skolastik.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:03:c5:4c:d7:64:9a:4e:ca:61:7d:6a:7a:14:d4:9b:6f:f7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=skolastik.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:03:c5:4c:d7:64:9a:4e:ca:61:7d:6a:7a:14:d4:9b:6f:f7
Serial Number (int): 262619961794463069384102033512812521418743
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 59:27:cd:29:23:0e:76:d8:9c:4e:d3:df:fc:10:55:95:f1:f5:9a:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9d:96:80:f3:1c:ba:3b:13:70:9d:07:f1:c0:ed:54:b3:60:ec:a6:67
Fingerprint (sha256): 30:22:e6:09:41:de:d6:b8:0e:90:ea:bf:63:c1:e8:dd:07:25:e0:0d:c9:96:e2:22:c0:a0:37:9e:d3:5a:14:dd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate skolastik.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for skolastik.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

skolastik.cz
www.skolastik.cz

Other certificates including the domain name skolastik.cz

(limited to 100 certificates)
www.mercedcapital.com
skolastik.cz
download.osmanturan.com
muji-uat.order.place
brunchycafe.com
skolastik.cz
www.skolastik.cz
skolastik.cz
codi.ditosas.com
www.skolastik.cz
demo-sso.ramp.com
jk-holkynavdavani.cz
skolastik.cz
modacenteroficial.com.br
www.woodofmetal.com
skolastik.cz
www.serravi.cat
parceiro.soulcial.com.br
l.karaokekan.jp
skolastik.cz
icredit.works
thatgame.site
negocios.mybiznez.app
links.well-beam.com
www.skolastik.cz
api.spmarketingm.com
pubhop.estore.business
learning.qooper.io
www.skolastik.cz
www.rogerdavila.com
skolastik.cz

