ccass-sbe.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:54:bc:86:3e:c3:d4:63:dd:ae:5f:f8:a5:32:8d:7d:60:97 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ccass-sbe.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:54:bc:86:3e:c3:d4:63:dd:ae:5f:f8:a5:32:8d:7d:60:97Serial Number (int): 290171168520650797391086325105917358334103
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 55:60:0a:14:a3:3f:a3:10:e4:e9:02:9d:62:33:62:85:5d:80:86:db
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a7:ff:fe:2c:d7:1e:dc:a2:17:f6:8b:27:79:60:5e:50:82:f9:fb:a2
Fingerprint (sha256): 19:a5:42:37:55:83:38:11:b1:7e:41:82:2a:06:6e:22:a2:42:1a:f4:28:ba:b9:a7:fc:31:76:2d:8a:da:1e:48
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ccass-sbe.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ccass-sbe.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ccass-sbe.org
www.ccass-sbe.org
www.ccass-sbe.org
Other certificates including the domain name ccass-sbe.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for ccass-sbe.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgISA1S8hj7D1GPdrl/4pTKNfWCXMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA0MTkxMzMzMDlaFw0x ODA3MTgxMzMzMDlaMBgxFjAUBgNVBAMTDWNjYXNzLXNiZS5vcmcwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQC7bW+r20ec0YqStycbh7lhzJgGBy5DoLap bOtoLbWzOd3ck6IMArwFAg8x3FuQFOslMFWwIwsNSokvLy0uJ2o4JJS6hekk7GRq /f8hKw4b9qW+V/qDySk55SCv3NXYbvwegcC/tTHVwkzzP1E+yuhBSNthFQsaq9dP 8298f8gBg/r9iQC7AihjIsYS0SkVkh5QILRbswq0EO2MA9GNDQ7cAXQ+FpppdshF 2CuIktLbNiuwlXUiPs005QqtXGJ7IzA3HVLdENy3dDvnSqlehJY6UE+ppewNthi0 BKvLzpAV9C6WZH/P5W46mY1Zhg9HfU/RNaiu1zJFzIw5BCipT4aG8xoaiX1OCE4d PuAareyUDvHCSHvtcsELoCUk94D1ZPwzvv77I5wOFK1uVfAP4cLnXBonJhSQ3o2j vZUBUrEBD7Sb9+6x3q01xmtsTXhdJyxi/dppn40CkTc8G2KNW5URy0selBOrQ88g nFQuhrZwn9XiqlkOhNBZoA1ciXCxoVSv9tz/a4XZA7m3C96AFFTQ104dXM2rEMCa bPqGMTIVGcBjCti2g533c4sfcQ1JWYEZ4UOYZSO3m+B7d6ZzYGJ8YYDJWmF6SRqs 2Ge7B97QfCG2fsOBPNhUMfcslGs66tohnaFxg820UkP81fzv52t21nPePX+HS757 3Z2MkiMKLQIDAQABo4IDJzCCAyMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRVYAoU oz+jEOTpAp1iM2KFXYCG2zAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDWNjYXNzLXNiZS5vcmeCEXd3 dy5jY2Fzcy1zYmUub3JnMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEE AYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBi ZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNj b3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0 cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEDBgorBgEEAdZ5AgQC BIH0BIHxAO8AdgDbdK/uyynssf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWLe UsfXAAAEAwBHMEUCIBTsF8VVj14PON7JuE56Tc68bK76yDFxjHmCzQqTfjvoAiEA s5g2B4fPLoedR9wi+CyQ694xnOfMqd7LKB0MFlj539AAdQApPFGWVMg5ZbqqUPxY B9S3b79Yeily3KTDDPTlRUf0eAAAAWLeUsf1AAAEAwBGMEQCIEA1PjhvMuwMa5Zi 8zwnWiPjHDQBEdXRFBUBWYlpdSDUAiALVh3ZxsHEbd2cczN/sP2vcHUZVznzxOAM xiek9U8A5jANBgkqhkiG9w0BAQsFAAOCAQEAkfCFRcjBv0w8bqxhpMOVPJtY/LtZ gDtfrYQGfN9dxpmCgLKRzN02gpcTUUAsUgFYC+O7EoqZLAfBce8WjxIO03J9se6U xEwQr2tSqMO01pbtGQwIi3+RLdud1HkO6qgZ1QYWVzH8ayHz7QzIBKr+8VmfC1JH kTRiJ50gj7FUF09KPoDjT7BCvrzC10YKsHsmEdCHNn4HCJXbBCx/WapEAwX3n5ej P4iMKP9SmrsMDlcvH4qZhTkMRTMCbkZDh2FSGSNO2yv9MJlz11le24rRrIfIOECy yiHoUjcBoTLBZ6iEH+//1qZPiXpDQ9SeolZ8rs/D/6EB29HsAUcKeipIVQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu21vq9tHnNGKkrcnG4e5 YcyYBgcuQ6C2qWzraC21sznd3JOiDAK8BQIPMdxbkBTrJTBVsCMLDUqJLy8tLidq