www.naturalenglandwhidata.org.uk

Issued by GeoTrust DV SSL CA

About this certificate


This digital certificate with serial number 09:0f:b6 was issued on by GeoTrust Inc. .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • ERROR: localityName is required for [EV] certificates
  • ERROR: businessCategory is required for [EV] certificates
  • ERROR: jurisdictionCountryName is required for [EV] certificates
  • ERROR: localityName or stateOrProvinceName is required if organizationName is set
  • ERROR: stateOrProvinceName is required if organizationName is set

www.naturalenglandwhidata.org.uk

Company registration number: -fIpTMfKJXKsdrEX7LdF-ltf4qiBepRg
Organization: www.naturalenglandwhidata.org.uk
Organization unit: GT33617077
Organization unit: See www.geotrust.com/resources/cps (c)11
Organization unit: Domain Control Validated - QuickSSL(R)
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: GB

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 09:0f:b6
Serial Number (int): 593846
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 48:67:aa:7c:d7:5a:bb:d0:66:65:a1:de:8f:4d:c6:29:6d:3f:ad:9c
AuthorityKeyId: 8c:f4:d9:93:0a:47:bc:00:a0:4a:ce:4b:75:6e:a0:b6:b0:b2:7e:fc

Fingerprint (sha1): ab:20:3b:45:92:78:86:c9:27:87:94:9a:70:3b:10:2c:0c:7c:61:17
Fingerprint (sha256): 60:f9:e1:ce:ee:3f:d4:4a:65:6d:59:a4:05:6e:cb:e2:60:1e:bb:68:53:66:39:aa:12:13:0c:c1:2d:66:83:78

Issuing Certificate URL: http://gtssldv-aia.geotrust.com/gtssldv.crt

Revocation information

OCSP Server: http://gtssldv-ocsp.geotrust.com
CRL Distribution Point: http://gtssldv-crl.geotrust.com/crls/gtssldv.crl

Check the revocation status for the current certificate on www.naturalenglandwhidata.org.uk
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.naturalenglandwhidata.org.uk
naturalenglandwhidata.org.uk

