bilderwelt.11freunde.de

Issued by GlobalSign Domain Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:4e:8e:51:6c:ce:a7:76:bc:34:f7:bc:5a:73:4a:42:5f was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bilderwelt.11freunde.de,OU=Domain Control Validated,C=DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:4e:8e:51:6c:ce:a7:76:bc:34:f7:bc:5a:73:4a:42:5f
Serial Number (int): 1492242597689636073481179376987325223027295
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 97:8a:92:fd:90:29:bd:17:25:ef:8c:e0:94:ce:12:8c:e0:8a:c0:3f
AuthorityKeyId: 96:ad:fa:b0:5b:b9:83:64:2a:76:c2:1c:8a:69:da:42:dc:fe:fd:28

Fingerprint (sha1): ff:cf:e2:b1:b1:ca:cd:34:d0:1e:e6:34:a3:f4:02:bb:46:77:15:f0
Fingerprint (sha256): 3e:f5:36:e0:ca:e8:46:88:6e:ef:48:44:ca:64:15:f8:b3:62:8e:57:d9:48:4b:50:36:0e:2b:4d:dc:54:65:85

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalg2.crl

Check the revocation status for certificate bilderwelt.11freunde.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bilderwelt.11freunde.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bilderwelt.11freunde.de

Other certificates including the domain name 11freunde.de

(limited to 100 certificates)
serviceportal.dpv.de
serviceportal.dpv.de
serviceportal.dpv.de
*.aboshop.11freunde.de
www.weltski.de
aboshop.11freunde.de
stage.serviceportal.dpv.de
aboshop.11freunde.de
dev.serviceportal.dpv.de
serviceportal.dpv.de
dev.serviceportal.dpv.de
serviceportal.dpv.de
derspiegel.eu
*.aboshop.11freunde.de
serviceportal.dpv.de
serviceportal.dpv.de
int.serviceportal.dpv.de
*.11freunde.de
*.11freunde.de
bilderwelt.11freunde.de
review.www.11freunde.de
serviceportal.dpv.de
data-664e19af6d.11freunde.de
serviceportal.dpv.de
dev.serviceportal.dpv.de
cdn.prod.www.11freunde.de
aboshop.11freunde.de
serviceportal.dpv.de
dev.serviceportal.dpv.de
serviceportal.dpv.de
amp-manager-magazin-de.manager-magazin.de
aboshop.11freunde.de
aboshop.11freunde.de
int.serviceportal.dpv.de
*.11freunde.de
san-15-s10.tlsprovisioning.exacttarget.com
stage.serviceportal.dpv.de
review.11freunde.de
tippspiel.11freunde.de
baseendpoint.11freunde.de
review.11freunde.de
int.serviceportal.dpv.de
baseendpoint.11freunde.de
amp-manager-magazin-de.manager-magazin.de
serviceportal.dpv.de
www.11freunde.de
www.11freunde.de
serviceportal.dpv.de
baseendpoint.11freunde.de
stage.serviceportal.dpv.de
*.11freunde.de
review.www.11freunde.de
*.aboshop.11freunde.de
stage.serviceportal.dpv.de
tippspiel-staging.11freunde.de
serviceportal.dpv.de
aboshop.11freunde.de
serviceportal.dpv.de
serviceportal.dpv.de
www.weltski.de
aktion.11freunde.de
baseendpoint.11freunde.de
shop.11freunde.de
serviceportal.dpv.de

*.11freunde.de
serviceportal.dpv.de
interred.11freunde.de
aboshop.11freunde.de
amp-manager-magazin-de.manager-magazin.de
www.weltski.de
serviceportal.dpv.de
*.11freunde.de
aboshop.11freunde.de
stage.serviceportal.dpv.de
tippspiel.11freunde.de
serviceportal.dpv.de
www.11freunde.de
dev.serviceportal.dpv.de
tippspiel.11freunde.de
*.cmk.iqdigital.de
*.aboshop.11freunde.de
aboshop.11freunde.de
aboshop.11freunde.de
data-d687fc47c0.11freunde.de
int.serviceportal.dpv.de
derspiegel.eu
www.11freunde.de
shop.food-magazine.de
int.serviceportal.dpv.de

