukarainbow.nats.tokyo
tk-union.nats.tokyo
yusho-co.nats.tokyo
maruhishi.nats.tokyo
sanpuku.nats.tokyo
hai-f.nats.tokyo
*.nats.tokyo
activeplan.nats.tokyo
*.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
sawadatekkin.nats.tokyo
daiyu-kaitai.nats.tokyo
hirano-tire.nats.tokyo
yusho-co.nats.tokyo
pianoservice2.nats.tokyo
usami-kenkou.nats.tokyo
109sai.nats.tokyo
*.nats.tokyo
hayashida-d-s.nats.tokyo
lim-eiya.nats.tokyo
kamakuranozomikai.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
*.nats.tokyo
sawadatekkin.nats.tokyo
boh-chubu.nats.tokyo
kyushu-ad.nats.tokyo
orwak.nats.tokyo
nankai-road.nats.tokyo
lim-eiya.nats.tokyo
car-life.nats.tokyo
*.nats.tokyo
miyoshikai.nats.tokyo
katou-t.nats.tokyo
s-and-g.nats.tokyo
ichiki-setsubi.nats.tokyo
keick.nats.tokyo
pianoservice2.nats.tokyo
3-r2.nats.tokyo
act-sp.nats.tokyo
activeplan.nats.tokyo
f-eiken.nats.tokyo
maedago.nats.tokyo
hanakawah.nats.tokyo
green-grace.nats.tokyo
kaza-design.nats.tokyo
straight.nats.tokyo
*.nats.tokyo
systems.nats.tokyo
miyoshikai.nats.tokyo
sf092.nats.tokyo
sf092.nats.tokyo
boh-chubu.nats.tokyo
brain-m.nats.tokyo
green-grace.nats.tokyo
*.nats.tokyo
towa-k.nats.tokyo
altwork.nats.tokyo
towa-k.nats.tokyo
hayashida-d-s.nats.tokyo
3-r2.nats.tokyo
nanseikikou.nats.tokyo
kaza-design.nats.tokyo
kashiwa-b.nats.tokyo
ando-s.nats.tokyo
zhiservice.nats.tokyo
eco-runner.nats.tokyo
kyushu-ad.nats.tokyo
morooka-k.nats.tokyo
kaza-design.nats.tokyo
yutaka-rr.nats.tokyo
kawasuke.nats.tokyo
shinada.nats.tokyo
kawaguchi.nats.tokyo
katou-t.nats.tokyo
s-and-g.nats.tokyo
mitoyo.nats.tokyo
orwak.nats.tokyo
mitoyo.nats.tokyo
f-eiken.nats.tokyo
green-grace.nats.tokyo
3-r2.nats.tokyo
chita-kougyo.nats.tokyo
m-tsuda.nats.tokyo
itsuki-group.nats.tokyo
s-and-g.nats.tokyo
nankai-road.nats.tokyo
*.nats.tokyo
cosmokikaku.nats.tokyo
keick.nats.tokyo
shinada.nats.tokyo
*.nats.tokyo
*.nats.tokyo
straight.nats.tokyo
kyushu-ad.nats.tokyo
sawadatekkin.nats.tokyo
act-sp.nats.tokyo
orwak.nats.tokyo
harukarainbow.nats.tokyo
tk-union.nats.tokyo
yusho-co.nats.tokyo
maruhishi.nats.tokyo
sanpuku.nats.tokyo
hai-f.nats.tokyo
*.nats.tokyo
activeplan.nats.tokyo
*.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
sawadatekkin.nats.tokyo
daiyu-kaitai.nats.tokyo
hirano-tire.nats.tokyo
yusho-co.nats.tokyo
pianoservice2.nats.tokyo
usami-kenkou.nats.tokyo
109sai.nats.tokyo
*.nats.tokyo
hayashida-d-s.nats.tokyo
lim-eiya.nats.tokyo
kamakuranozomikai.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
*.nats.tokyo
sawadatekkin.nats.tokyo
boh-chubu.nats.tokyo
kyushu-ad.nats.tokyo
orwak.nats.tokyo
nankai-road.nats.tokyo
lim-eiya.nats.tokyo
car-life.nats.tokyo
*.nats.tokyo
miyoshikai.nats.tokyo
katou-t.nats.tokyo
s-and-g.nats.tokyo
ichiki-setsubi.nats.tokyo
keick.nats.tokyo
pianoservice2.nats.tokyo
3-r2.nats.tokyo
act-sp.nats.tokyo
activeplan.nats.tokyo
f-eiken.nats.tokyo
maedago.nats.tokyo
hanakawah.nats.tokyo
green-grace.nats.tokyo
kaza-design.nats.tokyo
straight.nats.tokyo
*.nats.tokyo
systems.nats.tokyo
miyoshikai.nats.tokyo
sf092.nats.tokyo
sf092.nats.tokyo
