on.bc.edu
Issued by R3
About this certificate
This digital certificate with serial number 04:cb:1f:48:0b:9a:0b:02:1a:51:b8:6b:81:6c:2d:5f:a9:61 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=on.bc.edu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:cb:1f:48:0b:9a:0b:02:1a:51:b8:6b:81:6c:2d:5f:a9:61Serial Number (int): 417568044360545691113823675893232198199649
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 0e:e6:ad:14:53:20:2c:cd:fa:d7:2d:51:e5:30:14:20:4d:d7:7b:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 6a:f6:bd:f1:75:87:6a:63:38:be:17:d9:a6:94:ff:d4:9d:d7:a4:30
Fingerprint (sha256): 09:c0:6a:f3:77:26:52:c7:1f:3a:0f:ef:db:bc:ff:e3:f6:24:a4:4b:91:4e:f3:63:7e:19:83:47:9a:6d:29:01
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate on.bc.edu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for on.bc.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
on.bc.edu
Other certificates including the domain name bc.edu
(limited to 100 certificates)
pops.bc.edu
sfunder1cert.net
sparkreportsstg.bc.edu
login.bc.edu
www2.bc.edu
cdil.bc.edu
bcservices.bc.edu
naturalenvironment.library.domain.bc.edu
uconnectlabs.com
myreports.bc.edu
services.bc.edu
capricorn.bc.edu
dev.domain.bc.edu
uconnectlabs.com
raven.bc.edu
hunnicutt2.bc.edu
events.bc.edu
arc.bc.edu
ginko.bc.edu
sfunder19cert.net
webtech.domain.bc.edu
click.alumni.bc.edu
newspapers.bc.edu
lira.bc.edu
uconnectlabs.com
cluster.technolutions.net
mail.bc.edu
about-mdev.jstor.org
uconnectlabs.com
irm.bc.edu
domain.bc.edu
web.offcampuspartners.com
uconnectlabs.com
reslife.bc.edu
imi.bc.edu
itservice.bc.edu
dauntless.bc.edu
library.domain.bc.edu
n001.offcampuspartners.com
escholarship.bc.edu
dibpmdev.bc.edu
2101commonwealth.bc.edu
bclsco.bc.edu
ejournals.bc.edu
elvis.bc.edu
lawdigitalcommons.bc.edu
uconnectlabs.com
cluster.technolutions.net
bcgradwoods.bc.edu
mba.bc.edu
infowanted.bc.edu
bclawnet.bc.edu
gambon.bc.edu
lawdigitalcommons.bc.edu
agora.bc.edu
test.cte.domain.bc.edu
stories.bc.edu
tourcms.bc.edu
api.bc.edu
impactreport.bc.edu
wfcawp.bc.edu
pilotvpn.bc.edu
conference.bc.edu
answers.bc.edu
sfunder1cert.net
raven.bc.edu
bcmba.bc.edu
publicplans.crr.bc.edu
on.bc.edu
uconnectlabs.com
sfunder19cert.net
cds1.cvent.com
sonndosa.domain.bc.edu
portalsignon.bc.edu
newspapers.bc.edu
dlib.bc.edu
cluster.technolutions.net
ccc.bc.edu
bettyadmin.bc.edu
sfunder1cert.net
cluster.technolutions.net
admission.bc.edu
elvis.bc.edu
jennybaglivo.bc.edu
uconnectlabs.com
cte.bc.edu
cluster.technolutions.net
testpsnam.bc.edu
jesuitsources.bc.edu
ccc.bc.edu
phoebe.bc.edu
uconnectlabs.com
vespa.domain.bc.edu
cluster.technolutions.net
scenery.bc.edu
lawguides.bc.edu
jesuitonlinelibrary.bc.edu
web.offcampuspartners.com
ganister.bc.edu
idesweb.bc.edu
sfunder1cert.net
sparkreportsstg.bc.edu
login.bc.edu
www2.bc.edu
cdil.bc.edu
bcservices.bc.edu
naturalenvironment.library.domain.bc.edu
