allgoodes.dekalb.k12.ga.us

Issued by R3

About this certificate

This digital certificate with serial number 03:9f:fa:cf:ec:3a:08:39:0b:90:80:80:c7:bd:c4:ea:d7:5c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=allgoodes.dekalb.k12.ga.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9f:fa:cf:ec:3a:08:39:0b:90:80:80:c7:bd:c4:ea:d7:5c
Serial Number (int): 315775140731352346039176781172080988837724
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 19:dc:2c:14:06:fe:b0:f1:3c:e8:97:d3:e2:1f:75:0f:e4:e4:34:ab
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 71:52:e4:88:05:3b:1a:85:4b:57:6a:c2:6a:4b:ee:9d:a0:37:fc:a5
Fingerprint (sha256): 09:b3:3d:1b:f3:b4:95:15:ff:12:d3:16:19:77:fa:a2:45:af:e3:b4:ef:08:0e:72:b7:6c:1c:02:e1:22:15:20

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate allgoodes.dekalb.k12.ga.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for allgoodes.dekalb.k12.ga.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allgoodes.dekalb.k12.ga.us

Other certificates including the domain name dekalb.k12.ga.us

(limited to 100 certificates)
stonemountaines.dekalb.k12.ga.us
mlkinghs.dekalb.k12.ga.us
lakesidehs.dekalb.k12.ga.us
canbylanees.dekalb.k12.ga.us
bobmathises.dekalb.k12.ga.us
towershs.dekalb.k12.ga.us
webpay.dekalb.k12.ga.us
allgoodes.dekalb.k12.ga.us
sis.dekalb.k12.ga.us
fairingtones.dekalb.k12.ga.us
narvieharrises.dekalb.k12.ga.us
columbiaes.dekalb.k12.ga.us
livseyes.dekalb.k12.ga.us
vanderlynes.dekalb.k12.ga.us
esis02.dekalb.k12.ga.us
pats.dekalb.k12.ga.us
internationalct.dekalb.k12.ga.us
airwatch.dekalb.k12.ga.us
narvieharrises.dekalb.k12.ga.us
dunwoodyes.dekalb.k12.ga.us
dhstsouth.dekalb.k12.ga.us
pats.dekalb.k12.ga.us
chesnutes.dekalb.k12.ga.us
webpay.dekalb.k12.ga.us
oakgrovees.dekalb.k12.ga.us
andrewshs.dekalb.k12.ga.us
kittredgees.dekalb.k12.ga.us
rainbowes.dekalb.k12.ga.us
mcnairms.dekalb.k12.ga.us
lakesidehs.dekalb.k12.ga.us
webpay.dekalb.k12.ga.us
sis.dekalb.k12.ga.us
flatshoalses.dekalb.k12.ga.us
sis.dekalb.k12.ga.us
stonemountainhs.dekalb.k12.ga.us
sis.dekalb.k12.ga.us
webpay.dekalb.k12.ga.us
webpay.dekalb.k12.ga.us
huntleyhillses.dekalb.k12.ga.us
webpay.dekalb.k12.ga.us
johnlewises.dekalb.k12.ga.us
knollwoodes.dekalb.k12.ga.us
millergrovehs.dekalb.k12.ga.us
hrportal.dekalb.k12.ga.us
murpheycandleres.dekalb.k12.ga.us
wynbrookees.dekalb.k12.ga.us
dhstsouth.dekalb.k12.ga.us
austines.dekalb.k12.ga.us
avondalees.dekalb.k12.ga.us
peachcrestes.dekalb.k12.ga.us
subfinder.dekalb.k12.ga.us
stonemountaines.dekalb.k12.ga.us
campus.dekalb.k12.ga.us
wbbc-mastercp01.dekalb.k12.ga.us
druidhillsms.dekalb.k12.ga.us
pats.dekalb.k12.ga.us
lds.dekalb.k12.ga.us
webpay.dekalb.k12.ga.us
destiny.dekalb.k12.ga.us
dsa.dekalb.k12.ga.us
coralwoodct.dekalb.k12.ga.us
fc.dekalb.k12.ga.us
chapelhilles.dekalb.k12.ga.us
webpay.dekalb.k12.ga.us
kelleylakees.dekalb.k12.ga.us
gpvpn.dekalb.k12.ga.us
hawthornees.dekalb.k12.ga.us
dresdenes.dekalb.k12.ga.us
airwatch.dekalb.k12.ga.us
cedargrovems.dekalb.k12.ga.us
clarkstonhs.dekalb.k12.ga.us
webpay.dekalb.k12.ga.us
robertshawes.dekalb.k12.ga.us
campus.dekalb.k12.ga.us
dsa.dekalb.k12.ga.us
hrportal.dekalb.k12.ga.us
millergrovems.dekalb.k12.ga.us
evansdalees.dekalb.k12.ga.us
bethunems.dekalb.k12.ga.us
stephensonhs.dekalb.k12.ga.us
pats.dekalb.k12.ga.us
allgoodes.dekalb.k12.ga.us
briarlakees.dekalb.k12.ga.us
andrewshs.dekalb.k12.ga.us
snapfingeres.dekalb.k12.ga.us
tuckerms.dekalb.k12.ga.us
warrentechct.dekalb.k12.ga.us
Terms.dekalb.k12.ga.us
eportal.dekalb.k12.ga.us
desa.dekalb.k12.ga.us
mcnaires.dekalb.k12.ga.us
sis.dekalb.k12.ga.us
ep.dekalb.k12.ga.us
webpay.dekalb.k12.ga.us
championms.dekalb.k12.ga.us
webpay.dekalb.k12.ga.us
columbiahs.dekalb.k12.ga.us
margaretharrisct.dekalb.k12.ga.us
subfinder.dekalb.k12.ga.us
fernbankes.dekalb.k12.ga.us

