invoice.puget.tech
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:9d:19:74:ee:2f:69:85:a7:08:f2:a1:bf:19:78:80:76:bc was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=invoice.puget.tech
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:9d:19:74:ee:2f:69:85:a7:08:f2:a1:bf:19:78:80:76:bcSerial Number (int): 401907313170928405096306410892403138393788
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 2f:9b:4d:7f:3a:a2:08:9e:54:c2:ef:2e:15:48:55:4e:b4:37:c1:15
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5a:39:73:49:f4:7f:70:62:fd:47:cb:2f:14:e4:04:2c:a0:de:26:89
Fingerprint (sha256): de:39:17:24:e7:a1:8c:b4:35:8d:9c:5c:61:90:71:47:e1:f7:e2:0e:11:3c:b4:e6:fd:07:0c:10:f9:07:e8:74
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate invoice.puget.tech
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for invoice.puget.tech
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
invoice.provincetownmagazine.com
invoice.puget.tech
invoice.puget.tech
Other certificates including the domain name puget.tech
(limited to 100 certificates)
www.puget.tech
projects.arturo.ai
puget.tech
www.puget.tech
puget.tech
clients.puget.tech
clients.puget.tech
portal.puget.tech
puget.tech
support.a-blogcms.jp
billing.puget.tech
puget.tech
clients.puget.tech
sni.cloudflaressl.com
cisupport.tekchand.com
puget.tech
account.puget.tech
status.puget.tech
invoice.ltol.com
srrit.tachihelp.com
projects.arturo.ai
clients.puget.tech
blog.puget.tech
www.puget.tech
support.deploypartners.com
support.a-blogcms.jp
blog.puget.tech
puget.tech
sni.cloudflaressl.com
projects.platinumwfm.com
clients.puget.tech
clients.puget.tech
support.getforsite.com
clients.puget.tech
billing.puget.tech
clients.puget.tech
puget.tech
billing.puget.tech
puget.tech
blog.puget.tech
blog.puget.tech
blog.puget.tech
www.puget.tech
support.getforsite.com
fee.stir.ae
clients.puget.tech
clients.puget.tech
status.crossknowledge.com
projects.wjddesigns.com
invoice.puget.tech
*.puget.tech
puget.tech
assets.puget.tech
landing.puget.tech
clients.puget.tech
support.sdatec.com
blog.puget.tech
billing.puget.tech
status.telehouse.com.sg
projects.puget.tech
www.puget.tech
puget.tech
status.puget.tech
portal.puget.tech
billing.puget.tech
puget.tech
sni.cloudflaressl.com
clients.puget.tech
community.tago.io
support.sdatec.com
puget.tech
invoice.puget.tech
blog.puget.tech
puget.tech
blog.puget.tech
blog.puget.tech
support.a-blogcms.jp
fee.stir.ae
portal.puget.tech
puget.tech
projects.arturo.ai
puget.tech
www.puget.tech
puget.tech
clients.puget.tech
clients.puget.tech
portal.puget.tech
puget.tech
support.a-blogcms.jp
billing.puget.tech
puget.tech
clients.puget.tech
sni.cloudflaressl.com
cisupport.tekchand.com
puget.tech
account.puget.tech
status.puget.tech
invoice.ltol.com
srrit.tachihelp.com
projects.arturo.ai
clients.puget.tech
blog.puget.tech
www.puget.tech
support.deploypartners.com
support.a-blogcms.jp
blog.puget.tech
puget.tech
sni.cloudflaressl.com
projects.platinumwfm.com
clients.puget.tech
clients.puget.tech
support.getforsite.com
clients.puget.tech
billing.puget.tech
clients.puget.tech
puget.tech
billing.puget.tech
puget.tech
blog.puget.tech
blog.puget.tech
blog.puget.tech
www.puget.tech
support.getforsite.com
fee.stir.ae
clients.puget.tech
clients.puget.tech
status.crossknowledge.com
projects.wjddesigns.com
invoice.puget.tech
*.puget.tech
puget.tech
assets.puget.tech
landing.puget.tech
clients.puget.tech
support.sdatec.com
blog.puget.tech
billing.puget.tech
status.telehouse.com.sg
projects.puget.tech
www.puget.tech
puget.tech
status.puget.tech
portal.puget.tech
billing.puget.tech
puget.tech
sni.cloudflaressl.com
clients.puget.tech
community.tago.io
support.sdatec.com
puget.tech
invoice.puget.tech
blog.puget.tech
puget.tech
blog.puget.tech
blog.puget.tech
support.a-blogcms.jp
fee.stir.ae
portal.puget.tech
puget.tech
Certificate
