armssl.about.com
- About.com -
Issued by Thawte Premium Server CA
About this certificate
This digital certificate with serial number 05:c8:00:4c:bc:62:cb:bb:1b:cd:09:68:b9:2f:81:e6 was issued on by Thawte Consulting cc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
About.com
Organization:
About.com
Organization unit: Systems Operations
Organization unit: Systems Operations
State / Province:
New York
Locality: New York
Country: US
Locality: New York
Country: US
Thawte Consulting cc
Organization:
Thawte Consulting cc
Organization unit: Certification Services Division
Organization unit: Certification Services Division
State / Province:
Western Cape
Locality: Cape Town
Country: ZA
Locality: Cape Town
Country: ZA
This certificate has expire since
Certificate Details
Serial Number (hex): 05:c8:00:4c:bc:62:cb:bb:1b:cd:09:68:b9:2f:81:e6Serial Number (int): 7684605430274514642990330332268429798
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId:
AuthorityKeyId:
Fingerprint (sha1): 5a:b8:fe:3e:2b:1b:22:8b:a9:11:6e:35:5a:91:3f:b6:32:ea:d7:2c
Fingerprint (sha256): 1a:cd:59:0c:14:50:58:31:a0:28:1e:d5:26:77:c0:e6:3b:4e:68:26:9b:e5:cc:4d:84:49:e2:88:c8:81:af:f5
Revocation information
OCSP Server: http://ocsp.thawte.comCRL Distribution Point: http://crl.thawte.com/ThawteServerPremiumCA.crl
Check the revocation status for certificate armssl.about.com
0
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for armssl.about.com
Public Key Algorithm
RSA
Key Size
1024
Signature Algorithm
SHA1 with RSA
Key Usage
Extended Key Usages
Server Authentication
Client Authentication
Extensions
4 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
This certificate doesn't contain any subject alternative names.
Other certificates including the domain name about.com
(limited to 100 certificates)
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
index.investopedia.com
dotdash.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
wildcardsan.askmediagroup.com
ssl003.insnw.net
pe-adhoc-4.app.qa.aws.about.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
a-ue1.dotdash.com
cdncert.askmediagroup.com
continual.app.qa.aws.about.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
*.index.about.com
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
ssl003.insnw.net
dotdash.map.fastly.net
about.com
dotdash.map.fastly.net
pe-batch.app.qa.aws.about.com
wildcardsan.askmediagroup.com
pe-adhoc-4.app.qa.aws.about.com
b2-alt.shared.global.fastly.net
persistent.app.qa.aws.about.com
wildcardsan.askmediagroup.com
index.investopedia.com
disposable.app.qa.aws.about.com
dns-vetting1-mims-pawel.map.fastly.net
continual.app.qa.aws.about.com
continual.app.qa.aws.about.com
a-ue1.dotdash.com
wildcardsan.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
persistent.app.qa.aws.about.com
a-uw2.dotdash.com
b2-alt.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
*.about.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
persistent.app.qa.aws.about.com
ssl003.insnw.net
*.index.about.com
*.about.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
*.about.com
b2-alt.shared.global.fastly.net
dotdash.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
*.about.ask.com
*.about.ask.com
cdncert.askmediagroup.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
link.about.com
*.about.com
a-ue1.dotdash.com
*.about.com
ssl003.insnw.net
cdncert.askmediagroup.com
pe-adhoc-3.app.qa.aws.about.com
about.com
b2-alt.shared.global.fastly.net
pe-adhoc-2.app.qa.aws.about.com
outlook.mindspark.com
cdncert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
armssl.about.com
wildcardsan.askmediagroup.com
ssl003.insnw.net
b2-alt.shared.global.fastly.net
cdncert.askmediagroup.com
continual.app.qa.aws.about.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
index.investopedia.com
cdncert.askmediagroup.com
ssl003.insnw.net
a-uw2.dotdash.com
continual.app.prod.aws.about.com
g.ssl.fastly.net
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
ssl003.insnw.net
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
index.investopedia.com
dotdash.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
wildcardsan.askmediagroup.com
ssl003.insnw.net
pe-adhoc-4.app.qa.aws.about.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
a-ue1.dotdash.com
cdncert.askmediagroup.com
continual.app.qa.aws.about.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
*.index.about.com
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
ssl003.insnw.net
dotdash.map.fastly.net
about.com
dotdash.map.fastly.net
pe-batch.app.qa.aws.about.com
wildcardsan.askmediagroup.com
pe-adhoc-4.app.qa.aws.about.com
