dashboard.kiwischools.co.nz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:1d:10:e3:f6:60:6c:7f:34:e6:2d:3b:bc:40:16:c9:7b:df was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dashboard.kiwischools.co.nz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1d:10:e3:f6:60:6c:7f:34:e6:2d:3b:bc:40:16:c9:7b:dfSerial Number (int): 271227497732419645704276864135995509537759
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 63:1a:bd:c7:4b:a0:9c:6a:b8:4e:76:5c:b1:fd:ba:f3:a7:3b:44:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 17:52:eb:6a:02:72:02:d9:2a:ea:3e:30:51:02:99:24:20:0f:ed:b6
Fingerprint (sha256): 71:c8:11:59:a4:b0:91:7d:aa:b8:23:1c:63:b0:54:1f:ac:32:2d:c4:48:13:bc:c8:b8:c5:15:1c:11:4c:f1:55
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate dashboard.kiwischools.co.nz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dashboard.kiwischools.co.nz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dashboard.kiwischools.co.nz
portal.kiwischools.co.nz
portal.kiwischools.co.nz
Other certificates including the domain name kiwischools.co.nz
(limited to 100 certificates)
beta.kiwischools.co.nz
dashboard.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
www.kiwischools.co.nz
mailer.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
kiwischools.co.nz
kiwischools.co.nz
support.kiwischools.co.nz
kiwischools.co.nz
kiwischools.co.nz
kiwischools.com
portal.kiwischools.co.nz
mailer.kiwischools.co.nz
dashboard.kiwischools.co.nz
mailer.kiwischools.co.nz
dashboard.kiwischools.co.nz
kiwischools.co.nz
support.kiwischools.co.nz
dashboard.kiwischools.co.nz
kiwischools.com
dashboard.kiwischools.co.nz
kiwischools.com
kiwischools.com
mailer.kiwischools.co.nz
kiwischools.co.nz
mailer.kiwischools.co.nz
gitlab.kiwischools.co.nz
kiwischools.com
kiwischools.com
mailer.kiwischools.co.nz
kiwischools.co.nz
mailer.kiwischools.co.nz
beta.kiwischools.co.nz
kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
kiwischools.com
images.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
kiwischools.com
mailer.kiwischools.co.nz
cdn.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
www.kiwischools.co.nz
kiwischools.com
images.kiwischools.co.nz
kiwischools.co.nz
cdn.kiwischools.co.nz
kiwischools.com
www.kiwischools.co.nz
kiwischools.com
beta.kiwischools.co.nz
dashboard.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
www.kiwischools.co.nz
mailer.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
kiwischools.co.nz
kiwischools.co.nz
support.kiwischools.co.nz
kiwischools.co.nz
kiwischools.co.nz
kiwischools.com
portal.kiwischools.co.nz
mailer.kiwischools.co.nz
dashboard.kiwischools.co.nz
mailer.kiwischools.co.nz
dashboard.kiwischools.co.nz
kiwischools.co.nz
support.kiwischools.co.nz
dashboard.kiwischools.co.nz
kiwischools.com
dashboard.kiwischools.co.nz
kiwischools.com
kiwischools.com
mailer.kiwischools.co.nz
kiwischools.co.nz
mailer.kiwischools.co.nz
gitlab.kiwischools.co.nz
kiwischools.com
kiwischools.com
mailer.kiwischools.co.nz
kiwischools.co.nz
mailer.kiwischools.co.nz
beta.kiwischools.co.nz
kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
kiwischools.com
images.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
kiwischools.com
mailer.kiwischools.co.nz
cdn.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
www.kiwischools.co.nz
kiwischools.com
images.kiwischools.co.nz
kiwischools.co.nz
cdn.kiwischools.co.nz
kiwischools.com
www.kiwischools.co.nz
kiwischools.com
beta.kiwischools.co.nz
Certificate
