www.greenhead.ac.uk
Issued by R3
About this certificate
This digital certificate with serial number 04:44:74:69:a2:13:6f:76:6d:2c:53:51:ac:91:ce:d0:95:8f was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.greenhead.ac.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:44:74:69:a2:13:6f:76:6d:2c:53:51:ac:91:ce:d0:95:8fSerial Number (int): 371743083603636185384397030700756134565263
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 37:67:92:ee:12:9a:ab:9f:17:78:0e:a9:3e:12:27:e9:9c:32:e5:22
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 5b:1d:2b:c3:0e:19:44:c5:40:40:71:20:d0:97:09:b2:da:2b:95:4d
Fingerprint (sha256): a6:08:fb:7e:ef:86:63:68:e8:32:de:12:6a:ee:de:03:61:06:10:6e:2b:41:63:ee:08:bc:d6:36:77:4f:60:32
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.greenhead.ac.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.greenhead.ac.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
greenhead.ac.uk
www.greenhead.ac.uk
www.greenhead.ac.uk
Other certificates including the domain name greenhead.ac.uk
(limited to 100 certificates)
fortinet.greenhead.ac.uk
cedar.greenhead.ac.uk
gatekeeper.greenhead.ac.uk
Moondoor.academic.greenhead.ac.uk
www.greenhead.ac.uk
exams.greenhead.ac.uk
*.greenhead.ac.uk
svn.dev.greenhead.ac.uk
greenhead.ac.uk
*.dev.greenhead.ac.uk
*.mx.greenhead.ac.uk
moodle.greenhead.ac.uk
exams.greenhead.ac.uk
viper.greenhead.ac.uk
gmis.greenhead.ac.uk
xibo.greenhead.ac.uk
www.greenhead.ac.uk
library.greenhead.ac.uk
viper.greenhead.ac.uk
greenhead.ac.uk
moodle.greenhead.ac.uk
Parallels.greenhead.ac.uk
cas.greenhead.ac.uk
cas.greenhead.ac.uk
webmail.greenhead.ac.uk
assets.greenhead.ac.uk
exams.greenhead.ac.uk
greenhead.ac.uk
mail.greenhead.ac.uk
netman.greenhead.ac.uk
www.greenhead.ac.uk
www.greenhead.ac.uk
viper.greenhead.ac.uk
jira.dev.greenhead.ac.uk
mail.greenhead.ac.uk
www.greenhead.ac.uk
cedar.greenhead.ac.uk
netman.greenhead.ac.uk
www.greenhead.ac.uk
*.dev.greenhead.ac.uk
exams.greenhead.ac.uk
webmail.greenhead.ac.uk
cedar.greenhead.ac.uk
www.greenhead.ac.uk
gmis.greenhead.ac.uk
www.greenhead.ac.uk
netman.greenhead.ac.uk
assets.greenhead.ac.uk
gatekeeper.greenhead.ac.uk
jira.dev.greenhead.ac.uk
netman.greenhead.ac.uk
mail.greenhead.ac.uk
mail.greenhead.ac.uk
pholden.dev.greenhead.ac.uk
cedar.greenhead.ac.uk
www.greenhead.ac.uk
gcintranet.greenhead.ac.uk
greenhead.ac.uk
exams.greenhead.ac.uk
gatekeeper.greenhead.ac.uk
moodle.greenhead.ac.uk
autodiscover.greenhead.ac.uk
moodle.greenhead.ac.uk
svn.dev.greenhead.ac.uk
cedar.greenhead.ac.uk
gatekeeper.greenhead.ac.uk
Moondoor.academic.greenhead.ac.uk
www.greenhead.ac.uk
exams.greenhead.ac.uk
*.greenhead.ac.uk
svn.dev.greenhead.ac.uk
greenhead.ac.uk
*.dev.greenhead.ac.uk
*.mx.greenhead.ac.uk
