nelsondiocese.org
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number 16:3c:6f:3b:cb:20:eb:6f:0e:a8:63:98:f4:01:1c:fe was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=nelsondiocese.org
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 16:3c:6f:3b:cb:20:eb:6f:0e:a8:63:98:f4:01:1c:feSerial Number (int): 29556809803573086963337548524211477758
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: 2c:16:4c:43:3a:5b:a6:dc:a8:21:37:65:54:7d:3e:58:ea:e1:06:b2
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): 04:7a:c7:1e:15:c5:95:0f:85:ae:fd:29:ff:70:19:ac:b7:f0:02:fa
Fingerprint (sha256): ff:f2:72:61:8c:5a:68:ff:4e:2a:3a:08:d4:8f:d8:24:e0:4d:ce:9a:98:d8:c8:ad:97:31:ec:1c:ff:2b:2a:1f
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/zIsI6NKppZYCRL Distribution Point: http://crls.pki.goog/gts1p5/rBMEEVUA7-8.crl
Check the revocation status for certificate nelsondiocese.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nelsondiocese.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nelsondiocese.org
Other certificates including the domain name nelsondiocese.org
(limited to 100 certificates)
glacierview.comoxvalleyschools.ca
admin.bicschools.net
careerprograms.comoxvalleyschools.ca
admin.bicschools.net
remote.nelsondiocese.org
admin.colegiogreenhills.com
www.ranchitoelementary.org
okf.sd53.bc.ca
nelsondiocese.org
printshop.comoxvalleyschools.ca
comoxvalleyschools.ca
elem.bicschools.net
stmary.htcsd.ca
nelsondiocese.org
sess.sd53.bc.ca
quickbooks.nelsondiocese.org
nelsondiocese.org
www.wexford.edu.mx
admin.wearedace.org
www.sd53.bc.ca
soss.sd53.bc.ca
nelsondiocese.org
adss.sd70.bc.ca
remote.nelsondiocese.org
htcsd.ca
www.wearedace.org
robinsonelementary.org
www.nelsondiocese.org
nelsondiocese.org
www.nelsondiocese.org
www.nelsondiocese.org
remote.nelsondiocese.org
quickbooks.nelsondiocese.org
nelsondiocese.org
ined.sd70.bc.ca
awnes.sd70.bc.ca
quickbooks.nelsondiocese.org
www.gpcsd.ca
remote.nelsondiocese.org
www.nelsondiocese.org
fatimaschoolwilton.com
*.nelsondiocese.org
nelsondiocese.org
nelsondiocese.org
nelsondiocese.org
www.theratnerschool.org
ined.comoxvalleyschools.ca
nelsondiocese.org
www.fatimaschoolwilton.org
admin.colegiogreenhills.com
www.bicschools.net
www.comoxvalleyschools.ca
remote.nelsondiocese.org
remote.nelsondiocese.org
jcsk8.org
admin.jcsk8.org
nelsondiocese.org
admin.bicschools.net
careerprograms.comoxvalleyschools.ca
admin.bicschools.net
remote.nelsondiocese.org
admin.colegiogreenhills.com
www.ranchitoelementary.org
okf.sd53.bc.ca
nelsondiocese.org
printshop.comoxvalleyschools.ca
comoxvalleyschools.ca
elem.bicschools.net
stmary.htcsd.ca
nelsondiocese.org
sess.sd53.bc.ca
quickbooks.nelsondiocese.org
nelsondiocese.org
www.wexford.edu.mx
admin.wearedace.org
www.sd53.bc.ca
soss.sd53.bc.ca
nelsondiocese.org
adss.sd70.bc.ca
remote.nelsondiocese.org
htcsd.ca
www.wearedace.org
robinsonelementary.org
www.nelsondiocese.org
nelsondiocese.org
www.nelsondiocese.org
www.nelsondiocese.org
remote.nelsondiocese.org
quickbooks.nelsondiocese.org
nelsondiocese.org
ined.sd70.bc.ca
awnes.sd70.bc.ca
quickbooks.nelsondiocese.org
www.gpcsd.ca
remote.nelsondiocese.org
www.nelsondiocese.org
fatimaschoolwilton.com
*.nelsondiocese.org
nelsondiocese.org
nelsondiocese.org
nelsondiocese.org
www.theratnerschool.org
ined.comoxvalleyschools.ca
nelsondiocese.org
www.fatimaschoolwilton.org
admin.colegiogreenhills.com
www.bicschools.net
www.comoxvalleyschools.ca
remote.nelsondiocese.org
remote.nelsondiocese.org
jcsk8.org
