www.kathmandu.com.au

- Kathmandu Holdings Limited -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 7a:6c:63:56:2a:c3:8b:2a:79:d8:5e:af:88:8b:c9:9c was issued on by GeoTrust Inc..

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Kathmandu Holdings Limited

Organization: Kathmandu Holdings Limited
State / Province: Christchurch
Locality: Christchurch
Country: NZ

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:6c:63:56:2a:c3:8b:2a:79:d8:5e:af:88:8b:c9:9c
Serial Number (int): 162728598331889003760056345913971165596
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 9d:18:47:b7:99:18:ad:2a:7a:17:73:93:39:94:9b:51:72:f5:8f:2b
Fingerprint (sha256): b7:e1:68:34:dd:1f:90:5f:78:3f:43:c5:66:bf:1e:5e:07:ba:1a:51:9b:f9:b7:94:3b:c4:40:a3:84:28:7c:fd

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.kathmandu.com.au

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kathmandu.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kathmandu.co.nz
kathmandu.co.nz
m.kathmandu.co.nz
kathmandu.co.uk
m.kathmandu.co.uk
www.kathmandu.co.uk
kathmandu.com.au
m.kathmandu.com.au
www.kathmandu.com.au

Other certificates including the domain name kathmandu.com.au

(limited to 100 certificates)
help.kathmandu.com.au
sip.kathmandu.co.nz
image.20210419.195922.s4.et.yellsatcloud.com
san-1-s4.tlsprovisioning.exacttarget.com
sip.kathmandu.co.nz
*.kathmandu.co.nz
*.kathmandu.co.nz
ssl437948.cloudflaressl.com
ssl437947.cloudflaressl.com
san-1-s4.tlsprovisioning.exacttarget.com
image.20210419.195922.s4.et.yellsatcloud.com
ssl437949.cloudflaressl.com
image.20210419.195922.s4.et.yellsatcloud.com
webmail.kathmandu.co.nz
ssl437947.cloudflaressl.com
image.20210419.195922.s4.et.yellsatcloud.com
ssl437949.cloudflaressl.com
ssl437949.cloudflaressl.com
kathmandu.co.nz
webmail.kathmandu.co.nz
ssl437949.cloudflaressl.com
ssl437947.cloudflaressl.com
san-1-s4.tlsprovisioning.exacttarget.com
ssl437949.cloudflaressl.com
san-1-s4.tlsprovisioning.exacttarget.com
www.kathmandu.com.au
www.kathmandu.com.au
sip.kathmandu.co.nz
remote.kathmandu.com.au
image.20210419.195922.s4.et.yellsatcloud.com
san-1-s4.tlsprovisioning.exacttarget.com
www.kathmandu.com.au
ssl437949.cloudflaressl.com
remote.kathmandu.com.au
ssl437949.cloudflaressl.com
ssl437948.cloudflaressl.com
ssl437948.cloudflaressl.com
san-1-s4.tlsprovisioning.exacttarget.com
ssl437948.cloudflaressl.com
ssl437947.cloudflaressl.com
vdrebz.kathmandu.com.au
webmail.kathmandu.co.nz
image.20210419.195922.s4.et.yellsatcloud.com
kathmandu.co.nz
kathmandu.com.au
www.kathmandu.com.au
ssl437948.cloudflaressl.com
kathmandu.co.nz
kathmandu.co.nz
image.20210419.195922.s4.et.yellsatcloud.com
ssl437947.cloudflaressl.com
sni.cloudflaressl.com
kathmandu.co.nz
www.kathmandu.com.au
ssl437949.cloudflaressl.com
vdrebz.kathmandu.com.au
san-1-s4.tlsprovisioning.exacttarget.com
kathmandu.co.nz
webmail.kathmandu.co.nz
ssl437948.cloudflaressl.com
sip.kathmandu.co.nz
webmail.kathmandu.co.nz
ssl437947.cloudflaressl.com
sip.kathmandu.co.nz
ssl437949.cloudflaressl.com
kathmandu.co.nz
sip.kathmandu.co.nz
www.kathmandu.com.au
kathmandu.co.nz
sni.cloudflaressl.com
kathmandu.co.nz
ssl437947.cloudflaressl.com
*.kathmandu.com.au
sni.cloudflaressl.com
sip.kathmandu.com.au
ssl437948.cloudflaressl.com
image.20210419.195922.s4.et.yellsatcloud.com
ssl437949.cloudflaressl.com

Certificate

The complete raw certificate details for www.kathmandu.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKcyF180JJi3yamJB+L6
NKdhygotAMLglZcj0CED2HyXKLzwOk5DzhKzbejn5Ip1sgjWIsTSqtZnqsTw0eZ1
lsJSqT61eR8MNYqNYn0tcH9tfXTtEcL9Wu1ke9321HNYenmhGHKwyNZ9E9zHMDcC
thGJyjJXnC0j9BNUnNdHHJ2KMBZylK0Ifb0Ain+Da5XlhCT6aZjvRCEtuaUzmnMb
bPfvZdFBR1OpSkL0DBmyw3dqrWZ9gRW2BeERmQiqihx+JPuFhTpqKHtDRAKc1TkD
xAIRmg1r5n6T+gur12WrYcHip6RbUU2IYICgA1PKyK9QnyDTYySobW2K1Q9JD7Ph
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 162728598331889003760056345913971165596
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Christchurch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Christchurch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Kathmandu Holdings Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.kathmandu.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21795435711459834574568458535752169488538782463953175070411552474899612719308931034962178480417708013454450491293972188031902013953634340417635528368762100279192808019709122934342091741944335761646934437682011262789342153492982031057783279985944723823962811779532074408941233280238038784116045590579317875355426973520864271622471343293212462119235705094039687058221151291760157364491632935129924210198183696784236764996843678045709468096500889475661138472818771352203994352822576666193722426104474454936520422837455339001031992158642677137242541715547226828651223063479176663626536693596205246532330144798479360450831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (177 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kathmandu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathmandu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.kathmandu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathmandu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.kathmandu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kathmandu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathmandu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.kathmandu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kathmandu.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000154187810060000040300473045022100bebf7e220cb94ab20acb64be87a57b6d34bcc94d059665f184fe650fa4b56bee022026c4399dfb1d10f2ed058e2b8b8dbc2835ef86143e2b299f1e0692e6b3027453007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000154187810370000040300473045022024dc9f9fcadb6e1ede814ed1930f5ddf8af349150c2c14d26f51a0ac38c84a44022100e54bc903629496c7981122fb258301e2298af3cee4e5de51b9616eb89b98378a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002145386b9b69d2b0d1d9336207319d9a5758e89c15cdcfd6f3ff84069f8535436bb174c3bcd88b57be6b5ad3308d71e3f4876724fcb25de58892382feb5b16e684270e6785a80f4d30f8f00d97ddfef6416e3aa55a2f8026958bc33515da8dfa26f1fd692f597eecf2a95e8a3c17c8453d47c4bdbe3503fcba623c0007a2f012ad22317dc845121c37c90842bd87c0b4bc194ad80b83009e07be9a269c9d4befdd7957e29c94540b567e30da43c4abfd14284f7f77dd4f5bbd3f143180e327b6643740c61dab1fbe6d9464cab6c2f3fba8eb816cdb535b5332f749fa8907fef6063ac1a97d3d6c5204531880e6aa0d34e0515b9510b046b1b221c66da93842d1