*.pizzinosiciliano.com
Issued by R3
About this certificate
This digital certificate with serial number 04:fc:9f:17:15:5a:7c:ed:0b:21:10:ac:a8:f8:4c:8d:ee:d1 was issued on by Let's Encrypt.
With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.pizzinosiciliano.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:fc:9f:17:15:5a:7c:ed:0b:21:10:ac:a8:f8:4c:8d:ee:d1Serial Number (int): 434411767298374826316255100735867398778577
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 98:aa:f2:6e:92:01:68:31:a4:2c:25:dd:8d:a6:ed:8c:9c:28:e8:a9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 43:c3:74:86:64:93:39:14:23:b6:95:3c:1f:1d:36:95:de:42:c2:72
Fingerprint (sha256): 58:b3:01:aa:dc:a7:f5:1c:54:ae:d7:20:f6:66:92:ed:d7:c6:d5:e2:f4:c3:d6:60:d9:e2:8a:80:94:d7:6c:65
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.pizzinosiciliano.com
17
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.pizzinosiciliano.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.atrapani.it
*.erice.eu
*.eurita.com
*.pizzinosiciliano.com
*.svito.it
*.wapp.it
atrapani.it
atrapani.it.eurita.com
erice.eu
pizzinosiciliano.com
svito.it
wapp.it
www.atrapani.it.eurita.com
www.erice.eurita.com
www.pizzinosicilianocom.eurita.com
www.svito.eurita.com
www.wapp.eurita.com
*.erice.eu
*.eurita.com
*.pizzinosiciliano.com
*.svito.it
*.wapp.it
atrapani.it
atrapani.it.eurita.com
erice.eu
pizzinosiciliano.com
svito.it
wapp.it
www.atrapani.it.eurita.com
www.erice.eurita.com
www.pizzinosicilianocom.eurita.com
www.svito.eurita.com
www.wapp.eurita.com
Other certificates including the domain name pizzinosiciliano.com
(limited to 100 certificates)
pizzinosiciliano.com
pizzinosiciliano.com
pizzinosiciliano.com
pizzinosiciliano.com
pizzinosiciliano.com
*.pizzinosiciliano.com
pizzinosiciliano.com
*.wapp.it
pizzinosiciliano.com
pizzinosiciliano.com
svito.it
pizzinosiciliano.com
pizzinosiciliano.com
pizzinosiciliano.com
pizzinosiciliano.com
pizzinosiciliano.com
pizzinosiciliano.com
pizzinosiciliano.com
pizzinosiciliano.com
pizzinosiciliano.com
pizzinosiciliano.com
*.pizzinosiciliano.com
pizzinosiciliano.com
*.wapp.it
pizzinosiciliano.com
pizzinosiciliano.com
svito.it
pizzinosiciliano.com
pizzinosiciliano.com
pizzinosiciliano.com
pizzinosiciliano.com
pizzinosiciliano.com
pizzinosiciliano.com
Certificate
The complete raw certificate details for *.pizzinosiciliano.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFzCCBP+gAwIBAgISBPyfFxVafO0LIRCsqPhMje7RMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMjkwNDAyNDVaFw0yNDA1MjkwNDAyNDRaMCExHzAdBgNVBAMM FioucGl6emlub3NpY2lsaWFuby5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCruxpGIjkGJKjefvdQDN5YEicKlIBmSI80tKMpL4X17WEjYl04tTBO frCgUwfVf+1aLxuzeuf2yJo5WDVSs5wF7iW7plaa74q2HjPiYnHpu5Wqaa2HjTQ3 8lO0DQWrts3kndpM+lD1qxHTn2xyZgcoJ+vQlrq/7c6IitEoXyPjv1oggQzNt4B7 lnnjG0aMWk8llhPohM01iEBY9/CxxntLWp16fYFg55LgA19iyqi7pTS82/agaUNQ 5qw2DWkmdk2zZ4aMpkDIWUi2u3HnKVKbtcTI9sXDuCVgZSKaeJqawao6boCI8Pvv 80YTtbo3p7yUYZrl/g+Ux0bvlc3jRJPFAgMBAAGjggM2MIIDMjAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFJiq8m6SAWgxpCwl3Y2m7YycKOipMB8GA1UdIwQYMBaAFBQu sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s ZW5jci5vcmcvMIIBPgYDVR0RBIIBNTCCATGCDSouYXRyYXBhbmkuaXSCCiouZXJp Y2UuZXWCDCouZXVyaXRhLmNvbYIWKi5waXp6aW5vc2ljaWxpYW5vLmNvbYIKKi5z dml0by5pdIIJKi53YXBwLml0ggthdHJhcGFuaS5pdIIWYXRyYXBhbmkuaXQuZXVy aXRhLmNvbYIIZXJpY2UuZXWCFHBpenppbm9zaWNpbGlhbm8uY29tgghzdml0by5p dIIHd2FwcC5pdIIad3d3LmF0cmFwYW5pLml0LmV1cml0YS5jb22CFHd3dy5lcmlj ZS5ldXJpdGEuY29tgiJ3d3cucGl6emlub3NpY2lsaWFub2NvbS5ldXJpdGEuY29t ghR3d3cuc3ZpdG8uZXVyaXRhLmNvbYITd3d3LndhcHAuZXVyaXRhLmNvbTATBgNV HSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ADtTd3U+ LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjfM+WGIAAAQDAEcwRQIgVtio 3qIMQ8PSBlPug4PrKiPVTBy7oMalCmQ65+2IwaECIQCq+j4i7NBVQ3c881fkrneb x2zYKkH4aLWVtCvJDwNJPQB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZx H7WbAAABjfM+Wj8AAAQDAEYwRAIgL/5VyMkFYhuR47ETEkopRHMvg0pszbKeVG8v