wm1.southernx.ne.jp

- OCC Co., Ltd. -

Issued by JPRS Organization Validation Authority - G4

About this certificate

This digital certificate with serial number 17:15:22:80:80:c2:4b:e3:c8:8e:d0:c6:94:bc:4f:dd was issued on by Japan Registry Services Co., Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OCC Co., Ltd.

Organization: OCC Co., Ltd.
Organization unit: Global Business Strategy Division
State / Province: OKINAWA
Locality: URASOE
Country: JP

Japan Registry Services Co., Ltd.

Organization: Japan Registry Services Co., Ltd.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 17:15:22:80:80:c2:4b:e3:c8:8e:d0:c6:94:bc:4f:dd
Serial Number (int): 30681981920062593685102573607251103709
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 53:ed:5e:1e:aa:19:cd:18:70:00:2e:8c:39:6c:0d:69:4f:57:ef:a9
AuthorityKeyId: d5:35:ae:c4:d4:32:6e:80:29:15:2a:d4:00:1c:b4:ed:23:b9:2b:38

Fingerprint (sha1): 00:1d:c1:92:d4:5a:60:1d:0b:2c:63:40:7a:96:b0:64:e3:a5:c3:9a
Fingerprint (sha256): d5:bc:7d:3d:12:12:b0:5f:b4:ee:b7:38:a8:54:03:f4:da:7c:ff:3a:22:68:d4:04:ea:d2:3f:c9:12:ec:a2:fa

Issuing Certificate URL: http://repo.pubcert.jprs.jp/sppca/jprs/ovca_g4/JPRS_OVCA_G4_DER.cer

Revocation information

OCSP Server: http://ov.g4.ocsp.pubcert.jprs.jp
CRL Distribution Point: http://repo.pubcert.jprs.jp/sppca/jprs/ovca_g4/fullcrl.crl

Check the revocation status for certificate wm1.southernx.ne.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wm1.southernx.ne.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wm1.southernx.ne.jp

Other certificates including the domain name southernx.ne.jp

(limited to 100 certificates)
www.southernx.ne.jp
www.southernx.ne.jp
wm1.southernx.ne.jp
www.southernx.ne.jp
*.southernx.ne.jp
wm1.southernx.ne.jp
www.southernx.ne.jp
www.southernx.ne.jp
www.southernx.ne.jp
wm1.southernx.ne.jp
www.southernx.ne.jp
wm1.southernx.ne.jp
www.southernx.ne.jp
www.southernx.ne.jp
wm1.southernx.ne.jp
*.southernx.ne.jp
wm1.southernx.ne.jp
wm1.southernx.ne.jp
wm1.southernx.ne.jp
southernx.ne.jp
wm1.southernx.ne.jp
www.southernx.ne.jp
wm1.southernx.ne.jp
wm1.southernx.ne.jp
wm1.southernx.ne.jp
www.southernx.ne.jp
wm1.southernx.ne.jp
www.southernx.ne.jp
southernx.ne.jp
www.southernx.ne.jp

