www.neophore.com

Issued by R10

About this certificate

This digital certificate with serial number 04:8e:8d:85:9e:ad:7c:bf:31:d1:1b:5b:60:8e:fc:8f:91:f6 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.neophore.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:8e:8d:85:9e:ad:7c:bf:31:d1:1b:5b:60:8e:fc:8f:91:f6
Serial Number (int): 396957354771067903441683172634443153117686
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2a:45:58:49:ed:c4:29:0f:56:f8:95:07:44:d7:9c:08:33:13:28:5e
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): f3:0b:42:5a:fd:78:9c:59:00:6d:d8:84:c8:fd:4f:b3:61:04:20:04
Fingerprint (sha256): 9d:57:76:27:2e:be:31:24:0a:e8:74:78:60:db:ec:96:21:e5:b7:ea:96:10:8f:4a:08:ab:1f:f1:e7:53:de:70

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate www.neophore.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.neophore.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.neophore.kissdigital.co.uk
cpcalendars.neophore.kissdigital.co.uk
cpcontacts.neophore.kissdigital.co.uk
live-neophore.kissdigital.co.uk
mail.live-neophore.kissdigital.co.uk
mail.neophore.kissdigital.co.uk
neophore.com
neophore.kissdigital.co.uk
webdisk.neophore.kissdigital.co.uk
webmail.neophore.kissdigital.co.uk
www.live-neophore.kissdigital.co.uk
www.neophore.com
www.neophore.kissdigital.co.uk

Other certificates including the domain name neophore.com

(limited to 100 certificates)
neophore.com
live-neophore.kissdigital.co.uk
neophore.com
cpanel.neophore.kissdigital.co.uk
mail.live-neophore.kissdigital.co.uk
webmail.neophore.kissdigital.co.uk
neophore.com
www.neophore.com
neophore.com
neophore.com
neophore.com
www.neophore.com
neophore.com
neophore.com
mail.live-neophore.kissdigital.co.uk
neophore.com
neophore.com
live-neophore.kissdigital.co.uk
neophore.com
neophore.com

