www.ntsled.com
Issued by RapidSSL CA
About this certificate
This digital certificate with serial number 12:25:05 was issued on by GeoTrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
SERIALNUMBER=ERd5FKUNkoPkLByPYfKnoKGtcV6IJsqg,CN=www.ntsled.com,OU=GT89513384+OU=See www.rapidssl.com/resources/cps (c)12+OU=Domain Control Validated - RapidSSL(R)
GeoTrust, Inc.
Organization:
GeoTrust, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 12:25:05Serial Number (int): 1189125
Serial Number lenght: 21 bits, 3 octets
SubjectKeyId: 74:0f:37:00:63:90:91:db:68:f1:00:96:db:01:52:73:59:0f:c8:d8
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30
Fingerprint (sha1): 5c:bf:98:0e:ed:c8:f1:ef:27:c9:4f:69:6b:2e:c1:9e:7c:b1:4d:b0
Fingerprint (sha256): f0:36:1c:fa:f3:a1:6c:c2:cb:ce:81:60:5b:03:42:d7:c7:67:ee:e7:ae:7d:43:a5:8d:6c:29:fc:75:a8:96:a9
Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt
Revocation information
OCSP Server: http://rapidssl-ocsp.geotrust.comCRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl
Check the revocation status for certificate www.ntsled.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ntsled.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.ntsled.com
ntsled.com
ntsled.com
Other certificates including the domain name ntsled.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.ntsled.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIDEiUFMA0GCSqGSIb3DQEBBQUAMDwxCzAJBgNVBAYTAlVT MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEUMBIGA1UEAxMLUmFwaWRTU0wgQ0Ew HhcNMTQwNDE0MDA0OTM2WhcNMTUxMTExMTQwMjU4WjCBvTEpMCcGA1UEBRMgRVJk NUZLVU5rb1BrTEJ5UFlmS25vS0d0Y1Y2SUpzcWcxEzARBgNVBAsTCkdUODk1MTMz ODQxMTAvBgNVBAsTKFNlZSB3d3cucmFwaWRzc2wuY29tL3Jlc291cmNlcy9jcHMg KGMpMTIxLzAtBgNVBAsTJkRvbWFpbiBDb250cm9sIFZhbGlkYXRlZCAtIFJhcGlk U1NMKFIpMRcwFQYDVQQDEw53d3cubnRzbGVkLmNvbTCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBAKk2mcXCGV0Bl67lXEn5DEEwBq02UArpg6axHvsQzzk8 JCBxGM/7JLOPEJK6EeNp/sKx2XOrDRvc1YJgO4lG8pvTgs0kl6qDV5uWPk4WSgDx eonDh41H3G61VTEIMeCVi7bjEJqxawwNZmd5wCOZ8E9JIg2dM6nIeag9rr7t+aJR DCdHdk6Byq/y7BuHbPpzmxZAJ+bV3QPO2EG2eGtnOB7Qf3Bz4RMByRBS5HzLmKwY 2FYu3WKcC2dww7rt5Dn4bxo2eJu3N0yJM620rgzcDRCrXBvB5hKcHUWilgz0LTjV IXEEOdXFBNvCokBo/9gjrkWuSe5gBO4+D+3AQfPnNgAmYpGrmQOgeoWFHTLKPM3r 5TpMDJDUKzh7eQVGHmNzXMDBEJA8JyvlGyADd21ZR+VyP+ORz5suGnt4lLOb8AWK 07qdEWesGez0Po131JzFznkkofir1d9pTX+w0OsM8OfJlCwd0ZQ0HVYDcTnMtjYe mOOrCLbqua5hM1nT8WLAkpJIN/2eDYq7RczihjcOdo/UYMozDUsguvGhfEJPApYc /kxPP7/wT/dnz/l2c/XMOYKM+NCkaXgZVgBoy+BXTk667h6Fqe0J3WHjFcr3nfnZ I2E/pAQqUBBKfUbEairSOJZLxCtO1Dks2Sw5tb2xWnQWmuD5pBHeX1/hTI4VzZK5 AgMBAAGjggG1MIIBsTAfBgNVHSMEGDAWgBRraT1qGEJK3Y8CZTn9NSSGeJEWMDAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMCUG A1UdEQQeMByCDnd3dy5udHNsZWQuY29tggpudHNsZWQuY29tMEMGA1UdHwQ8MDow OKA2oDSGMmh0dHA6Ly9yYXBpZHNzbC1jcmwuZ2VvdHJ1c3QuY29tL2NybHMvcmFw aWRzc2wuY3JsMB0GA1UdDgQWBBR0DzcAY5CR22jxAJbbAVJzWQ/I2DAMBgNVHRMB Af8EAjAAMHgGCCsGAQUFBwEBBGwwajAtBggrBgEFBQcwAYYhaHR0cDovL3JhcGlk c3NsLW9jc3AuZ2VvdHJ1c3QuY29tMDkGCCsGAQUFBzAChi1odHRwOi8vcmFwaWRz c2wtYWlhLmdlb3RydXN0LmNvbS9yYXBpZHNzbC5jcnQwTAYDVR0gBEUwQzBBBgpg hkgBhvhFAQc2MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29t L3Jlc291cmNlcy9jcHMwDQYJKoZIhvcNAQEFBQADggEBACfb01S4AFCevg56/0Iz /90+y83N2lYqhUl81zJkA1pwZhQVMHrFAYTO6/T5S+h0gAnbOPmg+c5uYqUKECDf ZKBN4eDopeI0XBTDgL00UH2P45ooJ00x1h1TpcalNHW/NXXiVwvaslFGjxnLZJ/Q 37HTkA75+iNyRK1m6E47ynUSMkR7kKj75w6im8ef8PUpiR9uSeJ5GuH04JNmJC9u