Certificate

The complete raw certificate details for allgoodes.dekalb.k12.ga.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISA5/6z+w6CDkLkICAx73E6tdcMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MjAwNTQ0NDRaFw0yMzEwMTgwNTQ0NDNaMCUxIzAhBgNVBAMT
GmFsbGdvb2Rlcy5kZWthbGIuazEyLmdhLnVzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApKi4B+fE0ZC5N/PK77x9n85+j3s/TNHB7UHh82GGh9EXbHqu
bQNFcy3CnjDekccYQcr05w+wwmJ63PuBS2xHe9nex6x074nh57egtHG34nxh7qGp
uN1KMlD32LpU2reZDkbYSlVzGNL76kBdXRjE0NEJsrwx1c8iwks6q/bTtrXoge9t
CiS3Qp5dotVxHhRkF5IvB9me6JXH5HT8n810Y07I1fWV6zArM+FzrMqYFeOqLonK
u8inT72rjmLY+z9m26BvKeSbokLak/cFccQA8IKmbfRFmYqSQsHmNyGLfyCzZQvE
7UZyTLyzxdsOy4keoow0TGck5IpOLTBgns9CRQIDAQABo4ICGzCCAhcwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBQZ3CwUBv6w8Tzol9PiH3UP5OQ0qzAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzAlBgNVHREEHjAcghphbGxnb29kZXMuZGVrYWxiLmsxMi5n
YS51czATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA
7wB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABiXILNxcAAAQD
AEcwRQIhAIcyOvlDVWICvCJC9Bn0Jo5/bb/7/Yz2jyPYIjJAJccRAiAyZuRBx0Lg
E8OjO8idONvURmsNr8h+FQhH6l1wGrNO5wB1AK33vvp8/xDIi509nB4+GGq0Zyld
z7EMJMqFhjTr3IKKAAABiXILN6EAAAQDAEYwRAIgLiQMqBs72ZyZxhJahm7YpAY7
7DgpcVZ6/Kpagoa8wMMCIGUHrO4ISC4FC87U1kN3LTaNhjq1lb5b8yeKsycpQZmi
MA0GCSqGSIb3DQEBCwUAA4IBAQB7n6aj9WLpACxCB5h6kUoZrryLHpFks9Dms5zz
xtcGqVHr+p0sPlwX1vx4rf7N9qBWu4jD337oDYDGCx1z2uTuKO+0b+T3XfjzLElm
a2owLGWTSVAiGKyNhCkR5IKPWFWViw8OT/FzCCUjO1bbb6GBBiDSpw4jwIVuX/jm
5O8iA3UYJbDCpREl0DTcpXcEx6LHj1ZjBJyJhQ5WAsp+EKCLjcDy/hcy1Ig3JeTS
FZoDZD2VSXsk4ysuuTGWyYKxQR67YDLgAIkixFN8h2U1GtFW9DHxNR7jLwL9ZFfW
EeGpkvR+89/XrYSCiBFL20MYdR6cAaXJDwFxSPExJuMYA+IS
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKi4B+fE0ZC5N/PK77x9
n85+j3s/TNHB7UHh82GGh9EXbHqubQNFcy3CnjDekccYQcr05w+wwmJ63PuBS2xH
e9nex6x074nh57egtHG34nxh7qGpuN1KMlD32LpU2reZDkbYSlVzGNL76kBdXRjE
0NEJsrwx1c8iwks6q/bTtrXoge9tCiS3Qp5dotVxHhRkF5IvB9me6JXH5HT8n810
Y07I1fWV6zArM+FzrMqYFeOqLonKu8inT72rjmLY+z9m26BvKeSbokLak/cFccQA
8IKmbfRFmYqSQsHmNyGLfyCzZQvE7UZyTLyzxdsOy4keoow0TGck5IpOLTBgns9C