uconnectlabs.com
myreports.bc.edu
services.bc.edu
capricorn.bc.edu
dev.domain.bc.edu
uconnectlabs.com
raven.bc.edu
hunnicutt2.bc.edu
events.bc.edu
arc.bc.edu
ginko.bc.edu
sfunder19cert.net
webtech.domain.bc.edu
click.alumni.bc.edu
newspapers.bc.edu
lira.bc.edu
uconnectlabs.com
cluster.technolutions.net
mail.bc.edu
about-mdev.jstor.org
uconnectlabs.com
irm.bc.edu
domain.bc.edu
web.offcampuspartners.com
uconnectlabs.com
reslife.bc.edu
imi.bc.edu
itservice.bc.edu
dauntless.bc.edu
library.domain.bc.edu
n001.offcampuspartners.com
escholarship.bc.edu
dibpmdev.bc.edu
2101commonwealth.bc.edu
bclsco.bc.edu
ejournals.bc.edu
elvis.bc.edu
lawdigitalcommons.bc.edu
uconnectlabs.com
cluster.technolutions.net
bcgradwoods.bc.edu
mba.bc.edu
infowanted.bc.edu
bclawnet.bc.edu
gambon.bc.edu
lawdigitalcommons.bc.edu
agora.bc.edu
test.cte.domain.bc.edu
stories.bc.edu
tourcms.bc.edu
api.bc.edu
impactreport.bc.edu
wfcawp.bc.edu
pilotvpn.bc.edu
conference.bc.edu
answers.bc.edu
sfunder1cert.net
raven.bc.edu
bcmba.bc.edu
publicplans.crr.bc.edu
on.bc.edu
uconnectlabs.com
sfunder19cert.net
cds1.cvent.com
sonndosa.domain.bc.edu
portalsignon.bc.edu
newspapers.bc.edu
dlib.bc.edu
cluster.technolutions.net
ccc.bc.edu
bettyadmin.bc.edu
sfunder1cert.net
cluster.technolutions.net
admission.bc.edu
elvis.bc.edu
jennybaglivo.bc.edu
uconnectlabs.com
cte.bc.edu
cluster.technolutions.net
testpsnam.bc.edu
jesuitsources.bc.edu
ccc.bc.edu
phoebe.bc.edu
uconnectlabs.com
vespa.domain.bc.edu
cluster.technolutions.net
scenery.bc.edu
lawguides.bc.edu
jesuitonlinelibrary.bc.edu
web.offcampuspartners.com
ganister.bc.edu
idesweb.bc.edu
Certificate
The complete raw certificate details for on.bc.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgISBMsfSAuaCwIaUbhrgWwtX6lhMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA4MTkxMzEyMzNaFw0yMzExMTcxMzEyMzJaMBQxEjAQBgNVBAMT CW9uLmJjLmVkdTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVoCHSu YylursdoWMmxTEW9ESUWcr8l9RBsXpNNe5FElzmOJmN9ovfSLaK5tHNonydyEjrU D9mRSJCY7i2tV3Ex4aRMYNVRu4QjVGmpoG7Y1p8mHiwS93iRhGBHor8n9xrjXNkX 6+RAeyo/ACbBZ0cDBB4F1nWFOKZ9NCEry1Kk9QWp8UGEyAjWWCPfX+VSRxpW64Pz lkJvXfvmonQehH1DHCVf4ApCOBZg93oIRj4iIoxoEVoZ35caguHjl56JaDA2Wxl4 LY0EMYCHna8uHkU3IcBSg8wO9u3DxgqzInJffxncB2qpWb9zCama1RZri947WC5y xiCafTPDYYoBwVECAwEAAaOCAgowggIGMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU DuatFFMgLM361y1R5TAUIE3Xe/4wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wFAYD VR0RBA0wC4IJb24uYmMuZWR1MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYB BAHWeQIEAgSB9ASB8QDvAHUAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXt tJkAAAGKDiP93QAABAMARjBEAiAnzwbKaaN4a6RKisVDon+w7ai5rBakVPgsunPZ WG1e+wIgFS0IfYgbFLkYqEtbqkDTAOFGQQWz6Nvb83fZTSoP0XsAdgB6MoxU2Lct tiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYoOI/3uAAAEAwBHMEUCIQD6CPVG oVh1z+C4pdb+BfrD/iqvR/IpHXmB3ZuAlx1gmQIgWIR46cn/H8DPRGAB4kmlIFKc