stage.lululemon.com

- lululemon athletica Canada Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 07:f8:e9:69:e9:b3:a6:91:0c:c8:1b:7b:69:ca:59:82 was issued on by DigiCert Inc.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

lululemon athletica Canada Inc.

Organization: lululemon athletica Canada Inc.
Organization unit: IT Infrastructure
State / Province: British Columbia
Locality: Vancouver
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:f8:e9:69:e9:b3:a6:91:0c:c8:1b:7b:69:ca:59:82
Serial Number (int): 10597019784132954797785922568077334914
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 89:b2:ec:48:1b:56:01:c5:c3:ec:ff:7d:28:3e:71:f6:fd:fe:60:78
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 1e:b1:2f:6c:aa:7a:17:68:2f:22:b9:50:9a:5a:4e:3f:b4:c3:19:97
Fingerprint (sha256): 85:e4:42:a3:44:e4:41:af:d8:8c:0b:6e:d6:f4:c6:13:e8:4c:eb:61:52:4a:86:a4:f0:f4:97:95:74:fe:1e:ce

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate stage.lululemon.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage.lululemon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stage.lululemon.com
stage62-info.lululemon.com.hk
stage-mobileshopapi.eu.lululemon.com
stage-fr.info.lululemon.com
stage.lululemon.com.au
stage-mobileshopapi.lululemon.co.nz
fr-test-shop.lululemon.com
stagegsr.eu.lululemon.com
stage10.ivivva.com
stage62-info.eu.lululemon.com
test-shop.lululemon.co.nz
stage62-info.lululemon.co.nz
stage.info.lululemon.co.uk
stage62-info.lululemon.co.uk
shop-stage2.lululemon.com
stage-pnimages.lululemon.com
test-shop.lululemon.com.au
test-shop.lululemon.ch
stage.info.ivivva.com
stage-preview.lululemon.cn
stage.info.eu.lululemon.com
stage-mobileshopapi.lululemon.com.hk
test-shop.ivivva.com
stage.info.lululemon.ch
stage-mobileshopapi.lululemon.com.au
test-shop.lululemon.co.uk
stage-preprod.lululemon.com
stage-preview-gsr.lululemon.com
test-shop.lululemon.com.hk
stage.lululemon.co.uk
stagegsr.lululemon.com.au
stage62-info.lululemon.com.au
stage62-info.lululemon.ch
stagegsr.lululemon.co.nz
stage-register.seawheeze.com
stage-globalstaticassets.lululemon.com
perform2.lululemon.com
stage.lululemon.cn
stage.eu.lululemon.com
stage10.lululemon.com
stage-mobileshopapi.lululemon.co.uk
stagegsr.lululemon.co.uk
stage.info.lululemon.com
stage.partners.lululemon.com.au
stage10.lululemon.co.nz
stage.lululemon.ch
fr.stage.info.lululemon.com
stage.lululemon.com.hk
stage-partners.lululemon.com.au
test-partners.lululemon.com.au
stagegsr.partners.lululemon.com.au
stage-mobileshopapi.lululemon.ch
stagefailover-partners.lululemon.com.au
stagefailover-intl.lululemon.com
stagegsr.lululemon.com.hk
stage-mobileapi-gsr.lululemon.com
stage-gsr.lululemon.com
stage.ivivva.com
stage.lululemon.co.nz
test-shop.eu.lululemon.com
stage.info.lululemon.com.au
stage-preview.lululemon.com
fr.stage-gsr.lululemon.com
stage62-info.lululemon.com
stage.info.lululemon.cn
stage-strategicsales.lululemon.com
