lilly.es

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fe:98:f6:ea:e9:ac:82:26:2f:45:ab:df:e2:81:97:86:f7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lilly.es

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fe:98:f6:ea:e9:ac:82:26:2f:45:ab:df:e2:81:97:86:f7
Serial Number (int): 347971903718183014322529080759977059518199
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9b:a1:66:92:4e:e1:4c:5a:99:ce:45:6a:32:38:de:f6:92:f2:fd:a9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 42:78:34:ad:70:13:a4:48:e5:ad:34:1b:f8:9a:99:f1:52:3c:5b:e4
Fingerprint (sha256): 99:d9:88:f8:46:d0:af:d7:ff:9b:08:5a:0e:5b:21:7b:df:8e:c8:5d:70:4c:b0:a4:29:09:32:67:a8:14:7e:57

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lilly.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lilly.es

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lilly.es

Other certificates including the domain name lilly.es

(limited to 100 certificates)
www.lilly.es
www.lilly.es
*.lilly.com
test.seleccion.lilly.es
lilly.es
www.lilly.es
www.lilly.es
lilly.es
lilly.es
lilly.es
lilly.es
www.lilly.es
www.lilly.es
www.lilly.es
*.lilly.es
www.lilly.es
www.lilly.es
lilly.es
lilly.es
www.lilly.es
www.lilly.es
www.lilly.es
lilly.es
lilly.es
www.lilly.es
www.lilly.es
www.seleccion.lilly.es
www.lilly.es
www.lilly.es
lilly.es
lilly.es
lilly.es
lilly.es
www.lilly.es
*.lilly.es
www.lilly.es
lilly.es
www.lilly.es
lilly.es
lilly.es
www.lilly.es
lilly.es
www.lilly.es
lilly.es
lilly.es
lilly.es
neurologia.lilly.es
oncologia.lilly.es
www.seleccion.lilly.es
www.lilly.es
www.lilly.es
www.lilly.es
*.lilly.es
www.lilly.es
lilly.es
www.lilly.es
www.lilly.es
www.lilly.es
www.lilly.es
diabetes.lilly.es
www.lilly.es
www.lilly.es
www.lilly.es
www.lilly.es

