identity.latitudefinancial.com

- Latitude Financial Services Australia Holdings Pty Ltd -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:40:47:f6:1f:50:aa:df:88:a0:4d:c8:79:5a:9e:34 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Latitude Financial Services Australia Holdings Pty Ltd

Organization: Latitude Financial Services Australia Holdings Pty Ltd
State / Province: Victoria
Locality: Melbourne
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:40:47:f6:1f:50:aa:df:88:a0:4d:c8:79:5a:9e:34
Serial Number (int): 5650678532987286533270166323062283828
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ea:f3:ed:92:bb:06:d0:11:72:e8:bb:e9:44:bc:b0:87:b8:a7:71:f9
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 21:3d:1a:40:89:4d:1d:5c:db:1f:54:56:c1:97:bb:ca:7f:e4:58:b9
Fingerprint (sha256): 21:b4:a7:c5:1c:e7:7b:2c:5d:ab:25:83:ef:d4:05:44:52:bf:5e:59:b5:99:6b:57:20:24:c5:bf:ab:8d:1f:4d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate identity.latitudefinancial.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for identity.latitudefinancial.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

identity.latitudefinancial.com
prod.se-platform.lfscnp.com
identity.prod.se-platform.lfscnp.com

Other certificates including the domain name latitudefinancial.com

(limited to 100 certificates)
connect.latitudefinancial.com
quote.latitudefinancial.com.au
shopify.api-inactive.latitudefinancial.com
mobile.assets.test.latitudefinancial.com
private.api-inactive.latitudefinancial.com
api.sit.latitudefinancial.com
*.github.latitudefinancial.com
api.test.latitudefinancial.com
responsysassets.latitudefinancial.com
partner-auth.latitudefinancial.com
visa.api.latitudefinancial.com
di.latitudefinancial.com
shopify.api-inactive.test.latitudefinancial.com
merchanttraining.checkout.latitudefinancial.com
test-payments.latitudefinancial.com
incapsula.com
applyandbuy.latitudefinancial.com
mobile.assets.test.latitudefinancial.com
cards.latitudefinancial.com
imperva.com
imperva.com
auth.dev.latitudefinancial.com
imperva.com
rsa.api-inactive.latitudefinancial.com
latitudefinancial.com
assets.latitudefinancial.com
incapsula.com
pcc.api.dev.latitudefinancial.com
imperva.com
imperva.com
smetrics.latitudefinancial.com
rsa-enc.api.dev.latitudefinancial.com
orion.smartdochub.latitudefinancial.com
api-inactive.latitudefinancial.com
resources.latitudefinancial.com
imperva.com
sts.latitudefinancial.com
rsa.api-inactive.test.latitudefinancial.com
visa.api.dev.latitudefinancial.com
imperva.com
imperva.com
onlinepaymentintegration-sit.latitudefinancial.com
p.latitudefinancial.com
imperva.com
onlinepaymentintegration-sit.latitudefinancial.com
oscassets.latitudefinancial.com
*.orion-test.latitudefinancial.com
api.test.latitudefinancial.com
imperva.com
imperva.com
lsc.assets.latitudefinancial.com
imperva.com
p.latitudefinancial.com
imperva.com
api.test.latitudefinancial.com
imperva.com
merchanttraining.checkout.latitudefinancial.com
orion.coreadmin.latitudefinancial.com
api.test.checkout.latitudefinancial.com
api.latitudefinancial.com
imperva.com
responsysassets.latitudefinancial.com
latitudefinancial.com
p.latitudefinancial.com
connect.latitudefinancial.com
api.test.latitudefinancial.com
resources.latitudefinancial.com
oscassets.latitudefinancial.com
di.latitudefinancial.com
smetrics.latitudefinancial.com
eform.latitudefinancial.com
visa.api.test.latitudefinancial.com
incapsula.com
oscassets.latitudefinancial.com
imperva.com
statements.latitudefinancial.com
api-inactive.latitudefinancial.com
paymentportal.latitudefinancial.com
imperva.com
identity.latitudefinancial.com
checkout.latitudefinancial.com
mobile.assets.test.latitudefinancial.com
cards.latitudefinancial.com
partner-auth.test.latitudefinancial.com
mobile.assets.latitudefinancial.com
servicecentre.latitudefinancial.com
responsysassets.latitudefinancial.com
identity.latitudefinancial.com
imperva.com
imperva.com
cardapp-sandbox.latitudefinancial.com
assets.latitudefinancial.com
applyandbuy.latitudefinancial.com
cardapp.latitudefinancial.com
shopify.api.test.latitudefinancial.com
lsc.assets.latitudefinancial.com
api-inactive.test.latitudefinancial.com
privacy.latitudefinancial.com
pcc.api.dev.latitudefinancial.com
rsa.api-inactive.latitudefinancial.com

Certificate

The complete raw certificate details for identity.latitudefinancial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0urTozMNR+RHQSUcGy6
rLFNuyfJfdMFCHzmBLjvYk1rVScM0uf5A6QkolztXDc0jRRZz1ozCxfnbB0CuRY6
nBfpxuQs27BtB9MUojR0/pR2licz94oBmLXd500vDv0fwpZII12X6xAKfe5PBOgm
oefQMXuFeiR9EyvZGiHWVEdoEJ6o1kLH+6t/MFTdx2UkOsYTSFm1ASS/rlJJiewh
loHLIVFeWehLslsA4x9XAw+yHT9EHSe0suXr3WrDGD+9MLZhfDE1nrLRixh41Ci9
a/azYlESrJJXi6Vv4eQodsyjU0R7S7+D9FA6fmOjK8EeKS2xGLDwd8ohc6yaDm6g
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5650678532987286533270166323062283828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Latitude Financial Services Australia Holdings Pty Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'identity.latitudefinancial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22129017226176068774597863392720268827466474055356007835015045122616043985072728412408627497254154255577757130087936452293562903796636795762367475594107033709782893836984011903022852703360293892499260195737979861642239481957114889650350202274845259693162591668248086226333653559125900754829652432674864676138720292603537733268496847167734280489801526175236002423170367450869101189771508240591780121985314765747453277734653940881366058650215174201520183099424042841113162782173152117729234889149102251008249271014223500244424950516881720563272821048775921572646171247627047265908843444838471169744635254610777542140129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eaf3ed92bb06d01172e8bbe944bcb087b8a771f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.latitudefinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.se-platform.lfscnp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.prod.se-platform.lfscnp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0095c3b88698b472b5e66bc279fb2fa17732e03d5124b21ec3cb7a3fdecc95141405335a4421ec74ea958c6fa83ded6f4514c883c74ff4d556d79e98ad4fc050bb69b0e3ecff6d39813f59128caf8610be464b93ca5c505c239a4dfb03265616b0a7229f51ae2e20c6610e5a9a5ac72986e34978318de0bb2589293fb01c36dd59175d95e1953a3651ba40eae7d53b492d918baed50b18f0845c2adbe7a536171266d6e4326c850981fbd030581d672dd8830eb1a0a13c4693e1c357c444314e4782fa9a95781f92985e4f8071d0eb65d125c08d789251a81853f7de08900616d249b83b4dd56a0a8751dde45fb7ed42f14e696ccc9802744eb6921fe63318c015