Certificate

The complete raw certificate details for skolastik.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgISAwPFTNdkmk7KYX1qehTUm2/3MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMjcyMzIwMjZaFw0x
OTA1MjgyMzIwMjZaMBcxFTATBgNVBAMTDHNrb2xhc3Rpay5jejCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBAMLZyhctlxTWCQtokM2FcB3lEBvuJ9RG7BgA
SidSZwp/PsENP2vH5LDH2Rjo5aB8+VZn/VEOtu+Lyyb8i733EwdO2BD9cPDR5NqW
3uiP5e/K9/BhBX+YYD4NOT81hl/NtIWhy/PXesB9yFDXJRnonl/mYs+RCMuyfweV
ZlVFjR65Gdy/cHXLHSWrODiXoHTYintc0lC8ggBjS9Ly/77azoUGOpiJeX4pE9PJ
rHWyRdP7ey8FFC4vCKHulpxmEhgDGWbtjuFn4Yk6saYhoS+5t9Pge8HsCNgX1xRa
iwXurCcdQxYX9Ga04JohSCOwJqpNkCroJ5TUxVQWaSqDEfDD8V7JWjCmvqFEKUWn
9+zcSJ7wdPAUV3UvJ+i4sLiEuMbJP8FUeLU+i1WbE+kbjnRMvTfUkz6XCv5c0Vcw
Ip9Qoym3GgoPjN5GiXccF+tJZ8B29GkJo+8tOEq/IkZFH3lKKHi2eihXUxNZ4W6Z
a8Go5kWZM0AyBL5XCvPCy435jPgVx8OyTlyZDnWvtB7XAl2QehJam+6JRJ07A02E
EBBCElTsiP4gYZXX3vzNFC2xYbJ7fHsGVncou8OBNq4TIkJGmWLNR1LXHf037VLX
kpzgYbGR7o5fdnIBKuHC3M0ZtMSwfiDjr9PSZSAkzsFGu3m+n341sLVybnVgRxsG
9uoZPj5JAgMBAAGjggJyMIICbjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFknzSkj
DnbYnE7T3/wQVZXx9ZqbMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIMc2tvbGFzdGlrLmN6ghB3d3cu
c2tvbGFzdGlrLmN6MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYK
KwYBBAHWeQIEAgSB9ASB8QDvAHUAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz0
5UVH9HgAAAFpMXlKMQAABAMARjBEAiA+dVvZ7vp6RARij6Ni92OH1U1gLKhmDkkB
ahdLOx4cWQIgJiwARr+yan8G7HleRBxWM415xiKmIQ6sKg/9p6Y0DeQAdgB0ftqD
Ma0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWkxeUveAAAEAwBHMEUCIQCj
y2OeW2koOwqyzPemmzKQa0kQN5rPBWHr9CAw8AbV6QIgDFihd99c5+j4BsuIh2uv
rxUhrE8WBBMqS+C8/lvdWCAwDQYJKoZIhvcNAQELBQADggEBAI55H1k71QI6tggR
Yov4HFL3gbfX25S5g4d+SGNWVTuQ2043Q0Ktz1ZY0h2k628E120KUJd+mY4JlLyk
hlLfB/HqgWpS1Dt1Sdb4kEm70t4GMMTwFUeFkS8qwnZuXGx1JfszCZ3Rg7D1Wxsz
w20f06UhX/Jhw0Qb1Hm6cg6ZLDmkLGQ6F0Ys1CrN0SDxHiZ+JsrjYgLA+s6b1z3I
6uFbqUeprfVMHKttQX8nKFHddHWfTV7XLf5u7P6alGueuoilXhpTOcI11xsr0gOm
jZTROO4+LOVhohg7IweLBfi7+ooB89wfpo1r/HWGEGZCKcmslq+RQsryLDcoLzs+
KJitepQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwtnKFy2XFNYJC2iQzYVw
HeUQG+4n1EbsGABKJ1JnCn8+wQ0/a8fksMfZGOjloHz5Vmf9UQ6274vLJvyLvfcT
B07YEP1w8NHk2pbe6I/l78r38GEFf5hgPg05PzWGX820haHL89d6wH3IUNclGeie
X+Ziz5EIy7J/B5VmVUWNHrkZ3L9wdcsdJas4OJegdNiKe1zSULyCAGNL0vL/vtrO
hQY6mIl5fikT08msdbJF0/t7LwUULi8Ioe6WnGYSGAMZZu2O4WfhiTqxpiGhL7m3
0+B7wewI2BfXFFqLBe6sJx1DFhf0ZrTgmiFII7Amqk2QKugnlNTFVBZpKoMR8MPx
XslaMKa+oUQpRaf37NxInvB08BRXdS8n6LiwuIS4xsk/wVR4tT6LVZsT6RuOdEy9
N9STPpcK/lzRVzAin1CjKbcaCg+M3kaJdxwX60lnwHb0aQmj7y04Sr8iRkUfeUoo
eLZ6KFdTE1nhbplrwajmRZkzQDIEvlcK88LLjfmM+BXHw7JOXJkOda+0HtcCXZB6
Elqb7olEnTsDTYQQEEISVOyI/iBhldfe/M0ULbFhsnt8ewZWdyi7w4E2rhMiQkaZ
Ys1HUtcd/TftUteSnOBhsZHujl92cgEq4cLczRm0xLB+IOOv09JlICTOwUa7eb6f
fjWwtXJudWBHGwb26hk+PkkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262619961794463069384102033512812521418743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-27 23:20:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 23:20:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'skolastik.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794921665210567155127645844197665276083826543972908979052529119247201291883904831536176961887153959618749076875263100964763246322341888317085499547379353613604233482171075282614774573181646740349899772455109459443111377253586634184584342251815521220871146773654269770133447412513792352438226065636693729961426221139731954957466282697249595337113124697932608705661895485711686798891363741469447164925708247451454033356362059592332847603304572219978687233139984450547721394956401449241583881524195451790170721241811612979594988630916202250713354784952153143185206105973127540304337406476149474338754833219998095008521637598561138900905834623430422376949360060685429147502514912165773765385160158933892836992995817926897887519654148473739770702674718586630274212884028507363077451276261407096206143138510804257091148001259710164337528887405446053292028615148839956178057928266232305549494315951041932725750558192718876699260865518913172718046833365836918398971096149764522886242463495032468662427351241585147240304655464478884052964964140042127257855567016794638910357567029620817974927402655112176107382449149270357839917583071605035661895860724290026831338958709563580537989598732949648990034475021697714608200952508300200659449167433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5927cd29230e76d89c4ed3dffc105595f1f59a9b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skolastik.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skolastik.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016931794a31000004030046304402203e755bd9eefa7a4404628fa362f76387d54d602ca8660e49016a174b3b1e1c590220262c0046bfb26a7f06ec795e441c56338d79c622a6210eac2a0ffda7a6340de4007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016931794bde0000040300473045022100a3cb639e5b69283b0ab2ccf7a69b32906b4910379acf0561ebf42030f006d5e902200c58a177df5ce7e8f806cb88876bafaf1521ac4f1604132a4be0bcfe5bdd5820
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008e791f593bd5023ab60811628bf81c52f781b7d7db94b983877e486356553b90db4e374342adcf5658d21da4eb6f04d76d0a50977e998e0994bca48652df07f1ea816a52d43b7549d6f89049bbd2de0630c4f0154785912f2ac2766e5c6c7525fb33099dd183b0f55b1b33c36d1fd3a5215ff261c3441bd479ba720e992c39a42c643a17462cd42acdd120f11e267e26cae36202c0face9bd73dc8eae15ba947a9adf54c1cab6d417f272851dd74759f4d5ed72dfe6eecfe9a946b9eba88a55e1a5339c235d71b2bd203a68d94d138ee3e2ce561a2183b23078b05f8bbfa8a01f3dc1fa68d6bfc758610664229c9ac96af9142caf22c37282f3b3e2898ad7a94