fhw2xavwmup02.dmz.fhwa.dot.gov

- Federal Highway Administration -

Issued by Symantec Class 3 Secure Server SHA256 SSL CA

About this certificate

This digital certificate with serial number 75:19:bc:80:62:07:19:da:14:01:da:c8:5d:82:b0:89 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Federal Highway Administration

Organization: Federal Highway Administration
Organization unit: FHWA
State / Province: District of Columbia
Locality: Washington
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 75:19:bc:80:62:07:19:da:14:01:da:c8:5d:82:b0:89
Serial Number (int): 155653306192846931685556675376794742921
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1

Fingerprint (sha1): df:35:2f:5c:52:de:62:db:91:96:73:d3:00:65:b9:70:6d:16:ba:a9
Fingerprint (sha256): 02:3f:91:e4:86:67:53:0e:18:90:6b:1c:e4:ad:e5:b8:0d:ad:94:96:86:de:8b:b4:9c:af:48:55:78:d8:87:f8

Issuing Certificate URL: http://sg.symcb.com/sg.crt

Revocation information

OCSP Server: http://sg.symcd.com
CRL Distribution Point: http://sg.symcb.com/sg.crl

Check the revocation status for certificate fhw2xavwmup02.dmz.fhwa.dot.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fhw2xavwmup02.dmz.fhwa.dot.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fhw2xavwmup02.dmz.fhwa.dot.gov

Other certificates including the domain name dot.gov

(limited to 100 certificates)
www.psp.fmcsa.dot.gov
www.dot.gov
acquia-sites.com
*.phmsa.dot.gov
vsa.volpe.dot.gov
marad.dot.gov
acquia-sites.com
www.standards.its.dot.gov
origin-www-esv.nhtsa.dot.gov
*.volpe.dot.gov
faces.fta.dot.gov
1c3rs.rita.dot.gov
itsdpro.ornl.gov
facesuat.fta.dot.gov
its2010.ornl.gov
www.faa.gov
ftp.nhtsa.dot.gov
rsac.fra.dot.gov
fl17vgisweb.hfl17do1.wfl.fld.fhwa.dot.gov
marapps.dot.gov
ask.fmcsa.dot.gov
crashstats.nhtsa.dot.gov
TSMART.VOLPE.DOT.GOV
www.dot.gov
acquia-sites.com
mcmis.fmcsa.dot.gov
its2010.ornl.gov
safeconsole.volpe.dot.gov
nhtsa.dot.gov
acquia-sites.com
NHTHQNF5B-M.nhtsa.dot.gov
fhw2xavwmup02.dmz.fhwa.dot.gov
pmars.marad.dot.gov
acquia-sites.com
dotcmsreporting.dot.gov
oetcrt.dot.gov
itsassets.ornl.gov
acquia-sites.com
acquia-sites.com
safercar.gov
enepa.fhwa.dot.gov
rspcb.safety.fhwa.dot.gov
itsassets.ornl.gov
marapps.dot.gov
www-odi.nhtsa.dot.gov
PoolSFC.dot.gov
fhw1xavwmup01.dmz.fhwa.dot.gov
flh.fhwa.dot.gov
swim.volpe.dot.gov
Access.dot.gov
www.dot.gov
www-nass.nhtsa.dot.gov
itsassets.ornl.gov
ftp.nhtsa.dot.gov
its.dot.gov
ftajira.ad.dot.gov
sphome.volpe.dot.gov
crashstats.nhtsa.dot.gov
www.environment.fhwa.dot.gov
scm.nhtsa.dot.gov
www.faa.gov
www.dot.gov
test.cdlis.dot.gov
elmsstaging.dot.gov
eas.dot.gov
crashviewer.nhtsa.dot.gov
PoolSFC.dot.gov
eas.dot.gov
transportation.gov
safety.fhwa.dot.gov
nhthqnlas865.ad.dot.gov
nhthqnwas603.ad.dot.gov
sftp.phmsa.dot.gov
score.fmcsa.dot.gov
eas.dot.gov
origin-www-odi.nhtsa.dot.gov
www.npms.phmsa.dot.gov
slfts.fhwa.dot.gov
CSAM.DOT.GOV
email.dot.gov
itsdpro.ornl.gov
www.dot.gov
fhfl15gisweb.flhd.fhwa.dot.gov
*.phmsa.dot.gov
VOLPEPHONEMGR.VOLPE.DOT.GOV
mscs.marad.dot.gov
faces.fta.dot.gov
facesdev5.fta.dot.gov
dtrack2013.ornl.gov
sra.volpe.dot.gov
hostedsites.volpe.dot.gov
smtp10.dot.gov
*.infopave.fhwa.dot.gov
www.faa.gov
nhthqnwas813.ad.dot.gov
transitapp.ost.dot.gov
elmsstaging.dot.gov
acquia-sites.com
nhthqnlas803.ad.dot.gov
rspcb.safety.fhwa.dot.gov

