st-eq.cue-monitor.jp

- INTAGE Inc. -

Issued by SECOM Passport for Web SR 3.0 CA

About this certificate

This digital certificate with serial number 6d:8e:2f:84:ed:66:27:43 was issued on by SECOM Trust Systems CO.,LTD..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

INTAGE Inc.

Organization: INTAGE Inc.
Organization unit: research1
State / Province: Tokyo
Locality: Chiyoda-ku
Country: JP

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:8e:2f:84:ed:66:27:43
Serial Number (int): 7894299444792141635
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 77:33:c9:ef:28:c2:fe:ba:ae:ea:3b:52:51:10:f8:74:ec:a7:eb:e2
AuthorityKeyId: cb:ef:3d:ef:83:74:a1:a8:42:f0:3b:40:36:fa:6d:82:94:a9:27:36

Fingerprint (sha1): 90:f7:04:77:4d:0a:b6:41:d2:bc:2c:bf:36:60:11:ed:bc:a3:ab:7c
Fingerprint (sha256): e7:6f:87:89:0f:6b:3b:1e:0a:a3:7f:84:c6:4c:77:81:63:b9:40:ed:0a:32:78:99:89:a1:09:07:e2:05:4b:b2


Revocation information

OCSP Server: http://sr30.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/fullcrl2.crl

Check the revocation status for certificate st-eq.cue-monitor.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for st-eq.cue-monitor.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

st-eq.cue-monitor.jp

Other certificates including the domain name cue-monitor.jp

(limited to 100 certificates)
mb.cue-monitor.jp
mypage.cue-monitor.jp
www.cue-monitor.jp
st-eq.cue-monitor.jp
www.cue-monitor.jp
cuemot.cue-monitor.jp
sv.cue-monitor.jp
*.cue-monitor.jp
sv.cue-monitor.jp
nr.cue-monitor.jp
www.cue-monitor.jp
*.cue-monitor.jp
m.cue-monitor.jp
sv.cue-monitor.jp
st-eq.cue-monitor.jp
*.cue-monitor.jp
www.cue-monitor.jp
cuemot.cue-monitor.jp
nr.cue-monitor.jp
nr.cue-monitor.jp
cuemot.cue-monitor.jp
*.cue-monitor.jp
*.cue-monitor.jp
api.cue-monitor.jp
eq.cue-monitor.jp
www.cue-monitor.jp
cuemot.cue-monitor.jp
ecsurvey.cue-monitor.jp
enq-mps.cue-monitor.jp
enq.cue-monitor.jp
*.cue-monitor.jp
*.cue-monitor.jp
*.cue-monitor.jp
*.cue-monitor.jp
eq.cue-monitor.jp
st-sv.cue-monitor.jp
www.cue-monitor.jp
enq-mps-st.cue-monitor.jp
mypage.cue-monitor.jp
api.cue-monitor.jp
mb.cue-monitor.jp
cuemot.cue-monitor.jp
cuemot.cue-monitor.jp
cuemot.cue-monitor.jp
*.cue-monitor.jp
mypage.cue-monitor.jp
cauth.cue-monitor.jp
nr.cue-monitor.jp
sv.cue-monitor.jp
eq.cue-monitor.jp
myreco-webservice.cue-monitor.jp
st-eq.cue-monitor.jp
cuemot.cue-monitor.jp
*.cue-monitor.jp
st-eq.cue-monitor.jp
cuemot.cue-monitor.jp
nr.cue-monitor.jp

