*.kompass.de

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 0f:7c:35:f5:d8:e0:a7:3b:34:83:c2:d2:56:86:d5:da was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.kompass.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:7c:35:f5:d8:e0:a7:3b:34:83:c2:d2:56:86:d5:da
Serial Number (int): 20583359192961217485138900751487522266
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d4:45:1f:c7:68:44:86:6e:b2:09:e1:62:f3:5c:20:12:fb:ea:23:39
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 05:4b:24:14:a0:81:32:ab:0a:3e:72:45:bf:59:1a:f0:50:2c:1a:6a
Fingerprint (sha256): 1f:51:06:21:92:1e:79:7f:3f:e0:10:ff:f0:c1:8a:f8:88:88:c9:d2:17:80:7f:ef:74:44:47:7c:20:93:57:9c

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate *.kompass.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.kompass.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.kompass.de
kompass.de

Other certificates including the domain name kompass.de

(limited to 100 certificates)
hauntedjuneau.com
adm.evdc.com.br
azin.software
elevation.kompass.de
nemrtyvip.com
www.cotonoudirectinter.com
shop1.kompass.de
shop.lonelyplanet.de
map2.kompass.de
shop1.kompass.de
myfootxladmin.estore.business
www.aree.ba
*.kompass.de
www.paligrammar.com
shop1.kompass.de
friendle.gg
shop1.kompass.de
shop.lonelyplanet.de
shop1.kompass.de
banabifirsat.com
beecode.es
shop.kompass.de
*.kompass.de
shop.kompass.de
kompass.de
live.ffcm.es
basecamp.api.kompass.de
shop1.kompass.de
shop.kompass.de
moum.day
www.kompass.de
shop.lonelyplanet.de
shop.lonelyplanet.de
friendle.gg
dev-we2p.kompass.de
shop1.kompass.de
shop.kompass.de
shop1.kompass.de
www.cotonoudirectinter.com
app.pipestream.tatvic.com
www.panoramas.info
shop.kompass.de
www.vybinex.com
shop.kompass.de
shop.lonelyplanet.de
*.kompass.de
dnbnxt.indyriot.com
crm-stage.kompass.de
dev.theflightplan.io
hudsonperdue.com
integrationhub.idealofsweden.team
shop1.kompass.de
shop1.kompass.de
links.sbus.telema.whitecloud.jp
shop.lonelyplanet.de
basecamp.staging.kompass.de
landing.guavavet.com
shop.kompass.de
www.alpha.feedbucket.io
shop1.kompass.de
shop1.kompass.de
*.kompass.de
api.kompass.de
none.is
bootleggers.secretcityadventures.com
www.lianchienergiavital.com
shop.lonelyplanet.de
shop1.kompass.de
amrmohamed.ca
www.tairyu.org
*.kompass.de
*.kompass.de
crm-stage.kompass.de
shop.kompass.de
kompass.de
alkimio.com
shop.kompass.de
app.botza.io
shop.kompass.de
shop1.kompass.de

