nr.cue-monitor.jp

- INTAGE Inc. -

Issued by SECOM Passport for Web SR 3.0 CA

About this certificate

This digital certificate with serial number 03:eb:61:e4:2b:1b:dd:f4:5d:47:82:73:53:bf:28:f4 was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

INTAGE Inc.

Organization: INTAGE Inc.
Organization unit: research
State / Province: Tokyo
Locality: Chiyoda-ku
Country: JP

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 03:eb:61:e4:2b:1b:dd:f4:5d:47:82:73:53:bf:28:f4
Serial Number (int): 5209859220204584145883367549920291060
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 8b:bd:36:4c:a1:a8:41:a5:8b:3b:e0:3d:60:e9:fa:30:40:6f:3b:a7
AuthorityKeyId: cb:ef:3d:ef:83:74:a1:a8:42:f0:3b:40:36:fa:6d:82:94:a9:27:36

Fingerprint (sha1): 40:11:c1:75:a6:f0:53:e5:be:fb:e6:21:da:27:3d:52:9f:00:3c:94
Fingerprint (sha256): ba:80:3d:ed:32:9c:3b:5d:c3:ef:60:7b:7e:8b:42:90:a3:13:70:d2:fe:9c:0c:dd:29:35:24:d4:65:58:0f:b0


Revocation information

OCSP Server: http://sr30.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/fullcrl2.crl

Check the revocation status for certificate nr.cue-monitor.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nr.cue-monitor.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nr.cue-monitor.jp

Other certificates including the domain name cue-monitor.jp

(limited to 100 certificates)
mb.cue-monitor.jp
mypage.cue-monitor.jp
www.cue-monitor.jp
st-eq.cue-monitor.jp
www.cue-monitor.jp
cuemot.cue-monitor.jp
sv.cue-monitor.jp
*.cue-monitor.jp
sv.cue-monitor.jp
nr.cue-monitor.jp
www.cue-monitor.jp
*.cue-monitor.jp
m.cue-monitor.jp
sv.cue-monitor.jp
st-eq.cue-monitor.jp
*.cue-monitor.jp
www.cue-monitor.jp
cuemot.cue-monitor.jp
nr.cue-monitor.jp
nr.cue-monitor.jp
cuemot.cue-monitor.jp
*.cue-monitor.jp
*.cue-monitor.jp
api.cue-monitor.jp
eq.cue-monitor.jp
www.cue-monitor.jp
cuemot.cue-monitor.jp
ecsurvey.cue-monitor.jp
enq-mps.cue-monitor.jp
enq.cue-monitor.jp
*.cue-monitor.jp
*.cue-monitor.jp
*.cue-monitor.jp
*.cue-monitor.jp
eq.cue-monitor.jp
st-sv.cue-monitor.jp
www.cue-monitor.jp
enq-mps-st.cue-monitor.jp
mypage.cue-monitor.jp
api.cue-monitor.jp
mb.cue-monitor.jp
cuemot.cue-monitor.jp
cuemot.cue-monitor.jp
cuemot.cue-monitor.jp
*.cue-monitor.jp
mypage.cue-monitor.jp
cauth.cue-monitor.jp
nr.cue-monitor.jp
sv.cue-monitor.jp
eq.cue-monitor.jp
myreco-webservice.cue-monitor.jp
st-eq.cue-monitor.jp
cuemot.cue-monitor.jp
*.cue-monitor.jp
st-eq.cue-monitor.jp
cuemot.cue-monitor.jp
nr.cue-monitor.jp

