autaborek.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:8f:b2:2a:91:38:0e:c6:a1:c9:78:1f:aa:1d:c0:10:a0:14 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=autaborek.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:8f:b2:2a:91:38:0e:c6:a1:c9:78:1f:aa:1d:c0:10:a0:14Serial Number (int): 310234059870083456255029795337927287414804
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e5:22:58:55:4b:47:74:a6:71:86:a6:84:ac:92:15:0d:82:e7:8a:16
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 77:b5:3a:3f:fc:42:2c:48:4e:c1:91:9c:93:7c:90:54:4d:04:32:a5
Fingerprint (sha256): aa:8b:b8:c9:32:fd:05:0f:b6:cf:a9:bc:db:25:bb:35:99:e2:c8:17:84:fe:e6:ca:c3:25:a0:33:83:45:b9:44
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate autaborek.cz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for autaborek.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autaborek.cz
www.autaborek.cz
www.autaborek.cz
Other certificates including the domain name autaborek.cz
(limited to 100 certificates)
autaborek.cz
www.nissan-dealers.cz
autaborek.cz
autaborek.cz
autolinhart.cz
www.nissan-dealers.cz
autaborek.cz
autaborek.cz
autaborek.cz
autaborek.cz
autolinhart.cz
autaborek.cz
autaborek.cz
autaborek.cz
autolinhart.cz
autaborek.cz
www.nissan-dealers.cz
autaborek.cz
autolinhart.cz
autolinhart.cz
autolinhart.cz
autaborek.cz
autaborek.cz
autaborek.cz
autaborek.cz
autolinhart.cz
autaborek.cz
www.nissan-dealers.cz
autaborek.cz
autaborek.cz
autaborek.cz
autaborek.cz
autaborek.cz
autolinhart.cz
autaborek.cz
www.nissan-dealers.cz
autaborek.cz
autaborek.cz
autolinhart.cz
www.nissan-dealers.cz
autaborek.cz
autaborek.cz
autaborek.cz
autaborek.cz
autolinhart.cz
autaborek.cz
autaborek.cz
autaborek.cz
autolinhart.cz
autaborek.cz
www.nissan-dealers.cz
autaborek.cz
autolinhart.cz
autolinhart.cz
autolinhart.cz
autaborek.cz
autaborek.cz
autaborek.cz
autaborek.cz
autolinhart.cz
autaborek.cz
www.nissan-dealers.cz
autaborek.cz
autaborek.cz
autaborek.cz
autaborek.cz
autaborek.cz
autolinhart.cz
autaborek.cz
Certificate
The complete raw certificate details for autaborek.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgISA4+yKpE4DsahyXgfqh3AEKAUMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMjMxNDMyNTZaFw0x OTA0MjMxNDMyNTZaMBcxFTATBgNVBAMTDGF1dGFib3Jlay5jejCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBANLTs/NvRzEYApe3ahN/E2bn3e5eOXLtTwLL ODuh2AERJaP0xaUrTbLIlg6wU9c48FdBPganaUpoUr8UXaBMEo30K6tH/9Nyu2kE G6RVCopIHDuo5QquYFG1RSxN8rS/pLbMhQQCrrq/beu3ZmR9nTwJ4xgK2Gz4b9PQ Pk1Kkjp0fGLepYxzixqkNFNh7Y2OoMCME61hcutLwgtmPXh1WyGMh41RRGc7mKg1 5R6SxcIGBokRt2GN7dVGMdyYlz+LBWP2eUvffPZGrovhnK/c1NhfIxnGCbUofAF9 chxrEInHZP8sumud5nPW4OeebUACZuy8p1JCkXfSqwhmFpJ9upBg11wmPKV7sc2d T85MDc5AXS8WwTCNUQd5QALmm6HNt5nFzmJKxVNnFlawAO92NM7BBRchGbLPXav7 27SJ/JJM676q/HA6vPcCeoHmJNyIaywfRpElmvZBdnXdxF7Teo8OWO67A5dMMnLl Xy5l3qY4tZs0bhdkiztenVE8D1Rq+FE4S2nOiUAvPb+kW9+kpfJ3pezc85YLTByC SudSoHZqw0vYCDnljRXafONbT/DmIYDC6duGLcfeu2Riryc3e9Veuc4iZHCBQazY G/QIkFrHxAU4/hrMG7KwU4vOKU+LDldIYaNEQzhKMBkN822I7qfapY7Nw6wLVigi cNF9DnNVAgMBAAGjggJxMIICbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOUiWFVL R3SmcYamhKySFQ2C54oWMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIMYXV0YWJvcmVrLmN6ghB3d3cu YXV0YWJvcmVrLmN6MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYK KwYBBAHWeQIEAgSB8wSB8ADuAHUA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMB nd3x2/4AAAFoe1fHsQAABAMARjBEAiBsbKTewwa1oZVVlut2FPqOh9d7kBU5n33J B1P3pi/4tAIgVXNlBsBcCCiClAXSR1+yaN6DZ5rklelAh6g9yv+nOgEAdQApPFGW VMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWh7V8ezAAAEAwBGMEQCIBLv hPAdA48FmVR9BeIyMO4Z9p330UTI2Y18TaBKJstYAiAQCSwDknJ8MbKkGPCubZDb XnI/U0gicL35kqyoyuttlTANBgkqhkiG9w0BAQsFAAOCAQEALoJX7tEGix0tFO+W uR8FKykXPJXVT2yI0IcC7CCvElf66dJ3vRRb3ArQFXXP3kaoiG1OqVck2YB/H62M