callens.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0e:fa:44:34:80:80:dd:66:d3:12:fe:4b:90:36:60:b4:05 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=callens.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0e:fa:44:34:80:80:dd:66:d3:12:fe:4b:90:36:60:b4:05
Serial Number (int): 266433472072172873696014611976214343103493
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:c1:9d:f5:8b:6f:c3:33:ce:77:cd:ce:78:50:ba:dc:10:b6:51:45
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4a:a8:99:82:81:ed:88:c0:e0:22:82:0c:7a:d4:19:b8:31:ee:7f:54
Fingerprint (sha256): 30:66:17:83:28:14:74:be:c2:af:e8:00:e5:fe:83:87:8b:0d:31:41:41:bf:1d:6c:fa:b2:e7:bf:6f:91:21:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate callens.eu

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for callens.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

callens-emk.be
callens-emk.com
callens-emk.eu
callens.eu
callenswilly.be
elbomamoortgatkonstruktie.be
www.callens-emk.be
www.callens-emk.com
www.callens-emk.eu
www.callens.eu
www.callenswilly.be
www.elbomamoortgatkonstruktie.be

Other certificates including the domain name callens.eu

(limited to 100 certificates)
jobs.callens.eu
callens.eu
callens.eu
callens.eu
callens.eu
jobs.callens.eu
jobs.callens.eu
jobs.callens.eu
jobs.callens.eu
callens.eu
callens.eu
xenapp.callens.eu
callens.eu
callens.eu
owa.callens.eu
owa.callens.eu
xenapp.callens.eu
owa.callens.eu
owa.callens.eu
callens.eu
callens.eu
callens.eu
xenapp.callens.eu
callens.eu
callens.eu
callens.eu
callens.eu
jobs.callens.eu
xenapp.callens.eu
callens.eu
callens.eu
xenapp.callens.eu
jobs.callens.eu
callens.eu

