email-links.ramp.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 4d:d0:4d:66:09:31:dc:7b:0e:39:fb:1f:b2:68:24:ee was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=email-links.ramp.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4d:d0:4d:66:09:31:dc:7b:0e:39:fb:1f:b2:68:24:ee
Serial Number (int): 103432123251671467638066666697960989934
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 38:33:c5:7a:5f:30:2b:31:ee:6d:78:06:7c:27:1d:77:94:87:84:92
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 30:ad:7c:f1:da:10:bb:98:40:a0:c1:3c:58:3b:6c:71:59:a7:9c:08
Fingerprint (sha256): 13:3c:dd:d4:02:a8:fe:69:05:9e:c2:f7:a3:c1:78:9d:51:1a:3d:74:e0:62:3a:77:6c:64:4d:ab:ba:be:76:80

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/CuMmkbS78fw
CRL Distribution Point: http://crls.pki.goog/gts1p5/C7VLY2UpjTc.crl

Check the revocation status for certificate email-links.ramp.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for email-links.ramp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

email-links.ramp.com

Other certificates including the domain name ramp.com

(limited to 100 certificates)
ramp.com
www.natthrafn.is
secretstore.ramp.com
support.ramp.com
o.ramp.com
cfo-insights.ramp.com
internal-web-cf-investigation-1.ramp.com
cohere-voice.ramp.com
app.ramp.com
ramp.com
qa-vault-um-api.ramp.com
privacy.ramp.com
support.ramp.com
o.ramp.com
video.growth.ramp.com
start.ramp.com
days.ramp.com
vault-api.ramp.com
beta-docs.ramp.com
nohara.franshiromedia.com
app.ioniaregistry.com
app.ramp.com
vault-um-api.ramp.com
app-cf-pages.ramp.com
qa.ramp.com
www.staging.accrediti.genvision.it
support.ramp.com
demo-vault-api.ramp.com
qa-vault-api.ramp.com
secretshop.ramp.com
qa-cloudflare-cdn.ramp.com
1password-scim.ramp.com
demo-cloudflare-cdn.ramp.com
qa-dfp.ramp.com
app.ramp.com
qa-vault-api.ramp.com
demo-cloudflare-cdn.ramp.com
connect.ramp.com
prd-cloudflare-cdn.ramp.com
trust.ramp.com
days.ramp.com
ramp.com
demo-vault-um-api.ramp.com
qa.ramp.com
secretshop.ramp.com
easyclasses.hostdost.in
internal-investigation-404s.ramp.com
cohere.ramp.com
qa-cloudflare-cdn.ramp.com
o.ramp.com
secretshop.ramp.com
ramp.com
ko-en.cloud
ramp.com
ryu.ramp.com
qa-vault-api.ramp.com
1password-scim.ramp.com
support.ramp.com
connect.ramp.com
ramp.com
c.ramp.com
central.ramp.com
ryu.ramp.com
eatingwell.ramp.com
www.test-cf-pages.ramp.com
staging.kiek.app
ramp.com
internal-investigation-404s.ramp.com
ramp.com
prd-cloudflare-cdn.ramp.com
ramp-os.ramp.com
ramp.com
1password-scim.ramp.com
fnt-cloudflare-cdn.ramp.com
demo.ramp.com
www.app-cf-pages.ramp.com
qa-dfp.ramp.com
Ramp Business Corporation
internal-web-cf-investigation-1.ramp.com
internal-investigation-404s.ramp.com
central.ramp.com
qa-web.ramp.com
cohere-voice.ramp.com
cfo-insights.ramp.com
embed2.ramp.com
fnt.ramp.com
trust.ramp.com
email-links.ramp.com
support.ramp.com
qa-vault-api.ramp.com
www.wasat.cc
support.ramp.com
ramp.com
days.ramp.com
sso.ramp.com
ramp-os-demo.ramp.com
ramp.com
fitnessapp.ramp.com
internal-web-cf-investigation-1.ramp.com
o.ramp.com

