emailsecurity.felicianofinancial.com
- Feliciano Financial Group -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 10:6e:fb:7f:e3:92:06:a0:05:4d:cf:71:1d:f5:6a:2a was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Feliciano Financial Group
Organization:
Feliciano Financial Group
State / Province:
Texas
Locality: Tyler
Country: US
Locality: Tyler
Country: US
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 10:6e:fb:7f:e3:92:06:a0:05:4d:cf:71:1d:f5:6a:2aSerial Number (int): 21843901604214272571615757800423385642
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): 92:73:27:0a:de:7b:7c:54:f2:fe:6e:03:3e:44:a3:5c:97:71:0a:94
Fingerprint (sha256): 97:da:6d:d4:9d:3a:f6:6d:fa:1f:db:0c:df:f4:3e:d5:36:05:ec:89:d8:0c:a1:2c:ff:d4:3b:82:61:52:08:cf
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate emailsecurity.felicianofinancial.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for emailsecurity.felicianofinancial.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
emailsecurity.felicianofinancial.com
Other certificates including the domain name felicianofinancial.com
(limited to 100 certificates)
remote.felicianofinancial.com
felicianoinvestments.com
felicianofinancial.com
mail.felicianofinancial.com
portal.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
felicianofinancial.com
felicianofinancial.com
mail.felicianofinancial.com
felicianosecurities.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
felicianosecurities.com
mail.felicianofinancial.com
portal.felicianofinancial.com
felicianosecurities.com
emailsecurity.felicianofinancial.com
mail.felicianofinancial.com
www.felicianofinancial.com
felicianoinvestments.com
felicianoinvestments.com
remote.felicianofinancial.com
mail.felicianofinancial.com
felicianoinvestments.com
remote.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
laserfiche.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
*.felicianofinancial.com
mail.felicianofinancial.com
*.felicianofinancial.com
felicianoinvestments.com
mail.felicianofinancial.com
felicianoinvestments.com
felicianofinancial.com
mail.felicianofinancial.com
portal.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
felicianofinancial.com
felicianofinancial.com
mail.felicianofinancial.com
felicianosecurities.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
felicianosecurities.com
mail.felicianofinancial.com
portal.felicianofinancial.com
felicianosecurities.com
emailsecurity.felicianofinancial.com
mail.felicianofinancial.com
www.felicianofinancial.com
felicianoinvestments.com
felicianoinvestments.com
remote.felicianofinancial.com
mail.felicianofinancial.com
felicianoinvestments.com
remote.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
laserfiche.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
*.felicianofinancial.com
mail.felicianofinancial.com
*.felicianofinancial.com
felicianoinvestments.com
mail.felicianofinancial.com
Certificate
