www.chotatsu.e-aichi.jp

- Aichi Prefectural Government -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 12:6a:bf:28:7e:28:62:99:ce:0f:1c:b8 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Aichi Prefectural Government

Organization: Aichi Prefectural Government
State / Province: Aichi-ken
Locality: Nagoya-shi
Country: JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 12:6a:bf:28:7e:28:62:99:ce:0f:1c:b8
Serial Number (int): 5699779032621977240756755640
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 6e:82:29:71:02:c5:55:9e:87:10:4b:b5:d8:e5:44:00:65:98:69:09
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 80:a1:36:98:3a:fc:71:96:3b:e3:14:83:f7:67:5a:67:18:78:c8:c3
Fingerprint (sha256): b8:1e:04:ad:c1:2b:b2:37:8c:31:9a:dd:e2:b7:8b:2c:89:93:13:26:da:bf:ca:1a:d7:f1:5c:6d:2a:32:fc:8a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate www.chotatsu.e-aichi.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.chotatsu.e-aichi.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.chotatsu.e-aichi.jp
chotatsu.e-aichi.jp

Other certificates including the domain name e-aichi.jp

(limited to 100 certificates)
www.shinsei.e-aichi.jp
order.chotatsu.e-aichi.jp
www.chotatsu.e-aichi.jp
www.buppin.e-aichi.jp
www.e-shisetsu.e-aichi.jp
www.shinsei.e-aichi.jp
www.chotatsu.e-aichi.jp
www.e-shisetsu.e-aichi.jp
staff2.buppin.e-aichi.jp
www.e-shisetsu.e-aichi.jp
www.buppin.e-aichi.jp
www.shinsei.e-aichi.jp
www.shinsei.e-aichi.jp
www.shinsei.e-aichi.jp
www.chotatsu.e-aichi.jp
www.buppin.e-aichi.jp
www.chotatsu.e-aichi.jp
www.e-shisetsu.e-aichi.jp
www.shinsei.e-aichi.jp
www.e-shisetsu.e-aichi.jp
www.e-shisetsu.e-aichi.jp
www.buppin.e-aichi.jp
www.chotatsu.e-aichi.jp
www.shinsei.e-aichi.jp
www.shinsei.e-aichi.jp
www.shinsei.e-aichi.jp
www.shinsei.e-aichi.jp
www.e-shisetsu.e-aichi.jp
kenshu.chotatsu.e-aichi.jp
www.buppin.e-aichi.jp
www.chotatsu.e-aichi.jp
www.shinsei.e-aichi.jp
www.shinsei.e-aichi.jp
www.shinsei.e-aichi.jp
kenshu.chotatsu.e-aichi.jp
kenshu.chotatsu.e-aichi.jp
www.e-shisetsu.e-aichi.jp
www.chotatsu.e-aichi.jp
kenshu.chotatsu.e-aichi.jp
www.e-shisetsu.e-aichi.jp
www.e-shisetsu.e-aichi.jp
www.buppin.e-aichi.jp
staff2.buppin.e-aichi.jp
staff2.buppin.e-aichi.jp
www.shinsei.e-aichi.jp
www.chotatsu.e-aichi.jp
www.shinsei.e-aichi.jp
www.buppin.e-aichi.jp
yoyaku.e-shisetsu.e-aichi.jp
kenshu.chotatsu.e-aichi.jp
www.e-aichi.jp
www.chotatsu.e-aichi.jp
www.e-shisetsu.e-aichi.jp
www3.shinsei.e-aichi.jp
www.e-shisetsu.e-aichi.jp
www.chotatsu.e-aichi.jp
www.chotatsu.e-aichi.jp
www.shinsei.e-aichi.jp
kenshu.chotatsu.e-aichi.jp
www.e-shisetsu.e-aichi.jp
www.e-shisetsu.e-aichi.jp
staff2.buppin.e-aichi.jp

