m.evr.nl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:2d:33:38:a1:45:95:75:50:85:fc:39:fc:8d:2e:86:cc:c2 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=m.evr.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:2d:33:38:a1:45:95:75:50:85:fc:39:fc:8d:2e:86:cc:c2Serial Number (int): 276717648974113023948037211013041231416514
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e1:04:c1:3d:8d:fa:33:52:f6:3b:5a:b8:c8:40:2d:31:c5:76:5a:96
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 8a:6d:11:7d:b9:94:7d:d4:fb:6c:27:52:e0:78:00:cb:bd:b3:81:8b
Fingerprint (sha256): 23:82:e1:d7:a6:52:51:2c:ac:8e:91:14:fa:92:73:2d:5a:9c:04:54:49:4c:ab:2a:54:48:5e:67:98:81:0e:97
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate m.evr.nl
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for m.evr.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
m.evr.nl
Other certificates including the domain name evr.nl
(limited to 100 certificates)
mail.evr.nl
mail.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
m.evr.nl
remote.evr.nl
www.evr.nl
filecap.evr.nl
m.evr.nl
mail.evr.nl
m.evr.nl
m.evr.nl
filecap.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
evr.nl
www.evr.nl
www.evr.nl
remote.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
m.evr.nl
remote.evr.nl
mail.evr.nl
www.evr.nl
www.evr.nl
mail.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
m.evr.nl
remote.evr.nl
www.evr.nl
filecap.evr.nl
m.evr.nl
mail.evr.nl
m.evr.nl
m.evr.nl
filecap.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
evr.nl
www.evr.nl
www.evr.nl
remote.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
www.evr.nl
m.evr.nl
remote.evr.nl
mail.evr.nl
www.evr.nl
www.evr.nl
Certificate
The complete raw certificate details for m.evr.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgISAy0zOKFFlXVQhfw5/I0uhszCMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMjEyMDA0MDRaFw0y MDAyMTkyMDA0MDRaMBMxETAPBgNVBAMTCG0uZXZyLm5sMIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEA5hgcuyEQ5xJrccfiUSufe9+132xsYnDjvKvBawX4 0jpfVmfAEtOyaxapypnG6izKVP1XbRu9yIf8m8IWuBzf1ChyTJn6CTNvGtSXPBBX 5OWSrBjKy6ztLiTI9I2jmdGItz/PRSdSy7mvckXvZjV7Og9tS2eo2Z2YSVWARtTN 3JxUvOnBv3GDQ+ThfzmauqWcmOq+A6KXmMAK/g6wWw/O/N117gJBsXOX7JS0qLna J8scqWucqGxdFipQPj9VuQGF5JzS/Pq+BxPFvUUmwIbszJOPkRz99eG1r5EZoti/ Z/kIe1ooP2QxYWeYE0sVollCZLIa6zv50Y77tnsqiPHgFmFwprwGZxX6q+OBB9Oz S1OnW6rsj8ncUKyr3JWRx2kX+fpqmUVKhrlFYZU1WumA3xtOYuqya6hUVEiqxoor 8qVGwroTYQGeuJ7Vs1BDdWyrB5wL27BmlT/7zeAqzyRbY43LOkZRJgqE/x1/5Iur Nm3mASZLQlXoLiNSwrgJm4k5rCBC80GqKucqj0Jtdw5MlUfXvfyfaWPAyK5qaxKo Sg66P7ajTJ0gVVaKSa9W7gIRFrooAf50ZnETeHLrsuxngHMlxynIloHeZG5JwYG5 /dVRkSndTlVTY3GcGcHtWdya1z9lDmeV6hQK+jmVTSCJKxZPlEfbHd/nL2GbBAkO Iv8CAwEAAaOCAl0wggJZMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU4QTBPY36M1L2 O1q4yEAtMcV2WpYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0 c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0 c2VuY3J5cHQub3JnLzATBgNVHREEDDAKgghtLmV2ci5ubDBMBgNVHSAERTBDMAgG BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2APCVpFny ANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAABbo/HeHIAAAQDAEcwRQIgS9Lc S436dJfCONeglO0dlakcptgdWF9zH6ZRU/ETeEACIQDMFwqAT4dfi2EUQSy03mL1 qL0N02PdCJ1z6Qcn2yu7LwB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3v i5BeAAABbo/HeGIAAAQDAEcwRQIhAIgJTSVBeBT8eNITJ8PMJ1lOW68gIDS7vNIY wnSo3Q9OAiAuleMPhrIL8NXRljFmoVr0poB88E+DIpk0D5n4PNnzqTANBgkqhkiG 9w0BAQsFAAOCAQEAcRqmASDBwRCU9MWfPuYeuTwwOn/lsv2fxvVkGoI4QVsTMCkT /9aecL7GjHuLE//ysgWJB+akFyc2c1HYfCJNy5hSTWAXKp8W6v+krgOopt9OmdvJ jc7+fW+18FriEp/pvnpnboVSg67S0+joK0725WZ5CcOOqpqj2OFB0S3eoRY1QT3t