Certificate

The complete raw certificate details for st-eq.cue-monitor.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIIbY4vhO1mJ0MwDQYJKoZIhvcNAQELBQAwXzELMAkGA1UE
BhMCSlAxJTAjBgNVBAoTHFNFQ09NIFRydXN0IFN5c3RlbXMgQ08uLExURC4xKTAn
BgNVBAMTIFNFQ09NIFBhc3Nwb3J0IGZvciBXZWIgU1IgMy4wIENBMB4XDTE4MDkw
NzA3NTgzM1oXDTIwMTAwODE0NTk1OVowezELMAkGA1UEBhMCSlAxDjAMBgNVBAgT
BVRva3lvMRMwEQYDVQQHEwpDaGl5b2RhLWt1MRQwEgYDVQQKEwtJTlRBR0UgSW5j
LjESMBAGA1UECxMJcmVzZWFyY2gxMR0wGwYDVQQDExRzdC1lcS5jdWUtbW9uaXRv
ci5qcDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMRzDaT/qBAbpucL
lK0U5xNKo5y9/IPPzWcJ4gLKQNIyx2Qbu/lXqtMCwdPa1F3NF07MrBr1F/EnD/SC
7n7o1miEE8pGzJsrVshHqq6AMRVVSCUaDxI3LynZnaFj6HM+c2e1kOqbrZyfN/VF
37quuYgIphjRWIRVtNdd37o7f6wtVpElnsi+IfsvbwxFS5JpZiXXvnysWqPR2OV5
jB6OzqdptFZhW6UXpQ2CS3CMqA0dIPO0taM+kRbxpBw8sN0+zgLJz4drUul8R/BU
FQPNuTol9zl0We03CGKtPBM2Ld2ZLp5irnjjRO6QTCKcs1LvHk9Q2CSP5Cpm5PZd
QLE1L1ECAwEAAaOCAvowggL2MB8GA1UdIwQYMBaAFMvvPe+DdKGoQvA7QDb6bYKU
qSc2MDsGCCsGAQUFBwEBBC8wLTArBggrBgEFBQcwAYYfaHR0cDovL3NyMzAub2Nz
cC5zZWNvbXRydXN0Lm5ldDAfBgNVHREEGDAWghRzdC1lcS5jdWUtbW9uaXRvci5q
cDBhBgNVHSAEWjBYMEwGCiqDCIybG2SFbwEwPjA8BggrBgEFBQcCARYwaHR0cHM6
Ly9yZXBvMS5zZWNvbXRydXN0Lm5ldC9zcGNwcC9wZncvcGZ3c3IzY2EvMAgGBmeB
DAECAjATBgNVHSUEDDAKBggrBgEFBQcDATBMBgNVHR8ERTBDMEGgP6A9hjtodHRw
Oi8vcmVwbzEuc2Vjb210cnVzdC5uZXQvc3BjcHAvcGZ3L3Bmd3NyM2NhL2Z1bGxj
cmwyLmNybDAdBgNVHQ4EFgQUdzPJ7yjC/rqu6jtSURD4dOyn6+IwDgYDVR0PAQH/
BAQDAgWgMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDd6x0reg1PpiCLga2B
aHB+Lo6dAdVciI09EcTNtuy+zAAAAWWzE1iKAAAEAwBHMEUCIFnonFYuLj23Ckhi
2PMUEmZhD77uLQq1Z1MAPV+hRIzPAiEA7+s19PmkeF6lcBrE3uJ+2SKUqpsDeDSC
5exq9StV0ekAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWWz
E1z6AAAEAwBHMEUCIDofV8pV0GKTQTbTcV3KDjo8GzsbOQjrfqy4TccOocMHAiEA
yke8YsGsr9VogP6F+4qd2dsI4z/OwGoYEWSTT7jLGZoAdgDuS723dc5guuFCaR+r
4Z5mow9+X7By2IMAxHuJeqj9ywAAAWWzE2SmAAAEAwBHMEUCICeqOUXc3Pz3uYAa
8bxeJLiR3l7wGqaODm3IeJQO1RWzAiEAgs6dSWfjHS4CrJDRRcyfkDj8uy39dpcJ
+CG4Q+vGzpswDQYJKoZIhvcNAQELBQADggEBABj8zHDL7EG5J4/HuR2GJI3IBY7J
z9VrSbP0q5rL9ntEBb2D9fN7L8dRxrwgrSyR7NPrX4SGoFAJ5fY5VhJiaAXIxL7z
HH0uKHDBwuGyjTrOQs1AJqqy34dmUPdyxLo6XWp+Sco0jm03gDFjKShhYVzyS1+d
cm4lDM/rypebqCV/8NXGxxznyPP5vfPTMjRklXSgH/U9p/yOrFmslE3wTTQaYfFv
DKKzUJ0ItUYsv5W6FtanT5rsGn4vwNdAuWWWaMCNgIYjSO+0mLyiKQ0HXOucCzfo
td4NqcYUrWyHECeoS0fv3Ftk893YERPoxIosyrKuT7BH+Fx/THxeFKDuooI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHMNpP+oEBum5wuUrRTn
E0qjnL38g8/NZwniAspA0jLHZBu7+Veq0wLB09rUXc0XTsysGvUX8ScP9ILufujW
aIQTykbMmytWyEeqroAxFVVIJRoPEjcvKdmdoWPocz5zZ7WQ6putnJ839UXfuq65
iAimGNFYhFW0113fujt/rC1WkSWeyL4h+y9vDEVLkmlmJde+fKxao9HY5XmMHo7O
p2m0VmFbpRelDYJLcIyoDR0g87S1oz6RFvGkHDyw3T7OAsnPh2tS6XxH8FQVA825
OiX3OXRZ7TcIYq08EzYt3ZkunmKueONE7pBMIpyzUu8eT1DYJI/kKmbk9l1AsTUv
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7894299444792141635
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Passport for Web SR 3.0 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-07 07:58:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-08 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chiyoda-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'INTAGE Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'research1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'st-eq.cue-monitor.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24799442669588275936369200518306690249911299703524901418645631144807497959977319124741208091904546907869046939261384415556175549835727956839674273362623121885453622836271952856407930046855136220439763469753532747261415565513121667906095021253116295852249225743904775821517746047470702837844519989747783760584736454336117779386634075496800512479531894173970328259740519720486731528216045619610935902152533196461095528037312281668035055196648748402796212284979445329733093476451943957502137131851703526754622208035641315234603742553851652042713851785314528856251013051264836820511115058801738118589204004460524618461009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cbef3def8374a1a842f03b4036fa6d8294a92736
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr30.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-eq.cue-monitor.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.100.751.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/spcpp/pfw/pfwsr3ca/fullcrl2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7733c9ef28c2febaaeea3b525110f874eca7ebe2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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