Certificate

The complete raw certificate details for callens.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGNDCCBRygAwIBAgISAw76RDSAgN1m0xL+S5A2YLQFMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjgwNDI4NDNaFw0x
OTEyMjcwNDI4NDNaMBUxEzARBgNVBAMTCmNhbGxlbnMuZXUwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDGj0ry2L/Ec50iOJFpK4T940edyw1qzPSn+aSJ
hH5PMRN+bMfTk8kF4ZhaLpIaDVRKbvqwaH/wXNdlgcKH6j2jqEEMh1dIJaWnA011
FulQwPi5qKzbxobcGgWFdIiZgmamviVZsXNhdz8utlaHUl6jQPTjcG8U9zVcB+/4
gYKGQFlL0hvNWqPM8B83IJYEb9q4kInWpaXXIR56nCUOMeQ5KflyrE/G4apWrDWN
4MpGq+90M3PYTmNXlqLNF6cIQnC07SzaqWpNcDxgy7g5Tt9nuq8tMZGwX99lS9Hd
9UOhuDcfKUP+vtfMe7BTwiuTRVEJAzEu/+DoLLLfgdNgKDzLAgMBAAGjggNHMIID
QzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNrBnfWLb8MzznfNznhQutwQtlFFMB8G
A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu
BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv
BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w
gfsGA1UdEQSB8zCB8IIOY2FsbGVucy1lbWsuYmWCD2NhbGxlbnMtZW1rLmNvbYIO
Y2FsbGVucy1lbWsuZXWCCmNhbGxlbnMuZXWCD2NhbGxlbnN3aWxseS5iZYIcZWxi
b21hbW9vcnRnYXRrb25zdHJ1a3RpZS5iZYISd3d3LmNhbGxlbnMtZW1rLmJlghN3
d3cuY2FsbGVucy1lbWsuY29tghJ3d3cuY2FsbGVucy1lbWsuZXWCDnd3dy5jYWxs
ZW5zLmV1ghN3d3cuY2FsbGVuc3dpbGx5LmJlgiB3d3cuZWxib21hbW9vcnRnYXRr
b25zdHJ1a3RpZS5iZTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEB
ATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUG
CisGAQQB1nkCBAIEgfYEgfMA8QB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaN
sgiaN9kTAAABbXZXu+QAAAQDAEgwRgIhAMunK35q+cO23DZMbHtqJ8FRxTQsCGAD
8Ch1PKg4CVefAiEA3VzaO6TKW4LUIF3kYkbBlL4zdUbGSIwNGS139Nixbl0AdgBj
8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAW12V7yuAAAEAwBHMEUC
IQC1Jv363aoTTNn7loMY80scgled746otmJCdSokbbnymgIgFElnBPvRdRzwFwpb
dIvuP2sbQgrNiKTlmHfXGcU21EwwDQYJKoZIhvcNAQELBQADggEBAFyxVrjGV2JI
qR7CtHlwFEdayFgvbbPT5nDjkSHTnCnqmhBASw6YqJiUMpnFc4g+srYKkrWDqJxz
V/KBTWLC1XK/2tsp5ZdIeQ7rFP0EBb+GAkYWXJHgNbV7bEjBuwp7k8AOypBNs6C7
9HHjy7VjD4yb5BG0r1K2MVQxOQBYkpCuGk4Gd8IUPAfVCNC/CMGPdpInSCV5tnx6
c4JHhP2oue2fzXPk8dlzKTgLfyR3R573byOa8jmHZPrOTbZCDxxn/xMrftd4XYuA
GjVbZXHdUlEwONFUaVM45OAb7K4wqkMBNXwBvI4EXIZkxe5VODlY1GCa9n18Xkdy
N4oP+/IMzJU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo9K8ti/xHOdIjiRaSuE
/eNHncsNasz0p/mkiYR+TzETfmzH05PJBeGYWi6SGg1USm76sGh/8FzXZYHCh+o9
o6hBDIdXSCWlpwNNdRbpUMD4uais28aG3BoFhXSImYJmpr4lWbFzYXc/LrZWh1Je
o0D043BvFPc1XAfv+IGChkBZS9IbzVqjzPAfNyCWBG/auJCJ1qWl1yEeepwlDjHk
OSn5cqxPxuGqVqw1jeDKRqvvdDNz2E5jV5aizRenCEJwtO0s2qlqTXA8YMu4OU7f
Z7qvLTGRsF/fZUvR3fVDobg3HylD/r7XzHuwU8Irk0VRCQMxLv/g6Cyy34HTYCg8
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266433472072172873696014611976214343103493
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 04:28:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 04:28:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'callens.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25065844680748543216763296690210241280340132688977761812842856619172375063770075543637603876771812674079460194483408984615843189128893206888489443221953636659889396334231501517926473954113526546817522591377046384047227440937546771173594310948925710047606170628108786703393139398905940653047907798883813045288988699509222932391490072772972896425312630682561852944169544254930439248516174813221336776407229651052840717268097901002310244055979337688880359437536735694682512593010296335912191610384913623680773190900805431130344722025498028256273779628698480588408416292426426753953643996009801643013308978947292154838219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dac19df58b6fc333ce77cdce7850badc10b65145
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callens-emk.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callens-emk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callens-emk.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callens.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callenswilly.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elbomamoortgatkonstruktie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callens-emk.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callens-emk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callens-emk.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callens.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callenswilly.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elbomamoortgatkonstruktie.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d7657bbe40000040300483046022100cba72b7e6af9c3b6dc364c6c7b6a27c151c5342c086003f028753ca83809579f022100dd5cda3ba4ca5b82d4205de46246c194be337546c6488c0d192d77f4d8b16e5d00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7657bcae0000040300473045022100b526fdfaddaa134cd9fb968318f34b1c82579def8ea8b66242752a246db9f29a022014496704fbd1751cf0170a5b748bee3f6b1b420acd88a4e59877d719c536d44c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005cb156b8c6576248a91ec2b4797014475ac8582f6db3d3e670e39121d39c29ea9a10404b0e98a898943299c573883eb2b60a92b583a89c7357f2814d62c2d572bfdadb29e59748790eeb14fd0405bf860246165c91e035b57b6c48c1bb0a7b93c00eca904db3a0bbf471e3cbb5630f8c9be411b4af52b63154313900589290ae1a4e0677c2143c07d508d0bf08c18f769227482579b67c7a73824784fda8b9ed9fcd73e4f1d97329380b7f2477479ef76f239af2398764face4db6420f1c67ff132b7ed7785d8b801a355b6571dd52513038d154695338e4e01becae30aa4301357c01bc8e045c8664c5ee55383958d4609af67d7c5e4772378a0ffbf20ccc95