ua.egov-nsdl.com

- NSDL e-Governance Infrastructure Limited -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 0d:4c:ae:fa:cc:af:50:e5:41:82:22:8a:e2:2f:c4:a1 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NSDL e-Governance Infrastructure Limited

Organization: NSDL e-Governance Infrastructure Limited
State / Province: Maharashtra
Locality: Mumbai
Country: IN

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:4c:ae:fa:cc:af:50:e5:41:82:22:8a:e2:2f:c4:a1
Serial Number (int): 17678127516111103244586324628243203233
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 76:47:9f:f9:9a:9c:4e:05:31:b8:2c:c4:b9:82:4f:b6:71:d1:03:99
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): c8:83:81:97:71:83:90:0a:91:16:19:bb:95:f8:9b:ad:e1:86:81:e1
Fingerprint (sha256): 88:06:8e:53:49:97:93:fe:91:cc:0c:b2:d2:70:d1:39:2d:a1:df:05:19:6f:ad:33:0e:5d:99:ff:61:47:33:90

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ua.egov-nsdl.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ua.egov-nsdl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ua.egov-nsdl.com
www.onlineservices.nsdl.com

Other certificates including the domain name egov-nsdl.com

(limited to 100 certificates)
preprodauth.egov-nsdl.com
tin.tin.nsdl.com
ua.egov-nsdl.com
pandashboard.egov-nsdl.com
pantan.egov-nsdl.com
esign.egov-nsdl.com
pregw.esign.egov-nsdl.com
protean-health.com
tin.tin.nsdl.com
onlineservices.epayment.nsdl.com
pandashboard.egov-nsdl.com
ua.egov-nsdl.com
pregw.esign.egov-nsdl.com
pandashboard.egov-nsdl.com
esign.egov-nsdl.com
preprodsa.egov-nsdl.com
preprodsa.egov-nsdl.com
sa.egov-nsdl.com
preprodsa.egov-nsdl.com
ua.egov-nsdl.com
esign.egov-nsdl.com
tin.tin.nsdl.com
od.paammobile.egov-nsdl.com
pregw.esign.egov-nsdl.com
www.tin-nsdl.com
opvapi.egov-nsdl.com
ua.egov-nsdl.com
tin.tin.nsdl.com
test.elearningservices.egov-nsdl.com
preprodsa.egov-nsdl.com
test.assisted-service.egov-nsdl.com
onlineservices.epayment.nsdl.com
pandashboard.egov-nsdl.com
tin.tin.nsdl.com
opvapi.egov-nsdl.com
pregw.esign.egov-nsdl.com
assisted-service.egov-nsdl.com
egovcafservices.nsdl.com
preprodauth.egov-nsdl.com
www.tin-nsdl.com
sa.egov-nsdl.com
tin.tin.nsdl.com
www.tin-nsdl.com
pantan.egov-nsdl.com
opvapi.egov-nsdl.com
preprodsa.egov-nsdl.com
tin.tin.nsdl.com
egovcafservices.nsdl.com
tin.tin.nsdl.com
onlineservices.tin.egov-nsdl.com
pantan.egov-nsdl.com
assisted-service.egov-nsdl.com
pantan.egov-nsdl.com
tin.tin.nsdl.com
sa.egov-nsdl.com
ua.egov-nsdl.com
test.assisted-service.egov-nsdl.com
sa.egov-nsdl.com
onlineservices.epayment.nsdl.com
esign.egov-nsdl.com
pandashboard.egov-nsdl.com
ua.egov-nsdl.com
preprod.assisted-api.egov-nsdl.com
opvapi.egov-nsdl.com
ua.egov-nsdl.com
sa.egov-nsdl.com
www.tin-nsdl.com
esign.egov-nsdl.com
assisted-service.egov-nsdl.com
onlineservices.epayment.nsdl.com
pantan.egov-nsdl.com
tin.tin.nsdl.com
egovcafservices.nsdl.com
opvapi.egov-nsdl.com
pregw.esign.egov-nsdl.com
pandashboard.egov-nsdl.com
protean-health.com
tin.tin.nsdl.com
protean-health.com
pandashboard.egov-nsdl.com
pandashboard.egov-nsdl.com
pantan.egov-nsdl.com
health.egov-nsdl.com
esign.egov-nsdl.com
opvapi.egov-nsdl.com
od.paammobile.egov-nsdl.com
egovcafservices.nsdl.com
pregw.esign.egov-nsdl.com
www.ekyc.egov-nsdl.com
www.tin-nsdl.com
pantan.egov-nsdl.com
assisted-service.egov-nsdl.com
opvapi.egov-nsdl.com
pregw.esign.egov-nsdl.com
esign.egov-nsdl.com
preprodauth.egov-nsdl.com
ekycservices.egov-nsdl.com
tin.tin.nsdl.com

Certificate

The complete raw certificate details for ua.egov-nsdl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+O5geQ1eVBeVp7P3y7U
LAilooBbv27HCenStH5CG9FZhHKuLI65vh9/eHmcMFof6salz+AhKB08q7scCggy
rFwOJXFylRSIAxChVj5L+7jeC7PiwzPpJLNmTcO1EZMDBvH28HBDc0dAt0y8PaiD
C303mdjyeVZmeoUnenPJ3JUZ/fqBgPXmYNoA+I2k8YbWV0j0hEf8UQd66jzWWSUT
zqboMGxFOqT+ysfUx4Ou8HmSl87oHB6NV70fmCsndc9U082ZBSoCo0jbTz+qNR7H
X/pHGp1Nd75UjDfOg0X8WUe92v2P8zpnJSdBBT0NyRlQN5fSMve0JBhYMc33nglA
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17678127516111103244586324628243203233
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-06 07:48:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-28 07:48:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NSDL e-Governance Infrastructure Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ua.egov-nsdl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27758483991980642837816362965605438786885607481452525198450317698949600762276501366898900427900319850964960404227321597364512614828124630514225223085762236594642695723068491404405432494965294436490084353571751421466750825829324279122931869589534517929219142709643988391956689185589548313346339525684285667675235538704989948021196311560936830597428273149159806390715261402893753921989895371571922914400201697490763688545863863337507809702737423615169038579382083955501296574626958170690677547414950396142727917308176298498252338587328696884058798251140431931119774274439392585155736586218498649738633513527506872385751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76479ff99a9c4e0531b82cc4b9824fb671d10399
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ua.egov-nsdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlineservices.nsdl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005715effa499290e79c12f183d628b7e8eaa3404f2968cfe4cc3f038478bfb7ad77a61b5b2a92da5b76a0fe4ed61c1f84a0971ef50336e190b1a6e944b62ba44fec57e25884bbbaa361d65c66d2362b50909f47bf180b7c9c54dd9ef735bb503573090bf509ed16e3d013ca5c4d7aa4d27c515453426e36cbffe1d846aa7cd19fcad811e0922e29551badb67146ea006387aa8b5ded5e9946d367120b6e2df5851ca5cf15bb7bcf21d62faacd016f7ce78fb3204ad427470f1e4b64aa4095640e05125eb764242e3899eb1ba5c2947be25c751e95cac4207509942de4a6e2448f419c64fa348003ed99f0b476b22ff98a63bc1d60a6bc0053f08da683473fa092