Certificate

The complete raw certificate details for www.neophore.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGiDCCBXCgAwIBAgISBI6NhZ6tfL8x0RtbYI78j5H2MA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjQwNjA3MDA0MTUyWhcNMjQwOTA1MDA0MTUxWjAbMRkwFwYDVQQD
ExB3d3cubmVvcGhvcmUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2l1xpkol52tGkCGvAPnBqAKa1C6xsBkzE8Gmn3fWUkCI6/QtiZaeDPoBggtN
vPJf/kXWEQXypFrLZ0Wy+d9YhVA+rqZ4RXLxNzYuD8JmtgwfyWZdtE7sn534+Qxs
U61LrmHFse+MDOef8IjWDU9dF19oqfnHZiP04R2YpLDBk5Fh3+2dbwD05Ux1QYTX
Na7e5uwQgFdciiIBm3wlDStA+41cdpgpn+AoHm5MgOspAcFWHWWdAEp3BwKWUAR3
poDZLNDm3C4W3RFlpJ7Es7CQX3dhJRbSvPANB4XKuakb5e0wW/2ml7aWfHkJrFxn
bk8tEUkTup+NTtxnbnnK3GRaxwIDAQABo4IDrDCCA6gwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBQqRVhJ7cQpD1b4lQdE15wIMxMoXjAfBgNVHSMEGDAWgBS7vMNHpeS8
qcbDpHIMEI2iNeHI6DBXBggrBgEFBQcBAQRLMEkwIgYIKwYBBQUHMAGGFmh0dHA6
Ly9yMTAuby5sZW5jci5vcmcwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTAuaS5sZW5j
ci5vcmcvMIIBsAYDVR0RBIIBpzCCAaOCIWNwYW5lbC5uZW9waG9yZS5raXNzZGln
aXRhbC5jby51a4ImY3BjYWxlbmRhcnMubmVvcGhvcmUua2lzc2RpZ2l0YWwuY28u
dWuCJWNwY29udGFjdHMubmVvcGhvcmUua2lzc2RpZ2l0YWwuY28udWuCH2xpdmUt
bmVvcGhvcmUua2lzc2RpZ2l0YWwuY28udWuCJG1haWwubGl2ZS1uZW9waG9yZS5r
aXNzZGlnaXRhbC5jby51a4IfbWFpbC5uZW9waG9yZS5raXNzZGlnaXRhbC5jby51
a4IMbmVvcGhvcmUuY29tghpuZW9waG9yZS5raXNzZGlnaXRhbC5jby51a4Iid2Vi
ZGlzay5uZW9waG9yZS5raXNzZGlnaXRhbC5jby51a4Iid2VibWFpbC5uZW9waG9y
ZS5raXNzZGlnaXRhbC5jby51a4Ijd3d3LmxpdmUtbmVvcGhvcmUua2lzc2RpZ2l0
YWwuY28udWuCEHd3dy5uZW9waG9yZS5jb22CHnd3dy5uZW9waG9yZS5raXNzZGln
aXRhbC5jby51azATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIE
gfYEgfMA8QB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABj/Bc
AZIAAAQDAEgwRgIhAP7ySxuKm+UYeYLPWDg+4XvHqWwQuHqPTWXUEnauctcTAiEA
2yIZtMhyNsZzrgIGtdOryooqdBT5gkwoTGd2F8V5v2UAdgDf4VbrqgWvtZwPhnGN
qMAyTq5W2W6n9aVqAdHBO75SXAAAAY/wXAKHAAAEAwBHMEUCIH68xHgFRkfmrv+P
U7OdjLZ6t/moCcP88civNlILOMsgAiEAr8CRKpTxXWS34D18fbkYO2f5XvZtnrTq
FkeJTOYD1+MwDQYJKoZIhvcNAQELBQADggEBALYENLv0cFnCyzjd05HPdBJqfiwf
+o1qF8dTmIM9m/pDlJgbgzt89tDbwaeoHfJd6qSjUo8UkhBNz3LWHfloqE2wAITn
9uMq/zj9O1va/ljc2WKhyzitBs7Wcyioc5r6lYUCkRkYiFQ3WmGd3EQgbTQHJPTx
xYmU/7n+3Ln1EacG+Jb8BQl42xPYFtMwuzG/Zb87OvbnxQ9Q9YVsx0leRwC2mSXh
6IYrv3cUP4piCIZQVj0whVMEaLMmGkhs8kenLeizBXQnrynVZCTwzYA2/50E8HrX
/x2Lg2rLFsSfjdEoY4goUr5amuFhHoKLrzHRJOGeu7A0qgu1rAnG4GCze5Q=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l1xpkol52tGkCGvAPnB
qAKa1C6xsBkzE8Gmn3fWUkCI6/QtiZaeDPoBggtNvPJf/kXWEQXypFrLZ0Wy+d9Y
hVA+rqZ4RXLxNzYuD8JmtgwfyWZdtE7sn534+QxsU61LrmHFse+MDOef8IjWDU9d
F19oqfnHZiP04R2YpLDBk5Fh3+2dbwD05Ux1QYTXNa7e5uwQgFdciiIBm3wlDStA
+41cdpgpn+AoHm5MgOspAcFWHWWdAEp3BwKWUAR3poDZLNDm3C4W3RFlpJ7Es7CQ
X3dhJRbSvPANB4XKuakb5e0wW/2ml7aWfHkJrFxnbk8tEUkTup+NTtxnbnnK3GRa
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 396957354771067903441683172634443153117686
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 00:41:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 00:41:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.neophore.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27566029408589109738797188480043443267246968050328596111442662641021569485586438512775536659741844347466157826059960866925044578279340611941683192943074939261405089972187629980857372245686172676473890297223951519463464294957360030191336437178070478196371524387740881199769599173448057984746166991572116633743476215987956466186795480258324606114080986713840182499313880796119416280441255179767492232031132874645823340271429516089327828496060260467987728426505197013568586646025071923305359158238059767291055905422528016959474635548983080011039089697140156032065822010624204690101735244036507157824652468122657937971911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a455849edc4290f56f8950744d79c083313285e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (423 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.neophore.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.neophore.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.neophore.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-neophore.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.live-neophore.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.neophore.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neophore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neophore.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.neophore.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.neophore.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.live-neophore.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neophore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neophore.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff05c01920000040300483046022100fef24b1b8a9be5187982cf58383ee17bc7a96c10b87a8f4d65d41276ae72d713022100db2219b4c87236c673ae0206b5d3abca8a2a7414f9824c284c677617c579bf65007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ff05c0287000004030047304502207ebcc478054647e6aeff8f53b39d8cb67ab7f9a809c3fcf1c8af36520b38cb20022100afc0912a94f15d64b7e03d7c7db9183b67f95ef66d9eb4ea1647894ce603d7e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b60434bbf47059c2cb38ddd391cf74126a7e2c1ffa8d6a17c75398833d9bfa4394981b833b7cf6d0dbc1a7a81df25deaa4a3528f1492104dcf72d61df968a84db00084e7f6e32aff38fd3b5bdafe58dcd962a1cb38ad06ced67328a8739afa9585029119188854375a619ddc44206d340724f4f1c58994ffb9fedcb9f511a706f896fc050978db13d816d330bb31bf65bf3b3af6e7c50f50f5856cc7495e4700b69925e1e8862bbf77143f8a62088650563d3085530468b3261a486cf247a72de8b3057427af29d56424f0cd8036ff9d04f07ad7ff1d8b836acb16c49f8dd12863882852be5a9ae1611e828baf31d124e19ebbb034aa0bb5ac09c6e060b37b94