www.opportunity.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:0a:89:e8:2b:bc:ee:1d:ce:34:65:8d:1d:d9:ae:a1:8e:b5 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.opportunity.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:0a:89:e8:2b:bc:ee:1d:ce:34:65:8d:1d:d9:ae:a1:8e:b5Serial Number (int): 264922991199896039103766901573013219675829
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e2:4e:d9:85:f5:82:35:ca:ff:a7:34:50:52:67:bf:b8:95:ce:19:9c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c0:f8:db:e8:78:f4:bb:63:c1:83:0d:f8:af:81:a6:d8:ab:cf:64:3a
Fingerprint (sha256): e0:f5:89:33:e9:25:ec:8b:54:5f:e2:47:82:c7:b6:73:c1:de:fd:bf:19:72:3d:55:1e:06:4f:56:da:c4:ae:1b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.opportunity.cz
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.opportunity.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
oportunity.cz
opportunity.cz
www.oportunity.cz
www.opportunity.cz
opportunity.cz
www.oportunity.cz
www.opportunity.cz
Other certificates including the domain name opportunity.cz
(limited to 100 certificates)
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
cxc.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
cxc.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
Certificate
The complete raw certificate details for www.opportunity.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGjjCCBXagAwIBAgISAwqJ6Cu87h3ONGWNHdmuoY61MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMTkxOTU1NTZaFw0x OTAyMTcxOTU1NTZaMB0xGzAZBgNVBAMTEnd3dy5vcHBvcnR1bml0eS5jejCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANA1h74/TchjxsgYr6Cc06OOElBW pnTn52kM7DRtkIQDDvQZGZ3fwKwyRebcy42rKeatsMR9WT0akgGqVcQseCDXrM2O nwkmS4Y/92dcgSWq4csSwis/GAeUPd6CmoA/S/8OXRnYCFj1rJygicK/mPmf0wdb JWBHnL9jDm0flco6EB7/CCAvaE3enqzLagvvxbLtZxODcbLv08qXhvk3GykZFLZM 2SFxBbd1dEG/kWxFvqP1JMY/NW5loEsvzQEq3bEfTqhZnvz8EWAAzliiprt97Vwo NqGSNBfXGn2dnfbW+PQMaDTAEkE0DykxEgadfSR7e8ieQ/40MzekIWRUdikPMFfF XIeQ6ovHFqIljgz4ur6l8C91KwMSlDGtXOdsEja88+WxFfHcbVvVohl7BEhXDBRO QyU6+YSNyKXvE9G15oU6WnNvSFO9g9JsK1htNxmG5XlNUzBt+7J7XbEbduNSrK3R Mp32Qao4bveblF1454ZfT4bshlyK7UE1njUYX3N76d8Cs1EMoLYO77L4plFd7eOl o1T9O3IJfhDf7Pv4Z2A0XFIK4PrDU/ou7pm78AgKftldKhYCDTqp3hWPngqwm4ia fizJUFs8gRNZT7gUktEeeTWuDlyHBO40PYTQrHfepdfmK/rvsQ9nAtoJlHmGSqzM LJxLCtISSWYEMuz5AgMBAAGjggKZMIIClTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FOJO2YX1gjXK/6c0UFJnv7iVzhmcMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wTwYDVR0RBEgwRoINb3BvcnR1bml0eS5j eoIOb3Bwb3J0dW5pdHkuY3qCEXd3dy5vcG9ydHVuaXR5LmN6ghJ3d3cub3Bwb3J0 dW5pdHkuY3owTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEE AdZ5AgQCBIH1BIHyAPAAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb /gAAAWctwiHmAAAEAwBHMEUCIFc5fdSyK5a3E17LbIpLAa+kP+cJ42357WVsbp9v 94ZlAiEAma691yXMrj/WFs0sfhvbjyqnkW9qGcVIVNSB4iU0HBgAdgBj8tvN6DvM LM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWctwiHoAAAEAwBHMEUCIADADE6+ gna+6Qf2J62R+VdQbWBSa/OqDmBenaAVQfrOAiEAyV4wTC1/LqK3dq+LLTSsOikr MjLuSDLjctc9r1Sx3oQwDQYJKoZIhvcNAQELBQADggEBAJYOZVzRsLWc6sbUdwrt RVccqECe8tdN4gLlCyR8Voim/9m+Qbg8fbWrEEFK7UFCuniuI1UlYRHloQ9W4y22 8WAxuPZL3usoN6j408QzveQ9Ww4+lmBwNJJ5SJ8AstI3nCPihAFKi+lQvupYhlGh QFZAq1irhmD0aTs8COZ/5JrpHpOed9UbXBDt/IB4ZK3eq9DPlMdLqgMaEZ1+xL91 LL3BIPAuo1MEPlEst3SpgCO1JLCziBa/IcXo+9l8xLMHnhTPc6HINPINHWvPE+9z r363E2OEsHGmX8P1/fsYm1ptdtADtRNgdbfo2e7Kl5WGSIHaUFwODKlzrJWsG/wx o58= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0DWHvj9NyGPGyBivoJzT o44SUFamdOfnaQzsNG2QhAMO9BkZnd/ArDJF5tzLjasp5q2wxH1ZPRqSAapVxCx4 