svb1Fxvr8jVEFUojMYUV/r0VVQ3FJYiJROu9i59U8qg8IiYXGI0fo1pqtUe71pXS GEKy9CPvEh6O/JBXOsAAhPXWYlGswDEhTXpqyDRMYthAlFajHBKgeWDr+tQ8xKJ/ GCpqZqTZk0oacKins+3faeR/hJlEPRyTn6KBApFMUz+C8MXJ4VNe5Ti2Ke9Hl0R6 yjC+m6N4Mqd/in82aDnOrpm8DV+wexhciB743zP+tTIkB9NIS52cd4NFI5EKX0n8 hXOY8Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0tOz829HMRgCl7dqE38T Zufd7l45cu1PAss4O6HYARElo/TFpStNssiWDrBT1zjwV0E+BqdpSmhSvxRdoEwS jfQrq0f/03K7aQQbpFUKikgcO6jlCq5gUbVFLE3ytL+ktsyFBAKuur9t67dmZH2d PAnjGArYbPhv09A+TUqSOnR8Yt6ljHOLGqQ0U2HtjY6gwIwTrWFy60vCC2Y9eHVb IYyHjVFEZzuYqDXlHpLFwgYGiRG3YY3t1UYx3JiXP4sFY/Z5S9989kaui+Gcr9zU 2F8jGcYJtSh8AX1yHGsQicdk/yy6a53mc9bg555tQAJm7LynUkKRd9KrCGYWkn26 kGDXXCY8pXuxzZ1PzkwNzkBdLxbBMI1RB3lAAuaboc23mcXOYkrFU2cWVrAA73Y0 zsEFFyEZss9dq/vbtIn8kkzrvqr8cDq89wJ6geYk3IhrLB9GkSWa9kF2dd3EXtN6 jw5Y7rsDl0wycuVfLmXepji1mzRuF2SLO16dUTwPVGr4UThLac6JQC89v6Rb36Sl 8nel7NzzlgtMHIJK51KgdmrDS9gIOeWNFdp841tP8OYhgMLp24Ytx967ZGKvJzd7 1V65ziJkcIFBrNgb9AiQWsfEBTj+GswbsrBTi84pT4sOV0hho0RDOEowGQ3zbYju p9qljs3DrAtWKCJw0X0Oc1UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 310234059870083456255029795337927287414804 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-23 14:32:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 14:32:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'autaborek.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 860098975440050982233308299030292870695563653437556537298567799218059883238163902634786470985737886795674246613171439352519386050244946569465315953955060487385280790148812024556765968619904060938814264308039884069938710187072225161123858764903867139462432101071960854803982227913336804016047298086921107733328630208668939724251201140004088099539261948330006608518074164387692828614264970383625195765777814631173678649434021404815730235123300287070519396955139808348355391014212147931415246306229654042900522929639967737090617835187778343096166409916625042850756832288935617712941349167808388467191424497162956864212770257501745906787835551377969088615060773775244991800681529356924178322808557235783350681438060794543772402860835123144482450421131328314082512818681529588277013772244837840106743695420573186261381584014364740233940559505534869923585635883292266319723704192329037364786354439354628229382019607871961495137765301268195689104637694830447446854236251506697922679156355190185949340737923951067191441813607772727081026311615306052968094218116252898025542645109388299897863915069947528340697802825980595890229547080467089912436499075487142464886195943432649599973645521674439497044455709207925771614390803179454780964500309 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e52258554b4774a67186a684ac92150d82e78a16 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autaborek.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autaborek.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001687b57c7b1000004030046304402206c6ca4dec306b5a1955596eb7614fa8e87d77b9015399f7dc90753f7a62ff8b4022055736506c05c0828829405d2475fb268de83679ae495e94087a83dcaffa73a01007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001687b57c7b30000040300463044022012ef84f01d038f0599547d05e23230ee19f69df7d144c8d98d7c4da04a26cb58022010092c0392727c31b2a418f0ae6d90db5e723f53482270bdf992aca8caeb6d95 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 002e8257eed1068b1d2d14ef96b91f052b29173c95d54f6c88d08702ec20af1257fae9d277bd145bdc0ad01575cfde46a8886d4ea95724d9807f1fad8cb2f6f5171bebf23544154a23318515febd15550dc525888944ebbd8b9f54f2a83c222617188d1fa35a6ab547bbd695d21842b2f423ef121e8efc90573ac00084f5d66251acc031214d7a6ac8344c62d8409456a31c12a07960ebfad43cc4a27f182a6a66a4d9934a1a70a8a7b3eddf69e47f8499443d1c939fa28102914c533f82f0c5c9e1535ee538b629ef4797447aca30be9ba37832a77f8a7f366839ceae99bc0d5fb07b185c881ef8df33feb5322407d3484b9d9c77834523910a5f49fc857398f1