fr.stage.lululemon.com
stage.info.lululemon.com.hk
stage-search-gsr.lululemon.com
stage62-info.lululemon.cn
stagegsr-partners.lululemon.com.au
stagefailover.ivivva.com
test-shop.lululemon.com
stagegsr.lululemon.ch
stage10.lululemon.com.au
stage.info.lululemon.co.nz
stage.seawheeze.com
register-dev.seawheeze.com
preview-stage2.lululemon.com

Other certificates including the domain name lululemon.com

(limited to 100 certificates)
vanity22.jiveon.com
*.strategicsales.lululemon.com
lululemon.com
stage.lululemon.com
lululemon.com
vanity22.jiveon.com
stage.lululemon.com
eu.lululemon.com
*.lululemon.com
leapfrog-ssl-28.gcs-web.com
whatwelove.lululemon.com
secure5s.scene7.com
*.lululemon.com
imperva.com
cdn.lululemon.com.au
test.preprod-apis.lululemon.com
smetrics.lululemon.com
vanity22.jiveon.com
cdn.lululemon.com.au
preview.apis.lululemon.com
grin.lululemon.com
sso-signing.lululemon.com
sni.cloudflaressl.com
lululemon.com.au
lululemon.com
stage.lululemon.com
sni.cloudflaressl.com
ehc-dev.lululemon.com
*.lululemon.com
imperva.com
akamai-san90.exacttarget.com
imperva.com
stage.lululemon.com
vanity22.jiveon.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-28.gcs-web.com
click.e.lululemon.com
stage.lululemon.com
whatwelove.lululemon.com
whatwelove.lululemon.com
akamai-san90.exacttarget.com
*.lllatg.com
vanity22.jiveon.com
investor.lululemon.com
lululemon.com
lululemon.ca
ehc-dev.lululemon.com
delivery.lululemon.com
lululemon.com
cdn.lululemon.com.au
eu.lululemon.com
vanity22.jiveon.com
smetrics.lululemon.com
secure5s.scene7.com
secure5s.scene7.com
ehc-dev.lululemon.com
akamai-san90.exacttarget.com
cloudflare-sandbox.lululemon.com
lll.flow.anaplan.qa.lululemon.com
sni.cloudflaressl.com
www.lululemon.com
repair.lululemon.com
secure5s.scene7.com
lululemon.com
ehc-dev.lululemon.com
test.preprod-apis.lululemon.com
vanity22.jiveon.com
leapfrog-ssl-28.gcs-web.com
*.atg.lululemon.com
leapfrog-ssl-28.gcs-web.com
*.lululemon.com
apim-stage.tokenapi.lululemon.com
cdn.lululemon.com.au
stage.lululemon.com
theghostrace.lululemon.com
grin.lululemon.com
vanity22.jiveon.com
prod.apis.lllext.com
lululemon.com
owa.lululemon.com
leapfrog-ssl-28.gcs-web.com
www.lululemon.com
ehc-dev.lululemon.com
cdn.lululemon.com.au
vanity22.jiveon.com
lululemon.ca
vanity22.jiveon.com
ehc-dev.lululemon.com
sso-encryption.lululemon.com
www.lululemon.com
eu.lululemon.com
lululemon.com
apim-stage.tokenapi.lululemon.com
prod.apis.lllext.com
vanity22.jiveon.com
www.lululemon.com
sni.cloudflaressl.com
www.lululemon.com
cloud.e.lululemon.com
view.e.lululemon.com

Certificate

The complete raw certificate details for stage.lululemon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN9TCCDN2gAwIBAgIQB/jpaemzppEMyBt7acpZgjANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMDA3MzAwMDAwMDBaFw0yMDA5MzAxMjAwMDBaMIGgMQswCQYDVQQGEwJDQTEZ
MBcGA1UECBMQQnJpdGlzaCBDb2x1bWJpYTESMBAGA1UEBxMJVmFuY291dmVyMSgw
