trinidad.myguardiangroup.com

- Guardian Holdings Limited -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:44:92:c7:fa:c3:b3:24:98:a7:8a:5f:97:71:d9:f7 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Guardian Holdings Limited

Organization: Guardian Holdings Limited
Organization unit: Information Technology
Locality: Port of Spain
Country: TT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:44:92:c7:fa:c3:b3:24:98:a7:8a:5f:97:71:d9:f7
Serial Number (int): 17636017207398587077818895896308472311
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3f:b2:85:72:a9:2b:38:c0:a9:c6:9e:fb:e2:05:be:e9:40:f4:a2:59
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): e8:23:30:e6:cd:5f:21:ab:a5:01:43:65:ce:f1:a5:c2:8c:7b:55:0e
Fingerprint (sha256): 4c:b9:74:d2:68:4f:0e:50:e4:43:9b:6e:09:84:70:8b:8f:ad:85:57:14:05:72:cc:06:4c:83:4e:47:9d:c8:39

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate trinidad.myguardiangroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trinidad.myguardiangroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

trinidad.myguardiangroup.com

Other certificates including the domain name myguardiangroup.com

(limited to 100 certificates)
mfiles.myguardiangroup.com
servicedesk.massageenvy.com
portal.roomwith.jp
novaforms.myguardiangroup.com
servicedesk.massageenvy.com
www.qrkan.com
reset.myguardiangroup.com
servicedesk.massageenvy.com
www.xtoearnings.com
myguardiangeneral.myguardiangroup.com
www.myguardiangroup.com
novahub.myguardiangroup.com
servicedesk.massageenvy.com
www.roppong.com
novaforms.myguardiangroup.com
employerportal.myguardiangroup.com
ajusdsupport.ajusd.org
easiconnect.myguardiangroup.com
webstar.myguardiangroup.com
ttlyncaccess1.myguardiangroup.com
salesforcerkofy23.framez.sg
servicedesk.massageenvy.com
servicedesk.massageenvy.com
securetransfer.myguardiangroup.com
servicedesk.massageenvy.com
novahub.myguardiangroup.com

oipa.myguardiangroup.com
autodiscover.dc.MyGuardianGroup.com
app.idealenergia.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
novahub.myguardiangroup.com
www.equitablehealthorganization.org
webstar.myguardiangroup.com
autodiscover.myguardiangroup.com
myguardiangroup.com
mfiles.myguardiangroup.com
easiclaim.myguardiangroup.com
helpdesk.mercurymed.com
ttlyncaccess1.myguardiangroup.com
servicedesk.massageenvy.com
tor.community
servicedesk.massageenvy.com
servicedesk.massageenvy.com
www.femtoindia.com
helpdesk.naa.edu
helpdesk.countrypure.com
admin.portal.myguardiangroup.com
servicedesk.massageenvy.com
autodiscover.dc.myguardiangroup.com
autodiscover.dc.myguardiangroup.com
servicedesk.massageenvy.com

servicedesk.mazakcorp.com
servicedesk.massageenvy.com
helpdesk.countrypure.com
dutchcaribbean.myguardiangroup.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
webstar.myguardiangroup.com
myguardiangeneral.myguardiangroup.com
webstar.myguardiangroup.com
servicedesk.massageenvy.com
help.gmfus.org
servicedesk.massageenvy.com
oipa.myguardiangroup.com
servicedesk.massageenvy.com
easiclaim.myguardiangroup.com
*.myguardiangroup.com
rms-api.myguardiangroup.com
leaservicedesk.lea.co.bw
romance.education
pensionsonline.myguardiangroup.com
trinidad.myguardiangroup.com
n-videoservice.com
support.stoh.com
webstar.myguardiangroup.com
ithelpdesk.renaissanceservices.com
helpdesk.sgmc.org
gstcentre.eduswitch.com
jeopardy.mbean.tech
solution.consultingnetwork.com
trinidad.myguardiangroup.com
servicedesk.massageenvy.com
trinidad.myguardiangroup.com
easiclaimdev.myguardiangroup.com
nova.myguardiangroup.com
lskdemo.5loyalty.com
helpdesk.countrypure.com
overseas.myguardiangroup.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
blog.alfhai.ly
servicedesk.massageenvy.com
webstar.myguardiangroup.com
help.sentry-equip.com
servicedesk.massageenvy.com
helpdesk.countrypure.com

Certificate

The complete raw certificate details for trinidad.myguardiangroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUK2T36ciiYI9Onvnljd
v4mLrAcCF6c2npJbmcqkbQOxgtx/SdKTotR9ULoVLcB+hR2YjqS9UFP6Nnd4z/+2
Lhi+zu8M+5WTb+sRpR1PCnwNapg98fAumW+KLtIUXW3NpvYmvyfhrxnrZxJnqjwq
FE6lCzkxhrUQjVwJSTH/GzsCz8I33t6laCCsqqqk0lSDkiUgcTkU/CZPSWQdS3+R
I5zNr97/Is3lEq/T1ufjfLpG4Xa2J8wA93Ho/3CjGIqPvic2f4R9LKt8KFJC4JZV
6bXTGKuJSp+hRMi82RyeH2GtnZk+VP0Dj0qIFYUGbHof0ZCNzUTtz4cNzgqrX32E
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17636017207398587077818895896308472311
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Port of Spain'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Guardian Holdings Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trinidad.myguardiangroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23891936626079690807783037590729422607585580842998944447612482215890400631890233641023404330451504159992861460915522224389782549360102263291012446502255854692043001975125270460030526211982476087314985584059137970938245961405147157340894865096449520525006496083674708447665130726379290637079715177923369939696074144339979687633448244913387743786068170497773049198565242661927396964521769377140430189085801477941368558071471797473277948752230701404249323081180924438499549531662216756523215909817663026880614203421543722705806268094318659913646989332243655271391624141619014110380509127641270176496918303655588672668769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3fb28572a92b38c0a9c69efbe205bee940f4a259
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trinidad.myguardiangroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001697a56c49c0000040300483046022100fd22472eb5a6e09a26461f8423b612c8695dfe24b8ef166ebd6458161e55437f022100d0ebf946684188f7d55467ef4345061d477765926de98461d8fc88d3227ecf2f0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001697a56c5df0000040300473045022100e016f068c22af4097b82ff3b52f7f9b00b9a0c28743d24a5a26414c7cabd2698022000befb1bc80138db07f3b4fbdd365c2d46f0a1dfb8379541ded9a07faad8ba5c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00224309c80341c976b4349c815ec746a227478c8db20f59088a26c3ece5275fbadf64a49e6cf59bbbd824cad9f21e7474784197b0de94275e2eab3f3ac2d271637df9091f651c43c4339ee13e8fce29f6085e94aa8fc5cb2a11a9b45ff3f16c1fae8ee561960ce9d4c1ff77d07357c9d99b6e48d5f4dad3be5ffa7e9f182711ede755326771a041de5b717dcac84cb180f892953fe7e56db2af243b174697904784d4aec8548b361da61aab4f4c4293cba212f3d58c3b3b8fda43797e67521dba5a19827ac8d5b456142e47e833e66effcb4076573956c85af205352ad941c5873f9b550a5acf476aa8712509d23fdba0dc6d69f31b14c263ddb3a97b0e23920d