cdn-assets-2.alltrails.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:25:ca:73:9e:9f:94:85:17:9b:9c:45:18:c7:a4:46 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cdn-assets-2.alltrails.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:25:ca:73:9e:9f:94:85:17:9b:9c:45:18:c7:a4:46
Serial Number (int): 13488501148685126251566958082299241542
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 95:22:55:bb:96:c2:12:c9:2a:b6:0a:8c:75:ad:7c:cc:78:e4:ef:0a
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 8d:81:c5:ff:b3:ac:2c:70:8d:8d:0d:e2:a3:eb:e5:8b:a6:8c:3e:ce
Fingerprint (sha256): a2:1c:3e:43:48:6f:8c:89:dd:12:5b:4e:92:c9:92:7f:80:79:da:7d:99:fa:8b:bd:56:23:77:7e:77:db:70:e6

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate cdn-assets-2.alltrails.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn-assets-2.alltrails.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn-assets-2.alltrails.com

Other certificates including the domain name alltrails.com

(limited to 100 certificates)
adminsupport.maxwellhealth.com
fluxx.totemapp.net
alltrails.com
orders.alltrails.com
orders.alltrails.com
support.alltrails.com
orders.alltrails.com
orders.alltrails.com
easymarkit.totemapp.net
www.distilnetworks.com
adminsupport.maxwellhealth.com
adminsupport.maxwellhealth.com
orders.alltrails.com
adamlyonsw.totemapp.net
adminsupport.maxwellhealth.com
*.alltrails.com
orders.alltrails.com
dojo-madness.totemapp.net
*.alltrails.com
*.alltrails.com
about.ksting.com
about.ksting.com
orders.alltrails.com
*.alltrails.com
support.alltrails.com
orders.alltrails.com
*.dev.alltrails.com
atlantis.dev.alltrails.com
lp.alltrails.com
about.ksting.com
*.alltrails.com
www.distilnetworks.com
adminsupport.maxwellhealth.com
adminsupport.maxwellhealth.com
about.ksting.com
fr.cdn-assets.alltrails.com
www.distilnetworks.com
adminsupport.maxwellhealth.com
orders.alltrails.com
adminsupport.maxwellhealth.com
press.getsundaily.com
console.alltrails.com
adminsupport.maxwellhealth.com
*.alltrails.com
alltrails.com
alltrails.com
about.ksting.com
*.alltrails.com
alltrails.com
www.distilnetworks.com
shop.alltrails.com
support.alltrails.com
dodo.totemapp.net
adminsupport.maxwellhealth.com
totem.alltrails.com
fluxx.totemapp.net
www.distilnetworks.com
press.swipecast.com
support.swimlane.com
geppetto-api.production.alltrails.com
adminsupport.maxwellhealth.com
picachocoffee.totemapp.net
bonusly.totemapp.net
intothewhoknows.totemapp.net
adminsupport.maxwellhealth.com
archmission.totemapp.net
about.ksting.com
support.swimlane.com
about.ksting.com
*.alltrails.com
press.getsundaily.com
archmission.totemapp.net
*.alltrails.com
about.ksting.com
orders.alltrails.com
britttest.totemapp.net
support.alltrails.com
www.distilnetworks.com
alltrails.com
adminsupport.maxwellhealth.com
fourpointsbar.totemapp.net
totem.alltrails.com
www.distilnetworks.com
*.webdev.alltrails.com
adminsupport.maxwellhealth.com
www.distilnetworks.com
about.ksting.com
*.alltrails.com
insitome.totemapp.net
orders.alltrails.com
beardedbastard.totemapp.net
journal.alltrails.com
shop.alltrails.com
cdn-assets-2.alltrails.com
shop.alltrails.com
orders.alltrails.com
fr.cdn-assets.alltrails.com
*.alltrails.com
*.dev.alltrails.com
orders.alltrails.com