JgYDVQQKEx9sdWx1bGVtb24gYXRobGV0aWNhIENhbmFkYSBJbmMuMRowGAYDVQQL
ExFJVCBJbmZyYXN0cnVjdHVyZTEcMBoGA1UEAxMTc3RhZ2UubHVsdWxlbW9uLmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALtjpQuoFG8k7MFHaydQ
2dtgx9ZP0mNLTMNKkjb6hCehbJ5/X+nEDYfMlroZc0tf8OBVF4DO99K69THHjNPR
ReJWjktaavckIIydmjQIULC6vEJvZLAZZWM+vmtdY2Da/xJTksaUYrd9J5fUokzp
LChrDVxSuIEBWPlQOtPbNg52zhK/7bbTtGZjX17VeCj2HpBlHztgFDpn9TxurSqx
mjwRYMpbcHX93A/WgOTu+dAZrRWsHt+f7d8vNmFvuZ6DsrOir1EzZSOQufJTrKXf
go020ctQk0hZK1atF9fk3yG/OSH6m+X5Q1iadO8A32H4Hsv1D5G+8z+7So1gKxno
HfECAwEAAaOCCmowggpmMB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4nmzF
MB0GA1UdDgQWBBSJsuxIG1YBxcPs/30oPnH2/f5geDCCCM4GA1UdEQSCCMUwggjB
ghNzdGFnZS5sdWx1bGVtb24uY29tgh1zdGFnZTYyLWluZm8ubHVsdWxlbW9uLmNv
bS5oa4Ikc3RhZ2UtbW9iaWxlc2hvcGFwaS5ldS5sdWx1bGVtb24uY29tghtzdGFn
ZS1mci5pbmZvLmx1bHVsZW1vbi5jb22CFnN0YWdlLmx1bHVsZW1vbi5jb20uYXWC
I3N0YWdlLW1vYmlsZXNob3BhcGkubHVsdWxlbW9uLmNvLm56ghpmci10ZXN0LXNo
b3AubHVsdWxlbW9uLmNvbYIZc3RhZ2Vnc3IuZXUubHVsdWxlbW9uLmNvbYISc3Rh
Z2UxMC5pdml2dmEuY29tgh1zdGFnZTYyLWluZm8uZXUubHVsdWxlbW9uLmNvbYIZ
dGVzdC1zaG9wLmx1bHVsZW1vbi5jby5ueoIcc3RhZ2U2Mi1pbmZvLmx1bHVsZW1v
bi5jby5ueoIac3RhZ2UuaW5mby5sdWx1bGVtb24uY28udWuCHHN0YWdlNjItaW5m
by5sdWx1bGVtb24uY28udWuCGXNob3Atc3RhZ2UyLmx1bHVsZW1vbi5jb22CHHN0
YWdlLXBuaW1hZ2VzLmx1bHVsZW1vbi5jb22CGnRlc3Qtc2hvcC5sdWx1bGVtb24u
Y29tLmF1ghZ0ZXN0LXNob3AubHVsdWxlbW9uLmNoghVzdGFnZS5pbmZvLml2aXZ2
YS5jb22CGnN0YWdlLXByZXZpZXcubHVsdWxlbW9uLmNughtzdGFnZS5pbmZvLmV1
Lmx1bHVsZW1vbi5jb22CJHN0YWdlLW1vYmlsZXNob3BhcGkubHVsdWxlbW9uLmNv
bS5oa4IUdGVzdC1zaG9wLml2aXZ2YS5jb22CF3N0YWdlLmluZm8ubHVsdWxlbW9u
LmNogiRzdGFnZS1tb2JpbGVzaG9wYXBpLmx1bHVsZW1vbi5jb20uYXWCGXRlc3Qt
c2hvcC5sdWx1bGVtb24uY28udWuCG3N0YWdlLXByZXByb2QubHVsdWxlbW9uLmNv
bYIfc3RhZ2UtcHJldmlldy1nc3IubHVsdWxlbW9uLmNvbYIadGVzdC1zaG9wLmx1
bHVsZW1vbi5jb20uaGuCFXN0YWdlLmx1bHVsZW1vbi5jby51a4IZc3RhZ2Vnc3Iu
bHVsdWxlbW9uLmNvbS5hdYIdc3RhZ2U2Mi1pbmZvLmx1bHVsZW1vbi5jb20uYXWC
GXN0YWdlNjItaW5mby5sdWx1bGVtb24uY2iCGHN0YWdlZ3NyLmx1bHVsZW1vbi5j
by5ueoIcc3RhZ2UtcmVnaXN0ZXIuc2Vhd2hlZXplLmNvbYImc3RhZ2UtZ2xvYmFs
c3RhdGljYXNzZXRzLmx1bHVsZW1vbi5jb22CFnBlcmZvcm0yLmx1bHVsZW1vbi5j
b22CEnN0YWdlLmx1bHVsZW1vbi5jboIWc3RhZ2UuZXUubHVsdWxlbW9uLmNvbYIV
c3RhZ2UxMC5sdWx1bGVtb24uY29tgiNzdGFnZS1tb2JpbGVzaG9wYXBpLmx1bHVs
ZW1vbi5jby51a4IYc3RhZ2Vnc3IubHVsdWxlbW9uLmNvLnVrghhzdGFnZS5pbmZv
Lmx1bHVsZW1vbi5jb22CH3N0YWdlLnBhcnRuZXJzLmx1bHVsZW1vbi5jb20uYXWC
F3N0YWdlMTAubHVsdWxlbW9uLmNvLm56ghJzdGFnZS5sdWx1bGVtb24uY2iCG2Zy
LnN0YWdlLmluZm8ubHVsdWxlbW9uLmNvbYIWc3RhZ2UubHVsdWxlbW9uLmNvbS5o
a4Ifc3RhZ2UtcGFydG5lcnMubHVsdWxlbW9uLmNvbS5hdYIedGVzdC1wYXJ0bmVy
cy5sdWx1bGVtb24uY29tLmF1giJzdGFnZWdzci5wYXJ0bmVycy5sdWx1bGVtb24u
Y29tLmF1giBzdGFnZS1tb2JpbGVzaG9wYXBpLmx1bHVsZW1vbi5jaIInc3RhZ2Vm
YWlsb3Zlci1wYXJ0bmVycy5sdWx1bGVtb24uY29tLmF1giBzdGFnZWZhaWxvdmVy
LWludGwubHVsdWxlbW9uLmNvbYIZc3RhZ2Vnc3IubHVsdWxlbW9uLmNvbS5oa4Ih
c3RhZ2UtbW9iaWxlYXBpLWdzci5sdWx1bGVtb24uY29tghdzdGFnZS1nc3IubHVs
dWxlbW9uLmNvbYIQc3RhZ2UuaXZpdnZhLmNvbYIVc3RhZ2UubHVsdWxlbW9uLmNv