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIDCQ+2MA0GCSqGSIb3DQEBBQUAMGExCzAJBgNVBAYTAlVT MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQLExREb21haW4gVmFsaWRh dGVkIFNTTDEbMBkGA1UEAxMSR2VvVHJ1c3QgRFYgU1NMIENBMB4XDTE0MDQxNzAy NTMwM1oXDTE0MDgwMzE2MTgzM1owggEHMSkwJwYDVQQFEyAtZklwVE1mS0pYS3Nk ckVYN0xkRi1sdGY0cWlCZXBSZzELMAkGA1UEBhMCR0IxKTAnBgNVBAoTIHd3dy5u YXR1cmFsZW5nbGFuZHdoaWRhdGEub3JnLnVrMRMwEQYDVQQLEwpHVDMzNjE3MDc3 MTEwLwYDVQQLEyhTZWUgd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvY3BzIChj KTExMS8wLQYDVQQLEyZEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQgLSBRdWlja1NT TChSKTEpMCcGA1UEAxMgd3d3Lm5hdHVyYWxlbmdsYW5kd2hpZGF0YS5vcmcudWsw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDroIFmWO+B8saLRIHz8t79 V1opLwKowEx27DxTpykjMZVNdXFDe4VT8b7lbTrRb3NGkvfHLjDXFqgGl1rSnzKE 0oMRD3sGunt4TD+LLOm9B7jKGOnJ1vdM87WH3HO22sb0ZM3Z69eBvitP1dm/xr/U YaAg4AgCeRKnPr7dxfiHS1LcSXgwCxT2QQfzto7zDUEcwkkYYxCqsEAgRgzPR3Fl kDrK3H7LxqkbYOZ1bDZE5GD3fiFVHcpngWm4wPCxVb+kZ/0ss/KsB+yWF9ebXf+j udwlkKsDRMCcz9c9jUzO/Wg5FY+f9cSPMLjwzntxneOZCub9ZbbK7skVCQ9i9Qp7 AgMBAAGjggHUMIIB0DAfBgNVHSMEGDAWgBSM9NmTCke8AKBKzkt1bqC2sLJ+/DAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkG A1UdEQRCMECCIHd3dy5uYXR1cmFsZW5nbGFuZHdoaWRhdGEub3JnLnVrghxuYXR1 cmFsZW5nbGFuZHdoaWRhdGEub3JnLnVrMEEGA1UdHwQ6MDgwNqA0oDKGMGh0dHA6 Ly9ndHNzbGR2LWNybC5nZW90cnVzdC5jb20vY3Jscy9ndHNzbGR2LmNybDAdBgNV HQ4EFgQUSGeqfNdau9BmZaHej03GKW0/rZwwDAYDVR0TAQH/BAIwADB1BggrBgEF BQcBAQRpMGcwLAYIKwYBBQUHMAGGIGh0dHA6Ly9ndHNzbGR2LW9jc3AuZ2VvdHJ1 c3QuY29tMDcGCCsGAQUFBzAChitodHRwOi8vZ3Rzc2xkdi1haWEuZ2VvdHJ1c3Qu Y29tL2d0c3NsZHYuY3J0MEwGA1UdIARFMEMwQQYKYIZIAYb4RQEHNjAzMDEGCCsG AQUFBwIBFiVodHRwOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvY3BzMA0G CSqGSIb3DQEBBQUAA4IBAQCP7dU8SNmj00qZGaYagB5QrHfC9nmlW7elW4IjP6Ke vJ6e9CvkfMrq7LWbL4EJ31w82pdFYAMQSKycEu9lQtjHXSSXlEuobIMi9fpsp8/f x1fha0XB80cCSLsrENnkxnTo1ZTevJsqO3eX4RbusvHcTwIWyT5PlQrVYlICHgR6 pduau2luYssWzh7ZI3F3BU9lR6uBmB+AAPRPGl5EjRK2nm93KaJDpTAYdtpcEFef Cwdl1mfWpplY6hh64zSm2YDC8kQm1Rel0rkZBPoj42Q89Rc7wPl5xWK1h5LNHhMJ w3dJoY0hA39LnaPmIwM+iH+lsTEatf0IThzQyBWlhiNr -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66CBZljvgfLGi0SB8/Le /VdaKS8CqMBMduw8U6cpIzGVTXVxQ3uFU/G+5W060W9zRpL3xy4w1xaoBpda0p8y hNKDEQ97Brp7eEw/iyzpvQe4yhjpydb3TPO1h9xzttrG9GTN2evXgb4rT9XZv8a/ 1GGgIOAIAnkSpz6+3cX4h0tS3El4MAsU9kEH87aO8w1BHMJJGGMQqrBAIEYMz0dx ZZA6ytx+y8apG2DmdWw2RORg934hVR3KZ4FpuMDwsVW/pGf9LLPyrAfslhfXm13/ o7ncJZCrA0TAnM/XPY1Mzv1oORWPn/XEjzC48M57cZ3jmQrm/WW2yu7JFQkPYvUK ewIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 593846 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-17 02:53:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-03 16:18:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '-fIpTMfKJXKsdrEX7LdF-ltf4qiBepRg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.naturalenglandwhidata.org.uk' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT33617077' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)11' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R)' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.naturalenglandwhidata.org.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29745149863162335328186142996881750755578939324461983831794774690074178042937029913572919296381539375365893994933039264697298890459424300779561714540889116471237321972970443198919476304694364920436150087161937045060254858855818732627703140332494913171721226081316855621164538637690226441249872728582956322288093078926541895049149952422910318028468899698179659949273183926251694586711773705124558326672053314409748739595795845928986288296606392929875996201504216740443521006173997839379142851269531774989465976123595870282117835848774869775434334541079856681843552203606698545701433864716254302683026521194531818637947 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8cf4d9930a47bc00a04ace4b756ea0b6b0b27efc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturalenglandwhidata.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalenglandwhidata.org.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-crl.geotrust.com/crls/gtssldv.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4867aa7cd75abbd06665a1de8f4dc6296d3fad9c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-aia.geotrust.com/gtssldv.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008fedd53c48d9a3d34a9919a61a801e50ac77c2f679a55bb7a55b82233fa29ebc9e9ef42be47ccaeaecb59b2f8109df5c3cda974560031048ac9c12ef6542d8c75d2497944ba86c8322f5fa6ca7cfdfc757e16b45c1f3470248bb2b10d9e4c674e8d594debc9b2a3b7797e116eeb2f1dc4f0216c93e4f950ad56252021e047aa5db9abb696e62cb16ce1ed9237177054f6547ab81981f8000f44f1a5e448d12b69e6f7729a243a5301876da5c10579f0b0765d667d6a69958ea187ae334a6d980c2f24426d517a5d2b91904fa23e3643cf5173bc0f979c562b58792cd1e1309c37749a18d21037f4b9da3e623033e887fa5b1311ab5fd084e1cd0c815a586236b