nPQ8uQbuuWhL2UaHPY43lKXs/cqvq0FVHwLBiWKXrJ3TGnJKN0TulRn/IQd6FHOp 01uMXIxzBSXbCi7LDiAf5tE+a3ou6LGgtuAHDmOwOn7vuvkRxyPd8bl4Ox+RVaEz mHIO3QSy9y6ewG8qSOgvezT2U09vOMNYHC+WSg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5hgcuyEQ5xJrccfiUSuf e9+132xsYnDjvKvBawX40jpfVmfAEtOyaxapypnG6izKVP1XbRu9yIf8m8IWuBzf 1ChyTJn6CTNvGtSXPBBX5OWSrBjKy6ztLiTI9I2jmdGItz/PRSdSy7mvckXvZjV7 Og9tS2eo2Z2YSVWARtTN3JxUvOnBv3GDQ+ThfzmauqWcmOq+A6KXmMAK/g6wWw/O /N117gJBsXOX7JS0qLnaJ8scqWucqGxdFipQPj9VuQGF5JzS/Pq+BxPFvUUmwIbs zJOPkRz99eG1r5EZoti/Z/kIe1ooP2QxYWeYE0sVollCZLIa6zv50Y77tnsqiPHg FmFwprwGZxX6q+OBB9OzS1OnW6rsj8ncUKyr3JWRx2kX+fpqmUVKhrlFYZU1WumA 3xtOYuqya6hUVEiqxoor8qVGwroTYQGeuJ7Vs1BDdWyrB5wL27BmlT/7zeAqzyRb Y43LOkZRJgqE/x1/5IurNm3mASZLQlXoLiNSwrgJm4k5rCBC80GqKucqj0Jtdw5M lUfXvfyfaWPAyK5qaxKoSg66P7ajTJ0gVVaKSa9W7gIRFrooAf50ZnETeHLrsuxn gHMlxynIloHeZG5JwYG5/dVRkSndTlVTY3GcGcHtWdya1z9lDmeV6hQK+jmVTSCJ KxZPlEfbHd/nL2GbBAkOIv8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 276717648974113023948037211013041231416514 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-21 20:04:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 20:04:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'm.evr.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 938702390791398878507532092391207806422786628641278348195843129277904680407311265134768949020186564481117477346128937001925843898878889552243421262633549948464763850905611776410712022286136623713768604880637784958941951126790388954389227217546888815500909868946311168483014792392339146684783540466636061620031548021567195598548533325872702083292417339549790920387662029539538082093029597114869989662302933884472860825781151367748779045111106312143387537250989164046425563960249364692575839091994713271798265863575393842312128491843852777077470446557590472887822066957353417468780027218394596083774810672297736617392451262287778456660585683139990946813313351841323873466345348362711842249888744028889480446656790307360806920707329849787485282760789103969130819753476418109937881824753314678174134599551624398253773062122070575742178428836186079222036197087470951943845811077701519832950899219473399233134990220330125464700901409537236305412926682594225647632433095942110611620321306215332576198274589551954787842276190189645115005740560851685640270040019887042771830928226084785073965333769448084805054263838398882183338809930313444218490205193903612865505423640967556800795732598979214950774687687569680111705569765946052412074500863 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e104c13d8dfa3352f63b5ab8c8402d31c5765a96 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.evr.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e8fc77872000004030047304502204bd2dc4b8dfa7497c238d7a094ed1d95a91ca6d81d585f731fa65153f1137840022100cc170a804f875f8b6114412cb4de62f5a8bd0dd363dd089d73e90727db2bbb2f007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e8fc77862000004030047304502210088094d25417814fc78d21327c3cc27594e5baf202034bbbcd218c274a8dd0f4e02202e95e30f86b20bf0d5d1963166a15af4a6807cf04f832299340f99f83cd9f3a9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00711aa60120c1c11094f4c59f3ee61eb93c303a7fe5b2fd9fc6f5641a8238415b13302913ffd69e70bec68c7b8b13fff2b2058907e6a41727367351d87c224dcb98524d60172a9f16eaffa4ae03a8a6df4e99dbc98dcefe7d6fb5f05ae2129fe9be7a676e855283aed2d3e8e82b4ef6e5667909c38eaa9aa3d8e141d12ddea11635413ded9cf43cb906eeb9684bd946873d8e3794a5ecfdcaafab41551f02c1896297ac9dd31a724a3744ee9519ff21077a1473a9d35b8c5c8c730525db0a2ecb0e201fe6d13e6b7a2ee8b1a0b6e0070e63b03a7eefbaf911c723ddf1b9783b1f9155a13398720edd04b2f72e9ec06f2a48e82f7b34f6534f6f38c3581c2f964a