Lm56ghp0ZXN0LXNob3AuZXUubHVsdWxlbW9uLmNvbYIbc3RhZ2UuaW5mby5sdWx1
bGVtb24uY29tLmF1ghtzdGFnZS1wcmV2aWV3Lmx1bHVsZW1vbi5jb22CGmZyLnN0
YWdlLWdzci5sdWx1bGVtb24uY29tghpzdGFnZTYyLWluZm8ubHVsdWxlbW9uLmNv
bYIXc3RhZ2UuaW5mby5sdWx1bGVtb24uY26CInN0YWdlLXN0cmF0ZWdpY3NhbGVz
Lmx1bHVsZW1vbi5jb22CFmZyLnN0YWdlLmx1bHVsZW1vbi5jb22CG3N0YWdlLmlu
Zm8ubHVsdWxlbW9uLmNvbS5oa4Iec3RhZ2Utc2VhcmNoLWdzci5sdWx1bGVtb24u
Y29tghlzdGFnZTYyLWluZm8ubHVsdWxlbW9uLmNugiJzdGFnZWdzci1wYXJ0bmVy
cy5sdWx1bGVtb24uY29tLmF1ghhzdGFnZWZhaWxvdmVyLml2aXZ2YS5jb22CF3Rl
c3Qtc2hvcC5sdWx1bGVtb24uY29tghVzdGFnZWdzci5sdWx1bGVtb24uY2iCGHN0
YWdlMTAubHVsdWxlbW9uLmNvbS5hdYIac3RhZ2UuaW5mby5sdWx1bGVtb24uY28u
bnqCE3N0YWdlLnNlYXdoZWV6ZS5jb22CGnJlZ2lzdGVyLWRldi5zZWF3aGVlemUu
Y29tghxwcmV2aWV3LXN0YWdlMi5sdWx1bGVtb24uY29tMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPgYDVR0fBDcwNTAzoDGg
L4YtaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3Js
MEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHUGCCsGAQUFBwEBBGkwZzAm
BggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPQYIKwYBBQUH
MAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAx
OC5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B
AQsFAAOCAQEALcOHUi3rnoNserb4xkv7qNN0GvoAZgkhAOXOPbqUgkvuBpHCKViC
l4u2l58idPDglhp4yOwfa3rtcpoTrt2xrMaQ0ywETzm8yTlYFxuhqkTca3P8HnBK
wjl6gsFbgSz0RTkKBZ8V5js4JkBIdmMPAVukpFXGQ3+zkpdECiHeaiYcGhd9O4VM
ASkMma63ve/6NnV+lPvXdz7qT1X5qWLL+j+LuO261HpDYBdcHUMsoQVX3FzgSJo6
HTh1NUO6nUN1GqHfgbc5Qto6IfrCn0WnEma7gcYufJ5hKvR9kApiRNyVK+SToHZv
+r05GRO6uhXUOjgdYng4JLdhFMGb5UbMww==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2OlC6gUbyTswUdrJ1DZ
22DH1k/SY0tMw0qSNvqEJ6Fsnn9f6cQNh8yWuhlzS1/w4FUXgM730rr1MceM09FF
4laOS1pq9yQgjJ2aNAhQsLq8Qm9ksBllYz6+a11jYNr/ElOSxpRit30nl9SiTOks
KGsNXFK4gQFY+VA609s2DnbOEr/tttO0ZmNfXtV4KPYekGUfO2AUOmf1PG6tKrGa
PBFgyltwdf3cD9aA5O750BmtFawe35/t3y82YW+5noOys6KvUTNlI5C58lOspd+C
jTbRy1CTSFkrVq0X1+TfIb85Ifqb5flDWJp07wDfYfgey/UPkb7zP7tKjWArGegd
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10597019784132954797785922568077334914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vancouver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lululemon athletica Canada Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Infrastructure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage.lululemon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23655699666065133484343639941965191672021576570257574929086499115612283737459722182848447560386363189530941782012683250617705712381434510330791929381015030798773919125483123267486114306844300261010008493826628264462619820690401283623960143138653257965863768335114982233430154253610520776796713745794074938545205924266852814290422721327559026335553432088790874003018207542872410654896240157199680583795194777424606356989297755350508694552676186439135590381092215656345658608071811328691289445874240397373762215018456407977858229681276842194289973524081938903316763700573207135939554277029494092567473193162829594107377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89b2ec481b5601c5c3ecff7d283e71f6fdfe6078
