capture.sliit.lk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:24:86:45:35:76:e5:4a:47:aa:93:cb:9f:b4:83:9f:0d:a7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=capture.sliit.lk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:24:86:45:35:76:e5:4a:47:aa:93:cb:9f:b4:83:9f:0d:a7
Serial Number (int): 273765498908740536291044743491622264573351
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cc:ef:47:e0:8e:61:5b:cf:8d:74:cc:11:a9:b4:69:61:f0:24:8e:e3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 78:d7:04:58:42:3e:c8:14:b8:18:18:e6:17:ca:f0:de:26:ef:77:e8
Fingerprint (sha256): 52:9c:38:c5:67:7d:14:c3:a7:08:bd:ec:4c:a0:aa:d4:7a:19:42:84:7b:cb:fc:46:b1:41:69:bc:40:07:01:1b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate capture.sliit.lk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for capture.sliit.lk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

capture.sliit.lk

Other certificates including the domain name sliit.lk

(limited to 100 certificates)
*.sliit.lk
help.vitalcareinc.com
servicedesk.raibal.ae
helpdesk.lpga.com
sliit.lk
mesa4.aylsoluciones.pw
mesa4.aylsoluciones.pw
beta.sliit.lk
itsupport.pando.ai
vpn.sliit.lk
vpn.sliit.lk
helpdesk.rebuildmanufacturing.com
helpdesk.clicktechretail.com
help.vitalcareinc.com
ithelp.nmcc.edu
servicedesk.teijinautomotive.com
servicedesk.oneontacsd.org
support.caseshield.com
portal.dakotalandfcu.com
sicash.sliit.lk
helpdesk.lpga.com
itsupport.waycool.in
lecturecapture.sliit.lk
helpdesk.admix.com
lecturecapture.sliit.lk
vpn.sliit.lk
mesa4.aylsoluciones.pw
vpn.sliit.lk
servicedesk.raibal.ae
mesa4.aylsoluciones.pw
servicedesk.metro-inet.us
helpdesk.coopelev.com
mesa4.aylsoluciones.pw
servicedesk.stevinrock.ae
vpn.sliit.lk
lecitsupport.maf.ae
portal.dakotalandfcu.com
solicitudes.hospitalcima.net
servicedesk.raibal.ae
helpdesk.atlanticitservices.com
lms.sliit.lk
mesa4.aylsoluciones.pw
destek.coreway.com.tr
servicedesk.zenantech.com
helpdesk.unisyncgroup.com
ithelp.nmcc.edu
servicedesk.stevinrock.ae
portal.dakotalandfcu.com
itsupport.pando.ai
mesa4.aylsoluciones.pw
mesa4.aylsoluciones.pw
support.alsaqergroup.com
vpn.sliit.lk
servicedesk.teijinautomotive.com
support.caseshield.com
helpdesk.jhs.com
voc.utc-egy.net
servicedesk.zenantech.com
helpdesk.region10pihp.org
helpdesk.lpga.com
support2.volkert.com
mesa4.aylsoluciones.pw
capture.sliit.lk
aptest.sliit.lk
supportme.sliit.lk
mesa4.aylsoluciones.pw
servicedesk.metro-inet.us
ymba.sliit.lk
mesa4.aylsoluciones.pw
lms.sliit.lk
lecitsupport.maf.ae
onlineexams.sliit.lk
helpdesk.gwctx.org
sliit.lk
servicedesk.zenantech.com
itsupport.qholding.com
lecturecapture.sliit.lk
support2.volkert.com
scorpiontravels.sdpapac.org
destek.coreway.com.tr
*.sliit.lk
mesa4.aylsoluciones.pw
exchange.sliit.lk
helpdesk.intrepidmuseum.org
sliit.lk
servicedesk.metro-inet.us
support.access2arabia.com
mesa4.aylsoluciones.pw
ithelp.nmcc.edu
mesa4.aylsoluciones.pw
help.vitalcareinc.com
helpdesk.signorellicompany.com
mesa4.aylsoluciones.pw
boardpac.sliit.lk
encompasshelp.coastal-bev.com
support2.volkert.com
mesa4.aylsoluciones.pw
mesa4.aylsoluciones.pw
helpdesk.admix.com
helpdesk.jhs.com

