intermediate.snyderisd.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2d:72:10:de:c1:22:05:39:74:0f:d1:7f:b8:b6:b4:c6:82 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=intermediate.snyderisd.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2d:72:10:de:c1:22:05:39:74:0f:d1:7f:b8:b6:b4:c6:82
Serial Number (int): 276801183892988683944679373080899169339010
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ec:e3:73:a1:67:56:3e:eb:f7:37:9e:55:d7:fa:64:08:d8:00:b3:e0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7b:24:04:81:35:70:b2:61:08:2e:36:65:fc:bc:90:e5:1a:83:db:10
Fingerprint (sha256): 48:88:8c:1f:83:0f:fb:6e:08:33:90:b6:a2:b2:fc:26:fe:15:af:83:c9:84:f6:65:46:79:1d:81:8f:fe:89:54

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate intermediate.snyderisd.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intermediate.snyderisd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

intermediate.snyderisd.net

Other certificates including the domain name snyderisd.net

(limited to 100 certificates)
juniorhigh.snyderisd.net
gutierrez.hcisd.org
admin.rap48.richardallenschools.com
intermediate.snyderisd.net
primary.snyderisd.net
*.snyderisd.net
admin.bowie.hcisd.org
admin.curriculum.snyderisd.net
fremont.bcsd.com
www.ausdlift.org
admin.cv.k12.ca.us
admin.aileencolburn.school
www.snyderisd.net
www.snyderisd.net
tms.tiffincityschools.org
juniorhigh.snyderisd.net
admin.cano.hcisd.org
admin.clarendon.sboe.org
horizon.gobearsgo.net
admin.milam.hcisd.org
admin.cve.cv.k12.ca.us
admin.lincoln.anacondaschools.org
www.mpsdnow.org
admin.missionpreparatory.org
snyderisd.net
crockett.hcisd.org
admin.bonham.hcisd.org
intermediate.snyderisd.net
primary.snyderisd.net
intermediate.snyderisd.net
highschool.snyderisd.net
snyderisd.net
intermediate.snyderisd.net
snyderisd.net
highschool.snyderisd.net
juniorhigh.snyderisd.net
*.snyderisd.net
admin.gutierrez.hcisd.org
admin.austin.hcisd.org
admin.aileencolburn.school
admin.newpathways.hcisd.org
admin.aileencolburn.school
admin.chabot.cv.k12.ca.us
admin.echs.hcisd.org
admin.aileencolburn.school
snyderisd.net
primary.snyderisd.net
www.snyderisd.net
admin.leonardeulerd.edu.mx
admin.curriculum.snyderisd.net
juniorhigh.snyderisd.net
admin.parkmanorelementary.org
hhs.hcisd.org
www.uachs.org
admin.aquinashigh.org
juniorhigh.snyderisd.net
*.snyderisd.net
admin.desoto.goldenruledallas.org
juniorhigh.snyderisd.net
snyderisd.net
admin.milam.hcisd.org
admin.aileencolburn.school
admin.memorial.hcisd.org
admin.houston.hcisd.org
admin.wilson.hcisd.org
pac.sboe.org
highschool.snyderisd.net
highschool.snyderisd.net
snyderisd.net
admin.highschool.snyderisd.net
admin.elementary.msd120.org
highschool.snyderisd.net
primary.snyderisd.net
admin.aileencolburn.school
vistahorizonglobal.org
cano.hcisd.org
admin.crockett.hcisd.org
snyderisd.net
milam.hcisd.org
*.snyderisd.net
highschool.snyderisd.net
admin.tcchs.todd.kyschools.us
bowie.hcisd.org
admin.brownacademyeagles.org
admin.aileencolburn.school
6gc.sangerisd.net
www.snyderisd.net
bes.gobearsgo.net
admin.coakley.hcisd.org
www.triviumcharter.org
www.snyderisd.net
intermediate.snyderisd.net
www.snyderisd.net
juniper.durangoschools.org
highschool.snyderisd.net
coakley.hcisd.org
juniorhigh.snyderisd.net
admin.austin.hcisd.org
snyderisd.net
snyderisd.net