The complete raw certificate details for emailsecurity.felicianofinancial.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIQEG77f+OSBqAFTc9xHfVqKjANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTQxMjExMDAwMDAwWhcNMTUxMjExMjM1OTU5 WjCBgDELMAkGA1UEBhMCVVMxDjAMBgNVBAgMBVRleGFzMQ4wDAYDVQQHDAVUeWxl cjEiMCAGA1UECgwZRmVsaWNpYW5vIEZpbmFuY2lhbCBHcm91cDEtMCsGA1UEAwwk ZW1haWxzZWN1cml0eS5mZWxpY2lhbm9maW5hbmNpYWwuY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pKjfNonPG9g3maAAzGF5XEG3HOVYP67Ew1B q7V0xabv0k5kU+Zl2rhgxvKye+vGpIJsgH3pTJhrnqJlL3t0dMIEk37VZsyzAvoD 7R022sEpsmpxFi1a1rACUX5biQ7PNZ7nueqQTlsUv7WiDJwhjkn7mJe4NwafFLWc XrzNE5qJXHC+GTaMSrdknN+JklmxPhyuc19f3TS4s8MljntV3F5cssPykkkaYMnF crq6sjU7FQpxKFaoa/kMpbnUbJOmQHt1Uzo1PUYFrWLmEDgXNrcOAezhpsTcEuZ+ PPdQGUxQG5Yxks8Mka/gzi+mwN3FqEB5wUNpe0WlWhwopF+KQQIDAQABo4IBijCC AYYwLwYDVR0RBCgwJoIkZW1haWxzZWN1cml0eS5mZWxpY2lhbm9maW5hbmNpYWwu Y29tMAkGA1UdEwQCMAAwcgYDVR0gBGswaTBnBgpghkgBhvhFAQc2MFkwJgYIKwYB BQUHAgEWGmh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3BzMC8GCCsGAQUFBwICMCMM IWh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vcmVwb3NpdG9yeTAOBgNVHQ8BAf8EBAMC BaAwHwYDVR0jBBgwFoAUwk9IV/zRT5rAXTh9DgXb2S61UmAwKwYDVR0fBCQwIjAg oB6gHIYaaHR0cDovL3RqLnN5bWNiLmNvbS90ai5jcmwwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0 cDovL3RqLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3RqLnN5bWNiLmNv bS90ai5jcnQwDQYJKoZIhvcNAQELBQADggEBAAhcVBPaiu2bToPHtc0PsfHOtF0h 9dPCVIZHrUW8GMog83+P0VFgCGsZ8UMVQtYZm+sK82wvMF+LAm6WpjU/CS3P3hEG ayR5BtxKR9fWptMYV8vtPu/fe4C+kWAUboF/63zVCtBICnxo97gMHnppcH0UxMsY hlzNRCzRrRRfMxqZuEK7xuetTZu1rtXjNoe6Wr16iAz+NvTboCwr+w2qLX3OSu2t 935w8fkgZfyXY9SwQDlPQHXWof3voNUVSV5dVL76osMYEXwwRcO/P5qGgU7pYb1H TZe7eh2TxUtlGOVTe9EyNAg+wiQY9rqsOnY1etg/Zm6Q4emkUkOWh/zb5Us= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pKjfNonPG9g3maAAzGF 5XEG3HOVYP67Ew1Bq7V0xabv0k5kU+Zl2rhgxvKye+vGpIJsgH3pTJhrnqJlL3t0 dMIEk37VZsyzAvoD7R022sEpsmpxFi1a1rACUX5biQ7PNZ7nueqQTlsUv7WiDJwh jkn7mJe4NwafFLWcXrzNE5qJXHC+GTaMSrdknN+JklmxPhyuc19f3TS4s8MljntV 3F5cssPykkkaYMnFcrq6sjU7FQpxKFaoa/kMpbnUbJOmQHt1Uzo1PUYFrWLmEDgX NrcOAezhpsTcEuZ+PPdQGUxQG5Yxks8Mka/gzi+mwN3FqEB5wUNpe0WlWhwopF+K QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21843901604214272571615757800423385642 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-11 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tyler' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Feliciano Financial Group' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'emailsecurity.felicianofinancial.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30117026782376911045814304735652007525344401704838427802012531904885039986060280345954570640096289992612503671229439494114393404444300222375434700680171854020713209133292296981960930206529816573862949456054554550430705886486350293282403480126839935863466235879737477744945433317542646399589931527023646823159153563683288781315145820000160818669038261384202771215876582332205133515226206574318255029595726318704999056265473449414758069816294190096411096344077689189540559233957673429841118984222732792213533102949965148430397424252184341258632103581308771625246709096204309853126409982429973454897267929824090375817793 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailsecurity.felicianofinancial.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00085c5413da8aed9b4e83c7b5cd0fb1f1ceb45d21f5d3c2548647ad45bc18ca20f37f8fd15160086b19f1431542d6199beb0af36c2f305f8b026e96a6353f092dcfde11066b247906dc4a47d7d6a6d31857cbed3eefdf7b80be9160146e817feb7cd50ad0480a7c68f7b80c1e7a69707d14c4cb18865ccd442cd1ad145f331a99b842bbc6e7ad4d9bb5aed5e33687ba5abd7a880cfe36f4dba02c2bfb0daa2d7dce4aedadf77e70f1f92065fc9763d4b040394f4075d6a1fdefa0d515495e5d54befaa2c318117c3045c3bf3f9a86814ee961bd474d97bb7a1d93c54b6518e5537bd13234083ec22418f6baac3a76357ad83f666e90e1e9a452439687fcdbe54b