Certificate

The complete raw certificate details for capture.sliit.lk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgISAySGRTV25UpHqpPLn7SDnw2nMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTgwNDMwMTlaFw0y
MDA2MTYwNDMwMTlaMBsxGTAXBgNVBAMTEGNhcHR1cmUuc2xpaXQubGswggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qZGJuo/zp/CanLLIlVYy/IYfX/jP
zCXZhJZ0vXe+CYVadBku9+3ALEr4tAo21j/HQBcqVFC6VbxCEjUIIHTAftY030jH
bJ7cIrTl8vp4n8t9Kdk5uuMW5pA1Vj47dVR9TzYrwHC+7WNq/z2nQ8mpanKfzEML
YZeUd93XuDf0tg2uG7rLWvI4LoOJKRWAeysLL4+zy8dHwShOzfIIEERdrblSPXg2
THTgNNAkpmz3MeqO3seRjdrlEeLn4xNGonldVDM8roT1HZ/VacOvGasV+b29zj1S
F4gsuGV+Wm8+CHd365/oHKQsvcpdFuA9qUVOhSmObvnDxpfVUOySH4MPAgMBAAGj
ggJjMIICXzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMzvR+COYVvPjXTMEam0aWHw
JI7jMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB
BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZy8wGwYDVR0RBBQwEoIQY2FwdHVyZS5zbGlpdC5sazBMBgNVHSAERTBDMAgG
BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1AF6nc/nf
VsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABcOwfAeAAAAQDAEYwRAIgPJYE
4XIReIOHOU/Zpqko4xI3hdQxTU36HCxTmhcakn0CIGn+sv5kh3nP7tliKLwdz5VZ
HUFOZZvhi6KEkbc3IP5rAHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+L
kF4AAAFw7B8B2QAABAMARjBEAiBKuzxSbbW+lKfWoEIkiwzLpJSYnS5DWt7bPj1N
G/yWQQIgf7lv/mjsJ/zb7pfHdYvTle8JdtU/0M+SearDBFv6Ca0wDQYJKoZIhvcN
AQELBQADggEBADlDsHWxI/Z+eK01muZshh+JOQCtGBb7SWmPwLXv4kadxBqIuY9d
fz8aO9p/bJLhz4E2UMO5xLJMLbpxHK2HUxwIGzY9US9qw0e3e2W1H9LhaU19EkEP
7QYscOQqECxjQjV0hiU3QangjWBxVAgUNEqlqVCNQmT9N4Hk8KjHgJcSSY/eyomY
rIJWVGSdDiTHnw9siPG18AzsIL5VVI4+Lczu5G7QZ3Gt6hq78oT/m0rENj2tqHfn
BgyVaRyuxVGfD5J46nQlWKW3Zp/E0r63vPcDYPaz+gJ64iZ1SoPVlEaVMrPMUrz6
MRhbofxNo9uuH+3kgwpUiSP00Eeb7yjr2yg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6mRibqP86fwmpyyyJVW
MvyGH1/4z8wl2YSWdL13vgmFWnQZLvftwCxK+LQKNtY/x0AXKlRQulW8QhI1CCB0
wH7WNN9Ix2ye3CK05fL6eJ/LfSnZObrjFuaQNVY+O3VUfU82K8Bwvu1jav89p0PJ
qWpyn8xDC2GXlHfd17g39LYNrhu6y1ryOC6DiSkVgHsrCy+Ps8vHR8EoTs3yCBBE
Xa25Uj14Nkx04DTQJKZs9zHqjt7HkY3a5RHi5+MTRqJ5XVQzPK6E9R2f1WnDrxmr
Ffm9vc49UheILLhlflpvPgh3d+uf6BykLL3KXRbgPalFToUpjm75w8aX1VDskh+D
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273765498908740536291044743491622264573351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 04:30:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-16 04:30:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'capture.sliit.lk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23185227156458008912269933508389375369948560744227063488432004080850939040284729378079398006363822449563985255875528513719468866579644731259621245326792186990229661963899884967193413697451965288561078328801100591791603835445435570744679235823657659458947785169605728985838080318681266886156091489299148961527717242327809534122256863176289347716692063065931150160399042972260946925387467129528779740817680201055731828363346409546722680911806331568899090399729192556770405949832229080095254009084746782747681520643138248482146066282649843731885847723341599979089033666071241469243523186201145407058277830203887065203471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ccef47e08e615bcf8d74cc11a9b46961f0248ee3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capture.sliit.lk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170ec1f01e0000004030046304402203c9604e17211788387394fd9a6a928e3123785d4314d4dfa1c2c539a171a927d022069feb2fe648779cfeed96228bc1dcf95591d414e659be18ba28491b73720fe6b007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170ec1f01d9000004030046304402204abb3c526db5be94a7d6a042248b0ccba494989d2e435adedb3e3d4d1bfc964102207fb96ffe68ec27fcdbee97c7758bd395ef0976d53fd0cf9279aac3045bfa09ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003943b075b123f67e78ad359ae66c861f893900ad1816fb49698fc0b5efe2469dc41a88b98f5d7f3f1a3bda7f6c92e1cf813650c3b9c4b24c2dba711cad87531c081b363d512f6ac347b77b65b51fd2e1694d7d12410fed062c70e42a102c6342357486253741a9e08d6071540814344aa5a9508d4264fd3781e4f0a8c7809712498fdeca8998ac825654649d0e24c79f0f6c88f1b5f00cec20be55548e3e2dcceee46ed06771adea1abbf284ff9b4ac4363dada877e7060c95691caec5519f0f9278ea742558a5b7669fc4d2beb7bcf70360f6b3fa027ae226754a83d594469532b3cc52bcfa31185ba1fc4da3dbae1fede4830a548923f4d0479bef28ebdb28