R6nk+v8hKJZ8XEAZm7ZR48Ieox+ODL+WpnZ/5EMrgrmchrqXnfH4BTIpSHcHMKZU 65jHYXmVQLBL4dPwG2l8KRZemmGyiKfYev/PO9Vd4Lgd5WIMalFwHSN94BPfQY29 axk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqTaZxcIZXQGXruVcSfkM QTAGrTZQCumDprEe+xDPOTwkIHEYz/sks48QkroR42n+wrHZc6sNG9zVgmA7iUby m9OCzSSXqoNXm5Y+ThZKAPF6icOHjUfcbrVVMQgx4JWLtuMQmrFrDA1mZ3nAI5nw T0kiDZ0zqch5qD2uvu35olEMJ0d2ToHKr/LsG4ds+nObFkAn5tXdA87YQbZ4a2c4 HtB/cHPhEwHJEFLkfMuYrBjYVi7dYpwLZ3DDuu3kOfhvGjZ4m7c3TIkzrbSuDNwN EKtcG8HmEpwdRaKWDPQtONUhcQQ51cUE28KiQGj/2COuRa5J7mAE7j4P7cBB8+c2 ACZikauZA6B6hYUdMso8zevlOkwMkNQrOHt5BUYeY3NcwMEQkDwnK+UbIAN3bVlH 5XI/45HPmy4ae3iUs5vwBYrTup0RZ6wZ7PQ+jXfUnMXOeSSh+KvV32lNf7DQ6wzw 58mULB3RlDQdVgNxOcy2Nh6Y46sItuq5rmEzWdPxYsCSkkg3/Z4NirtFzOKGNw52 j9RgyjMNSyC68aF8Qk8Clhz+TE8/v/BP92fP+XZz9cw5goz40KRpeBlWAGjL4FdO TrruHoWp7QndYeMVyved+dkjYT+kBCpQEEp9RsRqKtI4lkvEK07UOSzZLDm1vbFa dBaa4PmkEd5fX+FMjhXNkrkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1189125 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-14 00:49:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-11 14:02:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ERd5FKUNkoPkLByPYfKnoKGtcV6IJsqg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT89513384' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)12' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ntsled.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 690329969819544939527260718347778675770378732136654472607898654740554576322333149245485851218121805185859603119974371983874602776336424087861208930352206026133574247651176010974429113044171049136146357680541050099753534295028184404851212495400536956560732480046709626010769746381932328000639730925448001081512707092339479239152888944730029353383855934705012271287469828655167722898375316585016222348823639643723216901866444170371217270191370173589157466614552694016146895995179427479652140249262288808413317308338602797190474811071270922648477294663667365921788928396548765581008371165986756641560984953269989518550888623113747513992033288488254447018074646334017770887719163528866100086420666861290053605802427042678403876092063936294726431422018457397442475887398097524616991254297887471271793296266662239636610641562808738419767254782668268221237989843813176055925695342114563908805200048181373880191878738033450101655450354264419556891771851945462157856780021468718674078388747753654635409369858082813607201488966492296444177634539250706334405051156336515451587460930711204488963884510654204026806021693793677951434307332695422048892391792327396991800984728543340833141073604283964450507614192251999379716520459718461361490858681 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntsled.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntsled.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 740f3700639091db68f10096db015273590fc8d8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0027dbd354b800509ebe0e7aff4233ffdd3ecbcdcdda562a85497cd73264035a70661415307ac50184ceebf4f94be8748009db38f9a0f9ce6e62a50a1020df64a04de1e0e8a5e2345c14c380bd34507d8fe39a28274d31d61d53a5c6a53475bf3575e2570bdab251468f19cb649fd0dfb1d3900ef9fa237244ad66e84e3bca751232447b90a8fbe70ea29bc79ff0f529891f6e49e2791ae1f4e09366242f6e47a9e4faff2128967c5c40199bb651e3c21ea31f8e0cbf96a6767fe4432b82b99c86ba979df1f805322948770730a654eb98c761799540b04be1d3f01b697c29165e9a61b288a7d87affcf3bd55de0b81de5620c6a51701d237de013df418dbd6b19