Certificate

The complete raw certificate details for fhw2xavwmup02.dmz.fhwa.dot.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcNYR7mwc9oxMSOoEQ18
+ci243yhCoypltEVMsT/Ac5/Oixk32JV/bbTTr+4qdvnl3PTxDpmmIt256ygTh/f
nuJIA4P2rMQ1bBq6F1iE7FAnDHcj/lu0dyWqemd+3AaENLSzCq4Fcea/gMt3W9xd
PiHpq8G0wIA6gxScai3u9LgtLl7KwZMKxac75gOmEcRcWIjRNo/Es0Cu/fGn0gX0
rgWergOn3K34wiub2PXiuatSriaoSoqE/ojAJgVNPbUYw3jhN8l4WqLIN5BR0RYL
re7pluEqhpG8c9w7OSfoWW1Ts5Ac2i++CMHCs7Y6Tx+3hini4BDYeMk4+clb33j7
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 155653306192846931685556675376794742921
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Federal Highway Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'FHWA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'fhw2xavwmup02.dmz.fhwa.dot.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22945461331849627119117748288397429425705757051776352528426915309218752745701721774210000932203825566992555576510032168632071073930040119870617766513616886914513535773091156965864006353778335499737383430842245181682347836213229680951291422582250100716874155978487884960246716507264337193495883836424718501345484782074721531843244535373401091841560890175297380038236255147275905845400926626763148931519753333112913911836491199137102148209683894561881734374802583071481691394986580572663246960264065278223756248096392504225609231009809561799174513787950636246591108432495280039277208503882164063700455399182416100260831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhw2xavwmup02.dmz.fhwa.dot.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015b9b8c71b30000040300473045022100bf5c518b63037ea413ea72de80beaac07482615de7e01ced0061d8d013903563022050691994110c46941253f11b85a80c7c183fa7e28edd64f41562f05dd528175a007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015b9b8c71de0000040300473045022100ff00410b62e0ce9ff2d57fee266b0485646201004c7edf25c29e74b70412cf00022045afcefcc00fc8f123a65871f3bf769d0015d56b73f89cff2c3da39b4d7027ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a6a1c505a6beae31e8b8f715d9b9d901aa3f9a540a3aaccb3520c90eb5cebbb63be9e2a5072cac50124fa62b8920191fdfba9d1b104be44d6ad6e9bbc581d0a4d8066ddf59d656f63c67e7eedd6087fa4dd452761684769a630f0dce1109476d18c2aa741ab9ca66f1076e0e11ad67effcbef96aab550ebb142e200ad937b69f3d0697c0adffdcc0d38e88c257cb8d3fcdec05e8f4d855edbb6add2b3079f832ff6e299883e4d870817fd11f84902902002f441851fad142c2c54ef3c42b4ac2f1d8c03040779165621cab1853e101338cfd5492435c6911f9d1c4e10384278268df3ecc1be601ae2c1c8774dd1c5d5d97589d4c920524a1855dbfbd63715eaa