Certificate

The complete raw certificate details for intermediate.snyderisd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgISAy1yEN7BIgU5dA/Rf7i2tMaCMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTEwMTA0NTFaFw0y
MDA1MTEwMTA0NTFaMCUxIzAhBgNVBAMTGmludGVybWVkaWF0ZS5zbnlkZXJpc2Qu
bmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/r2hGX1dtX5JCM9
tyqOqhJFmBwvejyMV2waNt3E9SbRa1JCzdbeyBk6Txn2D/aNOokcU6O/YJUZyDXd
H+YENBssbFOqNiGEGQ00i5fbZyh1YPGRB1l3c1/7bbG4qabQggThVohGV2ahbOvM
W6ntDdqGGyNRonLjNZIXEKy6a3BrmdP+kgCgoxE+Vf6R39N9rLDwH6G8PNJezvro
seS6EBKQkeLlrl4eI7FgYGWcqvBuPBfnSAPf3p2bkYV77GkzIqFzDnqgPDdiQDLS
ujG6o0LbDsK6REk/sXIODbfD0nDkFhq0yjkBAKJKaVjk7LujR1GC0CjeBU9h1NmT
TuIqqwIDAQABo4ICbjCCAmowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTs43OhZ1Y+
6/c3nlXX+mQI2ACz4DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMCUGA1UdEQQeMByCGmludGVybWVkaWF0ZS5zbnlkZXJp
c2QubmV0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHW
eQIEAgSB9ASB8QDvAHUA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMA
AAFwMf3yHgAABAMARjBEAiAvBwGwa+8alhyEEE9VzDzWjxjiZdI/kQpj/i/NjfHn
rwIgHxcGrdzkXSfVapLba4uf70ph0Qzp22pAQpKltHj2CYwAdgCyHgXMi6LNiiBO
h2b5K7mKJSBna9r6cOeySVMt74uQXgAAAXAx/fIOAAAEAwBHMEUCICRJuuUxB653
LK3vGwsx3OFPrSmtbdarNgLEEhq7MAeTAiEApZ5bW2t/kKorHCzaB7kDaMxOy3MA
nwzLs91uD1esxvEwDQYJKoZIhvcNAQELBQADggEBAD/UPceG4BCqkQUQxR97xQRh
h4Wzjw95HOx9Z1NqbwJ6RGK5fmWpC6TqqPJXTWHuAxscpAVRbBUttsOtH1o+VRLz
nptK3D/60kg4rl2QDG3mfzQQ5JIcBf/gAjE6HFoJKeaYwGv8D/6C1xmoNODwKWRX
4iazkbE3kuV6qUmBYTWbVVqIJQlSSwwPl/jZFsV9PL6WI9ssioJOBBhHhDCk6gw/
M9VJX9vKLEcwLXOFIt6egbnsapHQEAng2QjA6bWgJG9usMxDcQ1/IG2tjAIalq/S
nX3x+8yJLa/naLvWrGI8hvE/dj7n96Hcxa736e3S2yf2BRUu99HtwO38JEex73M=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/r2hGX1dtX5JCM9tyqO
qhJFmBwvejyMV2waNt3E9SbRa1JCzdbeyBk6Txn2D/aNOokcU6O/YJUZyDXdH+YE
NBssbFOqNiGEGQ00i5fbZyh1YPGRB1l3c1/7bbG4qabQggThVohGV2ahbOvMW6nt
DdqGGyNRonLjNZIXEKy6a3BrmdP+kgCgoxE+Vf6R39N9rLDwH6G8PNJezvroseS6
EBKQkeLlrl4eI7FgYGWcqvBuPBfnSAPf3p2bkYV77GkzIqFzDnqgPDdiQDLSujG6
o0LbDsK6REk/sXIODbfD0nDkFhq0yjkBAKJKaVjk7LujR1GC0CjeBU9h1NmTTuIq
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276801183892988683944679373080899169339010
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 01:04:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-11 01:04:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intermediate.snyderisd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26760036794690068806851751557620120695734896456256516693369264115082619348950434629540601654258092026908218421582371920516011910576271040450001021742162129429987382246551398757735208362556086485052383100794712161834890819097324027445870585538333412328647260402910028223383885109898173419497410152812072104393983678717201796134439796120381312998260937287386915080915861939797833591593704197919111637729662394210407697895634593279290279379887296914399740316800154570145309092033371169242560712545488242147419657864608882131410617805675791541895532412673095606147571582273057919357105359354497087345633270121070743136939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ece373a167563eebf7379e55d7fa6408d800b3e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intermediate.snyderisd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017031fdf21e000004030046304402202f0701b06bef1a961c84104f55cc3cd68f18e265d23f910a63fe2fcd8df1e7af02201f1706addce45d27d56a92db6b8b9fef4a61d10ce9db6a404292a5b478f6098c007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017031fdf20e000004030047304502202449bae53107ae772cadef1b0b31dce14fad29ad6dd6ab3602c4121abb300793022100a59e5b5b6b7f90aa2b1c2cda07b90368cc4ecb73009f0ccbb3dd6e0f57acc6f1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003fd43dc786e010aa910510c51f7bc504618785b38f0f791cec7d67536a6f027a4462b97e65a90ba4eaa8f2574d61ee031b1ca405516c152db6c3ad1f5a3e5512f39e9b4adc3ffad24838ae5d900c6de67f3410e4921c05ffe002313a1c5a0929e698c06bfc0ffe82d719a834e0f0296457e226b391b13792e57aa9498161359b555a882509524b0c0f97f8d916c57d3cbe9623db2c8a824e0418478430a4ea0c3f33d5495fdbca2c47302d738522de9e81b9ec6a91d01009e0d908c0e9b5a0246f6eb0cc43710d7f206dad8c021a96afd29d7df1fbcc892dafe768bbd6ac623c86f13f763ee7f7a1dcc5aef7e9edd2db27f605152ef7d1edc0edfc2447b1ef73