citi-test-2023-ssl.dlocal.com

- dLocal Technologies SA -

Issued by Sectigo RSA Extended Validation Secure Server CA

About this certificate

This digital certificate with serial number 17:f8:14:28:14:92:a0:cb:bc:da:d5:07:94:bf:2a:47 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

dLocal Technologies SA

Company registration number: 218043970015
Organization: dLocal Technologies SA
State / Province: Montevideo
Country: UY

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 17:f8:14:28:14:92:a0:cb:bc:da:d5:07:94:bf:2a:47
Serial Number (int): 31860342347655238635670474955744553543
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: d1:d1:a5:f2:2f:e8:a2:b5:9a:43:6c:90:ec:12:68:55:83:51:9f:85
AuthorityKeyId: 2c:69:ff:80:c9:87:90:ae:34:e1:b4:e7:4c:93:85:99:40:e9:a7:b2

Fingerprint (sha1): f6:01:7d:c1:fa:3d:16:82:9a:20:bb:91:ce:5c:02:f1:56:c7:d1:65
Fingerprint (sha256): 14:c7:04:3b:95:86:41:3b:63:d4:2f:8d:ae:df:f7:fc:60:f0:0c:5e:9e:2a:67:57:ff:7f:94:5a:52:f4:cf:66

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl

Check the revocation status for certificate citi-test-2023-ssl.dlocal.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citi-test-2023-ssl.dlocal.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citi-test-2023-ssl.dlocal.com
www.citi-test-2023-ssl.dlocal.com

Other certificates including the domain name dlocal.com

(limited to 100 certificates)
news.dlocal.com
support.techfirstgulf.com
resource.dlocal.com
suporte.controladoria.digital
supporttest.frutostech.com
testportal.dlocal.com
help.rmgcardservices.org
docs.dlocal.com
suporte.controladoria.digital
support.xformative.cloud
support.techfirstgulf.com
desk.churchadm.com
ajuda.receitadigital.com
investor.dlocal.com
faq.suflex.com.br
solutions.lenovocloudsoftware.com
support.cymetricx.com
soporte.exalta.com.mx
helpdesk.yourtekpro.com
support.rmtcam.com
testportal.dlocal.com
support.retransform.com
ajuda.receitadigital.com
helpdesk.fibraforte.it
docs.dlocal.com
help.afterfiveapp.com
suporte.controladoria.digital
docs.dlocal.com
support.launchify.net
support.zendure.com
help.dlocal.com
help.rmgautofinance.org
dlocal.com
forms.colegiopraxis.com.br
support.strident.uk.com
forms.domainzguru.com
soporte.masin.co
news.dlocal.com
support.telemation.com.au
support.aztec.city
news.dlocal.com
suporte.escritax.com.br
support.somnuz.co
suporte.controladoria.digital
support.strident.uk.com
citi-test-2023-ssl.dlocal.com
testportal.dlocal.com
suporte.controladoria.digital
support.coreproducts.ca
suporte.controladoria.digital
tsmsupport.lenovocloudsoftware.com
testportal.dlocal.com
docs.dlocal.com
support.dlocal.com
dlocal.com
suporte.controladoria.digital
go.dlocal.com
support.thewaterwaydevelopments.com
ajuda.receitadigital.com
docs.dlocal.com
desk.unisight.one
links.dlocal.com
assistenza.ecologica.it
testportal.dlocal.com
support.yoizen.com
help2.jdeckman.com
support.newavex.com
suporte.controladoria.digital
*.dlocal.com
helpdesk.baiyuan.io
help.afterfiveapp.com
support.retransform.com
support.telemation.com.au
redeban-prod.dlocal.com
suporte.controladoria.digital
support.wibu.jp
testportal.dlocal.com
helpdesk.mohanvadivel.com
support.zendure.com
news.dlocal.com
tickets.onlinemarketing-zentrum.ch
support.retransform.com
it.ronati.com
testportal.dlocal.com
docs.dlocal.com
support.mindsize.com
documentation.dlocal.com
exhibition.skoch.in
support-infosys.gknot.co.jp
news.dlocal.com
desk.unisight.one
suporte.controladoria.digital
supporttest.frutostech.com
*.dlocal.com
support.ubtechpros.com
suporte.escritax.com.br
facilities.fessupport.com
suporte.controladoria.digital
*.dlocal.com
help.afterfiveapp.com

Certificate

The complete raw certificate details for citi-test-2023-ssl.dlocal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 31860342347655238635670474955744553543
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Extended Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '218043970015'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montevideo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dLocal Technologies SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citi-test-2023-ssl.dlocal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 646443697002588583249477784800093282014502918473872187901089346053478552317339150953892406199823289670062843146874624920156945597458167404655647886900044108272512513068389998377714595276272352285392553264687279470443933290471431385839389027138581430505436196208970997891766005792118105449578761562354182356348301362948116065002172333751076349614824752199764017547699185624664673707053954448217478360502056131582460432185533106112958550069303447155424184856092467919017517109711850068481389589815839569824597041566076455901770657091010743488348971183371709635272039037787266679118824829154431087593732223020161428510693996280768094605402704292372937046418248931862225434777841816736513579906766361302997163607571468951355938306877667129610738321953076504838501437875391600955807411877605699085450248025022993303028727540805393213899656296787289449841692327883772865784509785280226655519994865199570955153957023741382706108733565837148479710178095504227811776635769160840862500926863950882795109619040907362116724564335090284250750787036789322949225493857746116773635019933338335134154075010603378115715247408750333543051944397842720269574845052622631088652864458191253490560406877543924497784524709063432309641450205506089911551527511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2c69ff80c98790ae34e1b4e74c93859940e9a7b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1d1a5f22fe8a2b59a436c90ec12685583519f85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citi-test-2023-ssl.dlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citi-test-2023-ssl.dlocal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00344e0ecf90158e34bcc788efc9ebcda52e37f8eac368f3d8e5b1d95d187d281a129726ca03b570635fee7123375065c84de301253cfa076121724bcc6b6654603c802f2ccd822bf3a0cbdddc1c6f0d30728ba4a58bb2fd280439ce993d3e35f79eb37f464072aeac21e89cec50502c11d07e9f81e34400fa90c940e1b4a2e8ec090d0b996eb4315742184af9fda942cd5f3e1bccfd26d3e23e360c130fbdb14fa546131fad8056e59d111daa4bc345547d4d0163b1aa258fa69dd2f553bf25f55b604826786687830f4e1165998e46557467f077c50e85074a8e3fd7d7a594e6632123a6300e1e47571d8dcac43e3d9ecfafd49fb9347d2cf82d334afe887525