*.livenation.eu
Issued by COMODO SSL CA
About this certificate
This digital certificate with serial number 43:ac:c4:16:0b:a0:11:12:46:33:03:32:bb:20:7d:60 was issued on by COMODO CA Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.livenation.eu,OU=Domain Control Validated+OU=Hosted by Live Nation+OU=COMODO SSL Wildcard
COMODO CA Limited
Organization:
COMODO CA Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 43:ac:c4:16:0b:a0:11:12:46:33:03:32:bb:20:7d:60Serial Number (int): 89955327876157088734383967984183967072
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 36:5c:48:f3:cf:8e:33:f1:96:94:2f:e0:3d:e8:64:fd:42:12:ea:86
AuthorityKeyId: 1b:6b:bd:1f:8a:49:18:94:54:37:55:b4:20:17:ed:37:b9:77:18:7d
Fingerprint (sha1): 5d:64:62:5f:c4:0f:7a:74:e5:3e:20:3b:b3:c6:c0:ba:2a:0e:23:28
Fingerprint (sha256): ce:2f:da:c2:da:9b:d7:81:d8:91:f2:13:32:55:09:9d:9b:ee:b9:a9:cf:dc:06:96:33:b5:ad:e4:1b:7a:0e:36
Issuing Certificate URL: http://crt.comodoca.com/COMODOSSLCA.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCRL Distribution Point: http://crl.comodoca.com/COMODOSSLCA.crl
Check the revocation status for certificate *.livenation.eu
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.livenation.eu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.livenation.eu
livenation.eu
livenation.eu
Other certificates including the domain name livenation.eu
(limited to 100 certificates)
*.livenation.eu
eop.livenation.com
LIVE NATION
mail.livenation.eu
*.livenation.eu
mail.livenation.eu
archivemail.livenation.eu
media-cms.livenation.eu
sg01.livenation.eu
eop.livenation.com
ln.festivalfeed.livenation.eu
*.livenation.eu
mail.livenation.eu
mail.livenation.eu
mail-na.livenation.com
eop.livenation.com
exchangeadmincenter.lyv.livenation.com
exchangeadmincenter.lyv.livenation.com
members.livenation.eu
members.livenation.eu
*.cloud.livenation.eu
members.livenation.eu
*.livenation.eu
members.livenation.eu
mail.livenation.eu
eop.livenation.com
mail.livenation.eu
*.cloud.livenation.eu
eop.livenation.com
LIVE NATION
mail.livenation.eu
*.livenation.eu
mail.livenation.eu
archivemail.livenation.eu
media-cms.livenation.eu
sg01.livenation.eu
eop.livenation.com
ln.festivalfeed.livenation.eu
*.livenation.eu
mail.livenation.eu
mail.livenation.eu
mail-na.livenation.com
eop.livenation.com
exchangeadmincenter.lyv.livenation.com
exchangeadmincenter.lyv.livenation.com
members.livenation.eu
members.livenation.eu
*.cloud.livenation.eu
members.livenation.eu
*.livenation.eu
members.livenation.eu
mail.livenation.eu
eop.livenation.com
mail.livenation.eu
*.cloud.livenation.eu
Certificate
The complete raw certificate details for *.livenation.eu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgIQQ6zEFgugERJGMwMyuyB9YDANBgkqhkiG9w0BAQUFADBw MQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD VQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDEWMBQGA1UE AxMNQ09NT0RPIFNTTCBDQTAeFw0xMzA1MjgwMDAwMDBaFw0xNTA2MDUyMzU5NTla MHsxITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDEeMBwGA1UECxMV SG9zdGVkIGJ5IExpdmUgTmF0aW9uMRwwGgYDVQQLExNDT01PRE8gU1NMIFdpbGRj YXJkMRgwFgYDVQQDFA8qLmxpdmVuYXRpb24uZXUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDwHrS+mRWEXxc3lpOkfXBqUGc8j5L/gdNwYg2tXVC8pBk JDldXVKmgv26klYEs43L4X5eLGxbqHXfB2uEAZFN6LQbxiTanCraPboH3At/yod6 CfjiJwESjAzrcYGb1NHuwo+gO9kOVd5acqCXmMGxaPnn5GGFGY1xObDQyG2gzqZ4 dz4imtqGoQ5SpouiRHB/7nqhnGdG94MxIzmdmr1bfiy57F/dfjzaTQa7NAhEKxZf