decorum.work

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number ce:a8:30:ec:e6:5e:be:e7:11:e2:d4:0b:b0:c9:46:f2 was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=decorum.work

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): ce:a8:30:ec:e6:5e:be:e7:11:e2:d4:0b:b0:c9:46:f2
Serial Number (int): 274694265328729942304412992144170108658
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: de:55:f7:ad:81:5a:85:f4:5b:27:07:25:63:8a:c8:5c:dd:e0:36:3e
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 92:3d:d1:8a:dd:cc:be:79:2e:21:8b:72:e7:f8:b8:71:f7:3e:9d:0e
Fingerprint (sha256): 66:0e:7a:31:26:6c:b2:db:ac:e8:08:24:19:da:53:3b:02:ce:a4:ac:37:be:8f:2b:d8:49:8f:65:ef:48:1c:eb

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/qF4Oz6oX5Kc
CRL Distribution Point: http://crls.pki.goog/gts1p5/ihFiAY-64YY.crl

Check the revocation status for certificate decorum.work

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for decorum.work

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

decorum.work

Other certificates including the domain name decorum.work

(limited to 100 certificates)
www.examen.ssmb.ro
kilobytetechnology.com
www.calculategst.co.nz
landing.dataanalystcourse.co.uk
landing.dataanalystcourse.co.uk
app.writi.io
www.q9labs.cf
www.mlgt.vn
www.decorum.work
www.doisnaoito.dev
strengthcorp.app
crowrivermutual.com
app.lovepaws.com.br
story-wise.com
decorum.work
orion-auth-stg.febrafar.dev
fuji-app.cc
www.enxugagelo.com.br
www.chrealty.com.mx
www.macroshop.in
www.skillsforcetraining.com
www.alyahya.ws
sni.cloudflaressl.com
admin.azure-ar.com
www2.metroly.io
distributor-next.decorum.work
adspro.app
prereg.percap.se
orion-auth-stg.febrafar.dev
www.saapp.me
dev.stellarjaysoftware.com
shop.tonydinand.com
heriotza-hands.vitrin.as
quizandpoll.com
wh1ter0se.com
decorum.work
fly-dev.fetchyfox.com
verdeurbano.apoio.tech
nahom.dev
kajaaniperehdytys.edukamu.fi
customer.decorum.work
rokinapp.com
link.makana.plazah.com
decorum.work
msk.nmfsport.com
prereg.percap.se
link.ianspawsgrooming.pet
www.examen.ssmb.ro
be.milescop.com
videos.cartoon-blox.ml
www.lammertsma.dev
groundlevelinsights.glimpseanalytics.com
decorum.work
www.chrealty.com.mx
decorum.work
avenidafit.turnosweb.app
www.xsine.co
finca.finance
www.lease2nft.app
dowinapp.com
decorum.work
goto.aadhan.in
nucleus.yektasarioglu.com
memble.app
40.4uapps.tk
fl10n.com
decorum.work
rexroth-building.com
bblk.io
sni.cloudflaressl.com
aawishcar.in
decorum.work
adspro.app
moneymelon.app
ciscoandmj.com
invoicron.com
raremetalgames.com
app.rotoql.com
nahom.dev
decorum.work
system.embryoteen.com
bazar.li
gestionali.davidecampello.app
assets.jenosize.io
w247.fndrsng.com
mutualityapp.com
playground.stupidassistant.com
clinic.curotech.ca
vpn.leadsdoit.com
movies456.com
playground.stupidassistant.com
login.indiadigipay.in
begg.in
aviariominguitos.com
akinsoftizmir.org
whatthecost.com
app.fotographer.in
login.indiadigipay.in
seb-steuerberatung.fastdocs.de
gateinteriors.ie