The complete raw certificate details for dashboard.kiwischools.co.nz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAx0Q4/ZgbH805i07vEAWyXvfMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MDkwMjIxMTRaFw0x OTExMDcwMjIxMTRaMCYxJDAiBgNVBAMTG2Rhc2hib2FyZC5raXdpc2Nob29scy5j by5uejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANobOjFU5WD+y3uF 0kOesrGTnD413YtmgIxKs1JibIsO8/uS08HxmcaGBXYPxs3mijAjX8TGnerx1ap7 hMexKd25UBzDeYzQL1dHg2WBm6CNY1xv+WqrKO3P1C9xo0bjyzLMYUSk7OzqAXMF 5gLDKfp/Iqg20HOQZ7pghEKihZl2t5BVjaPZW8tG2ayrdRwJY9hToVIkSPsmYNV6 CECy84Cnjrwnur5JwFlzlZHRvkzzOn8HMJOSehZpNTWrs+QVRY6ol6FRYgTVhulU 5GSp3er/ROP/VeyVk+FZfAbndCqTbX7SvJ8/VogX6K1EmGZ3qayvPxQjSQK5aBdG mWDyEosCAwEAAaOCAokwggKFMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUYxq9x0ug nGq4TnZcsf2686c7RCkwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzBABgNVHREEOTA3ghtkYXNoYm9hcmQua2l3aXNjaG9v bHMuY28ubnqCGHBvcnRhbC5raXdpc2Nob29scy5jby5uejBMBgNVHSAERTBDMAgG BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ACk8UZZU yDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABbHRlCXsAAAQDAEcwRQIgTqie bzYGaLzviPqR41clvN3iD4pPhJvxcLoGBOjAjw0CIQCKNVvMSFY+XfSxtkZ/gS4+ 2F84I+Wnl0nTdss56fmtGwB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgia N9kTAAABbHRlClMAAAQDAEYwRAIgVIcOVDeK0BOYkker3aZqnLZmgI5zWKUSQ1kc NAsYD6MCICRCFF5saiNPGtwwuo29a1gE4TSfEr3RS0VfpYIgdQWxMA0GCSqGSIb3 DQEBCwUAA4IBAQCVWkZSJYdoGxnGfo2c+FpYi8R4fTra3LxQcxpBcyJg6g3CWGKs 9T4zVS8ZnBKaiygBSY72l807e4YUahN2Hfz0UnpA1k1xbA61Vv60tiMVBEOb5Mir vhT/tjHOloNJZVW/SOliydPGfcwXAR/2yjMCMPKlX0HaY77pPdhgN88NNQGoSgNx Ee0F0wOHd6vXkmWT0o3GBVPLTooTFpTxOU07Yu/NBdn8atPv7Jg/GDUcSOqMK1Bk AF4uwwsgVi45EmfhRNS3ptI8TlhLSeLabV7SUlQ50ZsqFf4PDjgyXcFKFTHkKTCx A8Wmb7sYfxfjhxNJqqOBa1yVvYpunHSZ+T3U -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hs6MVTlYP7Le4XSQ56y sZOcPjXdi2aAjEqzUmJsiw7z+5LTwfGZxoYFdg/GzeaKMCNfxMad6vHVqnuEx7Ep 3blQHMN5jNAvV0eDZYGboI1jXG/5aqso7c/UL3GjRuPLMsxhRKTs7OoBcwXmAsMp +n8iqDbQc5BnumCEQqKFmXa3kFWNo9lby0bZrKt1HAlj2FOhUiRI+yZg1XoIQLLz gKeOvCe6vknAWXOVkdG+TPM6fwcwk5J6Fmk1Nauz5BVFjqiXoVFiBNWG6VTkZKnd 6v9E4/9V7JWT4Vl8Bud0KpNtftK8nz9WiBforUSYZneprK8/FCNJArloF0aZYPIS iwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 271227497732419645704276864135995509537759 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-09 02:21:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-07 02:21:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dashboard.kiwischools.co.nz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27533376772150712402883482966303525756570535630962408132721972372242946281359678852028018895265211739999931019765470583771142503483478460549730771708964503960137727176704381170064196865110625684798264365721343324696158077380180393457231224198732228245535332605882861661387516576121733409217361722319966369323447786903535096988079921092587060735128042592229601797778291659157185355216128959182528257697238557048176485926328634379182623646937390729725006349175061965472805275596984558388484665911324097355666509593804306008879202218575539214870438640959858775991120467989996867905780958460826456574642427383485790556811 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 631abdc74ba09c6ab84e765cb1fdbaf3a73b4429 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.kiwischools.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.kiwischools.co.nz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c7465097b000004030047304502204ea89e6f360668bcef88fa91e35725bcdde20f8a4f849bf170ba0604e8c08f0d0221008a355bcc48563e5df4b1b6467f812e3ed85f3823e5a79749d376cb39e9f9ad1b0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c74650a530000040300463044022054870e54378ad013989247abdda66a9cb666808e7358a51243591c340b180fa302202442145e6c6a234f1adc30ba8dbd6b5804e1349f12bdd14b455fa582207505b1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00955a46522587681b19c67e8d9cf85a588bc4787d3adadcbc50731a41732260ea0dc25862acf53e33552f199c129a8b2801498ef697cd3b7b86146a13761dfcf4527a40d64d716c0eb556feb4b6231504439be4c8abbe14ffb631ce9683496555bf48e962c9d3c67dcc17011ff6ca330230f2a55f41da63bee93dd86037cf0d3501a84a037111ed05d3038777abd7926593d28dc60553cb4e8a131694f1394d3b62efcd05d9fc6ad3efec983f18351c48ea8c2b5064005e2ec30b20562e391267e144d4b7a6d23c4e584b49e2da6d5ed2525439d19b2a15fe0f0e38325dc14a1531e42930b103c5a66fbb187f17e3871349aaa3816b5c95bd8a6e9c7499f93dd4