test.001.testapp.sandbox.lfscnp.com

Issued by Amazon

About this certificate

This digital certificate with serial number 04:98:63:7f:9b:3b:f4:90:ce:06:46:2a:47:32:2d:c8 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=test.001.testapp.sandbox.lfscnp.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:98:63:7f:9b:3b:f4:90:ce:06:46:2a:47:32:2d:c8
Serial Number (int): 6108159174207016192359054791448604104
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 09:6e:01:96:c9:ef:20:75:95:9b:11:44:46:5d:1c:20:eb:78:3f:ab
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 6b:23:bc:9f:be:5c:bc:f8:a8:1e:1f:7c:fb:dd:56:05:23:27:2c:d7
Fingerprint (sha256): 07:1e:96:92:1b:9f:6d:fd:ae:a1:27:f6:2f:16:9c:b1:65:17:0d:44:97:8c:76:95:c4:b0:a7:6f:79:1e:3d:64

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate test.001.testapp.sandbox.lfscnp.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test.001.testapp.sandbox.lfscnp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test.001.testapp.sandbox.lfscnp.com
www.001.testapp.sandbox.lfscnp.com

Other certificates including the domain name lfscnp.com

(limited to 100 certificates)
lpay-fraud-mock-test-stub.test.lpay-np.lfscnp.com
37degress.digitalweb.lfscnp.com
lpay-monolith-admin-dev.dev.lpayapp-sandbox.lfscnp.com
ach-details.originations-np.lfscnp.com
go-api-chaos-eng-dev.002.mytest2.sandbox.lfscnp.com
consumer-fraud-service.sandbox.o10s.lfscnp.com
service-accounts-test.new.01.test.eapi-np.lfscnp.com
imperva.com
ecs-demo-cnp-dev.002.mytest2.sandbox.lfscnp.com
lpay-app-originations-dev-au.dev.lpayapp-sandbox.lfscnp.com
pl-service.01.prod.eapi-pci.lfscnp.com
dnb-test2.001.development.odds-np.lfscnp.com
genoapay-api-test.np.o10s.lfscnp.com
70e8843709e812f7ca0d9.prod.merchant-integration-bnpl.lfscnp.com
appsec-helloworld-dev.security-sandbox.lfscnp.com
motorapp-prod.001.production.odds.lfscnp.com
customer-master-prod.datalake-prod.lfscnp.com
genoapay.admin.dx-prod.lfscnp.com
039004c7f9672353f72.001.development.datalake-sandbox.lfscnp.com
kong-service-test.test.se-platform-np.lfscnp.com
test.001.testapp.sandbox.lfscnp.com
0d8ba5758bf1f14a2776681d43b3f8a53.01.test.eapi-pcinp.lfscnp.com
pin-change-service-test.01.test.eapi-pcinp.lfscnp.com
auth.dev.se-platform-np.lfscnp.com
test.001.testapp.sandbox.lfscnp.com
buildkite-webhook-datadog-event-dev.01.dev.eapi-np.lfscnp.com
62df4d98fe86184a5c9f8e006e715bd8.collections-sandbox.lfscnp.com
imperva.com
staging.wetcms.digitalweb-np.lfscnp.com
notification-service-test.01.test.eapi-pcinp.lfscnp.com
lpay-service-equifax-dev4-au.dev.lpayapp-dev4.lfscnp.com
customer-support-service-dev.sandbox.eapi.lfscnp.com
cnp-ecs-demo-dev.002.mytest2.sandbox.lfscnp.com
cards-visioncics-adapter-dev.01.dev.eapi-pcinp.lfscnp.com
react-ts-admin-test.test.sandbox.lfscnp.com
imperva.com
latitudefinancial-co-nz.digitalweb-np.lfscnp.com
*.okta-custom.dev.se-platform-np.lfscnp.com
responsysassets.prod.digitalweb.lfscnp.com
imperva.com
imperva.com
evolve-dev2.001.development.odds-np.lfscnp.com
6e1ef36f1003de406a7b68ef.001.development.data-cde-np.lfscnp.com
coreapi-dev2.001.development.odds-np.lfscnp.com
accounts-link-unlinked.001.production.eapi.lfscnp.com
staging.lowratemastercard-com-au.digitalweb-np.lfscnp.com
cf-mobile-config.mobile.lfscnp.com
lpay-service-consumer-dev2.dev.lpayapp-dev2.lfscnp.com
odds-authentications.test.odds-np.lfscnp.com
vision-haproxy-prod.dx-cde-prod.lfscnp.com
vision-adapter-dev.new.01.dev.eapi-pcinp.lfscnp.com
7d5265b7789f253ebc3.001.development.datalake-sandbox.lfscnp.com
doc-upload.originations-np.lfscnp.com
staging.latitudefinancial.digitalweb-np.lfscnp.com
oscar.nonprod.digitalservicing-np.lfscnp.com
soft-quote-proxy-test.np.o10s.lfscnp.com
apply-mock-response-dev.merchant-services-sandbox.lfscnp.com
*.staging.gomastercard.com.digitalweb-np.lfscnp.com
034ac86c3ec7e392b5acf71a0f55b8fb750.dev.lpayapp-dev1.lfscnp.com
cnp-socket-mode-slackbot-starter-test.test.sandbox.lfscnp.com
staging.umiloans.digitalweb-np.lfscnp.com
*.staging.28degreescard.digitalweb-np.lfscnp.com
consumer-risk-service-dev.sandbox.o10s.lfscnp.com
coreapi-prod.001.production.odds.lfscnp.com
appsec-dojo-prod.security.lfscnp.com
instinct-prod.dx-cde-prod.lfscnp.com
cnp-access-manager-prod.prod.auth.lfscnp.com
*.okta-custom.prod.se-platform.lfscnp.com
appsecd-github-webhook-test.security-test.lfscnp.com
imperva.com
12b20401b771de810734b8938349.001.development.odds-np.lfscnp.com
staging.buyersedge.digitalweb-np.lfscnp.com
service-products.01.prod.eapi.lfscnp.com
account-linking-v2-prod.new.01.prod.eapi-pci.lfscnp.com
api.lfscnp.com
lpay-service-account-dev.dev.lpayapp-sandbox.lfscnp.com
temenos-service-poc-dev.sandbox.eapi.lfscnp.com
imperva.com
customer-master-dev.datalake-sandbox.lfscnp.com
servicing-customer-master-dev.sandbox.eapi.lfscnp.com
lpay-service-dowjones-sandbox.sandbox.lpay-sandbox.lfscnp.com
*.37degress.digitalweb-np.lfscnp.com
collections-pcc-service-test.collections-nonprod.lfscnp.com
collections-pcc-service-dev.collections-nonprod.lfscnp.com
applybuy-vision-bridge.prod.merchant-wallet.lfscnp.com
wetcms.prod.digitalweb.lfscnp.com
appsec-web-ui-prod.security-sandbox.lfscnp.com
lpay-app-originations-dev2-au.dev.lpayapp-dev2.lfscnp.com
poi-service-prod.prod.o10s.lfscnp.com
appsec-github-dev.security-sandbox.lfscnp.com
832c9417d0aaa792294e4dd7d3c698a.new.01.prod.eapi-pci.lfscnp.com
tcs-bancs-service-prod.new.01.prod.eapi.lfscnp.com
documents-service-dev.01.dev.eapi-pcinp.lfscnp.com
nz-apply-merchant-redirect.originations-np.lfscnp.com
lpay-service-mail-api-dev.dev.lpayapp-sandbox.lfscnp.com
www.tmpkong.apigateway-sandbox.lfscnp.com
13790fed5a068feda1caf0e50145.001.development.odds-np.lfscnp.com
lpay-app-originations-test-nz.test.lpay-np.lfscnp.com
lfs-ui.digitalservicing-np.lfscnp.com
8e062ea304a968893b3fc8edd7e4.001.development.odds-np.lfscnp.com