boh-chubu.nats.tokyo
brain-m.nats.tokyo
green-grace.nats.tokyo
*.nats.tokyo
towa-k.nats.tokyo
altwork.nats.tokyo
towa-k.nats.tokyo
hayashida-d-s.nats.tokyo
3-r2.nats.tokyo
nanseikikou.nats.tokyo
kaza-design.nats.tokyo
kashiwa-b.nats.tokyo
ando-s.nats.tokyo
zhiservice.nats.tokyo
eco-runner.nats.tokyo
kyushu-ad.nats.tokyo
morooka-k.nats.tokyo
kaza-design.nats.tokyo
yutaka-rr.nats.tokyo
kawasuke.nats.tokyo
shinada.nats.tokyo
kawaguchi.nats.tokyo
Certificate
The complete raw certificate details for *.nats.tokyo in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHazCCBlOgAwIBAgIMc/nUzxOz8VQyVVOuMA0GCSqGSIb3DQEBCwUAMGAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTYwNAYDVQQDEy1H bG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzIwHhcN MTcwNTA5MDIwNTA3WhcNMTgwODAyMDg0NzE5WjA6MSEwHwYDVQQLExhEb21haW4g Q29udHJvbCBWYWxpZGF0ZWQxFTATBgNVBAMMDCoubmF0cy50b2t5bzCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBANdqV3iWgD18Z3sghzsrGk5hqlMRSjg2 te8SDFbgsFPXMQ1ArgfVP/SvGSm2Vxw28Ma8POaDH3k0fzgvLaYcLzg1YzvpsaID z6djdAymETPwD4gWsZksiYJThXb5t2lfAu2RxSqTx4eq0zsJjYhTN3XE8UnHc/IY 8C4l1iPOG9mzBoop9qYtQgpnZ/zyFsMI7Z2c3CGtpcBpThXFhMDzR0uaOQ6IUVNF FBG4t1IR0qNazmEXxU/O5+fw2Kzl8dswHM6tAuFVJNxhZsKBaScAt65ar9jXkMuH +VS/lLyAn6m/Pdjy9wSSmGjxNyhW4Odo+mSCECcygPlixsLct8XVbsECAwEAAaOC BEkwggRFMA4GA1UdDwEB/wQEAwIFoDCBlAYIKwYBBQUHAQEEgYcwgYQwRwYIKwYB BQUHMAKGO2h0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzZG9t YWludmFsc2hhMmcycjEuY3J0MDkGCCsGAQUFBzABhi1odHRwOi8vb2NzcDIuZ2xv YmFsc2lnbi5jb20vZ3Nkb21haW52YWxzaGEyZzIwVgYDVR0gBE8wTTBBBgkrBgEE AaAyAQowNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20v cmVwb3NpdG9yeS8wCAYGZ4EMAQIBMAkGA1UdEwQCMAAwQwYDVR0fBDwwOjA4oDag NIYyaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9ncy9nc2RvbWFpbnZhbHNoYTJn Mi5jcmwwIwYDVR0RBBwwGoIMKi5uYXRzLnRva3lvggpuYXRzLnRva3lvMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUm5xYD7FsZy/M5c9P In9GSrCYYVQwHwYDVR0jBBgwFoAU6k581IAt5RWBhiaMgm3AmKTPlw8wggJuBgor BgEEAdZ5AgQCBIICXgSCAloCWAB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3 zQ7IDdwQAAABW+rz9xoAAAQDAEcwRQIhANhv5eGzzJZg/pibBGJMRLTzCVkymHqE zfjhALR6NwuOAiB/fGScI5Fh31xxw4gLo4DxdWgn8YXRn3ZqqYg2stKnmQB2AN3r HSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABW+rz+n4AAAQDAEcwRQIh AMn6N/gp+19kEW5zvlbFm/De2wiHdAv7KEJJ65mKTXDxAiA8M/81wBBZd71KZBR/ 5HIChqFKqGkYv4kb0NbkP/KX8wB1AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+U mFXWidDdAAABW+rz+l8AAAQDAEYwRAIgc0FkW5K9Y1Q+pevy9oacQ0IsSCKjMfS6 hbSLyO0+34MCIGny7s+LMLh1akX8bR8n5479xAxpzSYStXAGU5ePNUWjAHcAu9nf vB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFb6vP7BgAABAMASDBGAiEA 7IYPb1XMZqxl+pn4qg/cj7QFVd+bdz6OvnR/YY6RvGUCIQDBqlCfwU5dVgygLw6L gTiw1IdrESUse3vLlqePni656gB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDE e4l6qP3LAAABW+rz/asAAAQDAEcwRQIhAMlmuwGnxbpqidpvT060qsQYuDPJbgs+ 3dibmiZKvzX+AiB0/YCIo1dZJfueDJwfaxbaUNaHk6tCMr+ZD5YwM3+a7TANBgkq hkiG9w0BAQsFAAOCAQEAixyh4f5FYRMrMqulnFFof+Kn9gAHvvEiy6SpIL3PtPL/ EVS1qecAPt8z03xaHUp2wgQv0uDSAlKv/FuHFF25NdPSwYjfG4017MZ1DLkcZar9 fXFYDVe4wlewzW++2ykKh9YUwztVhoaw3t2wiTQWTgJDkJWyA1juEjXU3yG/FTb9 