Certificate

The complete raw certificate details for email-links.ramp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIQTdBNZgkx3HsOOfsfsmgk7jANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yMzA2MDQxMDI1NDdaFw0yMzA5MDIx
MDI1NDZaMB8xHTAbBgNVBAMTFGVtYWlsLWxpbmtzLnJhbXAuY29tMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcPV4gaIi8KWOqV/7JFbLffbplLim+Ub
AItfjxRukhGNTCIvwt4EgSkBTT+lNAR2Hi1jhTm/oIpGq/5umoAFNvMb+7JAp+7R
C0w4dQ/g8LJHzdgnjDXXl4MysevIskCF51yO92jjHBpZOPLwtSh4Fd/HwsGeuj7k
UIRdvXKrbCUDEUhPL0FRVcPCvNN9Jb49tFg7BdEKC8xnibJhjFEo5E71MFp/MvWB
ykatEhHrCimhcNlQcGqOZVO0SUiAh8hAUsMwfx++V9jXW/t1ckhko7ePc3LbTkum
T9/Jo6tfUwusgKwDh+xOVOBLUJ7RpvHHQO41niRIpxC3WmvSHxuTkwIDAQABo4IC
ezCCAncwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFDgzxXpfMCsx7m14BnwnHXeUh4SSMB8GA1UdIwQY
MBaAFNX8ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEF
BQcwAYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvQ3VNbWtiUzc4Zncw
MQYIKwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5k
ZXIwHwYDVR0RBBgwFoIUZW1haWwtbGlua3MucmFtcC5jb20wIQYDVR0gBBowGDAI
BgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8v
Y3Jscy5wa2kuZ29vZy9ndHMxcDUvQzdWTFkyVXBqVGMuY3JsMIIBBAYKKwYBBAHW
eQIEAgSB9QSB8gDwAHYAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoA
AAGIhif81QAABAMARzBFAiEA9Qp489pig5AdvecNPgLycvaD3L7FRBV6imqH8b80
ucICICT8bETN3jhkaB/R9Tl1tyYpYQ8XYy0XiluB40Aqr5VNAHYArfe++nz/EMiL
nT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGIhif89QAABAMARzBFAiEAm+zXcpCT
OCaNeQl3lrZ1TXTwwmk+TRtFM/XbmLbme6ECIAMNodqwAayp7blqjLY7uE7ITipW
VHorhXTOkYzTtPBWMA0GCSqGSIb3DQEBCwUAA4IBAQAND94+VF+pL0D5Oslvr8L9
ixKAlmnPlU+L6sPw+kdEhFkLvpdUbjs48Gjt7U0zgaHLOaD4A2kAL/xlULTBnOgJ
73mr3fj3H+5aN/OrcEvq7yqn4kbxGTiG7grJRH/MrssA7wddo2S115sNTkVtU6TB
eb7z64moSf7fY5GrKEMk9Ut8MsrLCLi+Wm0FtF5hUocBrNcwKNyrx1oLH5aYKT7c
kXRN9kosfXK7V+xUdRE/4Efara//OhyxJ7bbm1oaQZyLgV+KgU6BjCo1Jw7S8Rsa
CVnY+zYWhgLBDbYjUzLaYm9cOFEQaVGbB4SxkaxNVwdEa3R12yU1ipDaBqPVphcy
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcPV4gaIi8KWOqV/7JFb
LffbplLim+UbAItfjxRukhGNTCIvwt4EgSkBTT+lNAR2Hi1jhTm/oIpGq/5umoAF
NvMb+7JAp+7RC0w4dQ/g8LJHzdgnjDXXl4MysevIskCF51yO92jjHBpZOPLwtSh4
Fd/HwsGeuj7kUIRdvXKrbCUDEUhPL0FRVcPCvNN9Jb49tFg7BdEKC8xnibJhjFEo
5E71MFp/MvWBykatEhHrCimhcNlQcGqOZVO0SUiAh8hAUsMwfx++V9jXW/t1ckhk
o7ePc3LbTkumT9/Jo6tfUwusgKwDh+xOVOBLUJ7RpvHHQO41niRIpxC3WmvSHxuT
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 103432123251671467638066666697960989934
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-04 10:25:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-02 10:25:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'email-links.ramp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21430843613729878637954140767464989087856770922659112315628048470800951972667353914994474917755965177149669179976528192703561737598430395872757567123180985269228109747796890672670011330338452774724550617012645146537471253507645078453921708871910163329499196822736013354857044357164693927919936251801119480287547603738232402666953394229123443437733688093217427051623749168931254767452124852321229650613609670704485654872206524397001359121182632795685408576402862995136663995908584597057954332594169692792737924820552865555492178730526891833936751170791131679681237701324905174173648230532816655561638485632908464460691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3833c57a5f302b31ee6d78067c271d7794878492
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/CuMmkbS78fw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email-links.ramp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/C7VLY2UpjTc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001888627fcd50000040300473045022100f50a78f3da6283901dbde70d3e02f272f683dcbec544157a8a6a87f1bf34b9c2022024fc6c44cdde3864681fd1f53975b72629610f17632d178a5b81e3402aaf954d007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001888627fcf500000403004730450221009becd772909338268d79097796b6754d74f0c2693e4d1b4533f5db98b6e67ba10220030da1dab001aca9edb96a8cb63bb84ec84e2a56547a2b8574ce918cd3b4f056
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000d0fde3e545fa92f40f93ac96fafc2fd8b12809669cf954f8beac3f0fa474484590bbe97546e3b38f068eded4d3381a1cb39a0f80369002ffc6550b4c19ce809ef79abddf8f71fee5a37f3ab704beaef2aa7e246f1193886ee0ac9447fccaecb00ef075da364b5d79b0d4e456d53a4c179bef3eb89a849fedf6391ab284324f54b7c32cacb08b8be5a6d05b45e61528701acd73028dcabc75a0b1f9698293edc91744df64a2c7d72bb57ec5475113fe047daadafff3a1cb127b6db9b5a1a419c8b815f8a814e818c2a35270ed2f11b1a0959d8fb36168602c10db6235332da626f5c38511069519b0784b191ac4d5707446b7475db25358a90da06a3d5a61732