Certificate

The complete raw certificate details for lilly.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgISA/6Y9urprIImL0Wr3+KBl4b3MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTAxNTIyNDBaFw0y
MDAyMDgxNTIyNDBaMBMxETAPBgNVBAMTCGxpbGx5LmVzMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEAvLddxKEDxI7wCrSq773Pah+uztHcBNQ1kjVJ5WpW
Vn81iI8pK/ajB1gKmm94+XzaAEFFXy9g30XiEvMUIN8HX/BPxkaUW/8duPmbveq0
e/A4bHjJD0tgT7dY5pYhbsuF4UdyKgI9Lpp6U1L+4mqGnPF7oX55tEysDcQdZxeQ
jt6dCHtqDyPC143fHqXFRk6jiUb15AyBqkr7utsF/BQj57IzF5ynRkTujdYLzbw3
vpek+i77zGRvKtZtdFqgdglbJBelNQdGrZ+ZDrhdSyDu8z0ghHeV+FJZrpZthLW+
FGXGGNwnLZ4joczINwyc0/sUlvMfF5fQNnT3uk3o0VozCRhAiuAwPs8EAmtwlXbn
ObLzKXKlOEw3Jagz1+sBDOQAcymMaFaqRiQWS11H6Zzrf6abvyPHhONLGX+1Y+/f
HAs5XRlUL+MH7yEOWMQlRsKa2HKMySY6LWpY44osplIcLM0C+0mfXve1qRMa0E+m
ne6etMShBWnKX28IJwU4zyxeigpH00kFSnb0mYeL2ilgyqrejRMl6egUNudtHQNU
hEcna8ZRCsghqgBHeT76CUBstzf5gB9qX7+40vwPdavj6wgi2hf5eQGZMcOEELWv
8Y/zAKNakm0xt+4omLe7nsohnjqKMNEOHMuPb46DbRZyyo4bFphiPFre4eI55cWQ
skkCAwEAAaOCAlwwggJYMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm6Fmkk7hTFqZ
zkVqMjje9pLy/akwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzATBgNVHREEDDAKgghsaWxseS5lczBMBgNVHSAERTBDMAgG
BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AF6nc/nf
VsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABblYf490AAAQDAEcwRQIhAOV5
xf9mKqaW5Wz91Gv5K9wFGfZtLRSrZFyzjNC0HXgkAiBIwwXqooIKiLFJGdk7u8R6
6Q+opkfn6Rmc3I+breWtqgB1AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp
06IcAAABblYf5DEAAAQDAEYwRAIgFbMtTfosQTlrQemjoRp7SqOhz6BzTx59dYhN
qUpRA5kCIG1KFd5FtQgGube4TjSvd0PpgQA7kLFUMY6TfLBesDpeMA0GCSqGSIb3
DQEBCwUAA4IBAQAnjGJQ03vbXIK4M3IdRYVDA97v+EPk/wcMKGJD4wJ3m1wzqjrt
Xr9S9uGdBM+LemDfAiySqmSPmMx/YwPuPw8Z/fF6x1iDGZhsgwIoV6Gr1ygsR/MB
q0FYUQWDZppPJoHP+WjO9qb+/+A9+7o6H5Nek9eII/BWcBxrRfTpKBxNw2W5L4Ra
rz21pC6I2qZnfG/79Mhm1v143JylDIRYnKeHLArNr6hsh+5dsGVaq8bOTdRJ+C9X
GdD7KizF84iPNdWz7e5jxQXKcSTFatGDFDIqycAwby1G1RNqUvRFJZ4bIhb6yF1O
MKBZTAeQrn7eUtLUSDMuICZY/j65oBADPhE8
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvLddxKEDxI7wCrSq773P
ah+uztHcBNQ1kjVJ5WpWVn81iI8pK/ajB1gKmm94+XzaAEFFXy9g30XiEvMUIN8H
X/BPxkaUW/8duPmbveq0e/A4bHjJD0tgT7dY5pYhbsuF4UdyKgI9Lpp6U1L+4mqG
nPF7oX55tEysDcQdZxeQjt6dCHtqDyPC143fHqXFRk6jiUb15AyBqkr7utsF/BQj
57IzF5ynRkTujdYLzbw3vpek+i77zGRvKtZtdFqgdglbJBelNQdGrZ+ZDrhdSyDu
8z0ghHeV+FJZrpZthLW+FGXGGNwnLZ4joczINwyc0/sUlvMfF5fQNnT3uk3o0Voz
CRhAiuAwPs8EAmtwlXbnObLzKXKlOEw3Jagz1+sBDOQAcymMaFaqRiQWS11H6Zzr
f6abvyPHhONLGX+1Y+/fHAs5XRlUL+MH7yEOWMQlRsKa2HKMySY6LWpY44osplIc
LM0C+0mfXve1qRMa0E+mne6etMShBWnKX28IJwU4zyxeigpH00kFSnb0mYeL2ilg
yqrejRMl6egUNudtHQNUhEcna8ZRCsghqgBHeT76CUBstzf5gB9qX7+40vwPdavj
6wgi2hf5eQGZMcOEELWv8Y/zAKNakm0xt+4omLe7nsohnjqKMNEOHMuPb46DbRZy
yo4bFphiPFre4eI55cWQskkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347971903718183014322529080759977059518199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-10 15:22:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-08 15:22:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lilly.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769895229955289632500587503008437950288351396300299636665077665636768669390706404494303485966392242852029376813166689817612333319722635718687503043608567641991594306482493389313941290111164633445480990022050240451219198357732818104896370191356142507272881837230976647384952630679961204059838199672764352046772721904182987246664954914808080304149310857106585231149907325585467846189939673192874152330690305205174435120501434152274181831773570701312132145616399055632972092387474261344809159957025737964182024485749768557696426822678776047852947997189945549588419830931963246650099523977557441120856253462892421782657108141871968268344296485377521109531706088613441204083755389154217839114988931079950234512525704000771548908962773727874183576390432431748375849481264055173720938087395482867493081260318705221331896039340819191047662742479747561458492147527343531225991233722176114730211625006673703065555161526916215988229622860667461711066941808949933187408022785155104948364052161592346909963177950668787348343071656458290426163154058836977551060883211647826839639986399840596624422840827684414404187282013258265682720927088270730391029305858236701677730607077352011680074053439696876288326639842458443437009512466720855690398708297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ba166924ee14c5a99ce456a3238def692f2fda9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilly.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e561fe3dd0000040300473045022100e579c5ff662aa696e56cfdd46bf92bdc0519f66d2d14ab645cb38cd0b41d7824022048c305eaa2820a88b14919d93bbbc47ae90fa8a647e7e9199cdc8f9bade5adaa00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e561fe4310000040300463044022015b32d4dfa2c41396b41e9a3a11a7b4aa3a1cfa0734f1e7d75884da94a51039902206d4a15de45b50806b9b7b84e34af7743e981003b90b154318e937cb05eb03a5e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00278c6250d37bdb5c82b833721d45854303deeff843e4ff070c286243e302779b5c33aa3aed5ebf52f6e19d04cf8b7a60df022c92aa648f98cc7f6303ee3f0f19fdf17ac7588319986c83022857a1abd7282c47f301ab4158510583669a4f2681cff968cef6a6feffe03dfbba3a1f935e93d78823f056701c6b45f4e9281c4dc365b92f845aaf3db5a42e88daa6677c6ffbf4c866d6fd78dc9ca50c84589ca7872c0acdafa86c87ee5db0655aabc6ce4dd449f82f5719d0fb2a2cc5f3888f35d5b3edee63c505ca7124c56ad18314322ac9c0306f2d46d5136a52f445259e1b2216fac85d4e30a0594c0790ae7ede52d2d448332e202658fe3eb9a010033e113c