sporty.org.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:b2:4b:57:08:55:1c:43:e2:09:a8:63:57:9a:97:38:1a:1a was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:b2:4b:57:08:55:1c:43:e2:09:a8:63:57:9a:97:38:1a:1a
Serial Number (int): 322007263105720765945487569705608385403418
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5e:c3:cc:ec:ff:2a:fa:cf:7b:e7:1e:22:88:52:3e:98:74:f4:77:13
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a3:f6:90:f3:ef:39:c3:ec:75:29:e6:9a:73:44:37:82:63:3a:7d:dd
Fingerprint (sha256): 98:34:3b:38:4f:24:06:3d:f3:3d:48:98:75:0a:30:d0:fc:56:d6:49:f4:32:d1:1f:56:fd:b4:a0:43:d2:25:fd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.org.nz

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aklbadminton.com
athleticsotago.co.nz
aucklandswords.org.nz
canoepolohb.co.nz
chbc.school.nz
courtinthebay.co.nz
cra.kiwi
cricketwellington.co.nz
fdmc.school.nz
freyberg.ac.nz
giafc.co.nz
haumoana.school.nz
hockeywanganui.org.nz
howicksoftball.co.nz
kartsport.org.nz
kuranuicollege.school.nz
leamingtonrugby.co.nz
lindisfarne.school.nz
lrsc.co.nz
mahe.kiwi
malvernnetball.co.nz
manawatusoftball.org.nz
mca.org.nz
mcnetball.co.nz
mitre10park.co.nz
mmc.school.nz
naenaeswimclub.co.nz
netballchristchurch.org.nz
netballwhanganui.co.nz
ngaiwi.school.nz
nzbsa.org.nz
olympicwrestlingnz.com
omuafc.org.nz
oxfordcres.school.nz
pbhockey.co.nz
polo.org.nz
porthillunited.co.nz
rotoruaunited.co.nz
shirleyrugby.co.nz
skeggsfoundation.nz
softballwaikato.co.nz
softballwaikato.org.nz
sportsafe.co.nz
sporty.org.nz
sportycrm.co.nz
sportycrm.com
starling.org.nz
supercrm.co.nz
unimountbohs.org.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxNHraTr8jiBkXmylHIC
PxOIVjSkqYPvun+7pHdATXkZMkQLRk7FgiHwjGsMygdketXsfLCkA/F/ukKxsOY2
FwKPhG0QrkapnQR6xYyxaeJ6wKncTwVSI3IY666qCb8ypz5EUrNtLUThN7ANfMV3
OryjPiMZIVn6mvJnMi3/IhmCsAXlAg82J8Y0negXVMN423zjwtwiQNr5m6JSa5kf
0evDPmInc+rikeWQyZ1Ij+6JpVKtnDO5Tk7iLt84foSnKCqYsISfCIwM5mUaVmND
GmAaWdRdkZFiMgzU5HGsTyPT5Xkjsc5s6ZyjqNmcjpLaTwchZqoh/XNtg0xwTuhg
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322007263105720765945487569705608385403418
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 03:25:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-20 03:25:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19576444588802903886682718080395681153984681280731209777433333947893942248661153501184501502001655433864706038503452024859131229875628317228798864477332752597706039843416246542867964910171933288305194267999799241076817427809852748418632331150708066854550548530956108038468445390347792671270004520149227942785108931994293231553807184796938330847951757869372746039143919336265059685874924333739623046453964570577424542594314293448549648740609147531570487804740402068977124176780325561821293261805234479154379636958956448419550469522515415365968689423193810096462352616695887285572054243271166919038806831804791894073553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ec3ccecff2afacf7be71e2288523e9874f47713
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (936 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aklbadminton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticsotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandswords.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoepolohb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chbc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtinthebay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cra.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketwellington.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freyberg.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haumoana.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeywanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuranuicollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leamingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindisfarne.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahe.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malvernnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manawatusoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mca.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitre10park.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naenaeswimclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballchristchurch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwhanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngaiwi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzbsa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omuafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxfordcres.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porthillunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoruaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skeggsfoundation.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballwaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballwaikato.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsafe.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportycrm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportycrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercrm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unimountbohs.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f9e8c51b300000403004730450220283c1e9fae3b0bb4d2134fca124ac7260fad22f5d368ba8a1f3b5f52a03fd805022100efe3be1c1a4662a4ca31a409e5653345de9bf931f7d3636cc1e60d7aba9e5d7700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f9e8c59140000040300473045022100af7c5f71436214417322741cf076497b4785469ff395f3d4d7d02456cd2301fd0220191d3f022409662f41c1239494ccd14035c218f82ecff639b51e2ae77b2a3510
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0026afe13ca1621dd0421401bba4ebaa977691edb567b62495eeff116e9558d4bc8de16a6fc410115244f9e3521feb0db99cc2e611f70c928be273e42921e9965f78ff7aba3213704c3fa1cedd2f654c6d0f18921a54bd963b4f579eae98ac21c18bc672dc2830e31f433d450db0a5079f38f7f27f7f5473c6b5092e0a4efc3f7581efb8589332f9f6f6f0cdcb7bf57bf58244e98211c6c3c597ec3a6a3ae48999b64b351a2bde32164402cfbae9c89799c66bad2463db8d252c9423579a49e5d4ddea524944c8a41b45d6bb29acac93c7ee7838730b289bfadbf747f86dde0f30e718e5ba399db67d390a2bfeba32a5fe138e2846589aeef425889493090401d8