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315775140731352346039176781172080988837724
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-20 05:44:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 05:44:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'allgoodes.dekalb.k12.ga.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20786280390385241896372696453959490780111500860199471280734276012067447802682049453499923587278575004757916445835950996781414391652212666677587773465329936241998156957181150700786594148282991756544806948394791216579598102531885219358256085044115402347076845163352436534858141157724598392854857928164798827725559755457168026610378763026231511990597023818762239016609643628171128321054551013472014665225962322007488297209962432876549070820965917346622831523804642052135083744964016666464153443960480589108881747219124526026236864258165901377754064198046789584042664069893301964727602856526724307889714759168892823618117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19dc2c1406feb0f13ce897d3e21f750fe4e434ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allgoodes.dekalb.k12.ga.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189720b3717000004030047304502210087323af943556202bc2242f419f4268e7f6dbffbfd8cf68f23d822324025c71102203266e441c742e013c3a33bc89d38dbd4466b0dafc87e150847ea5d701ab34ee7007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189720b37a1000004030046304402202e240ca81b3bd99c99c6125a866ed8a4063bec382971567afcaa5a8286bcc0c302206507acee08482e050bced4d643772d368d863ab595be5bf3278ab327294199a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007b9fa6a3f562e9002c4207987a914a19aebc8b1e9164b3d0e6b39cf3c6d706a951ebfa9d2c3e5c17d6fc78adfecdf6a056bb88c3df7ee80d80c60b1d73dae4ee28efb46fe4f75df8f32c49666b6a302c659349502218ac8d842911e4828f5855958b0f0e4ff1730825233b56db6fa1810620d2a70e23c0856e5ff8e6e4ef2203751825b0c2a51125d034dca57704c7a2c78f5663049c89850e5602ca7e10a08b8dc0f2fe1732d4883725e4d2159a03643d95497b24e32b2eb93196c982b1411ebb6032e0008922c4537c8765351ad156f431f1351ee32f02fd6457d611e1a992f47ef3dfd7ad848288114bdb4318751e9c01a5c90f017148f13126e31803e212