Certificate

The complete raw certificate details for test.001.testapp.sandbox.lfscnp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGNo5QOKhDlYZfys6msA
DY6/UVEm9XU32B08aD2d3uJ8h8jR96T7NLC85hDBASNm/wZOkG0eD2ir0tBipk3F
GV5P5bpVdNhhhyI3IZ1S8OcvvJasKORawMLtGHwIUYVBZOCIDIY8x5SbNewuI61R
G2BH6qSRuAGpCp9iEpW+4l2/NNHZNmsHQR+o5fLdHDWMDSRpZN5DAa3SaQDCBUNW
0+TA51qh0WQJ+phgKFXadXR4t/Lv1OvVCNtqh2GyxGEGi14FtlXJEY584USjhSg7
LlB0sVM6X1Y4hM1U4J7zWbhmqz2Y6dPNNu8leL6xeNnuDb8I3Lzf99jCvkbkLE4L
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6108159174207016192359054791448604104
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test.001.testapp.sandbox.lfscnp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19742196346734350122463085452383051210163912775463925039733802124087812021943964178994057267061833443605851836398412168356618972588681659221755239862794472789347555632154956279932334970763943364189873110956746801781407563488011086947679425058376266734564786276912106163856594202342023749234557064616309412297522725504262638436521617820650893910274697135824711967645247903523567658114192062891964746477692008089848511055156761882267122813997362354157316738175806077358301629174108276767109668126200989922207020233435213794689229428691922780617548896169567752544974522212839115554834464455260568854412001286417961323501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							096e0196c9ef2075959b1144465d1c20eb783fab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.001.testapp.sandbox.lfscnp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.001.testapp.sandbox.lfscnp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009d47d975edde61c1de9d9cd461a1d20d06327e5c0b2e65831702acfeb456c915e7db22fcc04daa533118d4ef2a035fff145bb676737b3311d74e5745f3c61d38acf2a82eed7d0e8bf288054d88033c4111bb40c35e2512340126bf4519658827e7632894b8b5f8971a2920bb017907bb01efaae95605847ecdd80547634d88d53a4020bbf927d34bdf9894844574c6364350a3d709bfa8425cccf834515b1c9d4b348fff37c731c64c6460190cb2222cbad7807a8995ac8fe814bd518ea8686e8a30329ccb48f48dc02740632455f000169c0889195a229a6bb48de49102cfbd4cdec41aefaa2f8256c9442b359790abb4d01f8ea5fdd8b9aa87b4d2d2a9c16f