MuhlhCJyHX835f12BdowDQYJKoZIhvcNAQELBQADggEBAHLZilRPC6+7f5Aqy0wT MszeV1HoE2HQt0oSFCVGNZBv93h/NQaLKKx3R8Jehzuw4X+fPmKlNGkWkBFiRSOQ /di31Y8BPBqyJNai61+3dyPIwRNfq1+rs4ohubVWJhM2ZOyJrlxKvTP6zodq4Iga m2sI5j93AyJlNfGwKmj/VtvEy9i+ruqRVxx2nKJyGLCCpaKHyDDqVOjiFbMB2QrP 6f3XGOmx5d4cW8SVZwk1BB3+ArwgCf55NycrZUK58TRF4/+0FdmY+pKZlMyIjDYd jkp1lTuVlSoM4PtMfSrAq9yYUGzZ82CdZX8X6iUaZcGrN9N8MpD3m3UyDKpE2xvK Vcc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWgIdK5jKW6ux2hYybFM Rb0RJRZyvyX1EGxek017kUSXOY4mY32i99Itorm0c2ifJ3ISOtQP2ZFIkJjuLa1X cTHhpExg1VG7hCNUaamgbtjWnyYeLBL3eJGEYEeivyf3GuNc2Rfr5EB7Kj8AJsFn RwMEHgXWdYU4pn00ISvLUqT1BanxQYTICNZYI99f5VJHGlbrg/OWQm9d++aidB6E fUMcJV/gCkI4FmD3eghGPiIijGgRWhnflxqC4eOXnoloMDZbGXgtjQQxgIedry4e RTchwFKDzA727cPGCrMicl9/GdwHaqlZv3MJqZrVFmuL3jtYLnLGIJp9M8NhigHB UQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 417568044360545691113823675893232198199649 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-19 13:12:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 13:12:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'on.bc.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24920246677610126671827346217279522728376635184797145364368535742930882571740876181544507514090020648184295560320055485806514504635203820013373296648994742282795587340344632838664304231591657173044433192684977686771086286899362957229579356829017854616933741271708509000192878253729551864871576674900858450162728026236069205104798776417692746271804199818922809566718448081227637657985701564702813458669990314198786710027501209918647098070704626533789274929979913931278182143581833280131650414368195884359920172708683094155313211614029697047699490404035574167278662504733487455088165031165491367684919896109436048097617 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0ee6ad1453202ccdfad72d51e53014204dd77bfe . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'on.bc.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a0e23fddd0000040300463044022027cf06ca69a3786ba44a8ac543a27fb0eda8b9ac16a454f82cba73d9586d5efb0220152d087d881b14b918a84b5baa40d300e1464105b3e8dbdbf377d94d2a0fd17b0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a0e23fdee0000040300473045022100fa08f546a15875cfe0b8a5d6fe05fac3fe2aaf47f2291d7981dd9b80971d60990220588478e9c9ff1fc0cf446001e249a520529c32e8658422721d7f37e5fd7605da . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0072d98a544f0bafbb7f902acb4c1332ccde5751e81361d0b74a1214254635906ff7787f35068b28ac7747c25e873bb0e17f9f3e62a5346916901162452390fdd8b7d58f013c1ab224d6a2eb5fb77723c8c1135fab5fabb38a21b9b55626133664ec89ae5c4abd33face876ae0881a9b6b08e63f7703226535f1b02a68ff56dbc4cbd8beaeea91571c769ca27218b082a5a287c830ea54e8e215b301d90acfe9fdd718e9b1e5de1c5bc495670935041dfe02bc2009fe7937272b6542b9f13445e3ffb415d998fa929994cc888c361d8e4a75953b95952a0ce0fb4c7d2ac0abdc98506cd9f3609d657f17ea251a65c1ab37d37c3290f79b75320caa44db1bca55c7