data-h2t-el.ise.fraunhofer.de

- Fraunhofer -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number b1:72:76:e7:15:9a:5a:66:22:82:69:a4:1c:b6:ca:67 was issued on by GEANT Vereniging.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Fraunhofer

Organization: Fraunhofer
State / Province: Bayern
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): b1:72:76:e7:15:9a:5a:66:22:82:69:a4:1c:b6:ca:67
Serial Number (int): 235867688728527638225305255355864238695
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 05:81:f7:d9:e2:29:6e:ab:b6:f3:36:2f:77:e4:e5:e3:6b:fc:ca:b9
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): f4:7b:55:f9:4c:0a:ca:85:99:22:f1:85:37:b8:22:aa:2f:4e:cf:35
Fingerprint (sha256): 01:38:26:4b:a5:11:73:25:f5:3a:3b:40:d6:37:04:3f:fe:58:6f:3d:ce:86:15:85:3c:c7:7a:a2:b9:1a:38:14

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate data-h2t-el.ise.fraunhofer.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for data-h2t-el.ise.fraunhofer.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

data-h2t-el.ise.fraunhofer.de
data-h2t-el.ise.fhg.de
www.data-h2t-el.ise.fhg.de
www.data-h2t-el.ise.fraunhofer.de

Other certificates including the domain name fraunhofer.de

(limited to 100 certificates)
vhfraqototcs03.hec.fraunhofer.de
guest.mevis.fraunhofer.de
hmi-umfrage.iao.fraunhofer.de
www.iitb.fraunhofer.de
igb-bitwarden.igb.fraunhofer.de
wnlab.hhi.fraunhofer.de
webmail.fit.fraunhofer.de
nm-service.iais.fraunhofer.de
exilligare.iao.fraunhofer.de
bscw.izb.fraunhofer.de
applik-idz08.iee.fraunhofer.de
immufw-m.imm.fraunhofer.de
social.izm.fraunhofer.de
vceg.hhi.fraunhofer.de
vpn-gaeste-hh.ime.fraunhofer.de
netman.ipk.fraunhofer.de
www.umsicht-suro.fraunhofer.de
llcs-vi2.sit.fraunhofer.de
netsight.ise.fraunhofer.de
guest-lan2.zv.fraunhofer.de
vergabe-mks180.iese.fraunhofer.de
maverick.iao.fraunhofer.de
www.vision.fraunhofer.de
spitzentreffen.edu.cell.vfk.fraunhofer.de
kaa.iais.fraunhofer.de
vpn.fep.fraunhofer.de
iwu.crm.fraunhofer.de
tls1.ws.fraunhofer.de
filedirector.imw.fraunhofer.de
blockchain-europe.iml.fraunhofer.de
sharepoint.sit.fraunhofer.de
muc-gv-dna.aisec.fraunhofer.de
issues.mevis.fraunhofer.de
ksi.scai.fraunhofer.de
iwes-spoke-pri.intra.fraunhofer.de
pwsafe01.iis.fhg.de
applik-idz21.iee.fraunhofer.de
vpn.idmt.fraunhofer.de
vdi.izfp.fraunhofer.de
vindex.fit.fraunhofer.de
ivv-dd.list.fraunhofer.de
nettools.igd.fraunhofer.de
cq-publish2.ws.fraunhofer.de
projekte-lfs.iff.fraunhofer.de
ipa-uipath140.ipa.fraunhofer.de
humit.fit.fraunhofer.de
iap.list.fraunhofer.de
listsrv03.fraunhofer.de
status.arb.fhr.fraunhofer.de
vhfraqototaw01.hec.fraunhofer.de
keepass.iosb.fraunhofer.de
xcom.isst.fraunhofer.de
mellon.hhi.fraunhofer.de
maestral.fit.fraunhofer.de
cryptshare.fraunhofer.de
zerobin.sit.fraunhofer.de
aem-www.iese.fraunhofer.de
wqtool.igd.fraunhofer.de
vhfraqototwslb.hec.fraunhofer.de
mailn2.iis.fhg.de
vgw.iis.fraunhofer.de
subdepot.mevis.fraunhofer.de
wpa.emi.fraunhofer.de
www.isc.fraunhofer.de
blockchainlab-git.ipk.fraunhofer.de
www.aachen.fraunhofer.de
test.servicedesk.fraunhofer.de
gordian.ipa.fraunhofer.de
ildmz55.idmt.fhg.de
talentix.iml.fraunhofer.de
exim2.iao.fraunhofer.de
pathme.scai.fraunhofer.de
www.subi2ma.fraunhofer.de
vpn-gaeste.iosb-ast.fraunhofer.de
fener-webport.ise.fraunhofer.de
upload.c.fraunhofer.de
h2t.intern.ise.fraunhofer.de
ldap.ibmt.fraunhofer.de
piwik.ipk.fraunhofer.de
gitlab-i.eas.iis.fraunhofer.de
reaalmarketplace.universaal.info
kub001.iao.fraunhofer.de
download.scai.fraunhofer.de
openproject.sit.fraunhofer.de
helpdesk.imw.fraunhofer.de
data-h2t-el.ise.fraunhofer.de
ipib.ci.moez.fraunhofer.de
vpn.s.c.fraunhofer.de
vpn.ivi.fraunhofer.de
sand2.fokus.fraunhofer.de
diasim.igd-r.fraunhofer.de
miraculix-dmz.ivi.fraunhofer.de
portal.moez.fraunhofer.de
vpn.iem.fraunhofer.de
remote3.fraunhofer.de
zf-prognose.iao.fraunhofer.de
dynamo.sit.fraunhofer.de
dci2.easw2k.eas.iis.fraunhofer.de
support.igd-r.fraunhofer.de
tfs-extern.ibp.fraunhofer.de

