pioneer-foods-uk.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:01:97:54:85:45:16:39:6e:b6:4f:9c:98:5d:cd:15:25:32 was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pioneer-foods-uk.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:01:97:54:85:45:16:39:6e:b6:4f:9c:98:5d:cd:15:25:32Serial Number (int): 261878292445535416226631895011767713342770
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 86:e2:e7:21:79:9e:d1:e1:4f:c8:1f:cc:ba:a6:41:49:dd:47:b2:ab
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c5:40:64:dc:37:3f:64:d7:07:1e:29:b0:7c:c7:04:ad:9b:9b:e5:0e
Fingerprint (sha256): 16:81:7b:6c:a4:ba:6c:9e:88:02:c5:e8:36:41:c2:c4:bf:ab:72:f4:6a:7d:fb:3c:83:af:a4:36:cb:3a:2c:a0
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate pioneer-foods-uk.com
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pioneer-foods-uk.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bokomo.co.uk
live-pioneer-foods-uk.kissdigital.co.uk
mail.live-pioneer-foods-uk.kissdigital.co.uk
pioneer-foods-uk.com
www.bokomo.co.uk
www.live-pioneer-foods-uk.kissdigital.co.uk
www.pioneer-foods-uk.com
live-pioneer-foods-uk.kissdigital.co.uk
mail.live-pioneer-foods-uk.kissdigital.co.uk
pioneer-foods-uk.com
www.bokomo.co.uk
www.live-pioneer-foods-uk.kissdigital.co.uk
www.pioneer-foods-uk.com
Other certificates including the domain name pioneer-foods-uk.com
(limited to 100 certificates)
pioneer-foods-uk.com
pioneer-foods-uk.com
pioneer-foods-uk.com
pioneer-foods-uk.com
www.bokomo.co.uk
pioneer-foods-uk.com
pioneer-foods-uk.com
bokomo.co.uk
www.bokomo.co.uk
pioneer-foods-uk.com
bokomo.co.uk
pioneer-foods-uk.com
pioneer-foods-uk.com
pioneer-foods-uk.com
pioneer-foods-uk.com
bokomo.co.uk
pioneer-foods-uk.com
www.pioneer-foods-uk.com
www.bokomo.co.uk
www.bokomo.co.uk
pioneer-foods-uk.com
pioneer-foods-uk.com
pioneer-foods-uk.com
pioneer-foods-uk.com
live-pioneer-foods-uk.kissdigital.co.uk
pioneer-foods-uk.com
pioneer-foods-uk.com
pioneer-foods-uk.com
www.bokomo.co.uk
pioneer-foods-uk.com
pioneer-foods-uk.com
bokomo.co.uk
www.bokomo.co.uk
pioneer-foods-uk.com
bokomo.co.uk
pioneer-foods-uk.com
pioneer-foods-uk.com
pioneer-foods-uk.com
pioneer-foods-uk.com
bokomo.co.uk
pioneer-foods-uk.com
www.pioneer-foods-uk.com
www.bokomo.co.uk
www.bokomo.co.uk
pioneer-foods-uk.com
pioneer-foods-uk.com
pioneer-foods-uk.com
pioneer-foods-uk.com
live-pioneer-foods-uk.kissdigital.co.uk
Certificate
The complete raw certificate details for pioneer-foods-uk.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGITCCBQmgAwIBAgISAwGXVIVFFjlutk+cmF3NFSUyMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjMwMTM5NTlaFw0y MDAzMjIwMTM5NTlaMB8xHTAbBgNVBAMTFHBpb25lZXItZm9vZHMtdWsuY29tMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwy9yrXabecHeIHILlA246SI O0jdxdD8lqgP7AfU8yoJnvZmpwHYjyDAYgbjMLvK5Kkk5pDShtY0lQUsCeBnaEMZ K7oIpChg2h0YSzy4nE/+kuuuj8NYmYQxNMrGnioRMkPm/qgN9hOy3M0PBNumU9rs ZL4Lj1p0ILN+2L5W9nY0c1fjCmveXKtPkCer96NSfVbVNtJiKYfejuGcWZP6z2mk CD3yueuBdpqUvvDFcIpoVQkyuf9wjcJ97TDsCuKtiHPCGiO+F4GaYG2bUEKT5ry8 CNrvKAnD1d3m50x0QiNlXXgZJhOCG5zYRc6Xx7iAjTuBknM8mtHQOHAyKFQMBQID AQABo4IDKjCCAyYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSG4ucheZ7R4U/IH8y6 pkFJ3UeyqzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEF BQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5j cnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5j cnlwdC5vcmcvMIHfBgNVHREEgdcwgdSCDGJva29tby5jby51a4InbGl2ZS1waW9u ZWVyLWZvb2RzLXVrLmtpc3NkaWdpdGFsLmNvLnVrgixtYWlsLmxpdmUtcGlvbmVl ci1mb29kcy11ay5raXNzZGlnaXRhbC5jby51a4IUcGlvbmVlci1mb29kcy11ay5j b22CEHd3dy5ib2tvbW8uY28udWuCK3d3dy5saXZlLXBpb25lZXItZm9vZHMtdWsu a2lzc2RpZ2l0YWwuY28udWuCGHd3dy5waW9uZWVyLWZvb2RzLXVrLmNvbTBMBgNV HSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpo dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA 8AB1APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAABbzCgJV8AAAQD AEYwRAIgWvDjORka8/bTVsIpwO3okakoX4upYbptnRGSoaSbaW4CIFd0aRjYI3vn 68CubH5SHiTZd5IKLPByoiI9UyEjrkO+AHcAB7dcG+V9aP/xsMYdIxXHuuZXfFeU t2ruvGE6GmnTohwAAAFvMKAlgQAABAMASDBGAiEApdlI5nFNntyQpzAlxp7XjW2a FmmB8YYqtPTDrlxcs7MCIQDtfMrtPW6ck6G536xdGZM5indo0PQSlSFm5Tr2ROn6 jDANBgkqhkiG9w0BAQsFAAOCAQEAQVXTXZfihCi8T7Ibv4sIhBLOenbHI0qNFarP l4rIJNdDv+13qBNR1EMNA6wfXjpzrtVPU/9etHbHtnL3lyBNg/Jpfm5U2DmZsjcu h6/19H2KeS72KEEI21eKgk1Y7PPYpWUFWGDissHFGgK6KOJSfs67jCoEdr7ZjrBp G/WZnBpG76werAxdFccfi5a0QAn+owePmk/UtmXsSan/U5w0yum90BkiYbSSrje1 e19AKwOubaxbFX96yslhWpmce5WIkSLHxqpS5sSe50EBS9+cQTDzmnQX2JYdBeup qbY/5LPvUkPZt6wnqwqYBW7xj0Cp86rfdlETAMhivhYUICjkJg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwy9yrXabecHeIHILlA2 46SIO0jdxdD8lqgP7AfU8yoJnvZmpwHYjyDAYgbjMLvK5Kkk5pDShtY0lQUsCeBn aEMZK7oIpChg2h0YSzy4nE/+kuuuj8NYmYQxNMrGnioRMkPm/qgN9hOy3M0PBNum U9rsZL4Lj1p0ILN+2L5W9nY0c1fjCmveXKtPkCer96NSfVbVNtJiKYfejuGcWZP6 z2mkCD3yueuBdpqUvvDFcIpoVQkyuf9wjcJ97TDsCuKtiHPCGiO+F4GaYG2bUEKT 5ry8CNrvKAnD1d3m50x0QiNlXXgZJhOCG5zYRc6Xx7iAjTuBknM8mtHQOHAyKFQM BQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 261878292445535416226631895011767713342770 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 01:39:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-22 01:39:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pioneer-foods-uk.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23107892814658791356748532477083546065954859747228035010439629814829311466940306156792289908451857466426297557444722029583097707879201990515288253847549305783673725407315126225795977320835875349156004737074691241265354261534408041030812441922841782555442148330987550022671519085059038916260531749564926214692794645494393775700773565917876748241700790628303067410382309930975248365855221533918019358224761896295103388084616534987878222109471298900085837978449438205143639405506157318574612821929504047675387265562832673822754219123471668288688452077347598930048638290169313054958190010167294970685281589669325064899589 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 86e2e721799ed1e14fc81fccbaa64149dd47b2ab . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (215 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bokomo.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-pioneer-foods-uk.kissdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.live-pioneer-foods-uk.kissdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneer-foods-uk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bokomo.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.live-pioneer-foods-uk.kissdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pioneer-foods-uk.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f30a0255f000004030046304402205af0e339191af3f6d356c229c0ede891a9285f8ba961ba6d9d1192a1a49b696e022057746918d8237be7ebc0ae6c7e521e24d977920a2cf072a2223d532123ae43be00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f30a025810000040300483046022100a5d948e6714d9edc90a73025c69ed78d6d9a166981f1862ab4f4c3ae5c5cb3b3022100ed7ccaed3d6e9c93a1b9dfac5d1993398a7768d0f412952166e53af644e9fa8c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004155d35d97e28428bc4fb21bbf8b088412ce7a76c7234a8d15aacf978ac824d743bfed77a81351d4430d03ac1f5e3a73aed54f53ff5eb476c7b672f797204d83f2697e6e54d83999b2372e87aff5f47d8a792ef6284108db578a824d58ecf3d8a565055860e2b2c1c51a02ba28e2527ecebb8c2a0476bed98eb0691bf5999c1a46efac1eac0c5d15c71f8b96b44009fea3078f9a4fd4b665ec49a9ff539c34cae9bdd0192261b492ae37b57b5f402b03ae6dac5b157f7acac9615a999c7b95889122c7c6aa52e6c49ee741014bdf9c4130f39a7417d8961d05eba9a9b63fe4b3ef5243d9b7ac27ab0a98056ef18f40a9f3aadf76511300c862be16142028e426