Certificate

The complete raw certificate details for www.chotatsu.e-aichi.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGezCCBWOgAwIBAgIMEmq/KH4oYpnODxy4MA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMjEwMDMwNjQ2MDhaFw0y
MzExMDQwNjQ2MDdaMH8xCzAJBgNVBAYTAkpQMRIwEAYDVQQIEwlBaWNoaS1rZW4x
EzARBgNVBAcTCk5hZ295YS1zaGkxJTAjBgNVBAoTHEFpY2hpIFByZWZlY3R1cmFs
IEdvdmVybm1lbnQxIDAeBgNVBAMTF3d3dy5jaG90YXRzdS5lLWFpY2hpLmpwMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/aASaSUWGwXQPCfb6yptP5D
5fLAHzEYYDse8vkw0Rdpd4MaBOMJ0miMMxJ0bFIkOlMH19vZzsb/vVW5maEFz6pI
JSjBqPm1/yTHEHFf7phhDP+1aBDc1Z2SHH0v6W7AQZX56WVkzRQ6U2PH7SXUfKoc
ZDbjU5br3Yh+RE9iLOAii1NMhfbBA6scLhuPrcTnJgDe2XgicwwM3jWihjzTor3g
diMOaJF5HlflVqgvF8tcx13bG5xB0CNcjCDjd0BIbeOhIy8EpG+NdiecZXj0VqB1
PxO9+ecHY69PQSQGcH/ZeO4XvI3nY8Iylu74cWHwI195PnjSFIyxJ84xNPbEewID
AQABo4IDJDCCAyAwDgYDVR0PAQH/BAQDAgWgMIGOBggrBgEFBQcBAQSBgTB/MEQG
CCsGAQUFBzAChjhodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9n
c3JzYW92c3NsY2EyMDE4LmNydDA3BggrBgEFBQcwAYYraHR0cDovL29jc3AuZ2xv
YmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNhMjAxODBWBgNVHSAETzBNMEEGCSsGAQQB
oDIBFDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9y
ZXBvc2l0b3J5LzAIBgZngQwBAgIwCQYDVR0TBAIwADA3BgNVHREEMDAughd3d3cu
Y2hvdGF0c3UuZS1haWNoaS5qcIITY2hvdGF0c3UuZS1haWNoaS5qcDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU+O9/8s14Z6jeb48k
jYjxhwMCs+swHQYDVR0OBBYEFG6CKXECxVWehxBLtdjlRABlmGkJMIIBgAYKKwYB
BAHWeQIEAgSCAXAEggFsAWoAdwDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9
bQa9bgAAAYOcmEkjAAAEAwBIMEYCIQCLl2CxgBRWgSzzCv8JuaYkEqoGFeGLPcyT
8sd0+ehZ7AIhAO1qWaFdrgCDT52fCG+50D3Wk3vq+AToxeDAngeeV08TAHcAb1N2
rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAGDnJhJGgAABAMASDBGAiEA
tA8wYUBfvxAjI/HOTbkwwCJrHprf9BaVj+xWUq6D9dECIQDwEVWOuPYh0YzTrGnX
+DybxEvGAlyMGdnxdqs/qCBeDAB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivB
OlejUutSAAABg5yYSWwAAAQDAEcwRQIgf6QPBeX4Q5VGGoCRyfc/p6wwgxkcG/Lp
jg8Holjlo40CIQDvpM7cqY2Ts8YbTwTcMNLueuzTj0i8S7O6duvbqA/DbDANBgkq
hkiG9w0BAQsFAAOCAQEAGvXx44lZbczcLfKXQFGAR6CDIrn8GbvREooGYheeQinM
1l7DEa5M0YKXHhd7v5EhVFpxZrlnLOrT4aqmuKd16X7m2lmyPvAnCaF1+Mxm/lPc
KBHtge8yy1KIAQ6QBoRB1IYgm/0MweWPwZofN8BjYR2Dlx/7K9SXe0OVBjbJPbyZ
AIMI0bqkdKdpYPevu0P45POvK1nO06uYoJp0tgyGPY+r2tKpawoWVMG7IMdUG8XM
Endppk/p1nE10pIwk+ObLZofA0QqEsZwKWinD6o6tXx48oaZmxl/ICrZWEoSF0ed
3xThLEgHglc/C6t05caWzAQLmxGQgzDlIP+UB9ZOUw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/aASaSUWGwXQPCfb6yp
tP5D5fLAHzEYYDse8vkw0Rdpd4MaBOMJ0miMMxJ0bFIkOlMH19vZzsb/vVW5maEF
z6pIJSjBqPm1/yTHEHFf7phhDP+1aBDc1Z2SHH0v6W7AQZX56WVkzRQ6U2PH7SXU
fKocZDbjU5br3Yh+RE9iLOAii1NMhfbBA6scLhuPrcTnJgDe2XgicwwM3jWihjzT
or3gdiMOaJF5HlflVqgvF8tcx13bG5xB0CNcjCDjd0BIbeOhIy8EpG+NdiecZXj0
VqB1PxO9+ecHY69PQSQGcH/ZeO4XvI3nY8Iylu74cWHwI195PnjSFIyxJ84xNPbE
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5699779032621977240756755640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-03 06:46:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-04 06:46:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aichi-ken'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nagoya-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aichi Prefectural Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.chotatsu.e-aichi.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23223164043274201259493331855212380034313492487013613539987868833833921619332360145260473995655891396177142701110463867512895682980477878272864087462643974540740825059421812592063407811710005431835781810604104061749109630977830616415489645888365943783174115981414078713495240156825637738706997910386696258409922387914226244247219488046807006719704275244318417687860193754592849334315484059077894202235131136165405186921449020865995773014829552237851655485904379802317194559378158864917430851551458950296939141437197981829829047631111238429605559580921963867458355314616311373043319179833115599547374375024620551455867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chotatsu.e-aichi.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chotatsu.e-aichi.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e82297102c5559e87104bb5d8e5440065986909
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001af5f1e389596dccdc2df29740518047a08322b9fc19bbd1128a0662179e4229ccd65ec311ae4cd182971e177bbf9121545a7166b9672cead3e1aaa6b8a775e97ee6da59b23ef02709a175f8cc66fe53dc2811ed81ef32cb5288010e90068441d486209bfd0cc1e58fc19a1f37c063611d83971ffb2bd4977b43950636c93dbc99008308d1baa474a76960f7afbb43f8e4f3af2b59ced3ab98a09a74b60c863d8fabdad2a96b0a1654c1bb20c7541bc5cc127769a64fe9d67135d2923093e39b2d9a1f03442a12c6702968a70faa3ab57c78f286999b197f202ad9584a1217479ddf14e12c480782573f0bab74e5c696cc040b9b11908330e520ff9407d64e53