moodle.greenhead.ac.uk
exams.greenhead.ac.uk
viper.greenhead.ac.uk
gmis.greenhead.ac.uk
xibo.greenhead.ac.uk
www.greenhead.ac.uk
library.greenhead.ac.uk
viper.greenhead.ac.uk
greenhead.ac.uk
moodle.greenhead.ac.uk
Parallels.greenhead.ac.uk
cas.greenhead.ac.uk
cas.greenhead.ac.uk
webmail.greenhead.ac.uk
assets.greenhead.ac.uk
exams.greenhead.ac.uk
greenhead.ac.uk
mail.greenhead.ac.uk
netman.greenhead.ac.uk
www.greenhead.ac.uk
www.greenhead.ac.uk
viper.greenhead.ac.uk
jira.dev.greenhead.ac.uk
mail.greenhead.ac.uk
www.greenhead.ac.uk
cedar.greenhead.ac.uk
netman.greenhead.ac.uk
www.greenhead.ac.uk
*.dev.greenhead.ac.uk
exams.greenhead.ac.uk
webmail.greenhead.ac.uk
cedar.greenhead.ac.uk
www.greenhead.ac.uk
gmis.greenhead.ac.uk
www.greenhead.ac.uk
netman.greenhead.ac.uk
assets.greenhead.ac.uk
gatekeeper.greenhead.ac.uk
jira.dev.greenhead.ac.uk
netman.greenhead.ac.uk
mail.greenhead.ac.uk
mail.greenhead.ac.uk
pholden.dev.greenhead.ac.uk
cedar.greenhead.ac.uk
www.greenhead.ac.uk
gcintranet.greenhead.ac.uk
greenhead.ac.uk
exams.greenhead.ac.uk
gatekeeper.greenhead.ac.uk
moodle.greenhead.ac.uk
autodiscover.greenhead.ac.uk
moodle.greenhead.ac.uk
svn.dev.greenhead.ac.uk
Certificate
The complete raw certificate details for www.greenhead.ac.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISBER0aaITb3ZtLFNRrJHO0JWPMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMjgyMzU5MDJaFw0yNDA1MjgyMzU5MDFaMB4xHDAaBgNVBAMT E3d3dy5ncmVlbmhlYWQuYWMudWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDjxz373Lug2a+3oVeWhVvm1s/vofBlkndN0IMVj73zEln94cn0gLcKIx6M naqpfeupKqGXOajVZf/aSYpQ0OJIubegRmzxx3yNORIO21u/XI9v3LJIhYjL4M14 IBGZk8HtfZmeAqMoCgcI/lxjTRQu8zsB2y6AMNJe6+oVTXuuN+gwgUvXgaE93DL2 xIZtgJ2Dsr3nffSvkvfOFZRviXuTo1mWGqbG7peX4SK+k0ge5Cux2te3ma7VY/60 rObm/iPzTSljZLG6miv+yNvDWpgPXiSHUZpHPiMMP24hWKBwWzYH7EPaVCVknomw qXad2+FjhACn5InQPqW8rSLiVsDXAgMBAAGjggImMIICIjAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFDdnku4SmqufF3gOqT4SJ+mcMuUiMB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMC8GA1UdEQQoMCaCD2dyZWVuaGVhZC5hYy51a4ITd3d3LmdyZWVuaGVh ZC5hYy51azATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUE gfIA8AB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjfJfOD0A AAQDAEcwRQIhAPcOWU6wAO0JWXAXWOQxiQ3UujLp791BIX4IQGuJIzfVAiA6Eihc v7XjBMfbiNDfTi4TOBTboqWuzxQG441mnP0mlQB2AHb/iD8KtvuVUcJhzPWHujS0 pM27KdxoQgqf5mdMWjp0AAABjfJfORYAAAQDAEcwRQIhAMUUbqAkrm5xmVSwA3n6 dCi4OtleZJhdMipRyBAM1H5uAiAzF6NQLv/liZg1QgV6gi9E/fWjK4Jb/1cNrBuk vL4TtjANBgkqhkiG9w0BAQsFAAOCAQEAaHvuoOf2wwEpgODY7I3EGJzgPGjYCBRe 6xHrDLt+ZpvN6MouXBf5SmD3VqubnFFe9bXQm9ZOHbvUPN3bng94ue/oYYAISYl+ QCmMGet9TbpVDPxpGREO7MBW6TJVWHdupC3GnyMu7CGOvLI1SgQ79vg8peG/WzR1 BwpQOHk2i73nyM4jhQGCvwcJxRDhMzg2z4OhksaMn30huD9ThISwtt0Y2fc7TM9C 