static.adobesigncdnstage.com

- Adobe Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:9f:14:37:68:89:20:aa:73:8c:de:15:4f:1f:c5:ee was issued on by DigiCert Inc.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Adobe Inc.

Organization: Adobe Inc.
State / Province: California
Locality: San Jose
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9f:14:37:68:89:20:aa:73:8c:de:15:4f:1f:c5:ee
Serial Number (int): 4813669225955014648302126384916973038
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 5c:ab:24:19:5c:86:d1:1e:b5:8e:30:75:f0:5d:96:01:79:aa:79:10
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 4a:20:b5:97:3c:ba:16:cf:82:8d:4c:14:76:22:29:3b:63:3b:70:48
Fingerprint (sha256): 41:69:4f:16:b7:0c:bf:76:9b:07:21:e7:b7:72:6c:66:55:6b:25:5d:d0:5c:2a:ec:7b:77:40:55:b2:73:b2:58

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate static.adobesigncdnstage.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for static.adobesigncdnstage.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dc.dev.dexilab.acrobat.com
dev.acrobat.adobe.com
static.adobesigncdnstage.com
sharepointonline.echosignstage.com
dc-dev.documentcloudtest.com
static.adobesigncdnstage.us
dc.stage.acrobat.com
static.adobesigncdnpreview.com
sharepointonline.adobesignpreview.com
static.adobesigncdnpreview.us
static.echocdnawspreview.com
stage-dc.acrobat.adobe.com
sharepointonline.echosignawspreview.com
sharepointonline.adobesignstage.com
dc-stage.documentcloudtest.com
static.echocdnstage.com
stage.acrobat.adobe.com

Other certificates including the domain name adobesigncdnstage.com

(limited to 100 certificates)
assets-cdn.stage.adobe.com
static.adobesigncdnstage.com
assets-cdn.adobe.com
assets-cdn.adobe.com
secure.echosignstage.com
assets-cdn.adobe.com
assets-cdn.stage.adobe.com
ssl.adobe.com
assets-cdn.adobe.com
secure.echosignstage.com
static.adobesigncdnstage.com
static.adobesigncdnstage.com
assets-cdn.adobe.com
ssl.adobe.com
secure.echosignstage.com
static.adobesigncdnstage.com
secure.echosignstage.com
assets-cdn.adobe.com
assets-cdn.stage.adobe.com
assets-cdn.adobe.com
ssl.adobe.com
assets-cdn.stage.adobe.com
assets-cdn.stage.adobe.com
static.adobesigncdnstage.com
assets-cdn.adobe.com
secure.echosignstage.com
static.adobesigncdnstage.com
static.adobesigncdnstage.com
assets-cdn.adobe.com
assets-cdn.adobe.com
assets-cdn.adobe.com
static.adobesigncdnstage.com
assets-cdn.stage.adobe.com
assets-cdn.adobe.com
assets-cdn.stage.adobe.com
static.adobesigncdnstage.com
secure.echosignstage.com
assets-cdn.adobe.com

Certificate

The complete raw certificate details for static.adobesigncdnstage.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23FE76ClhkUnJRJPDAxM
BXrwfx256fPGck1BUO6oVjrejrLX8yFl/5mcYsFCFrxCa1CcWcgvZc69z1vJgmka
u+bhpiBzBfwc82yAdiUhndlJEck2aggNLl4KQ1z1H5J22tBLQAC/93yF6FFkUdBM
3oSkDhpTay0rnyyh10P6dAiE5CA9T8N5c1XPiNkeULoqXEKicpiOhqYoUFrm9+/e
N6/iLRcJ8yFNieRz3FE32OzgIZ1UlDpSp5wG5K0OBUNEydammwU9+l++tyorWbDt
Xed0zQpNzZAgHWNTFCGSwiqRkWDxotOyFecuZeJdAxH+ClWnZPHyJ/KshXKASI0U
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4813669225955014648302126384916973038
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Adobe Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'static.adobesigncdnstage.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27702043951988420615908093734006808888046853441407068903276390477116620352520156219678665523404196322933930075773037778909759666226965473687328687210758551612733750400872251766458151937441434497512546406711173827089960959616892361087087984356372002428852875223125467922555491175823097680005066331101333223819343398443484928129269949919027343066764175299592169709623987936658937839939962342872870257525453152394011434064934875937773173640888015495610091803945928985312119053626922147448498941543500955186609219311567240607558883707112826115350203463655127229596731465329751932461912255935409277429212180376737872155657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5cab24195c86d11eb58e3075f05d960179aa7910
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (522 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.dev.dexilab.acrobat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.acrobat.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.adobesigncdnstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharepointonline.echosignstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc-dev.documentcloudtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.adobesigncdnstage.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.stage.acrobat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.adobesigncdnpreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharepointonline.adobesignpreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.adobesigncdnpreview.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.echocdnawspreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-dc.acrobat.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharepointonline.echosignawspreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharepointonline.adobesignstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc-stage.documentcloudtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.echocdnstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.acrobat.adobe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a874b992f43bc8827d61996cdb244f38fa0ddeeb811823966d1dc773e4916ba30468fb587cb7a1e69e24c13094d3409c17dc7e5991c919f9d6811b16916d1e22018e4ad82ce3915d516681fd2206fd3b410b74320c4ab2d21cfc048aeddbc3af82d9b9ee9b20469da8fb8033ec2f39c8308d9b9760f56f36b0d58de3a7bb0afd30103a86b06d47c473e59cdfc755f953a773f79676035477f76effcc630ed8ba385e5940a1db89aa4806c24e0c2e79fcc252c96d621e301cf0b7824c7966e1c78b4fbed5eaf2d58b1d82bbf43b88c5610d70cc396a5b01462a69d1b6470e17c146f21203a8186ac7d9108b08257e58174139441d79275aa52972de7979eac270