www.rassini.com

- Manufacturas Rassini, S.A. de C.V. -

Issued by GlobalSign Extended Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 23:a6:d6:5b:8f:3c:79:74:ec:7b:a0:f2 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Manufacturas Rassini, S.A. de C.V.

Company registration number: MRA861216N90
Organization: Manufacturas Rassini, S.A. de C.V.
Organization unit: Information Technology
Address: Pedregal No.24, Piso 7, Molino del Rey
State / Province: Ciudad de Mexico
Locality: Ciudad de Mexico
Country: MX

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 23:a6:d6:5b:8f:3c:79:74:ec:7b:a0:f2
Serial Number (int): 11033669305205408649130516722
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: aa:69:fd:cd:10:aa:a1:d9:c4:28:17:0b:d6:46:06:d6:21:f5:31:c7
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Fingerprint (sha1): 5e:0f:8b:79:2a:d4:79:c6:62:3b:5f:3a:90:d5:2c:20:86:33:04:a4
Fingerprint (sha256): f3:5e:e1:0d:85:a7:e9:25:b0:89:21:92:a8:49:2b:f3:5c:6f:c4:a6:34:e5:3a:c8:88:c3:30:3e:d9:11:9f:16

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl

Check the revocation status for certificate www.rassini.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rassini.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.rassini.com
rassini.com

Other certificates including the domain name rassini.com

(limited to 100 certificates)
ir.rassini.com
mail.rassini.com
issuetrack.rassini.com
ir.rassini.com
www.rassini.com
correo.rassini.com
helpdesk.rassini.com
helpdesk.rassini.com
ir.rassini.com
correo.rassini.com
helpdesk.rassini.com
helpdesk.rassini.com
helpdesk.rassini.com
helpdesk.rassini.com
helpdesk.rassini.com
ftr.rassini.com
ir.rassini.com
mail.rassini.com
helpdesk.rassini.com
helpdesk.rassini.com
*.rassini.com
issuetrackdev.rassini.com
issuetrackdev.rassini.com
helpdesk.rassini.com
www.rassini.com
ir.rassini.com
helpdesk.rassini.com
mail.rassini.com
helpdesk.rassini.com
ir.rassini.com
helpdesk.rassini.com
helpdesk.rassini.com
helpdesk.rassini.com
*.rassini.com
issuetrack.rassini.com
helpdesk.rassini.com
helpdesk.rassini.com
www.rassini.com
ir.rassini.com
mail.rassini.com
www.rassini.com
mail.rassini.com
helpdesk.rassini.com
mail.rassini.com
helpdesk.rassini.com
www.rassini.com
sbc.rassini.com
helpdesk.rassini.com
issuetrackdev.rassini.com
ftr.rassini.com
ir.rassini.com
helpdesk.rassini.com
helpdesk.rassini.com
www.rassini.com
ir.rassini.com
helpdesk.rassini.com
ir.rassini.com
correo.rassini.com
ir.rassini.com
helpdesk.rassini.com
helpdesk.rassini.com
correo.rassini.com
helpdesk.rassini.com
issuetrack.rassini.com
helpdesk.rassini.com
ir.rassini.com
helpdesk.rassini.com
helpdesk.rassini.com
sbcroc.rassini.com
www.rassini.com
helpdesk.rassini.com
sbcroc.rassini.com
fortiadev.rassini.com
sbcroc.rassini.com

Certificate

The complete raw certificate details for www.rassini.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD+v/0nmX7cGqjo9DaVG
UPqnOMap2L709bFAfSAcmuzOhF3yHQ75ouTV3v6uGV6TYg+0phpZq1LZXOUojQ4E
/hznY0xg2oUrYdGOmccTdyBb8xtk5JRIWTeL2/keh5t3Sjll+sSAJGykgxS4e6DS
LYFsGGuqP61Wu5fOoGvE0JJd+m4qG99jAmRhwdfUYYGRA9B8fQFPcFdRhzCRXhRy
Gy/tDRQKZ4ppZh88Jct5j1jT+Csqr/zm/n8USDeHZ77nEnrKAT4VcwzCnbCnQ3ux
MWjObdeQywfE318pjLiMDt+U25z2fa0YULsz/TjQMhbuWCpayl0oX4GzLIUnbmNC
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11033669305205408649130516722
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 01:37:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-19 18:02:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MRA861216N90'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ciudad de Mexico'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ciudad de Mexico'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pedregal No.24, Piso 7, Molino del Rey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manufacturas Rassini, S.A. de C.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rassini.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22754300365286387144930965813807753258274698679156277452346828102479212145775135429642257144505567160625589941753729684773202307901443022189871890001957234377432078143460816738950852004384027689740590626526886875567540179952569742305000244926099347982227754404766050952020835816745090363167206697210853888927990745395962514401822101682198927665541930706272846051812760174783739814349162732513336138626364200803751746562020323606376468008570765565453537504665053626182549033177347490239199149916292213882501212254234936008646475223720335703059301863049421711037661568068088426388539380676455129748036012133823505711761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rassini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rassini.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa69fdcd10aaa1d9c428170bd64606d621f531c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0028d4ceda4e8f3fb61ee3c6b78be577acba089833301e87f573672453f6dc59295cc47bd6c4f6e1caa2697628c2ba802cfa31a5e5a696f8746ff2e116da4e0c84ac7e638140ecf6d672398f3baeed55e6c8ab5f40e8390c80341b755783861d5130ae58c38f141ebca50317620db6b377debf2501d97c21fb2500d421a922c723e82dd7525fe66cdd5d9b9364251179cd28569b385902289b10de470652cb11c7903729675f16c4cae340f87cfd856f6366671c7e66fe4750f58a35109327f8ab4ea46c6071568cd02de45496081d02208980ca013fb39ef8c5d907ccdf60a4d771bd3df1ba337dcb714290e6ece8dca5876bbbf4bbd7f135c19ff787ffa29604