8IrcYm+rtjuSjjxAhg7XXJ3dPS73nLk3z3Um+XBoQmNL2pt52FefdtTJK9Xq1Tg4 yiRoZ3Pr9KLEvyzERF55dpRvecC2CrvEUF3Th08uPWPa/TfGbCuBTg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48c9+9y7oNmvt6FXloVb 5tbP76HwZZJ3TdCDFY+98xJZ/eHJ9IC3CiMejJ2qqX3rqSqhlzmo1WX/2kmKUNDi SLm3oEZs8cd8jTkSDttbv1yPb9yySIWIy+DNeCARmZPB7X2ZngKjKAoHCP5cY00U LvM7AdsugDDSXuvqFU17rjfoMIFL14GhPdwy9sSGbYCdg7K95330r5L3zhWUb4l7 k6NZlhqmxu6Xl+EivpNIHuQrsdrXt5mu1WP+tKzm5v4j800pY2Sxupor/sjbw1qY D14kh1GaRz4jDD9uIVigcFs2B+xD2lQlZJ6JsKl2ndvhY4QAp+SJ0D6lvK0i4lbA 1wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 371743083603636185384397030700756134565263 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 23:59:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 23:59:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.greenhead.ac.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28754345180644493771013105058527534713619346190620855040790943943512537348271287795540625805147127813750597587700544482042055342038862531007682782497488187983287975538094637054733526433587694860925632394992456837172227726780919144403638069513360814714960939381872338222046443085581419243797680575843517134482464265938666806708724427988973505863944899279723983223947691675299245414470800902016634210356984643922475744611882803032652814689580944492468611798237900566337935776246161239629012277086439072530090579439673684620414352606263477067079688687174336549249729114057267930174362697293851267877698760869938130763991 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 376792ee129aab9f17780ea93e1227e99c32e522 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenhead.ac.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenhead.ac.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018df25f383d0000040300473045022100f70e594eb000ed0959701758e431890dd4ba32e9efdd41217e08406b892337d502203a12285cbfb5e304c7db88d0df4e2e133814dba2a5aecf1406e38d669cfd269500760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018df25f39160000040300473045022100c5146ea024ae6e719954b00379fa7428b83ad95e64985d322a51c8100cd47e6e02203317a3502effe589983542057a822f44fdf5a32b825bff570dac1ba4bcbe13b6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00687beea0e7f6c3012980e0d8ec8dc4189ce03c68d808145eeb11eb0cbb7e669bcde8ca2e5c17f94a60f756ab9b9c515ef5b5d09bd64e1dbbd43cdddb9e0f78b9efe861800849897e40298c19eb7d4dba550cfc6919110eecc056e9325558776ea42dc69f232eec218ebcb2354a043bf6f83ca5e1bf5b3475070a503879368bbde7c8ce23850182bf0709c510e1333836cf83a192c68c9f7d21b83f538484b0b6dd18d9f73b4ccf42f08adc626fabb63b928e3c40860ed75c9ddd3d2ef79cb937cf7526f9706842634bda9b79d8579f76d4c92bd5ead53838ca24686773ebf4a2c4bf2cc4445e7976946f79c0b60abbc4505dd3874f2e3d63dafd37c66c2b814e