OCSUuoXpJOxkav3/ISsOG/alvlf6g8kpOeUgr9zV2G78HoHAv7Ux1cJM8z9RPsro QUjbYRULGqvXT/NvfH/IAYP6/YkAuwIoYyLGEtEpFZIeUCC0W7MKtBDtjAPRjQ0O 3AF0PhaaaXbIRdgriJLS2zYrsJV1Ij7NNOUKrVxieyMwNx1S3RDct3Q750qpXoSW OlBPqaXsDbYYtASry86QFfQulmR/z+VuOpmNWYYPR31P0TWortcyRcyMOQQoqU+G hvMaGol9TghOHT7gGq3slA7xwkh77XLBC6AlJPeA9WT8M77++yOcDhStblXwD+HC 51waJyYUkN6No72VAVKxAQ+0m/fusd6tNcZrbE14XScsYv3aaZ+NApE3PBtijVuV EctLHpQTq0PPIJxULoa2cJ/V4qpZDoTQWaANXIlwsaFUr/bc/2uF2QO5twvegBRU 0NdOHVzNqxDAmmz6hjEyFRnAYwrYtoOd93OLH3ENSVmBGeFDmGUjt5vge3emc2Bi fGGAyVphekkarNhnuwfe0Hwhtn7DgTzYVDH3LJRrOuraIZ2hcYPNtFJD/NX87+dr dtZz3j1/h0u+e92djJIjCi0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 290171168520650797391086325105917358334103 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-19 13:33:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-18 13:33:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ccass-sbe.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764637428257767131591966584060379651520088127072927116270056671953241658748260618266847793073349352479544479601964489808564597932991680375648689176381393611055544310560931833500464631050951116126286874201211699263315045952868995517826991758746972698849990299564380181143264431128161772202085590200975887220643472812190758686209934959978325487164189201947356773977967649863314749735830195453977834709931884736658163626486803323671790590480830123012247026731733531409116699333146685856399253640711425326553488465223252207431879329257201253344671912950518017657956605793578097683889348157109110226312085426276381354115295586088623148200068655315870759888236450993641067646346578037019111555465155281455026117058617634599206968710245687055960416627418496245455712609495255668813385406736641370173049642390401952605500669258496796654671962273116427903054733276690084296617624596592217194488350303127301194732777425287228894102722184280427702111452658238171079535964862286098634237368996543795245593822456787448620191672521993915083773594341934885784499107461924742223400920161448276739896038423011770062949651108066466540835584711424392725946427948540577425964402506392027084280445191406036753675555296919712340241715227437770115079408173 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 55600a14a33fa310e4e9029d623362855d8086db . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccass-sbe.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccass-sbe.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162de52c7d70000040300473045022014ec17c5558f5e0f38dec9b84e7a4dcebc6caefac831718c7982cd0a937e3be8022100b398360787cf2e879d47dc22f82c90ebde319ce7cca9decb281d0c1658f9dfd0007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162de52c7f50000040300463044022040353e386f32ec0c6b9662f33c275a23e31c340111d5d11415015989697520d402200b561dd9c6c1c46ddd9c73337fb0fdaf7075195739f3c4e00cc627a4f54f00e6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0091f08545c8c1bf4c3c6eac61a4c3953c9b58fcbb59803b5fad84067cdf5dc6998280b291ccdd3682971351402c5201580be3bb128a992c07c171ef168f120ed3727db1ee94c44c10af6b52a8c3b4d696ed190c088b7f912ddb9dd4790eeaa819d506165731fc6b21f3ed0cc804aafef1599f0b5247913462279d208fb154174f4a3e80e34fb042bebcc2d7460ab07b2611d087367e070895db042c7f59aa440305f79f97a33f888c28ff529abb0c0e572f1f8a9985390c4533026e464387615219234edb2bfd309973d7595edb8ad1ac87c83840b2ca21e8523701a132c167a8841fefffd6a64f897a4343d49ea2567caecfc3ffa101dbd1ec01470a7a2a4855