design.gorgias.com
Issued by R3
About this certificate
This digital certificate with serial number 04:3b:be:79:53:b4:c3:71:67:a4:86:8b:6c:93:8a:f1:02:35 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=design.gorgias.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:3b:be:79:53:b4:c3:71:67:a4:86:8b:6c:93:8a:f1:02:35Serial Number (int): 368778986660256925691457188801737531654709
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 59:5b:56:4d:37:70:01:38:36:9e:e7:ab:c4:d2:b8:a4:e0:b0:25:0a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 34:8c:d1:57:50:5b:b4:91:1c:eb:13:05:23:ae:1e:fc:8b:6a:77:05
Fingerprint (sha256): 06:51:c5:b9:b1:71:07:44:ab:1b:48:18:35:82:02:04:55:e1:13:68:20:75:91:fa:ac:70:79:96:b0:9e:a6:90
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate design.gorgias.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for design.gorgias.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
design.gorgias.com
Other certificates including the domain name gorgias.com
(limited to 100 certificates)
agencies.gorgias.com
bdr.gorgias.com
community.gorgias.com
gorgias.com
marketplace.partnerpage.io
updates.gorgias.com
conversations.gorgias.com
gorgias.com
*.marketplacebydesign.site
sni157250.cloudflaressl.com
docs.gorgias.com
wwww.gorgias.com
updates.gorgias.com
woocommerce.service.gorgias.com
docs.gorgias.com
migration.gorgias.com
design.gorgias.com
updates.gorgias.com
design.gorgias.com
woocommerce.service.gorgias.com
pingdom-check.acmeapi.co
bdr.gorgias.com
marketplace.partnerpage.io
conversations.gorgias.com
bdr.gorgias.com
updates.gorgias.com
gorgias.com
gorgias.com
academy.gorgias.com
*.marketplacebydesign.site
design.gorgias.com
marketplace.partnerpage.io
gorgias.com
wwww.gorgias.com
sni157250.cloudflaressl.com
gorgias.com
gorgias.com
sni157250.cloudflaressl.com
gorgias.com
design.gorgias.com
gorgias.com
marketplace.partnerpage.io
sni157250.cloudflaressl.com
events-ingestion.services.gorgias.com
gorgias.com
wwww.gorgias.com
*.openchannel.site
gorgias.com
wwww.gorgias.com
wwww.gorgias.com
sni157250.cloudflaressl.com
gorgias.com
www.gorgias.com
gorgias.com
gorgias.com
billing.gorgias.com
*.marketplacebydesign.site
pingdom-check.acmeapi.co
pingdom-check.acmeapi.co
sni157250.cloudflaressl.com
gorgias.com
gorgias.com
gorgias.com
sni157250.cloudflaressl.com
gorgias.com
shopper.gorgias.com
sni157250.cloudflaressl.com
conversations.gorgias.com
wwww.gorgias.com
sni157250.cloudflaressl.com
sni157250.cloudflaressl.com
pingdom-check.acmeapi.co
pingdom-check.acmeapi.co
gorgias.com
gorgias.com
agency-directory.teikametrics.com
*.marketplacebydesign.site
events-ingestion.services.gorgias.com
sni157250.cloudflaressl.com
*.openchannel.site
wwww.gorgias.com
api.gorgias.com
banknorthstatus.mambu.com
academy.gorgias.com
wwww.gorgias.com
pingdom-check.acmeapi.co
wwww.gorgias.com
sni157250.cloudflaressl.com
tiktok.service.gorgias.com
sni157250.cloudflaressl.com
link.gorgias.com
pingdom-check.acmeapi.co
pingdom-check.acmeapi.co
pingdom-check.acmeapi.co
storybook.gorgias.com
sni157250.cloudflaressl.com
pingdom-check.acmeapi.co
partner.gorgias.com
sni157250.cloudflaressl.com
www.gorgias.com
bdr.gorgias.com
community.gorgias.com
gorgias.com
marketplace.partnerpage.io
updates.gorgias.com
conversations.gorgias.com
gorgias.com
*.marketplacebydesign.site
sni157250.cloudflaressl.com
docs.gorgias.com
wwww.gorgias.com
updates.gorgias.com
woocommerce.service.gorgias.com
docs.gorgias.com
migration.gorgias.com
design.gorgias.com
updates.gorgias.com
design.gorgias.com
woocommerce.service.gorgias.com
pingdom-check.acmeapi.co
bdr.gorgias.com
marketplace.partnerpage.io
conversations.gorgias.com
bdr.gorgias.com
updates.gorgias.com
gorgias.com
gorgias.com
academy.gorgias.com
*.marketplacebydesign.site
design.gorgias.com
marketplace.partnerpage.io
gorgias.com
wwww.gorgias.com
sni157250.cloudflaressl.com
gorgias.com
gorgias.com
sni157250.cloudflaressl.com
gorgias.com
design.gorgias.com
gorgias.com
marketplace.partnerpage.io
sni157250.cloudflaressl.com
events-ingestion.services.gorgias.com
gorgias.com
wwww.gorgias.com
*.openchannel.site
gorgias.com
wwww.gorgias.com
wwww.gorgias.com
sni157250.cloudflaressl.com
gorgias.com
www.gorgias.com
gorgias.com
gorgias.com
billing.gorgias.com
*.marketplacebydesign.site
pingdom-check.acmeapi.co
pingdom-check.acmeapi.co
