*.preprod-web2c.partakus.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 02:ef:18:e8:a7:ce:ef:8d:b0:32:86:84:a2:61:aa:aa was issued on by Amazon.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.preprod-web2c.partakus.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 02:ef:18:e8:a7:ce:ef:8d:b0:32:86:84:a2:61:aa:aaSerial Number (int): 3899920151458013116724817708481358506
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 28:98:06:0b:d2:38:c8:fd:d4:1b:ca:89:62:d7:90:c7:24:96:67:59
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 3d:a2:21:e6:84:df:ee:a9:b3:3a:65:16:40:5d:18:57:1c:ff:7a:1d
Fingerprint (sha256): e0:ff:48:2c:6b:e1:37:19:41:f9:30:54:cb:3b:d4:cb:ef:75:e3:55:1b:0d:44:04:bd:77:4e:a1:90:54:be:8e
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate *.preprod-web2c.partakus.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.preprod-web2c.partakus.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.preprod-web2c.partakus.com
*.motrio.fr
preprod-web2c.partakus.com
web2c.partakus.com
*.web2c.partakus.com
motrio.fr
*.motrio.fr
preprod-web2c.partakus.com
web2c.partakus.com
*.web2c.partakus.com
motrio.fr
Other certificates including the domain name partakus.com
(limited to 100 certificates)
*.partakus.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
*.partakus.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
*.partakus.com
*.partakus.com
*.partakus.com
*.preprod-web2c.partakus.com
tls.automattic.com
tls.automattic.com
*.web2c.partakus.com
partakus.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
*.partakus.com
*.preprod-web2c.partakus.com
tls.automattic.com
*.partakus.com
*.web2c.partakus.com
*.partakus.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
*.partakus.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
*.partakus.com
*.partakus.com
*.partakus.com
*.preprod-web2c.partakus.com
tls.automattic.com
tls.automattic.com
*.web2c.partakus.com
partakus.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
*.partakus.com
*.preprod-web2c.partakus.com
tls.automattic.com
*.partakus.com
*.web2c.partakus.com
*.partakus.com
Certificate
The complete raw certificate details for *.preprod-web2c.partakus.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIQAu8Y6KfO742wMoaEomGqqjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDEzMDAwMDAwMFoXDTI1MDIyODIzNTk1OVowJzEl MCMGA1UEAwwcKi5wcmVwcm9kLXdlYjJjLnBhcnRha3VzLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAJtoxpdQJu0d+2MGe9F1moSjXazI23GEcgJz agciVZ0Ti/goMeOfrDgerJr+CAwQmSd/QFrgHEzeQw7YMX88rMxest1tDlsKcAoz j+mww4UR8o802IxIzpPNf3yga1pOGKnen5VrIDia7u2M4JInKQCVuteTLQhCZToE gas8d0VX8fSoa5+RwkWNrqtKrzYteBy0o60vtEZfz6oCitTCmQegrqGU3gQ7RRJG Uy9Q8tTjwSe1pJ2cTpzsCSPu2YtXq6+dntOMbqpdMMF/POITPHmpjtza0l8ltPh3 9SSlujlKKgnBOg+XtmkkV6idluriQqJgYfdyYke4bDEIykNZJiECAwEAAaOCA1Mw ggNPMB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBQo mAYL0jjI/dQbyoli15DHJJZnWTCBhQYDVR0RBH4wfIIcKi5wcmVwcm9kLXdlYjJj LnBhcnRha3VzLmNvbYILKi5tb3RyaW8uZnKCGnByZXByb2Qtd2ViMmMucGFydGFr dXMuY29tghJ3ZWIyYy5wYXJ0YWt1cy5jb22CFCoud2ViMmMucGFydGFrdXMuY29t ggltb3RyaW8uZnIwEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAs hipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYI KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6 b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9u dHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIE AgSCAW0EggFpAWcAdwBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAA AY1YrNRKAAAEAwBIMEYCIQCO/2+jVaF7AJpSx5slcHXabHJ6+MPWZVF2QtVsyBw7 gwIhALBn4AeYdMaQS+fVlduGbzWRakwlRMECPk6WrrIHZwi2AHUAfVkeEuF4Knsc YWd8Xv340IdcFKBOlZ65Ay/ZDowuebgAAAGNWKzUfQAABAMARjBEAiBzJD6nBYeu BMAje8IaazEztFDYXWJLh6DRPQgU2ymaggIgI0kWTXdD82s6H1Xc8mo49GhHY8sT