The complete raw certificate details for invoice.puget.tech in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgISBJ0ZdO4vaYWnCPKhvxl4gHa8MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMDcxMjMwMjJaFw0y MDA0MDYxMjMwMjJaMB0xGzAZBgNVBAMTEmludm9pY2UucHVnZXQudGVjaDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALTE71IjI+KQ8e6lD7bxAbtt0RKc WHGrFfxyNCq6xFAZ7AkvRGypx0zT0DA8DIvu9eCS2fc73+Cn/Z7IT6WNDKGLOadp Nmgz0fLMtZElqhd5To1VQwYJWg/st8tu/v++kWy1wE4I0nS4UdnPgC8C5l0i8Z+Y qnGMODTTqjOIB8pxWIWMexYjE0XCSRirunicU7vLRJAe+cS1d5cwfL/4Kin7EK7J cSdL1lij1ejCCo0muDoPAO++3WiiIhbHpEhgGbZ+lQmWS3lZC2WPI1ock7KM9j2q WBjzXf0NUVn9mfGM6ZTly0Uy9EAzMmMi1GtsggzIEhnbAb32LmQ5urF1U7UCAwEA AaOCAoowggKGMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUL5tNfzqiCJ5Uwu8uFUhV TrQ3wRUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzA/BgNVHREEODA2giBpbnZvaWNlLnByb3ZpbmNldG93bm1hZ2F6aW5l LmNvbYISaW52b2ljZS5wdWdldC50ZWNoMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAb1N2rDHwMRnYmQCkURX/ dxUcEdkCwQApBo2yCJo32RMAAAFvgDL6TQAABAMASDBGAiEA6KNjQzVxtZ21yPA5 PhM2Fmsbxlg6VT8ht293JbEsW8QCIQDnQnWu5PlZ9Xz49J0urttzeym8SvPWIIn2 Qi1R6mupkgB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABb4Ay +lIAAAQDAEcwRQIhAOA9AoB93a3lykHbhTgUzyC8aNsi65P2N9P2XYdgyv+NAiBa lpW1ltoBBfbBbgwazYPvxiIJQsRkgbyomF2yEjKefTANBgkqhkiG9w0BAQsFAAOC AQEAkHVI+RYnWv3UTS75xCbBfJiz2DoSNuJtwbD5UibYht3MN9oh6V6T2DbOErPF bxAhDWVtXXFCdWB6jqhqDREd7mCJEIYLUvz1dlGOloBD4n0LedWvJ+DwwhdXFUkK 6egc8mjt6uS3BY/r35Jh93m27FAHTX0Llp3reFsHHtdNM+vCeESSPznNHCiwRmsn Nl4dgIXOzY9i2wq06mMsh4ak1etJR9kj+5RjaAohu5OJyRh76YOR803iMSHYkoRe M7hPrOQD+e7vG7+taVp5b0mUOw7kzXViENUifYegLOujYonMz+DlIdig5Ck05eC7 UdnHnkpljBBfrMUBu9kUtOGLwA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMTvUiMj4pDx7qUPtvEB u23REpxYcasV/HI0KrrEUBnsCS9EbKnHTNPQMDwMi+714JLZ9zvf4Kf9nshPpY0M oYs5p2k2aDPR8sy1kSWqF3lOjVVDBglaD+y3y27+/76RbLXATgjSdLhR2c+ALwLm XSLxn5iqcYw4NNOqM4gHynFYhYx7FiMTRcJJGKu6eJxTu8tEkB75xLV3lzB8v/gq KfsQrslxJ0vWWKPV6MIKjSa4Og8A777daKIiFsekSGAZtn6VCZZLeVkLZY8jWhyT soz2PapYGPNd/Q1RWf2Z8YzplOXLRTL0QDMyYyLUa2yCDMgSGdsBvfYuZDm6sXVT tQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 401907313170928405096306410892403138393788 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 12:30:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 12:30:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'invoice.puget.tech' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22820007086399393654481721340132898341475485279199958457689564086863755189768291274463305540186472783662870562505408938981168101076138535838330859822391219559643738225472420721337029811082984716845342789896727241613046712556228004505740997181088556461121429787563265962784978249830124648282527848188206771333174318881497112131717903727117916731956980421524262807381453668647286976810119830644513749006930430104344776337241472126717337465115826287981463974916370679653164693456407933101098801790976661559671985292070286711859974312878382801407581312739522910100479782901409175668449021096179410664164222850691560199093 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2f9b4d7f3aa2089e54c2ef2e1548554eb437c115 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoice.provincetownmagazine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoice.puget.tech' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f8032fa4d0000040300483046022100e8a363433571b59db5c8f0393e1336166b1bc6583a553f21b76f7725b12c5bc4022100e74275aee4f959f57cf8f49d2eaedb737b29bc4af3d62089f6422d51ea6ba99200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f8032fa520000040300473045022100e03d02807dddade5ca41db853814cf20bc68db22eb93f637d3f65d8760caff8d02205a9695b596da0105f6c16e0c1acd83efc6220942c46481bca8985db212329e7d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00907548f916275afdd44d2ef9c426c17c98b3d83a1236e26dc1b0f95226d886ddcc37da21e95e93d836ce12b3c56f10210d656d5d714275607a8ea86a0d111dee608910860b52fcf576518e968043e27d0b79d5af27e0f0c2175715490ae9e81cf268edeae4b7058febdf9261f779b6ec50074d7d0b969deb785b071ed74d33ebc27844923f39cd1c28b0466b27365e1d8085cecd8f62db0ab4ea632c8786a4d5eb4947d923fb9463680a21bb9389c9187be98391f34de23121d892845e33b84face403f9eeef1bbfad695a796f49943b0ee4cd756210d5227d87a02ceba36289cccfe0e521d8a0e42934e5e0bb51d9c79e4a658c105facc501bbd914b4e18bc0