www.yourlineormine.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:86:03:b0:8c:27:5d:0c:6b:df:3f:97:fe:f2:4d:06:cf:0b was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.yourlineormine.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:86:03:b0:8c:27:5d:0c:6b:df:3f:97:fe:f2:4d:06:cf:0bSerial Number (int): 306939599333576990892970037684646374199051
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5a:3c:ea:67:26:8a:fb:53:e8:64:6f:eb:50:fd:cf:87:a0:1b:78:75
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d4:71:6e:91:f2:0c:cc:06:be:25:1a:99:82:54:5b:ab:7d:d8:5e:86
Fingerprint (sha256): 9c:93:b1:d8:78:1b:76:b0:a4:48:b7:c2:c0:16:6e:e7:d6:93:39:2c:73:ce:f9:32:a1:22:26:ff:ee:20:1e:81
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.yourlineormine.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.yourlineormine.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.yourlineormine.com
yourlineormine.com
yourlineormine.com
Other certificates including the domain name yourlineormine.com
(limited to 100 certificates)
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
www.yourlineormine.com
Certificate
The complete raw certificate details for www.yourlineormine.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgISA4YDsIwnXQxr3z+X/vJNBs8LMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMTYxMzIwNTNaFw0x OTAxMTQxMzIwNTNaMCExHzAdBgNVBAMTFnd3dy55b3VybGluZW9ybWluZS5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnOPoT04aHsgn0lovY5Y42 b4wA1xWrcCvhmaS32GcDGrt608yC2lJRZ8PzmwvsJUcrfae05F/QZ7VBUVTAjOpo l9AU6aQF5CqS/ej2vgKI1e6y+v1tyQ97qErPi8oIszsC/7dhNs9epgErtgDONnuE hB7YhWZ7C/DUOQNBjXFr7e/ynh6NwdDz2BTlzQU9Lbf/X9ueQ0Jz9VpxgAwaiOA5 DyYum4d97NxV5SZjmfo5WTHMLh5hyWR1ifTQrgHpnFFgM6rcVb5Y0EOnHaT0pxOK fvkEXk3sV5aj++4Czk132TL565B+Aj0keyeN/ZGarmi3xRZKu3joH90YF5zit/2F AgMBAAGjggMyMIIDLjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFo86mcmivtT6GRv 61D9z4egG3h1MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wNQYDVR0RBC4wLIIWd3d3LnlvdXJsaW5lb3JtaW5lLmNvbYIS eW91cmxpbmVvcm1pbmUuY29tMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsr BgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw dC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25s eSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4g YWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQg aHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEEBgorBgEEAdZ5 AgQCBIH1BIHyAPAAdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAA AWZ9QDnjAAAEAwBHMEUCIQCob+ucNXKv7ZBHbeVCK2oLZu45gDtFjC2zYnDyd0bu PgIgeQlaYNBGE5whg46XZkcWHwEvhljNaHyjMavM4PjFdAwAdgDiaUuuJujpQAno hhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWZ9QD3KAAAEAwBHMEUCIHlF16xPFeKi ri6xzvDTJAqn7TWC7xzeaOm2+hgfXHBnAiEAszJZXbEde/KEPbjgWL8fBpZ16Mvw 8MOsjAHdOJConuIwDQYJKoZIhvcNAQELBQADggEBABqgWLfLBI4Greb2TNATN1u9 U2VdDpwxD+5lfaI+76IRJlQLR3O1yYrZ2/HbiuVKCMzaJjnL6L7dypWwMALX7EQB pq+AZGyT/SV815hj1oMRQ2Go9PK3B0kw1ZExOoQSig8IDG0s0dkHgBk7bwTW8fNZ Mv+9XNzPIKB5gnmftE8K6Nb+9F3PnEfOye/7T5zJ8l1eqWsXsDtCTbU5KcxR4A5Z ZDBQi3hkYho/Ycx2T7b1XQJ8cms9r8+8xCDU7U4om2PhwCRf5punnDt+W2f/Bv/I Nzax/xKhE2SYzM2dB77ePMr2nFAQU04gNOkaSOqXwrvCik/smXwiDTBm1DyIwi4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zj6E9OGh7IJ9JaL2OWO Nm+MANcVq3Ar4Zmkt9hnAxq7etPMgtpSUWfD85sL7CVHK32ntORf0Ge1QVFUwIzq aJfQFOmkBeQqkv3o9r4CiNXusvr9bckPe6hKz4vKCLM7Av+3YTbPXqYBK7YAzjZ7 hIQe2IVmewvw1DkDQY1xa+3v8p4ejcHQ89gU5c0FPS23/1/bnkNCc/VacYAMGojg OQ8mLpuHfezcVeUmY5n6OVkxzC4eYclkdYn00K4B6ZxRYDOq3FW+WNBDpx2k9KcT in75BF5N7FeWo/vuAs5Nd9ky+euQfgI9JHsnjf2Rmq5ot8UWSrt46B/dGBec4rf9 hQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 306939599333576990892970037684646374199051 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-16 13:20:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-14 13:20:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.yourlineormine.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29189144786468223965520738782652156700546689281819641850905879676185843023435486603141223794863754925970564268518028669749267032583488385352646379576141915637328678337195533395606429918674992723577557412249693011081042587610310820968183055311885519868403912284068211568294769512361865773075409230185484836086989554229634999890382048346446045718971129412641144596142706940137988136874618983617691895350972511550911866257634957290621661855088338911498593816840934761944357575218076671246552623298164646493558314193995544080700180275260033737929254603517156301709358263296591085225288355353673673709778723773793489649029 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5a3cea67268afb53e8646feb50fdcf87a01b7875 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourlineormine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourlineormine.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001667d4039e30000040300473045022100a86feb9c3572afed90476de5422b6a0b66ee39803b458c2db36270f27746ee3e022079095a60d046139c21838e976647161f012f8658cd687ca331abcce0f8c5740c007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001667d403dca000004030047304502207945d7ac4f15e2a2ae2eb1cef0d3240aa7ed3582ef1cde68e9b6fa181f5c7067022100b332595db11d7bf2843db8e058bf1f069675e8cbf0f0c3ac8c01dd3890a89ee2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001aa058b7cb048e06ade6f64cd013375bbd53655d0e9c310fee657da23eefa21126540b4773b5c98ad9dbf1db8ae54a08ccda2639cbe8beddca95b03002d7ec4401a6af80646c93fd257cd79863d683114361a8f4f2b7074930d591313a84128a0f080c6d2cd1d90780193b6f04d6f1f35932ffbd5cdccf20a07982799fb44f0ae8d6fef45dcf9c47cec9effb4f9cc9f25d5ea96b17b03b424db53929cc51e00e596430508b7864621a3f61cc764fb6f55d027c726b3dafcfbcc420d4ed4e289b63e1c0245fe69ba79c3b7e5b67ff06ffc83736b1ff12a1136498cccd9d07bede3ccaf69c5010534e2034e91a48ea97c2bbc28a4fec997c220d3066d43c88c22e