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileshopapi.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-fr.info.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileshopapi.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr-test-shop.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage10.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-stage2.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-pnimages.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-preview.lululemon.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileshopapi.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileshopapi.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-preprod.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-preview-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-register.seawheeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-globalstaticassets.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perform2.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage10.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileshopapi.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage10.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.stage.info.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileshopapi.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagefailover-partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagefailover-intl.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileapi-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-preview.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.stage-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-strategicsales.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.stage.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-search-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage62-info.lululemon.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr-partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagefailover.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage10.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.seawheeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register-dev.seawheeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-stage2.lululemon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002dc387522deb9e836c7ab6f8c64bfba8d3741afa0066092100e5ce3dba94824bee0691c2295882978bb6979f2274f0e0961a78c8ec1f6b7aed729a13aeddb1acc690d32c044f39bcc93958171ba1aa44dc6b73fc1e704ac2397a82c15b812cf445390a059f15e63b3826404876630f015ba4a455c6437fb39297440a21de6a261c1a177d3b854c01290c99aeb7bdeffa36757e94fbd7773eea4f55f9a962cbfa3f8bb8edbad47a4360175c1d432ca10557dc5ce0489a3a1d38753543ba9d43751aa1df81b73942da3a21fac29f45a71266bb81c62e7c9e612af47d900a6244dc952be493a0766ffabd391913baba15d43a381d62783824b76114c19be546ccc3