tKlzGDy3OBcYh/wKOljBdBMfoPA/yDAFiu4TryJWNzhTAVaJhyKhmeP/LBfGFmAh 6H4JCKxK74K6skQxfPL3xCpJg4c/BBVYoCKuXcizAgMBAAGjggGiMIIBnjAfBgNV HSMEGDAWgBQba70fikkYlFQ3VbQgF+03uXcYfTAdBgNVHQ4EFgQUNlxI88+OM/GW lC/gPehk/UIS6oYwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCME8GA1UdIARIMEYwOgYLKwYBBAGyMQEC AgcwKzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2RvLmNvbS9DUFMw CAYGZ4EMAQIBMDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwuY29tb2RvY2Eu Y29tL0NPTU9ET1NTTENBLmNybDBpBggrBgEFBQcBAQRdMFswMwYIKwYBBQUHMAKG J2h0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9ET1NTTENBLmNydDAkBggrBgEF BQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMCkGA1UdEQQiMCCCDyoubGl2 ZW5hdGlvbi5ldYINbGl2ZW5hdGlvbi5ldTANBgkqhkiG9w0BAQUFAAOCAQEAqiyr OVbWxvxKosUbo7EGmtj+Mca6Y6xgk7ZnDdvwHt/LPvD+CCDakY6GwogpWC3PAFXJ xC/kBrXI7Af+voEArqMGaQl9U3/A6UzEmIZcUEINVpZuEZe3hpuwGgeiMl2hQ+qj sOXS9zZuO1IF1y/XieUmR4CgY9u0LYdYs8Jqrt4c/jdPChRrL4kX0HM9iDz5V2Ux E6wxVFkdlt193SkAjZh1of8MILJ+yG97Zm1Cu7g2nAMpKUUSgRMDa6SH5YVomPf9 Uc+6Nwv63btN1vdEN1eunGpmJ0XFlj22VpjOsT7znoLxxQyoNiHyPNHS4DIs0g2o Ux5CuLYt6h1B2+EhAg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8B60vpkVhF8XN5aTpH1 walBnPI+S/4HTcGINrV1QvKQZCQ5XV1SpoL9upJWBLONy+F+XixsW6h13wdrhAGR Tei0G8Yk2pwq2j26B9wLf8qHegn44icBEowM63GBm9TR7sKPoDvZDlXeWnKgl5jB sWj55+RhhRmNcTmw0MhtoM6meHc+IprahqEOUqaLokRwf+56oZxnRveDMSM5nZq9 W34suexf3X482k0GuzQIRCsWX7Spcxg8tzgXGIf8CjpYwXQTH6DwP8gwBYruE68i Vjc4UwFWiYcioZnj/ywXxhZgIeh+CQisSu+CurJEMXzy98QqSYOHPwQVWKAirl3I swIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 89955327876157088734383967984183967072 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Live Nation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL Wildcard' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.livenation.eu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24711384786314674147202362409991979475476955808230534236064792944206560071661306801921384775170522581989349416568355532048975374493527434250277506773686263980801950618065764586838459518188754137162285217700969584511086785912195759861216509133351310600481778229199617061595494226669380514116008217193091411250415572466369262390015371166911042306257321711572397395258938784016277160593264884942668752544455232124199363757317774399660830483146166867938646007951833206280511056147916633279254109561770937300179810568654272402119794362847363316047260437294509118081250345718419328997302616797919216035699198288870086920371 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1b6bbd1f8a491894543755b42017ed37b977187d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 365c48f3cf8e33f196942fe03de864fd4212ea86 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODOSSLCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODOSSLCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livenation.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livenation.eu' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00aa2cab3956d6c6fc4aa2c51ba3b1069ad8fe31c6ba63ac6093b6670ddbf01edfcb3ef0fe0820da918e86c28829582dcf0055c9c42fe406b5c8ec07febe8100aea30669097d537fc0e94cc498865c50420d56966e1197b7869bb01a07a2325da143eaa3b0e5d2f7366e3b5205d72fd789e5264780a063dbb42d8758b3c26aaede1cfe374f0a146b2f8917d0733d883cf957653113ac3154591d96dd7ddd29008d9875a1ff0c20b27ec86f7b666d42bbb8369c03292945128113036ba487e5856898f7fd51cfba370bfaddbb4dd6f7443757ae9c6a662745c5963db65698ceb13ef39e82f1c50ca83621f23cd1d2e0322cd20da8531e42b8b62dea1d41dbe12102