sni157250.cloudflaressl.com
gorgias.com
gorgias.com
gorgias.com
sni157250.cloudflaressl.com
gorgias.com
shopper.gorgias.com
sni157250.cloudflaressl.com
conversations.gorgias.com
wwww.gorgias.com
sni157250.cloudflaressl.com
sni157250.cloudflaressl.com
pingdom-check.acmeapi.co
pingdom-check.acmeapi.co
gorgias.com
gorgias.com
agency-directory.teikametrics.com
*.marketplacebydesign.site
events-ingestion.services.gorgias.com
sni157250.cloudflaressl.com
*.openchannel.site
wwww.gorgias.com
api.gorgias.com
banknorthstatus.mambu.com
academy.gorgias.com
wwww.gorgias.com
pingdom-check.acmeapi.co
wwww.gorgias.com
sni157250.cloudflaressl.com
tiktok.service.gorgias.com
sni157250.cloudflaressl.com
link.gorgias.com
pingdom-check.acmeapi.co
pingdom-check.acmeapi.co
pingdom-check.acmeapi.co
storybook.gorgias.com
sni157250.cloudflaressl.com
pingdom-check.acmeapi.co
partner.gorgias.com
sni157250.cloudflaressl.com
www.gorgias.com
Certificate
The complete raw certificate details for design.gorgias.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIENzCCAx+gAwIBAgISBDu+eVO0w3FnpIaLbJOK8QI1MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA0MDYxNjE3NTRaFw0yMzA3MDUxNjE3NTNaMB0xGzAZBgNVBAMT EmRlc2lnbi5nb3JnaWFzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANxzEASZgFsgnGyaQVATyBVNeJS8XjuXfvaIlexnyIwAbtr92y6BDRMoowrp rieuPzZNh2uvEOfjlfanyLZI2ks3ugU32E/KFwR0wpkzzpKEG5c5aHzeHCxb1AQc oTuSlP4dcAsK8j7/7ZzBLabePIZFUtPj4noUulJfbuilHPXkG32aqTXpBkia6wBg Mh5Vj59bt6Kep3LdA6ozp8ozaJfHb6OEQcE5RyDgnB/6h2BsRCVauq8D0/F0+3e7 GkuWR23bjWDAJTE4aWagFYdceE6Kkaic1GyoaVTAED3iDu2YFjMMsL6c0TyVOA23 10Y9ANZJtYYsOTpN2aGQXzJosqMCAwEAAaOCAVowggFWMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUWVtWTTdwATg2nuerxNK4pOCwJQowHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wHQYDVR0RBBYwFIISZGVzaWduLmdvcmdpYXMuY29tMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQAgqJbnjN6F0QqSQMu0P+RyUq0eq42clsCZbAdYou/4POex/Nl1 qR3vf0zQRnIahO+X/sQn9VsulJD06sdu7Djjw49HlK2Z958TsXU2kEgG8EbgQnjq Pr7hhOakAxI9st/G01wcUI5Vh8QHtXlmmVoZ6RUkj+UXTICLq4LOHA5+A/wLnqTI emJ+vujB5Q/QoS0pq2+kTvMpRXBEet+0jn/mwjAF/rVBuBiwCcoU2QCsMWsD1Exz /3ykM9yXjDnVuAhnrxlyAvkkdBbNuEmKXqDmOkwRWhfApxaVI9eU4lCjZUHkD+Ng e375/D+Rc3Acg4a8VngpXC6u+qMwcrfx5YZJ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HMQBJmAWyCcbJpBUBPI FU14lLxeO5d+9oiV7GfIjABu2v3bLoENEyijCumuJ64/Nk2Ha68Q5+OV9qfItkja Sze6BTfYT8oXBHTCmTPOkoQblzlofN4cLFvUBByhO5KU/h1wCwryPv/tnMEtpt48 hkVS0+PiehS6Ul9u6KUc9eQbfZqpNekGSJrrAGAyHlWPn1u3op6nct0DqjOnyjNo l8dvo4RBwTlHIOCcH/qHYGxEJVq6rwPT8XT7d7saS5ZHbduNYMAlMThpZqAVh1x4 ToqRqJzUbKhpVMAQPeIO7ZgWMwywvpzRPJU4DbfXRj0A1km1hiw5Ok3ZoZBfMmiy owIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 368778986660256925691457188801737531654709 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-06 16:17:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-05 16:17:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'design.gorgias.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27829166560599834447866793484152095042532530501164710454055562583070590033410299930298792201041134364678695125198254077416025249200286203094807876468309442143888489367360506373363782764642084946597061386706880622420274190260458399156105793013764033689150926670162807874753171275274120724292661683988075686705104590158373023225588501622890082620631777599538766225050225723512970070063537116440346491750658215731509319300612486661370666650391534380722885317712152031730095444199458550150701714166466475087402314371851283931369964208533383656058351281550586964569903579325860105938898097515384352766570431400028167254691 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 595b564d37700138369ee7abc4d2b8a4e0b0250a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design.gorgias.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0020a896e78cde85d10a9240cbb43fe47252ad1eab8d9c96c0996c0758a2eff83ce7b1fcd975a91def7f4cd046721a84ef97fec427f55b2e9490f4eac76eec38e3c38f4794ad99f79f13b17536904806f046e04278ea3ebee184e6a403123db2dfc6d35c1c508e5587c407b57966995a19e915248fe5174c808bab82ce1c0e7e03fc0b9ea4c87a627ebee8c1e50fd0a12d29ab6fa44ef3294570447adfb48e7fe6c23005feb541b818b009ca14d900ac316b03d44c73ff7ca433dc978c39d5b80867af197202f9247416cdb8498a5ea0e63a4c115a17c0a7169523d794e250a36541e40fe3607b7ef9fc3f9173701c8386bc5678295c2eaefaa33072b7f1e58649