Q+33HrpVSeuDyi0AdQDm0jFjQHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAA AY1YrNSsAAAEAwBGMEQCID22xh4UwUlWtWyY96cP6lb4DjWXxZ+GfxPFnmeekNGk AiAbh30dlHne5k72ovsxe4nKBsBxjangi9Xy4C9XQhS54zANBgkqhkiG9w0BAQsF AAOCAQEAgi4gaG0aH1m+tbsWZGrOZ+8Di3LX5bwIjNhaZ5llQ6RhY/F8jOObMsuY hPXqvzjMXu1nemolRlVT9+5vT3SUGfFbrHxfBap31Las18Umh1I6FwlEcWQayBPs SGjZc5lhUMRQL4Lh5tByuVQFbRbsH1dPcndqoarEpjrEpainmHvHhvrjCbgQNOKe dhVX1sIBs+E5xdIpAuLdkp3W8Bg8Ihj9hwpjDx7hkE8KIZ94Cldl8P41tp53xzOj ID+UJOhSMV7e9lv6+4Q4JZro1xYctbLsSeJFfNSOs49JrRIU67OEHPv6LZ7coOlV KMnSRHLCueCyio32L0ffIPYNC5shIg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2jGl1Am7R37YwZ70XWa hKNdrMjbcYRyAnNqByJVnROL+Cgx45+sOB6smv4IDBCZJ39AWuAcTN5DDtgxfzys zF6y3W0OWwpwCjOP6bDDhRHyjzTYjEjOk81/fKBrWk4Yqd6flWsgOJru7Yzgkicp AJW615MtCEJlOgSBqzx3RVfx9Khrn5HCRY2uq0qvNi14HLSjrS+0Rl/PqgKK1MKZ B6CuoZTeBDtFEkZTL1Dy1OPBJ7WknZxOnOwJI+7Zi1err52e04xuql0wwX884hM8 eamO3NrSXyW0+Hf1JKW6OUoqCcE6D5e2aSRXqJ2W6uJComBh93JiR7hsMQjKQ1km IQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3899920151458013116724817708481358506 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-28 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.preprod-web2c.partakus.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19618604115916259436408560614091872035117471515224107342731526063578546537264141387653209172430447052593262223471544191533593525571949792353479833403941932555621716397841599743789406075428263841601134332898655945920845233079577170996293603379540754409590493420191337461494319871807531692596800104663438831866603072360802878612170348845601583953642884622799314913639021727265292273776389874849892577071662854738682676109124230835911187909051015256806634733253909054143943035330745531594035109353261496724262790033414137856846124589619550477901943714510257552642321232259450037678614717001041976899759901445899333215777 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2898060bd238c8fdd41bca8962d790c724966759 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preprod-web2c.partakus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motrio.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-web2c.partakus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web2c.partakus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.web2c.partakus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motrio.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 01670077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018d58acd44a00000403004830460221008eff6fa355a17b009a52c79b257075da6c727af8c3d665517642d56cc81c3b83022100b067e0079874c6904be7d595db866f35916a4c2544c1023e4e96aeb2076708b60075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018d58acd47d0000040300463044022073243ea70587ae04c0237bc21a6b3133b450d85d624b87a0d13d0814db299a8202202349164d7743f36b3a1f55dcf26a38f4684763cb1343edf71eba5549eb83ca2d007500e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018d58acd4ac000004030046304402203db6c61e14c14956b56c98f7a70fea56f80e3597c59f867f13c59e679e90d1a402201b877d1d9479dee64ef6a2fb317b89ca06c0718da9e08bd5f2e02f574214b9e3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00822e20686d1a1f59beb5bb16646ace67ef038b72d7e5bc088cd85a67996543a46163f17c8ce39b32cb9884f5eabf38cc5eed677a6a25465553f7ee6f4f749419f15bac7c5f05aa77d4b6acd7c52687523a17094471641ac813ec4868d973996150c4502f82e1e6d072b954056d16ec1f574f72776aa1aac4a63ac4a5a8a7987bc786fae309b81034e29e761557d6c201b3e139c5d22902e2dd929dd6f0183c2218fd870a630f1ee1904f0a219f780a5765f0fe35b69e77c733a3203f9424e852315edef65bfafb8438259ae8d7161cb5b2ec49e2457cd48eb38f49ad1214ebb3841cfbfa2d9edca0e95528c9d24472c2b9e0b28a8df62f47df20f60d0b9b2122