Certificate

The complete raw certificate details for data-h2t-el.ise.fraunhofer.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwQPivnVlxUrAXOBuez5
5Rq/uL0ciKdWDp+dXF/GkWdNdng9ceLX1g5LYlRzR7azMSDPjwo+2u321beAJoJF
L1SylwBpD/88VhcvYyQOByPXmOd/ew5ZFAp+2x4Jm9l5MYFPhMpwZWIxomCvuecG
BAU5BSKQpzwl14H1lOnuz2rhjTmsUYCJKwQILxcReihHx6IpNGBx1tH2uc899frp
6sn953ICnVjLNTM9/AWYqwzunIm/X1VWeLkhUgMFEmd9abSBQTHjmW7wKdJe1bzy
lkytDXewavmVV6L6l1ridZAxxWu+m21CRQl7gWIqw7NI7gL+e4PcIg4miyhIQ/5l
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 235867688728527638225305255355864238695
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fraunhofer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'data-h2t-el.ise.fraunhofer.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24113518661396191823194096188953719614939508513254335622986227739498885430157977524077951661985214632427069186399072437655800555095675989522173072420623893748491671238749186898362448356891207814932834031979836289433595826258406040192122216011302512729985253989224779103026159313885254018283721992809489422180900728633290085010047398495417203660136388920136934931038628805081772921072213359642479488683562099948805352102255011733537468948248244514995797912492800838217771950807612806120971478607651608970212425865506942163586415557770676260487549330004254132863734091840647376481921733174762873751276319601167788041481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0581f7d9e2296eabb6f3362f77e4e5e36bfccab9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-h2t-el.ise.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-h2t-el.ise.fhg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.data-h2t-el.ise.fhg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.data-h2t-el.ise.fraunhofer.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		002f39c81ecba705cbe2be2f5648db05b3afa9f3587f5fc9c6d91d64f270df612c0b50b6e13ffea922b8b7b04eda028c558be8f1c4ac9a9583715024697d9bb47339c5d96f5f3f5c35419f995f314820faf40b85de7f7c5fd45563cb4dbe903b53fba2ab04f21deba81ecdaa6680d10a1d56783d9e00e6eee6ea01091ea7b7678f04e1ab47bd7a6d64502b50c070d5b72fd2cfb3061b080dd15be649787d9e64b8baf7e8fccd94dc796a1a8c38e41c7008f5c7b0860f8e137d817e9f72ffce5d301b17eee2bd34ecf6c38dd16c2588077705ae6b4afc512629afa053c6accec76119ed13e91cdaee6bac6257eae26eddf612464e8cde7103600e1926bdb4ad5716042e7befe8d029347e32195f96573c0c4bdd24d3910517c231555ff188c1579af1a111f8c29edfaffceb8f6ae83a151a665fe46e9a39f8900efd305b5f48f022162c1ceeb470edf7eb0630365ef77edcde919d9475628b796cc4d0de6459e93f3fb4ceaddc6d87bb4c21d6929427975a8a39faf3f3bd3dd537d1d8a5052733a87cb1eaa8870f4614b2565e1c9697fd6dac521b65c7da4a763df3642e7d1102faae9994f38f83446c3f2fb522dcab1364d5cd9981c16c7ee4d45d657ea15b1241db4d2386cf6f86e91a1d563d49ab8bf94fab75902a5ac30bb4edacf8b5797c646853517de020ddde3ab559f95cb77f0b51e206c0936dfe492a7ef319fa5fbe86