Certificate

The complete raw certificate details for wm1.southernx.ne.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIQFxUigIDCS+PIjtDGlLxP3TANBgkqhkiG9w0BAQsFADBv
MQswCQYDVQQGEwJKUDEqMCgGA1UEChMhSmFwYW4gUmVnaXN0cnkgU2VydmljZXMg
Q28uLCBMdGQuMTQwMgYDVQQDEytKUFJTIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9u
IEF1dGhvcml0eSAtIEc0MB4XDTIxMTAwNDA3NTIzOVoXDTIyMTAzMTE0NTk1OVow
gZIxCzAJBgNVBAYTAkpQMRAwDgYDVQQIEwdPS0lOQVdBMQ8wDQYDVQQHEwZVUkFT
T0UxFjAUBgNVBAoTDU9DQyBDby4sIEx0ZC4xKjAoBgNVBAsTIUdsb2JhbCBCdXNp
bmVzcyBTdHJhdGVneSBEaXZpc2lvbjEcMBoGA1UEAxMTd20xLnNvdXRoZXJueC5u
ZS5qcDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALQr8uG/wz+EzvUh
BSVFQRvVfSs/vximG38fAm3UG3CmfxZUNnBurVgR44Wdz39xnYF4l3OY7l95Gy+K
OYTgmk6alBeB6ERspW3pqrGBxQ9ErbC+efSrgNQ9wFllM/F7OVZzh1RGi4h3M7q6
oGi1IMCekh4ABkuY/VzPZAkqoC1f7zvMAfcn/ciune6L27qqjzsYoWOO0tL5Gvo2
UUoyIwBjFRnlIBUu7oUXqkIQkyaUd2QXdz+0ZDTuPX3DfV2MYiLnMLhb5e50iovE
2wbWqPRMKlU5WeCiiyU8K/3PkWclkum27UpP8OsiD6ttjQQOx+GfHeQkHkrbtanA
1b81THUCAwEAAaOCA78wggO7MB8GA1UdIwQYMBaAFNU1rsTUMm6AKRUq1AActO0j
uSs4MIGQBggrBgEFBQcBAQSBgzCBgDBPBggrBgEFBQcwAoZDaHR0cDovL3JlcG8u
cHViY2VydC5qcHJzLmpwL3NwcGNhL2pwcnMvb3ZjYV9nNC9KUFJTX09WQ0FfRzRf
REVSLmNlcjAtBggrBgEFBQcwAYYhaHR0cDovL292Lmc0Lm9jc3AucHViY2VydC5q
cHJzLmpwMB4GA1UdEQQXMBWCE3dtMS5zb3V0aGVybngubmUuanAwWQYDVR0gBFIw
UDBEBgsrBgEEAYOkQwEBBDA1MDMGCCsGAQUFBwIBFidodHRwOi8vanBycy5qcC9w
dWJjZXJ0L2luZm8vcmVwb3NpdG9yeS8wCAYGZ4EMAQICMBMGA1UdJQQMMAoGCCsG
AQUFBwMBMEsGA1UdHwREMEIwQKA+oDyGOmh0dHA6Ly9yZXBvLnB1YmNlcnQuanBy
cy5qcC9zcHBjYS9qcHJzL292Y2FfZzQvZnVsbGNybC5jcmwwHQYDVR0OBBYEFFPt
Xh6qGc0YcAAujDlsDWlPV++pMA4GA1UdDwEB/wQEAwIFoDCCAfcGCisGAQQB1nkC
BAIEggHnBIIB4wHhAHYAKXm+8J45OSHwVnOfY6V35b5XfZxgCvj5TV0mXCVdx4QA
AAF8SlOELAAABAMARzBFAiBbfUPiRX1e3zKHoqBX/RuhJOuHiAB4VtHgNFv9gG/M
OwIhAOmM76gD7/SrE3SrLCfL9oYYOqsW2BYW4xZbvtArjpN7AHcARqVV63X6kSAw
taKJafTzfREsQXS+/Um4havy/HD+bUcAAAF8SlOJ3QAABAMASDBGAiEA8Ybpdmyh
C1HapG4WBB+eLl+TMXTfxGFbxtsMph4e5yMCIQDJxsALC42vctQdoDPgFMpvLanW
dxQRaylPIQmD4IvrwQB2AFGjsPX9AXmcVm24N3iPDKR6zBsny/eeiEKaDf7UiwXl
AAABfEpTjGYAAAQDAEcwRQIhAP5o0RqyueJ5qLmsqCgcyXEKQuTwGrgwFRSBHftO
/viBAiAoIVuNtHVuufYYqacc1Qj85cNOVqiUqV43wCTufG2bNwB2AEHIyrHfIkZK
EMahOglCh15OMYsbA+vrS8do8JBilgb2AAABfEpTjnYAAAQDAEcwRQIhAJHfHH7r
v7L39z7IqG2Fpur7NkmA5tqoevZmmvTVOdFPAiBrQFrfAZYtDzEowMBhbVT+1eNi
smDQAlQrUftq9aTukjANBgkqhkiG9w0BAQsFAAOCAQEAVIjTaR07nfaqlSIpcPZR
wa5caGT8SYSgDZbgF3J5G0nTckFfwSPNyDw75uTJJawbIxQHx0SZtVWa7ZIdw/5I
fEjXKtjQpxXrrV9U/9DoRZ5eQHySuUHZeYvKnAHxjT6Dn/k3VcWeXCEbbM6ERvj1
MeNdLiB9+pWDh60xbiVhqTXUT9XAU5kG3zGTb6IjoqM+9378KHm1AL0TCpD1zqGF
XAW0e0au6PS/w1k2tpZH9cTin0ROlpD11T/59Cz7XRMomjt+YltKDmtcHwgUwwBf
FTOTppApp926PAMYUqAEcUa2fvfddSYUll7aOtaqVAgtPHDSdPyRwHV/NHPjmae8
IQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCvy4b/DP4TO9SEFJUVB
G9V9Kz+/GKYbfx8CbdQbcKZ/FlQ2cG6tWBHjhZ3Pf3GdgXiXc5juX3kbL4o5hOCa
TpqUF4HoRGylbemqsYHFD0StsL559KuA1D3AWWUz8Xs5VnOHVEaLiHczurqgaLUg
wJ6SHgAGS5j9XM9kCSqgLV/vO8wB9yf9yK6d7ovbuqqPOxihY47S0vka+jZRSjIj
AGMVGeUgFS7uhReqQhCTJpR3ZBd3P7RkNO49fcN9XYxiIucwuFvl7nSKi8TbBtao
9EwqVTlZ4KKLJTwr/c+RZyWS6bbtSk/w6yIPq22NBA7H4Z8d5CQeStu1qcDVvzVM
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30681981920062593685102573607251103709
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Japan Registry Services Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JPRS Organization Validation Authority - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-04 07:52:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-31 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OKINAWA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'URASOE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OCC Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Global Business Strategy Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wm1.southernx.ne.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22744566833769169056353807881214797944025451742475483965468143996549133146177853900771713682089489206090657132575538103237895177557174225539976720569848047005988068003329952252474457693352297502549012967157585095715835510697213449358806669184016532895628946617485211199290773887215413913321069628984874644956500354185121778854203770982867211315061913470126603451045518538519148281595763069374528033009955869451982221669517062973232837548053391411154060081501287052054048333680132769828804939110485336848736740925863298194170129528948220522645258408615072522403424668243758270250255271403622960921254402849341806300277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d535aec4d4326e8029152ad4001cb4ed23b92b38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo.pubcert.jprs.jp/sppca/jprs/ovca_g4/JPRS_OVCA_G4_DER.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ov.g4.ocsp.pubcert.jprs.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm1.southernx.ne.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53827.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://jprs.jp/pubcert/info/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo.pubcert.jprs.jp/sppca/jprs/ovca_g4/fullcrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53ed5e1eaa19cd1870002e8c396c0d694f57efa9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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