raiffeisen.lu

- Banque Raiffeisen -

Issued by LuxTrust Qualified CA

About this certificate

This digital certificate with serial number 04:83:3a was issued on by LuxTrust S.A..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth emailProtection serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)

Banque Raiffeisen

Organization: Banque Raiffeisen
State / Province: Luxembourg
Locality: Luxembourg
Country: LU

LuxTrust S.A.

Organization: LuxTrust S.A.
Country: LU

This certificate has expire since

Certificate Details

Serial Number (hex): 04:83:3a
Serial Number (int): 295738
Serial Number lenght: 19 bits, 3 octets

SubjectKeyId: e0:69:5e:99:13:b9:a1:12:39:34:ae:62:0a:b8:fb:0c:fb:93:3f:87
AuthorityKeyId: 8d:90:a3:07:dd:1a:13:77:99:4c:92:ab:4d:43:de:3f:cd:29:64:05

Fingerprint (sha1): eb:b2:3f:73:b7:bc:07:f1:ad:9a:9d:75:6b:ee:63:00:12:b8:9d:36
Fingerprint (sha256): 3e:23:43:d4:94:f7:e0:db:f7:3a:4b:88:08:e1:ab:9d:6b:59:a4:13:dc:15:a4:86:26:02:3d:ad:06:1f:4c:99

Issuing Certificate URL: http://ca.luxtrust.lu/LTQCA.crt

Revocation information

OCSP Server: http://ocsp.luxtrust.lu
CRL Distribution Point: http://crl.luxtrust.lu/LTQCA.crl

Check the revocation status for certificate raiffeisen.lu

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for raiffeisen.lu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Email Protection

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.raiffeisen.lu
net.raiffeisen.lu
ca.raiffeisen.lu
lt.raiffeisen.lu

Other certificates including the domain name raiffeisen.lu

(limited to 100 certificates)
sentry.raiffeisen.lu
*.raiffeisen.lu
ca.raiffeisen.lu
www.raiffeisen.lu
vhds.raiffeisen.lu
idp-test.raiffeisen.lu
cras.raiffeisen.lu
tras.raiffeisen.lu
rsts.raiffeisen.lu
mdm.raiffeisen.lu
srd2prod.raiffeisen.lu
raiffeisen.lu
www.raiffeisen.lu
rnet-r10-dev.raiffeisen.lu
tras.raiffeisen.lu
cras.raiffeisen.lu
mdm.raiffeisen.lu
rsts.raiffeisen.lu
www.raiffeisen.lu
autodiscover.raiffeisen.lu
*.raiffeisen.lu
rsts.raiffeisen.lu
fgw.raiffeisen.lu
ca.raiffeisen.lu
www.raiffeisen.lu
idp.raiffeisen.lu
www.raiffeisen.lu
digicash-int-idp.raiffeisen.lu
net.raiffeisen.lu
raiffeisen.lu
www.raiffeisen.lu
luxhub.raiffeisen.lu
luxhub-test.raiffeisen.lu
cras.raiffeisen.lu
www.raiffeisen.lu
www.raiffeisen.lu
ca.raiffeisen.lu
*.raiffeisen.lu
mailgw2.raiffeisen.lu
cosi-notification.raiffeisen.lu
sentry.raiffeisen.lu
srd2uat.raiffeisen.lu
www-uat.raiffeisen.lu
rnet.raiffeisen.lu
analytics.raiffeisen.lu
net.raiffeisen.lu
mailgw1.raiffeisen.lu
mailgw2.raiffeisen.lu
rnet-r10-int.raiffeisen.lu
rnet.raiffeisen.lu
rnet.raiffeisen.lu
luxhub-uat.raiffeisen.lu
mailgw1.raiffeisen.lu
rnet.raiffeisen.lu
luxhub-test.raiffeisen.lu
luxhub-uat.raiffeisen.lu
digicash-int-api.raiffeisen.lu
www.raiffeisen.lu
idp.raiffeisen.lu
lt.raiffeisen.lu
idp-uat.raiffeisen.lu
rnet.raiffeisen.lu
www.raiffeisen.lu
sag.raiffeisen.lu

Certificate

The complete raw certificate details for raiffeisen.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhrhepVIvIvLsHxqyH8Q
iNf4H1wHoSaMMHk6JZshQfne7WtGk/eymjfXDYL3yGNLSAKeO4mQv0EW85oa4UAe
SKYPkCCm61cOLRnS1zdukDnRFbNGagqTptmBISLo2nW/e52vQHaFWMCNTMlALzQi
PccXT3YGAvz5vhZq4Es2kz2Wuyej/zsnCRymek9RURZfugTi4gsc4hqs1VgfkBGE
C3D/qJEtXR1lTUMBQIS2fyXBrMBMY9+r9IXbrHAGcMi66hs+XoxhsmAb1lpI1NwC
Fy9A59Lis73uFyWUHgtshwYmHg8mwhO6vBDSNlJNluXugnxOaD/zEUbb3F0Fo08T
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LuxTrust S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LuxTrust Qualified CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-04-11 08:48:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-11 08:48:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Banque Raiffeisen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'raiffeisen.lu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21473767249266453578109893226015783985279041784278289839595952357134593737748405318241290462972841828131749196243736744662234947013078580120363464592781373511324895023911186666968563270738955504706564572646298109406219800584846241456238644571951408036087533967371254890107769600474465113794388742242382345282438071923585788653155985595513496351139741928316005624320880069079079097563500286638659247278822375692645207735025769203887125208300589545221764727912739517531983808678940281316371764192760630896305688562256047763171229437467334275555928130867306399027543679523762963158502482298321993339470363256838866015141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.luxtrust.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.luxtrust.lu/LTQCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raiffeisen.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'net.raiffeisen.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.raiffeisen.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.raiffeisen.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (248 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.171.1.1.2.6.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [76 117 120 84 114 117 115 116 32 83 101 114 118 101 114 32 67 101 114 116 105 102 105 99 97 116 101 46 32 78 111 116 32 115 117 112 112 111 114 116 101 100 32 98 121 32 83 83 67 68 44 32 75 101 121 32 71 101 110 101 114 97 116 105 111 110 32 98 121 32 83 117 98 115 99 114 105 98 101 114 46 32 71 84 67 44 32 67 80 32 97 110 100 32 67 80 83 32 111 110 32 104 116 116 112 58 47 47 114 101 112 111 115 105 116 111 114 121 46 108 117 120 116 114 117 115 116 46 108 117 46 32 83 105 103 110 101 100 32 98 121 32 97 32 81 117 97 108 105 102 105 101 100 32 67 65 46]
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.luxtrust.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.4 (emailProtection)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d90a307dd1a1377994c92ab4d43de3fcd296405
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.luxtrust.lu/LTQCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0695e9913b9a1123934ae620ab8fb0cfb933f87
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009d6fa125a504d0d63c0e969d9e40301199ed4442d709fd2800b38f080cbd88fd71580a67930bac498ff21c0be543774b85d5528b8265838bccde6adcb53e4bf08fea383d2d1b9ad07c16f1462490be69c5cc34736583cf207ac508bb381c31af190c30103fc508a9c9fb63c99d46c126098cd56cf67923bd6b8b6fd20de2cf8c3d82bc4a63c0ebd0fa04f773fd636d19b0fa5312c3988a66a92a6b946be14b5d458325ab746db437d46e40fb928314e09aab46f0c9075aad7245c2f5f5a9e9ee7147c82be913da02a71af3b702959c4142b5a8a41ef65aa0619c93d61a5dbe29367c1300e50b59cd03fcd091e3fa1c841796dada23d24e689c27d28955b27fc9