AquX2qkCICcG14hUiy7T/rQcq6/fzUDoly5+WvX8QKFOaYCbpj4+MA0GCSqGSIb3 DQEBCwUAA4IBAQBCS1tvWa41FnH1bngPLaZ+cy6NhTyX7A+DLZZ4dZq5n+sgBtFH y9GYoXEQDB03pfmT8bwCMhC2isA5Dza8i1sPjuBnZEKo0qywd+PHkme87jBvul5w 7vtiNUQfH0DGBNPaaCC4fVjq/XusNM9QMREbsStJEUIM1WuobxGZ1M3qMNVFFIq5 /SqpE6wvjL2DN15Wa9o/rbLNL63NspmXFy1L9dwuTHiPh2Ei3L1Mq5YlSy+Y/QyM 22VUO2i2yOxuz4AhcCZerRmR8ugZucJsl/MaQvVMzkIQ1pNJKJeF816/TIjvJGTl nGhlJV4YcHvldm+g4P4CKV2kNrkOrId2IZB8 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7saRiI5BiSo3n73UAze WBInCpSAZkiPNLSjKS+F9e1hI2JdOLUwTn6woFMH1X/tWi8bs3rn9siaOVg1UrOc Be4lu6ZWmu+Kth4z4mJx6buVqmmth400N/JTtA0Fq7bN5J3aTPpQ9asR059scmYH KCfr0Ja6v+3OiIrRKF8j479aIIEMzbeAe5Z54xtGjFpPJZYT6ITNNYhAWPfwscZ7 S1qden2BYOeS4ANfYsqou6U0vNv2oGlDUOasNg1pJnZNs2eGjKZAyFlItrtx5ylS m7XEyPbFw7glYGUimniamsGqOm6AiPD77/NGE7W6N6e8lGGa5f4PlMdG75XN40ST xQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 434411767298374826316255100735867398778577 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 04:02:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 04:02:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pizzinosiciliano.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21679013896075177018377985994130097561262974423761102794667933325013389126121320079862592724047426449029840982198706323305509978824693270563102231346953269024111034498427495852524739487836339785169385444471022705398862224758896952370270506269739129384106880138434904772016009805718890470921934964866308723137448875655304184629458562714373503774120409743084989031078914162613871538841313095806216579181465192050150673261982218297795686053471715545225757067944198226063584576178909436956266352794074580957942852262857656340621084760329641386448477533757149315554137585929761426547061858302675957904016615804315743065029 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 98aaf26e92016831a42c25dd8da6ed8c9c28e8a9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (309 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atrapani.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erice.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pizzinosiciliano.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svito.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wapp.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atrapani.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atrapani.it.eurita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erice.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pizzinosiciliano.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svito.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wapp.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atrapani.it.eurita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erice.eurita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pizzinosicilianocom.eurita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svito.eurita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wapp.eurita.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018df33e58620000040300473045022056d8a8dea20c43c3d20653ee8383eb2a23d54c1cbba0c6a50a643ae7ed88c1a1022100aafa3e22ecd05543773cf357e4ae779bc76cd82a41f868b595b42bc90f03493d007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018df33e5a3f000004030046304402202ffe55c8c905621b91e3b113124a2944732f834a6ccdb29e546f2f02ab97daa902202706d788548b2ed3feb41cabafdfcd40e8972e7e5af5fc40a14e69809ba63e3e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00424b5b6f59ae351671f56e780f2da67e732e8d853c97ec0f832d9678759ab99feb2006d147cbd198a171100c1d37a5f993f1bc023210b68ac0390f36bc8b5b0f8ee0676442a8d2acb077e3c79267bcee306fba5e70eefb6235441f1f40c604d3da6820b87d58eafd7bac34cf5031111bb12b4911420cd56ba86f1199d4cdea30d545148ab9fd2aa913ac2f8cbd83375e566bda3fadb2cd2fadcdb29997172d4bf5dc2e4c788f876122dcbd4cab96254b2f98fd0c8cdb65543b68b6c8ec6ecf802170265ead1991f2e819b9c26c97f31a42f54cce4210d69349289785f35ebf4c88ef2464e59c6865255e18707be5766fa0e0fe02295da436b90eac877621907c