INeszY6fCSZLhj/3Z1yBJarhyxLCKz8YB5Q93oKagD9L/w5dGdgIWPWsnKCJwr+Y +Z/TB1slYEecv2MObR+VyjoQHv8IIC9oTd6erMtqC+/Fsu1nE4Nxsu/TypeG+Tcb KRkUtkzZIXEFt3V0Qb+RbEW+o/Ukxj81bmWgSy/NASrdsR9OqFme/PwRYADOWKKm u33tXCg2oZI0F9cafZ2d9tb49AxoNMASQTQPKTESBp19JHt7yJ5D/jQzN6QhZFR2 KQ8wV8Vch5Dqi8cWoiWODPi6vqXwL3UrAxKUMa1c52wSNrzz5bEV8dxtW9WiGXsE SFcMFE5DJTr5hI3Ipe8T0bXmhTpac29IU72D0mwrWG03GYbleU1TMG37sntdsRt2 41KsrdEynfZBqjhu95uUXXjnhl9PhuyGXIrtQTWeNRhfc3vp3wKzUQygtg7vsvim UV3t46WjVP07cgl+EN/s+/hnYDRcUgrg+sNT+i7umbvwCAp+2V0qFgINOqneFY+e CrCbiJp+LMlQWzyBE1lPuBSS0R55Na4OXIcE7jQ9hNCsd96l1+Yr+u+xD2cC2gmU eYZKrMwsnEsK0hJJZgQy7PkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 264922991199896039103766901573013219675829 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-19 19:55:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-17 19:55:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.opportunity.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849419030028581959487526079329335501460201570245654174308986569772400219709998053871706376228298496157303733962339269690409811244640030686735757315498545558165004820951841272391877596677569912839359934308400168509435995887304377396353777975710347760024534917268374988438669111425742762930333308226428401596641860783718811425514536930206987676728897512483566528853315316025894024264635776638441842699509763944836594623040820386086125549509889961478119745877538996627522263122767551143291013112749828745276193792458991832028550093827996496969049960353324371501779022843298560697352314051369003630207808819745157075978381183996709218618130177137591616878180186686165757200822343694858386740937722216958843022259855353334256611262517467725448413711925723776596494741795565287500261316949816539166460605655839557379247254825344575677606683615625541126624794250296232239451720962534824527828711398797542686913621273170435779399975547773968914381360233904118971699579056122440260686770703679727801028993908930754881633123927299616173940174604689392431298548094785181399851706144276334103500871505758433106641878719725941261509846728975053821795310088716861533830437564443808623290684546004649810803971541441140290482683340854081759506263289 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e24ed985f58235caffa734505267bfb895ce199c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oportunity.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opportunity.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oportunity.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opportunity.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001672dc221e60000040300473045022057397dd4b22b96b7135ecb6c8a4b01afa43fe709e36df9ed656c6e9f6ff7866502210099aebdd725ccae3fd616cd2c7e1bdb8f2aa7916f6a19c54854d481e225341c1800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001672dc221e80000040300473045022000c00c4ebe8276bee907f627ad91f957506d60526bf3aa0e605e9da01541face022100c95e304c2d7f2ea2b776af8b2d34ac3a292b3232ee4832e372d73daf54b1de84 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00960e655cd1b0b59ceac6d4770aed45571ca8409ef2d74de202e50b247c5688a6ffd9be41b83c7db5ab10414aed4142ba78ae2355256111e5a10f56e32db6f16031b8f64bdeeb2837a8f8d3c433bde43d5b0e3e966070349279489f00b2d2379c23e284014a8be950beea588651a1405640ab58ab8660f4693b3c08e67fe49ae91e939e77d51b5c10edfc807864addeabd0cf94c74baa031a119d7ec4bf752cbdc120f02ea353043e512cb774a98023b524b0b38816bf21c5e8fbd97cc4b3079e14cf73a1c834f20d1d6bcf13ef73af7eb7136384b071a65fc3f5fdfb189b5a6d76d003b5136075b7e8d9eeca9795864881da505c0e0ca973ac95ac1bfc31a39f