Certificate

The complete raw certificate details for *.kompass.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIQD3w19djgpzs0g8LSVobV2jANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe
Fw0xODA4MjMwMDAwMDBaFw0xOTA4MDMxMjAwMDBaMBcxFTATBgNVBAMMDCoua29t
cGFzcy5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMM6pt537FvK
1J4EVFMXgvUA82JhBRppE5OjZfhCvpbWv4iVyljHUqBXZN1W/IChlWcvZBogroVj
XjXAxXE87QhlFwyNpuhI1fmz0KrTIJZ/CDaHBIDCq7hN8Zpfa4oTkXJO0ArZc2Qu
LrcReqYAi9r1mp+SrgOgFXvA2Np4HWJaaT4BTQxppvXWJg7Ps3K8PoBZjiTpCoqx
6YBwbwJqRSAHmU4ERuz3hxU/+cEPl4t9dyj/cVFJzwL8aBE2Tvn/CoJV01xunI6h
7ftvd/cOyFqIvClg66EQRpkQFBKS04QFTkZeGjcqswSTRmHJ9Pcwxd8hzdSuBbzj
HD5p6Sn/aHUT+m2H8qVSe7St3vjD3OXnMuGBAn2+PAGtm8xIr6rGpkFEegxD+IIn
VtSI8jfdEnjm47vwypOcgMmnnQLdpqOF7P8TEJ06E7xfGVvfaVnSj8p6ocBhsNlT
QgbvNU2x+J0mgwouHmIgTHoet2plPwtG9nAWrYIZACOzee4yDNF8XxEbEEZYSjDW
nyzdH4PKy7yXZRSlMwLYyiENoJia4kL/jELwv8feZVwYXRSPLa3P009gPKeGUTmR
7yYAA+YIyoH2zCYXtXkYks1dkz4ah/a3DcJ4LXLoUPDbxYa2qNsrgOj3kJw1LuBh
CJLEWMkUziDCWNyemTEpCLk1ttHJxyoHAgMBAAGjggG1MIIBsTAfBgNVHSMEGDAW
gBSljP4yzOsPLNQZxgi4ACSIXcPFtzAdBgNVHQ4EFgQU1EUfx2hEhm6yCeFi81wg
EvvqIzkwIwYDVR0RBBwwGoIMKi5rb21wYXNzLmRlggprb21wYXNzLmRlMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0f
BDQwMjAwoC6gLIYqaHR0cDovL2NkcC50aGF3dGUuY29tL1RoYXd0ZVRMU1JTQUNB
RzEuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAECMCowKAYIKwYBBQUHAgEWHGh0
dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQIBMHAGCCsGAQUFBwEB
BGQwYjAkBggrBgEFBQcwAYYYaHR0cDovL3N0YXR1cy50aGF3dGUuY29tMDoGCCsG
AQUFBzAChi5odHRwOi8vY2FjZXJ0cy50aGF3dGUuY29tL1RoYXd0ZVRMU1JTQUNB
RzEuY3J0MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcN
AQELBQADggEBAElhtDh/LG6RVn624c6HhbrVnU/8CBuXOZ0Bz3nPrxb0qiuYM1Dn
kiNwAFr6Gu/VimbkoDjcszD3pJnp3oYeEHFbiQLILC8AD2H2XNPqfPdKjWTzb7T2
s8fbxTy0sQo22ahMRk5JTmBpQKJqSeU06CvNQSZlZIqR8WZ7i8+XGvii82fAfk9S
EP02AYmXh8gj4AbR9jgakzAVjXWh7YFjrUuHoI5ZPwjB8o2ld1N+oGUihRTNN4V0
zyiPtR8/eeXvAYThr2iPgsk2N3TtGiEyoMKrcqYU0+AFUJHpMkmi3BLUm+5BLGsT
FO21H7/EAvR6C5E1iAU7tMZBtkGqlhYG8Kg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20583359192961217485138900751487522266
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kompass.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796465275290885052894567962504936415989945374045415902159426451053931093412817494878112718381071907121157611516098212912820748075387757506766258610873475242375951778784106636565098173253784926034007802997251169360398469503209776845502095090640102585602904946355748143310513418843058390306031934986193363279505547972571980408914317538436742232456837702363209618270341155395359792093140018211852759507198596956788538436850163613918015483698470674765217218391363805875772571420238609084261630875467871091510384196403566240205860927206592084320796308326339112527306343030978127436012726419094721525179242551505058510196363199370946634156525109968908958445862628002547067610048232197754643329581760569033031993183817383770826714176098061289076909523004141327269389001388396331109913069782215830263799974670323456975123546110096520908164329257898711897157934240518698300088938123536584172248078836705820767522105351336775052963551328126340890302092554288466396723238158085116892525126320346896515807478899893657474865461872183006645857093332497752395420134584677774273476970788245161550356077879620594791662964098911805033590196208067160017710142373040338564194291736987843584828516632178498967501559517499358484168721918944166387646933511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4451fc76844866eb209e162f35c2012fbea2339
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kompass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kompass.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004961b4387f2c6e91567eb6e1ce8785bad59d4ffc081b97399d01cf79cfaf16f4aa2b983350e7922370005afa1aefd58a66e4a038dcb330f7a499e9de861e10715b8902c82c2f000f61f65cd3ea7cf74a8d64f36fb4f6b3c7dbc53cb4b10a36d9a84c464e494e606940a26a49e534e82bcd412665648a91f1667b8bcf971af8a2f367c07e4f5210fd3601899787c823e006d1f6381a9330158d75a1ed8163ad4b87a08e593f08c1f28da577537ea065228514cd378574cf288fb51f3f79e5ef0184e1af688f82c9363774ed1a2132a0c2ab72a614d3e0055091e93249a2dc12d49bee412c6b1314edb51fbfc402f47a0b913588053bb4c641b641aa961606f0a8