warden.ufv.ca

- University of the Fraser Valley -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 09:db:ad:f6:70:07:39:11:00:00:00:00:50:e3:61:aa was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of the Fraser Valley

Organization: University of the Fraser Valley
State / Province: British Columbia
Locality: Abbotsford
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:db:ad:f6:70:07:39:11:00:00:00:00:50:e3:61:aa
Serial Number (int): 13103693355743833424004956050501624234
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 07:98:4e:81:78:57:62:14:65:6d:9d:c6:51:95:6c:35:91:bb:2d:83
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): ed:3f:1d:07:72:72:d3:c2:cf:96:e7:40:45:7b:a9:c5:0a:1b:67:2b
Fingerprint (sha256): 14:4f:5d:d7:60:a5:75:64:58:f6:59:9b:1d:c7:95:9a:6b:1d:fe:b8:3d:57:a6:8a:eb:ea:f0:42:ab:8b:c7:15

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate warden.ufv.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for warden.ufv.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

warden.ufv.ca

Other certificates including the domain name ufv.ca

(limited to 100 certificates)
fast-web.ad.ufv.ca
*.ufv.ca
events.ufv.ca
itservicedesk.ufv.ca
graphicdesign.ufv.ca
cisgitlab.ufv.ca
webmail.ufv.ca
*.ufv.ca
nginx.ufv.ca
alert.ufv.ca
cisgitlab.ufv.ca
alert.ufv.ca
graphicdesign.ufv.ca
proxy.ufv.ca
blogs.ufv.ca
catalog.ufv.ca
*.ufv.ca
arfileroom.ufv.ca
cismoodle.ufv.ca
*.ufv.ca
cjr.ufv.ca
printing.ufv.ca
*.ufv.ca
cisopenstack.ufv.ca
campusadmin.ufv.ca
connect.ufv.ca
vpn.ufv.ca
graphicdesign.ufv.ca
cisgitlab.ufv.ca
residence.ufv.ca
*.proxy.ufv.ca
*.ufv.ca
identitypprd.ufv.ca
myportal.ufv.ca
bn9-app4-prod.ufv.ca
*.ufv.ca
share.ufv.ca
cismoodle.ufv.ca
cisgitlab.ufv.ca
webmail.ufv.ca
blogs.ufv.ca
*.ufv.ca
*.ad.ufv.ca
cisweb.ufv.ca
warden.ufv.ca
www.ufv.ca
*.ufv.ca
graphicdesign.ufv.ca
myweb.ufv.ca
bn9-app5-prod.ufv.ca
graphicdesign.ufv.ca
*.ufv.ca
cisopenstack.ufv.ca
price.ufv.ca
blogs.ufv.ca
ward.ufv.ca
wp.ufv.ca
*.ufv.ca
identity.ufv.ca
connect.ufv.ca
alert.ufv.ca
app.ufv.ca
alert.ufv.ca
bn9-app4-pprd.ufv.ca
university.ufv.ca
residence.ufv.ca
temple.ufv.ca
garibaldi.ufv.ca
fox.ufv.ca
inspired.ufv.ca
beaker.ufv.ca
ruby.ufv.ca
cismoodle.ufv.ca
fast.ufv.ca
*.ufv.ca
alert.ufv.ca
events.ufv.ca
robson.ufv.ca
ics-app01-w-prd.ad.ufv.ca
survey.ufv.ca
cisopenstack.ufv.ca
warden.ufv.ca
cisopenstack.ufv.ca
university.ufv.ca
40.ufv.ca
bannerpprd.ufv.ca
video.ufv.ca
cjr.ufv.ca
university.ufv.ca
alert.ufv.ca
libguides.ufv.ca
bn9-app1-prod.ufv.ca
arfileroom.ufv.ca
www.ufv.ca
am.ufv.ca
ward.ufv.ca
pinto.ufv.ca
www.ufv.ca
alert.ufv.ca
survey.ufv.ca

Certificate

The complete raw certificate details for warden.ufv.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikUqcFQgS/8fAdrK7qwR
ziJrrGRoTZnzod0ZtOaTVqnyKhFmVi9ItO9QSojKW94YcGbcjq1lfED0XB7z9yLH
igT6Ly4rpVwffS0cVgEhAvh/lFcFB5746RheMuD3WSdIU5NiWd86Lckw9j8QzzM/
Egq/fUCx/BcabPKU6XG6/k3bH++ZXl5u7W3eD5DQ1fM1ocmNHYRVZ69HrV/LxbAY
jm2yeZm7cfW6Fsg20HCr42vxq4ICSwdN11Hs6x7xXmuIidhlD4YZaTC38uQhmAue
jXMIHDBW2EuhnU5GFTid1oCt4VXM1Wqzt7wS3Gva6so8OjmfJLDaqX6ke43TZigG
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13103693355743833424004956050501624234
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-01 21:17:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 21:47:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abbotsford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of the Fraser Valley'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'warden.ufv.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17454993000889743114194579375372120523356292354563118086818424170362557166991134808111683231650100895373983630408461605965357713662214242609048958698477616235356648737260085163266721276568697484025290746951073285183419230904854891652070696033621120355175827037257976534240473078848692964692032775196296525143929928973838349154997539581770801122516271933772473281068895353866414458387649402731782490536767080916725358158599290810813524878899745366225377828536781174987364038010318824198022936315733230468235495424753798152843453351951673292658409485968039429577551726605671197153793385153088359082619622428883468944993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warden.ufv.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e00077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000163bd51dedf0000040300483046022100c03e1569c919bf44a4d744aa99fff8cc7379f65d190eda79891e057bcfcb032c0221009f8d7793d9cc5934f6e6e6504f2c8dddc36e24192b52d079eb76832480c043f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000163bd51dede00000403004730450221009fc5c53b12b25c7318c826ef695d94f3b26e0567d85e1c2a6fe62bb7a869758602205cd2fed26983cec5ccb63ba9da138a12e8a113bbfeec7434c303b4ca80c591080075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000163bd51df11000004030046304402203183845b715a62a1c5a3b868f055899a9f125ef44a3e87ffe4adaaa98407417802207d9489fc47e3fe070620cc4db447463f9b6daa1091ff2d09f93d0e225ddb92f2007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000163bd51deff0000040300473045022100af107fdaf446edfafedc7b6b9fc06c9885b83b14829962184936cef0a4c4e29602201628f637c3dc89c47cf52f63e0d9938d2e99e5305cda5f6aa4e29d868db96249
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07984e8178576214656d9dc651956c3591bb2d83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000ed622e4ac0efa3d0bcdd088ae9d495dbf82690594b263c4cb2a5cd70ae4537dcc51cd2df73784eff6bccceb80c0bb53efd6b56fb5a94c694cda08c11f3a98da1be5de8e052a694289b03de8792f5d98fbfad654eeb3cd502c22dc53f270abb0c34d51da06350a41ea0d855cfb5e6ecb5d0134d252e4e1636080740de080f311dfa4ff199e5f3dcfa278fcfc4fe395beb974169a6908313e3ca3a3d60d799b07cef84a19f9419142ea7f154297fe53a79ba7bcfbf9e72ffcfeeed542ab38947ee3cf17a12c95987123b34bed53d4fef5089a2783ea49ec6117deefeeec4fe6c2fd3f8a6a4f135ae9887516280adc46d2aa01608dc7299e948e8d2d594a6f5d37