Certificate

The complete raw certificate details for nr.cue-monitor.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIQA+th5Csb3fRdR4JzU78o9DANBgkqhkiG9w0BAQsFADBf
MQswCQYDVQQGEwJKUDElMCMGA1UEChMcU0VDT00gVHJ1c3QgU3lzdGVtcyBDTy4s
TFRELjEpMCcGA1UEAxMgU0VDT00gUGFzc3BvcnQgZm9yIFdlYiBTUiAzLjAgQ0Ew
HhcNMTkxMTIxMTAxNzIwWhcNMjAxMjA4MTQ1OTU5WjB3MQswCQYDVQQGEwJKUDEO
MAwGA1UECBMFVG9reW8xEzARBgNVBAcTCkNoaXlvZGEta3UxFDASBgNVBAoTC0lO
VEFHRSBJbmMuMREwDwYDVQQLEwhyZXNlYXJjaDEaMBgGA1UEAxMRbnIuY3VlLW1v
bml0b3IuanAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHR5Mw+X61
fOXU6i9sYtwhShNICdinan/w8661W+ZTen6TzYh3YXMKN5rrzLDag1fPXBIRxmN4
HQ+HqMKmRd6UCJsF3BHi4At02HMSRNcFNN0FmYur92VK6ILlrB4SnG7cF9r8iyeI
gs4U6UbKA2XR1L0aLV+1o6467Fbp3TB+SHSy1CdzSyomLRgwf+KlEF75BgW82mA1
tyKPeNRHnlRIuGzaYj4mXoxIMalAsregcA8+rgJDruZTppHRkoTcxHJaIKZ62Lhh
qcnmmuBESZQkfMVSdQ2AZXeb6fmpQla7QUSU9KHIBgqSay0iQZZAN9TAXKycNlWL
WVI+B4ulLYB5AgMBAAGjggL3MIIC8zAfBgNVHSMEGDAWgBTL7z3vg3ShqELwO0A2
+m2ClKknNjA7BggrBgEFBQcBAQQvMC0wKwYIKwYBBQUHMAGGH2h0dHA6Ly9zcjMw
Lm9jc3Auc2Vjb210cnVzdC5uZXQwHAYDVR0RBBUwE4IRbnIuY3VlLW1vbml0b3Iu
anAwYQYDVR0gBFowWDBMBgoqgwiMmxtkhW8BMD4wPAYIKwYBBQUHAgEWMGh0dHBz
Oi8vcmVwbzEuc2Vjb210cnVzdC5uZXQvc3BjcHAvcGZ3L3Bmd3NyM2NhLzAIBgZn
gQwBAgIwEwYDVR0lBAwwCgYIKwYBBQUHAwEwTAYDVR0fBEUwQzBBoD+gPYY7aHR0
cDovL3JlcG8xLnNlY29tdHJ1c3QubmV0L3NwY3BwL3Bmdy9wZndzcjNjYS9mdWxs
Y3JsMi5jcmwwHQYDVR0OBBYEFIu9NkyhqEGlizvgPWDp+jBAbzunMA4GA1UdDwEB
/wQEAwIFoDCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHcApLkJkLQYWBSHuxOi
zGdwCjw1mAT5G9+443fNDsgN3BAAAAFujYCJKgAABAMASDBGAiEAuNJ/QuLBHAWC
haI4UQobYW82gqqdSr6JPXSX/NS5keECIQCmEsAzaVCmf5WH+oGDu+Zhak8Ef/tZ
Ys57wN6lxk06BwB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAAB
bo2AkIsAAAQDAEcwRQIhAL4wMxh+7KBJQiQrs7kHpP7TKCa/Mo0AtfgUmTBc/gis
AiBXV+Hk5KQFxSgsHGordnLMGs2wimVoB5btlyRQXSkhOwB1AG9Tdqwx8DEZ2JkA
pFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbo2AlCkAAAQDAEYwRAIgOslVeQZTY8tg
m/QWm1zrw4MGxURg6tRCtv+cJKh792UCIBWhHAiBZldp03KZnOsXwh8jdn5rONGv
AMSx4TBVaw2fMA0GCSqGSIb3DQEBCwUAA4IBAQAwyKKGccrWjOOvIEk/lsPJ6HKx
UZNPKaUA0882mXo7hXpERIDUxJ/5mLsMbS5ptxYJY/93cVT7luO4MYqCbN6nYzDa
xtCNOUFwwzlR67XY3Xjte1J9rc3mnXxR8Pbsm1e3Okx1DOkKeyw7HuORijKF0FvO
HI4DK0x+LjQomTlrw5u5JZZf0Bh2lNHtVKwWdxXy66tCxlj74vzqj/SuV3Cpi12q
MWf7MTRQooDKnn28qoYMOy/eSB+luSipwyYMFhzsfsfDDh/2ooVxexf6CQclbQUC
ulCJHPjwvUdQVQkok+baSmpTYhFVlFRwS/MkYy2wuVTai8habLza+vdQg3S0
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0eTMPl+tXzl1OovbGLc
IUoTSAnYp2p/8POutVvmU3p+k82Id2FzCjea68yw2oNXz1wSEcZjeB0Ph6jCpkXe
lAibBdwR4uALdNhzEkTXBTTdBZmLq/dlSuiC5aweEpxu3Bfa/IsniILOFOlGygNl
0dS9Gi1ftaOuOuxW6d0wfkh0stQnc0sqJi0YMH/ipRBe+QYFvNpgNbcij3jUR55U
SLhs2mI+Jl6MSDGpQLK3oHAPPq4CQ67mU6aR0ZKE3MRyWiCmeti4YanJ5prgREmU
JHzFUnUNgGV3m+n5qUJWu0FElPShyAYKkmstIkGWQDfUwFysnDZVi1lSPgeLpS2A
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5209859220204584145883367549920291060
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Passport for Web SR 3.0 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-21 10:17:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-08 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chiyoda-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'INTAGE Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'research'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nr.cue-monitor.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25156717619461537318064712000811906413527712394217358535572511722961822055732431231471599791095425179093906468210279982103992750919421282026323948053241764499897655434750055577817850937603320383132678414720646831406536822198050596323646688842831258961291780535823115700227394690946886907587747955162355895219309946358906113131461273224004496105479690119567192342921827395719573219807313348789145319141270921823678888317900511729136767825194534507731184748977903668952221536467077522862854524425034851114598290548682019540021137992523463825743140821655270591731384952784268570466231268296280056678376161801138466553977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cbef3def8374a1a842f03b4036fa6d8294a92736
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr30.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nr.cue-monitor.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.100.751.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/fullcrl2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8bbd364ca1a841a58b3be03d60e9fa30406f3ba7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016e8d80892a0000040300483046022100b8d27f42e2c11c058285a238510a1b616f3682aa9d4abe893d7497fcd4b991e1022100a612c0336950a67f9587fa8183bbe6616a4f047ffb5962ce7bc0dea5c64d3a07007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016e8d80908b0000040300473045022100be3033187eeca04942242bb3b907a4fed32826bf328d00b5f81499305cfe08ac02205757e1e4e4a405c5282c1c6a2b7672cc1acdb08a65680796ed9724505d29213b0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e8d809429000004030046304402203ac95579065363cb609bf4169b5cebc38306c54460ead442b6ff9c24a87bf765022015a11c0881665769d372999ceb17c21f23767e6b38d1af00c4b1e130556b0d9f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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