spgmobile.simon.com

Issued by Verizon Public SureServer CA G14-SHA1

About this certificate


This digital certificate with serial number 6e:43:b2:ed:e0:c4:d7:02:b9:28:90:d0:a4:cc:df:93:99:6b:1c:4e was issued on by Verizon Enterprise Solutions .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • WARNING: Certificate contains a Authority Info Access Issuer with an non-preferred scheme ([https])
  • WARNING: Certificate contains a Authority Info Access Issuer with an non-preferred scheme ([https])
  • ERROR: Certificate is using SHA1, but is still valid on/after 1 Jan 2017

Simon Property Group, LP

Organization: Simon Property Group, LP
Organization unit: Information Services
State / Province: IN
Locality: Indianapolis
Country: US

Verizon Enterprise Solutions

Organization: Verizon Enterprise Solutions
Organization unit: Cybertrust
State / Province: IN
Locality: Indianapolis
Country: US

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 6e:43:b2:ed:e0:c4:d7:02:b9:28:90:d0:a4:cc:df:93:99:6b:1c:4e
Serial Number (int): 629498721651509835176366519158558130585740188750
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 83:a0:e4:70:ec:9b:b9:a7:24:af:f7:fc:06:3c:39:92:6b:d5:fa:42
AuthorityKeyId: 59:f2:58:56:95:5e:42:6b:3f:5d:18:d3:01:62:83:26:b6:a1:94:5e

Fingerprint (sha1): 4c:c6:74:c9:44:89:c4:04:a3:0b:fb:d4:b3:8f:35:83:69:b6:79:de
Fingerprint (sha256): 9f:e5:db:d3:cc:37:e7:44:13:1e:f5:d4:e4:31:c7:df:6a:98:e0:6d:38:b1:7d:5e:b6:6a:05:b7:ce:a5:ed:28

Issuing Certificate URL: https://cacert.omniroot.com/vpssg141.crt
Issuing Certificate URL: https://cacert.omniroot.com/vpssg141.der

Revocation information

OCSP Server: http://vpssg141.ocsp.omniroot.com
CRL Distribution Point: http://vpssg141.crl.omniroot.com/vpssg141.crl