Certificate

The complete raw certificate details for cdn-assets-2.alltrails.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF4TCCBMmgAwIBAgIQCiXKc56flIUXm5xFGMekRjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMTAwNTAwMDAwMFoXDTI0MTEwMzIzNTk1OVowJTEj
MCEGA1UEAxMaY2RuLWFzc2V0cy0yLmFsbHRyYWlscy5jb20wggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQC8qk1Pqo52bfc3exKT/dsXgdNlVX1qQlrp4Jps
VHSxWOurdk6ojGBvKostHIIJQu/K5wnw0dGcdV8rtor53eMvykbRK6LgOPxj+mYe
RP8AAs0WJQuV9galzicYHx1b2SgknvMCOHxPewhWdzhjBMK6kepCfeRqhbgKeNVP
gXk1NAJ/dodD39HWkfgabpdVSbm2uvos3X0W4OfafmOrgApcjKIokLcYTD2x+LNf
B1mF2j9PSHmeSXP2ncur63nSEOSqF27mEy/imV4tDXC5nANhQtQ/xEAZzkQVmMua
JF8y9AUMeQa6yMhZ7/LPuyrdZcdmxpQ8Q6f8LcuJQTG8VH55AgMBAAGjggL0MIIC
8DAfBgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUlSJV
u5bCEskqtgqMda18zHjk7wowJQYDVR0RBB4wHIIaY2RuLWFzc2V0cy0yLmFsbHRy
YWlscy5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipo
dHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYB
BQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250
cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1
c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIEAgSC
AW8EggFrAWkAdwDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYr9
YFATAAAEAwBIMEYCIQCwOFgU7YVZHPm7kfbvMLvlFLEci9ct3ar6Wvt4zLIJ9QIh
AJotBMGzp9O/MLnMm01cACqWjI9IbC9kyxSaALttf090AHYASLDja9qmRzQP5WoC
+p0w6xxSActW3SyB2bu/qznYhHMAAAGK/WBQSwAABAMARzBFAiBYiyNP4IoFLdYs
gCEiLc/nCF36vZxvQ4YNJUeb5+gPwgIhAKm+bvn0pZ+gL6RBHnbASbE6sdg8bvPq
0gy+exFA5eq0AHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGK
/WBQQgAABAMARzBFAiEA4303KjLpJalEvlcaqpS1MoJ9ZVxc7QuTSfb+J5oA1QMC
IHgzBCWX4+hLGwRJ0xNpUw9SLw6YvnMYu1p2lFaLsaulMA0GCSqGSIb3DQEBCwUA
A4IBAQBOzrCqk5D6Oz8VsCcoGD6Ycrix/KrooSaIILO6pENOcz4ZKY0EwGpwqFGN
bfpNni9jfTj3CktQiyu+7gpwPE60fyIymfBRHDvR4YGdIoZS8wadLJcXyswMWm79
SybtwCoWBJL8ZzFxKL0K643+ztVT7Wq0kOVNStNlzUOT4+69nhXu5JRNO9NkQpB8
AufGyp1lq3nUbFG9lmam/tUkxUqBjJ31uS+tKQOf16EMwnI9MJz1NurmxGAAmeww
kUXPotuICI4TJjz3FTcyriuYH/tTPZMk5oY5Pidn8YLYkOOj4rpO+RV84tl1h/kw
DeVkDt3Jy6x96nEC+TRVyumluQCt
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKpNT6qOdm33N3sSk/3b
F4HTZVV9akJa6eCabFR0sVjrq3ZOqIxgbyqLLRyCCULvyucJ8NHRnHVfK7aK+d3j
L8pG0Sui4Dj8Y/pmHkT/AALNFiULlfYGpc4nGB8dW9koJJ7zAjh8T3sIVnc4YwTC
upHqQn3kaoW4CnjVT4F5NTQCf3aHQ9/R1pH4Gm6XVUm5trr6LN19FuDn2n5jq4AK
XIyiKJC3GEw9sfizXwdZhdo/T0h5nklz9p3Lq+t50hDkqhdu5hMv4pleLQ1wuZwD
YULUP8RAGc5EFZjLmiRfMvQFDHkGusjIWe/yz7sq3WXHZsaUPEOn/C3LiUExvFR+
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13488501148685126251566958082299241542
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn-assets-2.alltrails.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23816780378212687802592031781043577430657393274352128002624315331260040913041494615626794040320749160514810438196056978870753875417430752106106961047543928062084766941182646142238453470244230754066903140186779210512552234266997476286071559024865347684919501219061405182251843619493335959821427436703436703759501803594848330410778689448182547187200783747204495881316170411351274678320535724816611043361110945749932553801606449490878580956748249045301391037586831962129762209860759109678530128281560243854640175853177520536129308320346089939156040657329339057516012427498666108693638997702817625835679902781611332370041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							952255bb96c212c92ab60a8c75ad7ccc78e4ef0a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-assets-2.alltrails.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004eceb0aa9390fa3b3f15b02728183e9872b8b1fcaae8a1268820b3baa4434e733e19298d04c06a70a8518d6dfa4d9e2f637d38f70a4b508b2bbeee0a703c4eb47f223299f0511c3bd1e1819d228652f3069d2c9717cacc0c5a6efd4b26edc02a160492fc67317128bd0aeb8dfeced553ed6ab490e54d4ad365cd4393e3eebd9e15eee4944d3bd36442907c02e7c6ca9d65ab79d46c51bd9666a6fed524c54a818c9df5b92fad29039fd7a10cc2723d309cf536eae6c4600099ec309145cfa2db88088e13263cf7153732ae2b981ffb533d9324e686393e2767f182d890e3a3e2ba4ef9157ce2d97587f9300de5640eddc9cbac7dea7102f93455cae9a5b900ad