wwwfix.ctslink.com

- Wells Fargo -

Issued by WellsSecure Certification Authority 01 G2

About this certificate

This digital certificate with serial number 25:98:61:37:00:00:00:00:19:a9 was issued on by Wells Fargo.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wells Fargo

Organization: Wells Fargo
Organization unit: TMS-ADCS
State / Province: California
Locality: San Francisco
Country: US

Wells Fargo

Organization: Wells Fargo
Organization unit: WellsSecure Certification Authorities
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 25:98:61:37:00:00:00:00:19:a9
Serial Number (int): 177538470033126122854825
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: 9e:31:08:54:31:60:c8:ad:0d:39:2e:25:b4:76:8a:8e:6b:5d:c5:6b
AuthorityKeyId: 59:9a:01:e5:e7:c3:e6:f3:25:78:f1:5a:d9:a8:e9:f1:72:94:8e:30

Fingerprint (sha1): 62:4c:29:26:3e:ba:b9:a6:0f:7a:be:76:cc:e3:79:f0:86:76:30:4b
Fingerprint (sha256): 00:9e:5f:47:71:18:ce:7e:67:93:f7:8b:cb:73:e9:b5:73:d1:cc:e3:83:e9:37:35:e3:7e:b9:f2:aa:83:29:d6

Issuing Certificate URL: http://crl.pki.wellsfargo.com/wf_wsca_01_G2.crt

Revocation information

OCSP Server: http://validator.wellsfargo.com/
CRL Distribution Point: http://crl.pki.wellsfargo.com/wsca01G2.crl

Check the revocation status for certificate wwwfix.ctslink.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wwwfix.ctslink.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wwwfix.ctslink.com
ctslink-tmpe-fix.wellsfargo.com
wwwfix.securitieslink.com
wwwfix.cdolink.com
crmfix.wellsfargo.com

Other certificates including the domain name ctslink.com

(limited to 100 certificates)
wwwfix.ctslink.com
fix.accesswca.com
www.accesswca.com
fs.accesswca.com
wellspauat.wellsfargo.com
wellspafix.wellsfargo.com
fix.accesswca.com
wellspauat.wellsfargo.com
directfix.ctslink.com
fix.accesswca.com
fsuat.accesswca.com
fs.accesswca.com
wellspafix.wellsfargo.com
direct.ctslink.com
fsfix.accesswca.com
www.accesswca.com
www.ctslink.com
realstp-u.wellsfargo.com
www.ctslink.com
www.accesswca.com
www.ctslink.com
directfix.ctslink.com
direct.ctslink.com
direct.ctslink.com
direct.ctslink.com
www.accesswca.com
fs.accesswca.com
direct.ctslink.com
fs.accesswca.com
www.ctslink.com
wellspauat.wellsfargo.com
uat.accesswca.com
www.ctslink.com
fix.accesswca.com
www.ctslink.com
www.accesswca.com
direct.ctslink.com
www.accesswca.com
fs.accesswca.com
uat.accesswca.com
fs.accesswca.com
wwwfix.ctslink.com
www.ctslink.com
fs.accesswca.com
www.accesswca.com
fsfix.accesswca.com
fs.accesswca.com
fsfix.accesswca.com
www.ctslink.com
www.ctslink.com
www.ctslink.com
fsuat.accesswca.com
fsfix.accesswca.com
wellspafix.wellsfargo.com
directfix.ctslink.com
fix.accesswca.com
direct.ctslink.com
realstp-u.wellsfargo.com
wwwfix.ctslink.com
direct.ctslink.com
www.ctslink.com
www.ctslink.com
www.accesswca.com
wellspa.wellsfargo.com
fs.accesswca.com
ctslink.computershare.com
fix.accesswca.com
www.accesswca.com
fsfix.accesswca.com
direct.ctslink.com
www.ctslink.com
www.ctslink.com
fsfix.accesswca.com
directfix.ctslink.com
fsfix.accesswca.com
fix.accesswca.com
directfix.ctslink.com
fs.accesswca.com
directfix.ctslink.com
wellspafix.wellsfargo.com
fsuat.accesswca.com
fix.accesswca.com
fs.accesswca.com
ctslinkuat.computershare.com
directfix.ctslink.com
fix.accesswca.com
wellspa.wellsfargo.com
fsuat.accesswca.com
fsuat.accesswca.com
fix.accesswca.com
uat.accesswca.com
wellspa.wellsfargo.com
www.ctslink.com
direct.ctslink.com
fix.accesswca.com
uat.accesswca.com
wwwfix.ctslink.com
directfix.ctslink.com
ctslinkuat.computershare.com
www.accesswca.com

Certificate

The complete raw certificate details for wwwfix.ctslink.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBOUFFOfxiqLDmY9xij3
LJ4Kkhv3ixbBW7OOFDNBcHO2fHIp8kjCAR3imnjP1GjrGGlpYyeZ3Yzqr12xCcdw
Fv7az6H9kbL2xINN4hcp/yvC25Mac33L8Vh0wZRGB7IiTbnO2bD1lUiidnbQYSgO
s98aeSusZQO1ZZQwHc0aPbrG/1a+h/Sjh9m9gGi2xyXNhSAB44dN3998OpJYYl0A
q2RHVaSunD983gLXD2pLG1WnwVPvqgxWgzxME+/pRpC5UCzJ0uwHDbXqLEdQnvmW
QStl8werLXKj6rvSwTkcPY4T7GbP2GH5m70yO3oAQ7tcSkHGrk5suLDfNSv8Oghb
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 177538470033126122854825
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WellsSecure Certification Authorities'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WellsSecure Certification Authority 01 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-30 09:19:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-29 09:19:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TMS-ADCS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wwwfix.ctslink.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24247409039688362410474961615165110737415501891718624113276994411542813140010378623040598172538699828262128558130050881263347398371327494995295700501692790607412124236969898488868057359301882873839756810733562483947987198485928382198047529615189164343495579839146106590417478633869168797880376734928763972360484906083583046973132480755102785638094058657060364208941686793269190685450821244925657117884774615461011593091178963756382920261486553447263281856192741078711920951825360636406348519780454218293027321428162083774943572930631387415203960232566527474676483393573303323290460484112416753200980549378225885174591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwfix.ctslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctslink-tmpe-fix.wellsfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwfix.securitieslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwfix.cdolink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmfix.wellsfargo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e3108543160c8ad0d392e25b4768a8e6b5dc56b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 599a01e5e7c3e6f32578f15ad9a8e9f172948e30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.wellsfargo.com/wsca01G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.wellsfargo.com/wf_wsca_01_G2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://validator.wellsfargo.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114171.500.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wellsfargo.com/cp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114171.500.0.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.wellsfargo.com/repository'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0064da34b9ed9a46a8237e9ea8ad6570b8e32a51902cfd9a53f0910df84432a2cb1808702cb02e138fd4c70a489b16f08c870eb6ca9519720ddd2e6a15f1713f3c2b8a82ff0c9ee99a1cc6a704f2270c1f5a43298a0fc66b9af0644a4e4430333d78bea33ec382d1f9b484dc5090f1e820d44c907537e7a78b969ea2bc422d0b4e5b8977c9ea1a9fa3f88e83b59dff1db6c29b7660b3ab4bf0ae8e281910b5a9be0af0ebdf2780caeb061f62a3d5986939b49e3143db03826d278f91d471c49a3696f938d70a8de6e0b98007985399ef4355db65d19918050b664e3dd0cb58874840995512878ca2f1ea0bd698c19bd8718f4339536fe9fffe81670d85c515d556