Certificate

The complete raw certificate details for decorum.work in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIRAM6oMOzmXr7nEeLUC7DJRvIwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjQwNjAxMTMyMjU2WhcNMjQwODMw
MTMyMjU1WjAXMRUwEwYDVQQDEwxkZWNvcnVtLndvcmswggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDSoBjdcOCRgZnduyWkOAr+Z2QBO8P67zQqNuUVmSOS
sE7ZguGNqxGMQJ/QEZEkebLek/BZ/AcDbgoqX6ayGz1os7kav5nq1mqVtuD8DsCt
FOrwJZxlXtoBKRN7YjKiQ02l+ba8rIcDt9H+IaiDtQ8wyreL3MPJ82+M9A5FRjiR
Y44WSL2wfrdQ+FjXwbMGEG4ROoeaEVQtK21jZwLxZUtCC/ZFRnFQu9ThU5TePNPI
mI7H3Cjgrn1uhllrMOCIjaBR7gdEr+/xXy8EPPJGimH9GpJBbRx2Ji1yGqosPVlm
wGigV8tdQpsbxfwOvgQl80Jr/5pKM8YZFG+uXcZaJ6fhAgMBAAGjggJyMIICbjAO
BgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQU3lX3rYFahfRbJwclY4rIXN3gNj4wHwYDVR0jBBgwFoAU1fye
Dd8eyt0Il5duK8VfxSv17LgweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUFBzABhilo
dHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFwNS9xRjRPejZvWDVLYzAxBggrBgEF
BQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMXA1LmRlcjAXBgNV
HREEEDAOggxkZWNvcnVtLndvcmswIQYDVR0gBBowGDAIBgZngQwBAgEwDAYKKwYB
BAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29vZy9n
dHMxcDUvaWhGaUFZLTY0WVkuY3JsMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA
dv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGP1C6hzwAABAMARzBF
AiBRPqYLduDiPwev7lvL2ag91KJwUnwEpB55VJaEuVqD7AIhALWevNnN3jjVBahi
9LUsYt/9c7HjSm+wW3x2mIReuYjYAHUA3+FW66oFr7WcD4ZxjajAMk6uVtlup/Wl
agHRwTu+UlwAAAGP1C6icwAABAMARjBEAiB6or4078aLaJ2G+HJeYBhOA8iCAESJ
0yaJoKOCwSgrJwIgFujh5J4iEAv+0jDpKYl75SdEQ2DevYWhagDQ4/5E2fUwDQYJ
KoZIhvcNAQELBQADggEBACFeEDju5pV+J+GtcNSDooe3R/ts990cjgQXkFZyiyB+
XSVEE//PGs24W//5HE3IBDjYitXOAFP/5lokabHSRvKIboqaYq8r7EOGIQKk9sdB
QkOPfbe9wdyzAIuOrWolxO8DrQvy7VMe03kmM7gNCkape1q3NFCYkLJtVluZ1XKx
2RcchYCeg2xmpUpUYxXElFh4t+IxwhAxS2kYjRFoYZaySezuiKCzXcw2yHyVNdn2
06CeBBD+2tO598OxOydFhzeH3TVnvkf6WbEvVq/dNJOlMwsCKM0015V9OfZUT5TG
E8JokWOqV5P/KkacYLgp4VXT3zDB+8YCkkZCW7vTao8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qAY3XDgkYGZ3bslpDgK
/mdkATvD+u80KjblFZkjkrBO2YLhjasRjECf0BGRJHmy3pPwWfwHA24KKl+mshs9
aLO5Gr+Z6tZqlbbg/A7ArRTq8CWcZV7aASkTe2IyokNNpfm2vKyHA7fR/iGog7UP
MMq3i9zDyfNvjPQORUY4kWOOFki9sH63UPhY18GzBhBuETqHmhFULSttY2cC8WVL
Qgv2RUZxULvU4VOU3jzTyJiOx9wo4K59boZZazDgiI2gUe4HRK/v8V8vBDzyRoph
/RqSQW0cdiYtchqqLD1ZZsBooFfLXUKbG8X8Dr4EJfNCa/+aSjPGGRRvrl3GWien
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274694265328729942304412992144170108658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-01 13:22:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-30 13:22:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'decorum.work'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26588990879531851786880306588014616729347537639035094705196091755148442109594282662389091667915234039833818726192653853809089990789909657864491107442867016949543138828583050769478506351386853058762930736482949215266038977114565069599386713028409767188441833995312566877286547903514517784851463687294337904808521023024516439209449372763683803066252679319279609140146422536930549776647669508826547055350831977307897303061387024208869731163190255872353815170845597915699572924706636133523951396796064648970388095745812879266249023650393319157329780633936548750550379362039641593309651459526616488914904828331325852723169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de55f7ad815a85f45b270725638ac85cdde0363e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/qF4Oz6oX5Kc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decorum.work'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/ihFiAY-64YY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fd42ea1cf00000403004730450220513ea60b76e0e23f07afee5bcbd9a83dd4a270527c04a41e79549684b95a83ec022100b59ebcd9cdde38d505a862f4b52c62dffd73b1e34a6fb05b7c7698845eb988d8007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fd42ea273000004030046304402207aa2be34efc68b689d86f8725e60184e03c882004489d32689a0a382c1282b27022016e8e1e49e22100bfed230e929897be527444360debd85a16a00d0e3fe44d9f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00215e1038eee6957e27e1ad70d483a287b747fb6cf7dd1c8e04179056728b207e5d254413ffcf1acdb85bfff91c4dc80438d88ad5ce0053ffe65a2469b1d246f2886e8a9a62af2bec43862102a4f6c74142438f7db7bdc1dcb3008b8ead6a25c4ef03ad0bf2ed531ed3792633b80d0a46a97b5ab734509890b26d565b99d572b1d9171c85809e836c66a54a546315c4945878b7e231c210314b69188d11686196b249ecee88a0b35dcc36c87c9535d9f6d3a09e0410fedad3b9f7c3b13b2745873787dd3567be47fa59b12f56afdd3493a5330b0228cd34d7957d39f6544f94c613c2689163aa5793ff2a469c60b829e155d3df30c1fbc6029246425bbbd36a8f