Certificate

The complete raw certificate details for bilderwelt.11freunde.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgISESFOjlFszqd2vDT3vFpzSkJfMA0GCSqGSIb3DQEBBQUA
MFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYD
VQQDEyRHbG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gRzIwHhcNMTIw
OTIxMTMyNjA3WhcNMTUwOTIyMTMyNjA3WjBSMQswCQYDVQQGEwJERTEhMB8GA1UE
CxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMSAwHgYDVQQDExdiaWxkZXJ3ZWx0
LjExZnJldW5kZS5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKeY
rqCanEWFkXThk9cG7Me3GWUnkIs6C6UmSYJnq5QNfJ6lx7l3ycfHST/K4tvBsTuA
iGvBFGiTEECQAeIfX7MOCW2lPdYbNCl5fyewa+3t8Z1T4nJlurePL7a9iqGkGxDi
KPWsK3NUXotJL4ZGp2yTrlFsFVS52gHJA2VqmTLghFJ19km2TRuCGOBSm96oza37
8xriXMy2EPd7SOx2oKv//f3OAHq6z0pO4AWYoLhzYkA4O1rdbCPpSPHu/rKPi2OS
I8eLrPTooWVM3CziMZK2nCc/2828za/bqJxJcDUSW6sXPGClTuGOvvVCWLlbFFsA
uiEfwGLc1kj4Y+fJGmUCAwEAAaOCAbwwggG4MA4GA1UdDwEB/wQEAwIFoDBMBgNV
HSAERTBDMEEGCSsGAQQBoDIBCjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5n
bG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAiBgNVHREEGzAZghdiaWxkZXJ3ZWx0
LjExZnJldW5kZS5kZTAJBgNVHRMEAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY3JsLmdsb2JhbHNpZ24u
Y29tL2dzL2dzZG9tYWludmFsZzIuY3JsMIGIBggrBgEFBQcBAQR8MHowQQYIKwYB
BQUHMAKGNWh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzZG9t
YWludmFsZzIuY3J0MDUGCCsGAQUFBzABhilodHRwOi8vb2NzcDIuZ2xvYmFsc2ln
bi5jb20vZ3Nkb21haW52YWxnMjAdBgNVHQ4EFgQUl4qS/ZApvRcl74zglM4SjOCK
wD8wHwYDVR0jBBgwFoAUlq36sFu5g2QqdsIcimnaQtz+/SgwDQYJKoZIhvcNAQEF
BQADggEBACEnDxdNVxZ0OxnzyWf1Cvcyl2+XuQ8G1M3EpDcV7O+tynArZbXVo9z7
xn1GFJukjWRiCna0zoD58QVXhukMnyi0yfKnxt4qfgBt0u+Eb+vbLGgPXt0P184j
lAXgfjwZ2lTQasq56ylu+T7DxF8Kj49aoYqS6y2VC6NucD9qS9TXEJk/8MzBESHQ
wl9KQjFP1M8VHEbM62Vb1yRcqCYXA//MKgUjJTvmRPDS/lYQV5yOB9fh8a8hklkO
S9mk0zlLRLdHCjwXzu3ciIz5mlCEEf3RQXTDB9IQJidVcHOqZm8u9TU7WrYKYJqM
boDBmNkG3np242W73ifmf9AA9vJEDEk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5iuoJqcRYWRdOGT1wbs
x7cZZSeQizoLpSZJgmerlA18nqXHuXfJx8dJP8ri28GxO4CIa8EUaJMQQJAB4h9f
sw4JbaU91hs0KXl/J7Br7e3xnVPicmW6t48vtr2KoaQbEOIo9awrc1Rei0kvhkan
bJOuUWwVVLnaAckDZWqZMuCEUnX2SbZNG4IY4FKb3qjNrfvzGuJczLYQ93tI7Hag
q//9/c4AerrPSk7gBZiguHNiQDg7Wt1sI+lI8e7+so+LY5Ijx4us9OihZUzcLOIx
kracJz/bzbzNr9uonElwNRJbqxc8YKVO4Y6+9UJYuVsUWwC6IR/AYtzWSPhj58ka
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492242597689636073481179376987325223027295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-09-21 13:26:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-22 13:26:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bilderwelt.11freunde.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21157087297750084351743806851645975675907348950513929273226883091967118372480114524174930706220746605950611403208485785114119206117666544631305478702095889681819821085302415728359535574542499058328973309605961424759162035414676399416578198526281386577689306305107256891190776791061036387672069943817146661848537487268149618319744818414714249099183292531521584701627990867599510817302544984813794913889726703870170916845240984846691701974853192001932420235284952344235877147594284346562415812950779315494644303096240876354313946783732565869655871826997216977502586443676782761660025113433549653812939348817715965532773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilderwelt.11freunde.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							978a92fd9029bd1725ef8ce094ce128ce08ac03f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96adfab05bb983642a76c21c8a69da42dcfefd28
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0021270f174d5716743b19f3c967f50af732976f97b90f06d4cdc4a43715ecefadca702b65b5d5a3dcfbc67d46149ba48d64620a76b4ce80f9f1055786e90c9f28b4c9f2a7c6de2a7e006dd2ef846febdb2c680f5edd0fd7ce239405e07e3c19da54d06acab9eb296ef93ec3c45f0a8f8f5aa18a92eb2d950ba36e703f6a4bd4d710993ff0ccc11121d0c25f4a42314fd4cf151c46cceb655bd7245ca8261703ffcc2a0523253be644f0d2fe5610579c8e07d7e1f1af2192590e4bd9a4d3394b44b7470a3c17ceeddc888cf99a508411fdd14174c307d2102627557073aa666f2ef5353b5ab60a609a8c6e80c198d906de7a76e365bbde27e67fd000f6f2440c49