b2-alt.shared.global.fastly.net
persistent.app.qa.aws.about.com
wildcardsan.askmediagroup.com
index.investopedia.com
disposable.app.qa.aws.about.com
dns-vetting1-mims-pawel.map.fastly.net
continual.app.qa.aws.about.com
continual.app.qa.aws.about.com
a-ue1.dotdash.com
wildcardsan.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
persistent.app.qa.aws.about.com
a-uw2.dotdash.com
b2-alt.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
*.about.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
persistent.app.qa.aws.about.com
ssl003.insnw.net
*.index.about.com
*.about.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
*.about.com
b2-alt.shared.global.fastly.net
dotdash.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
*.about.ask.com
*.about.ask.com
cdncert.askmediagroup.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
link.about.com
*.about.com
a-ue1.dotdash.com
*.about.com
ssl003.insnw.net
cdncert.askmediagroup.com
pe-adhoc-3.app.qa.aws.about.com
about.com
b2-alt.shared.global.fastly.net
pe-adhoc-2.app.qa.aws.about.com
outlook.mindspark.com
cdncert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
armssl.about.com
wildcardsan.askmediagroup.com
ssl003.insnw.net
b2-alt.shared.global.fastly.net
cdncert.askmediagroup.com
continual.app.qa.aws.about.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
index.investopedia.com
cdncert.askmediagroup.com
ssl003.insnw.net
a-uw2.dotdash.com
continual.app.prod.aws.about.com
g.ssl.fastly.net
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
Certificate
The complete raw certificate details for armssl.about.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIDejCCAuOgAwIBAgIQBcgATLxiy7sbzQlouS+B5jANBgkqhkiG9w0BAQUFADCB zjELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJ Q2FwZSBUb3duMR0wGwYDVQQKExRUaGF3dGUgQ29uc3VsdGluZyBjYzEoMCYGA1UE CxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjEhMB8GA1UEAxMYVGhh d3RlIFByZW1pdW0gU2VydmVyIENBMSgwJgYJKoZIhvcNAQkBFhlwcmVtaXVtLXNl cnZlckB0aGF3dGUuY29tMB4XDTEwMDMwOTAwMDAwMFoXDTEyMDMwODIzNTk1OVow fzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCE5ldyBZb3JrMREwDwYDVQQHFAhOZXcg WW9yazESMBAGA1UEChQJQWJvdXQuY29tMRswGQYDVQQLFBJTeXN0ZW1zIE9wZXJh dGlvbnMxGTAXBgNVBAMUEGFybXNzbC5hYm91dC5jb20wgZ8wDQYJKoZIhvcNAQEB BQADgY0AMIGJAoGBALp+1puf4ik91bDLf+g4vLIdtLBKPRB9CGuVFGpHE1Ge5c6d 6pw7uSxjPQelpGoIRU1F4fNLeHHKwhsRPnn2kyDJWW1Agvz9j+FZILq5CRpPS2jZ 0cLHNtSd5wug8K6qflYILqCLwchUMf/8n+HH1gh7eEKMSHU/iu2OM25WnHx5AgMB AAGjgaYwgaMwDAYDVR0TAQH/BAIwADBABgNVHR8EOTA3MDWgM6Axhi9odHRwOi8v Y3JsLnRoYXd0ZS5jb20vVGhhd3RlU2VydmVyUHJlbWl1bUNBLmNybDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUF BzABhhZodHRwOi8vb2NzcC50aGF3dGUuY29tMA0GCSqGSIb3DQEBBQUAA4GBAI5M J+NyEY2y6GtNrgcim6GS1DMy3Q7SsXP8CRBoLBL7ldFgBUDUrh7e4kcw5rcMR0SF W7NOfJuJA/IItxCv/8Ot2VgaC6jqYalHFMjtie5CTnP3zIVD5p8UcDBgmK0XysRF Lqm4P8cXrr7m2QNVHjf/p/ik7+73Hi2bcw3pUJlI -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6ftabn+IpPdWwy3/oOLyyHbSw Sj0QfQhrlRRqRxNRnuXOneqcO7ksYz0HpaRqCEVNReHzS3hxysIbET559pMgyVlt QIL8/Y/hWSC6uQkaT0to2dHCxzbUnecLoPCuqn5WCC6gi8HIVDH//J/hx9YIe3hC jEh1P4rtjjNuVpx8eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7684605430274514642990330332268429798 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Western Cape' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cape Town' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte Consulting cc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Services Division' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte Premium Server CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-03-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-03-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'About.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Systems Operations' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'armssl.about.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 130961567188384112170748863743705962404417980463121076126985755924600938845815515858579004095209002030809486748109837704915489578861928855192510732732367890992749588874663270270531303781810311691283528626420484872040605828753792718441789477150590790266137962203342372076262359551334497513643050002815754468473 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.thawte.com/ThawteServerPremiumCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (1024 bits) 008e4c27e372118db2e86b4dae07229ba192d43332dd0ed2b173fc0910682c12fb95d1600540d4ae1edee24730e6b70c4744855bb34e7c9b8903f208b710afffc3add9581a0ba8ea61a94714c8ed89ee424e73f7cc8543e69f1470306098ad17cac4452ea9b83fc717aebee6d903551e37ffa7f8a4efeef71e2d9b730de9509948