CCgNLE4Btt3NwDUendbyNz4mFjzveRogiriFI/flMe4PUI4gshQXZ1gBwOvEg3Aa GFa0l9QZlTOAgv7WXR+K8aD7iPQ+MlUI0tfLNhimMmuEXKN0HuVB0b9/NPL92Rkc 8hl61q2m+z+/aPhBnpo5X9RjLusvHleb41Dr9wV7kg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12pXeJaAPXxneyCHOysa TmGqUxFKODa17xIMVuCwU9cxDUCuB9U/9K8ZKbZXHDbwxrw85oMfeTR/OC8tphwv ODVjO+mxogPPp2N0DKYRM/APiBaxmSyJglOFdvm3aV8C7ZHFKpPHh6rTOwmNiFM3 dcTxScdz8hjwLiXWI84b2bMGiin2pi1CCmdn/PIWwwjtnZzcIa2lwGlOFcWEwPNH S5o5DohRU0UUEbi3UhHSo1rOYRfFT87n5/DYrOXx2zAczq0C4VUk3GFmwoFpJwC3 rlqv2NeQy4f5VL+UvICfqb892PL3BJKYaPE3KFbg52j6ZIIQJzKA+WLGwty3xdVu wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 35892803620128860841989985198 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-09 02:05:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-02 08:47:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nats.tokyo' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27193674606401913263636795787395594822411254542144759301965476205618754951072573095892214155176369741592363435868395048089782235990850187381703278737241425477623202021893400256435434025645107654234795647463557083483590049286312453821754829355863890747702059079249767361775910683597826941982911766723574813798129255609796728199661453075194193222228533606749968712179328313248176604780447606326122255735963305687738564708734685107654984842836187764175370456692043686460024698820155264366031127351292625278513441431865000465358881656119563039576515027684635045927914668291830603521225962325071457457259100099654540684993 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nats.tokyo' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nats.tokyo' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9b9c580fb16c672fcce5cf4f227f464ab0986154 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes) 0258007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015beaf3f71a0000040300473045022100d86fe5e1b3cc9660fe989b04624c44b4f3095932987a84cdf8e100b47a370b8e02207f7c649c239161df5c71c3880ba380f1756827f185d19f766aa98836b2d2a799007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015beaf3fa7e0000040300473045022100c9fa37f829fb5f64116e73be56c59bf0dedb0887740bfb284249eb998a4d70f102203c33ff35c0105977bd4a64147fe4720286a14aa86918bf891bd0d6e43ff297f30075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015beaf3fa5f000004030046304402207341645b92bd63543ea5ebf2f6869c43422c4822a331f4ba85b48bc8ed3edf83022069f2eecf8b30b8756a45fc6d1f27e78efdc40c69cd2612b5700653978f3545a3007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000015beaf3fb060000040300483046022100ec860f6f55cc66ac65fa99f8aa0fdc8fb40555df9b773e8ebe747f618e91bc65022100c1aa509fc14e5d560ca02f0e8b8138b0d4876b11252c7b7bcb96a78f9e2eb9ea007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015beaf3fdab0000040300473045022100c966bb01a7c5ba6a89da6f4f4eb4aac418b833c96e0b3eddd89b9a264abf35fe022074fd8088a3575925fb9e0c9c1f6b16da50d68793ab4232bf990f9630337f9aed . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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