Check the revocation status for the current certificate on spgmobile.simon.com
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: spgmobile.simon.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgIUbkOy7eDE1wK5KJDQpMzfk5lrHE4wDQYJKoZIhvcNAQEF BQAwgY0xCzAJBgNVBAYTAk5MMRIwEAYDVQQHEwlBbXN0ZXJkYW0xJTAjBgNVBAoT HFZlcml6b24gRW50ZXJwcmlzZSBTb2x1dGlvbnMxEzARBgNVBAsTCkN5YmVydHJ1 c3QxLjAsBgNVBAMTJVZlcml6b24gUHVibGljIFN1cmVTZXJ2ZXIgQ0EgRzE0LVNI QTEwHhcNMTUwMTIxMTQ1NTA1WhcNMTgwMTI2MDAwMDAwWjCBkTELMAkGA1UEBhMC VVMxCzAJBgNVBAgTAklOMRUwEwYDVQQHEwxJbmRpYW5hcG9saXMxITAfBgNVBAoT GFNpbW9uIFByb3BlcnR5IEdyb3VwLCBMUDEdMBsGA1UECxMUSW5mb3JtYXRpb24g U2VydmljZXMxHDAaBgNVBAMTE3NwZ21vYmlsZS5zaW1vbi5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+NhKLtmL5++TVrtrYei+MAJKZVSn6ff8j 6ERINF8WCJR+DNnwhKZusIFI4JeADn4WnsMdHe4he7mA1XoxJ6KsYBwPvD8ROuxW UeVPGtxGO4bnRLc9nJVx43Qgum62ICMCYDvyyoVNASP5IUYb0ALlJ2PGCk9ZFxi7 Nx0GO/3tL8oqYv4hB+Jm6NpLHsCCeJOHZZ8TUMeJq53jFbXt3VMkBoUHfeq2K96l LaNrIG6TOGoJ36VEUBvOWAxaNxdCB/XXwsNiF9nbXAX+5DmHrAw+Hb1Te1DH2c4D whjZM/KCdJo/RhAI0Ja6V2q1DSSKKCMNo16OtDNrpZhWl0oAshDpAgMBAAGjggHd MIIB2TAMBgNVHRMBAf8EAjAAMEwGA1UdIARFMEMwQQYJKwYBBAGxPgEyMDQwMgYI KwYBBQUHAgEWJmh0dHBzOi8vc2VjdXJlLm9tbmlyb290LmNvbS9yZXBvc2l0b3J5 MIGrBggrBgEFBQcBAQSBnjCBmzAtBggrBgEFBQcwAYYhaHR0cDovL3Zwc3NnMTQx Lm9jc3Aub21uaXJvb3QuY29tMDQGCCsGAQUFBzAChihodHRwczovL2NhY2VydC5v bW5pcm9vdC5jb20vdnBzc2cxNDEuY3J0MDQGCCsGAQUFBzAChihodHRwczovL2Nh Y2VydC5vbW5pcm9vdC5jb20vdnBzc2cxNDEuZGVyMB4GA1UdEQQXMBWCE3NwZ21v YmlsZS5zaW1vbi5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBRZ8lhWlV5Caz9dGNMBYoMmtqGUXjA+ BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vdnBzc2cxNDEuY3JsLm9tbmlyb290LmNv bS92cHNzZzE0MS5jcmwwHQYDVR0OBBYEFIOg5HDsm7mnJK/3/AY8OZJr1fpCMA0G CSqGSIb3DQEBBQUAA4IBAQCj8FRcMVO82OZvfaaZqL0JC4WaTS8IVTwoKkDabT2M Bhd3fSyLDDVo9Ri5OXjI4pMd5TAXcgeCByVK/lnS6nL3QZjJvueYYaCI49cIDQ1n VvIJ3J7KBn7jWl46GUIJ+JWnkJkrTquLwuIofk844veOG0tcA3hsPdSh1E6Rqkqx NlloaCF05lqdcpC2ZX0ZDxHMO74lffmIH2+hljTvWt8G/vpDHQHyEwdnBz3HFIVB SQEl39iYjVO3MlPML01ZBRSgZGd5ka3yHqwI6nMUaQkgghAD1Q64B4rCQm++aY3f Hw1/t0Y7WRo59g/mrDHNaCF3n5HlajM2BGGTyn+j9j7R -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjYSi7Zi+fvk1a7a2Hov jACSmVUp+n3/I+hESDRfFgiUfgzZ8ISmbrCBSOCXgA5+Fp7DHR3uIXu5gNV6MSei rGAcD7w/ETrsVlHlTxrcRjuG50S3PZyVceN0ILputiAjAmA78sqFTQEj+SFGG9AC 5SdjxgpPWRcYuzcdBjv97S/KKmL+IQfiZujaSx7AgniTh2WfE1DHiaud4xW17d1T JAaFB33qtivepS2jayBukzhqCd+lRFAbzlgMWjcXQgf118LDYhfZ21wF/uQ5h6wM Ph29U3tQx9nOA8IY2TPygnSaP0YQCNCWuldqtQ0kiigjDaNejrQza6WYVpdKALIQ 6QIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 629498721651509835176366519158558130585740188750 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Enterprise Solutions' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Public SureServer CA G14-SHA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-21 14:55:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-26 00:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indianapolis' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Simon Property Group, LP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spgmobile.simon.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24011942059641774188599809368897920559228023189456990615936499933250358762471839258844306846875050462140967972842185003246892311416614667207073132163082525055075444742116215097117548295854104338683957185758788590031006246087139350080283306998414035685872603614831099052935847352798871248365920386497908722363443869343930760680987689008747378345096487891218814462659863080542229014745954481720017089541085967906928950654343022210008789747489755865517909852215001983897914587445746991913327081924362761484296115568348935789654914186557198972597776288393577491140338039281661568703039986624014370062700156331762962796777 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6334.1.50 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.omniroot.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (158 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vpssg141.ocsp.omniroot.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'https://cacert.omniroot.com/vpssg141.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'https://cacert.omniroot.com/vpssg141.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spgmobile.simon.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59f25856955e426b3f5d18d301628326b6a1945e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vpssg141.crl.omniroot.com/vpssg141.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 83a0e470ec9bb9a724aff7fc063c39926bd5fa42 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a3f0545c3153bcd8e66f7da699a8bd090b859a4d2f08553c282a40da6d3d8c0617777d2c8b0c3568f518b93978c8e2931de5301772078207254afe59d2ea72f74198c9bee79861a088e3d7080d0d6756f209dc9eca067ee35a5e3a194209f895a790992b4eab8bc2e2287e4f38e2f78e1b4b5c03786c3dd4a1d44e91aa4ab1365968682174e65a9d7290b6657d190f11cc3bbe257df9881f6fa19634ef5adf06fefa431d01f2130767073dc7148541490125dfd8988d53b73253cc2f4d590514a064677991adf21eac08ea7314690920821003d50eb8078ac2426fbe698ddf1f0d7fb7463b591a39f60fe6ac31cd6821779f91e56a3336046193ca7fa3f63ed1