admin.jcsk8.org
nelsondiocese.org
Certificate
The complete raw certificate details for nelsondiocese.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgIQFjxvO8sg628OqGOY9AEc/jANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yMzA4MDkyMzU4NTVaFw0yMzExMDcy MzU4NTRaMBwxGjAYBgNVBAMTEW5lbHNvbmRpb2Nlc2Uub3JnMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmajnxeg8skwaa25pUJ8+VwcUeIfnpwVuXw3 8Y5jBZz3vSr0vyd2Nvz2tL7kE4NSfn/94exkiXzLqV/lIJTbqFVX95zL9lzoC4xf Xx32d8WElzxRnX/S/1H8bK8hmLMIdUCtjzU/RZ68N4ov/pCsdjjCtShTa3uZ4HV3 HSRh4rOozKxp+pFwlRrE+YNjG2mXMYmXDK0VXy95nu9Tzth2QoePAIWdmOa36OCt /fA+08fxscLENMR08BbuiCLzROUXfz8AgCY9Fui51GduSmAF84OmktHVqQrvYZa1 5dWpbgenB7elfsim5gvOkHMIk3xnYTNMKEJQPN1SEcPskDd+4QIDAQABo4ICeTCC AnUwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFCwWTEM6W6bcqCE3ZVR9Pljq4QayMB8GA1UdIwQYMBaA FNX8ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcw AYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUveklzSTZOS3BwWlkwMQYI KwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5kZXIw HAYDVR0RBBUwE4IRbmVsc29uZGlvY2VzZS5vcmcwIQYDVR0gBBowGDAIBgZngQwB AgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5w a2kuZ29vZy9ndHMxcDUvckJNRUVWVUE3LTguY3JsMIIBBQYKKwYBBAHWeQIEAgSB 9gSB8wDxAHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGJ3PQq zQAABAMARzBFAiEAu3w34zkWPN95us7v+DaON042ovp8uRu592IQhUQNn/MCIEcP IpNMgv8oqquX3VzdIS9l1UsPbsgOB0+g/QDCfLKiAHcA6D7Q2j71BjUy51covIlr yQPTy9ERa+zraeF3fW0GvW4AAAGJ3PQmswAABAMASDBGAiEA7MvRQ0m3PUuf0pL0 wpbD/a8Ju8TZfzVrtUGnIsRN0rwCIQDpvjv/OFXcpS9StGsBsi2dciV+cR8RFjUn nGiMX/Lq5zANBgkqhkiG9w0BAQsFAAOCAQEAYPHiQ2KiIhiIUT0eXhLDjTtWtODG ZXGVnszOufLy+dU4RBNitonC6ZNVZIIKknttVw95eolJkpVxRsU/1w1hPf5IjVZX 2oOBM/ww+cC9/ZDbUI3zLRr6ZZS/J1X1xjWFmmAzSNxWD7N2JMXOwk69ovlw2QW/ LG0U+Us681yCq7B1c4hnLj2HMx5PPhLK2u4s7MOBgPmTc01wBRGZjxoRVgaRzgyW BSfDNXQl+t5Ribl+WfrgADhEInEZ+sSGLAvi1hbAsyvXHpkQXvGUvKEgOfjJqP9R 7a29LUz7m5lCdzGosROp8c2oi/SKMadUUK89h+ofGQDJISN62hB3pjppzA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmajnxeg8skwaa25pUJ8 +VwcUeIfnpwVuXw38Y5jBZz3vSr0vyd2Nvz2tL7kE4NSfn/94exkiXzLqV/lIJTb qFVX95zL9lzoC4xfXx32d8WElzxRnX/S/1H8bK8hmLMIdUCtjzU/RZ68N4ov/pCs djjCtShTa3uZ4HV3HSRh4rOozKxp+pFwlRrE+YNjG2mXMYmXDK0VXy95nu9Tzth2 QoePAIWdmOa36OCt/fA+08fxscLENMR08BbuiCLzROUXfz8AgCY9Fui51GduSmAF 84OmktHVqQrvYZa15dWpbgenB7elfsim5gvOkHMIk3xnYTNMKEJQPN1SEcPskDd+ 4QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 29556809803573086963337548524211477758 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-09 23:58:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 23:58:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nelsondiocese.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22521031533383484476094787880304202299312539598383382384104324992679677799205613636593607554707542888068674359699409674022629144227496288164951286024841620076800660557648052067675597624409516340336166029351151423143338808115254220030565370670798161162958584128809072598321591968830496949638099871442595975275252382174874978436474415210889391541064649121877360444872256579115772715991907332106137249365861242232029302392549885618408168525582092943892234258399767518475458185698276046802229387386680080405735586147649558176590318177907031225171094929055247283967298692406038746188245478155107658949798061866602833870561 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2c164c433a5ba6dca8213765547d3e58eae106b2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/zIsI6NKppZY' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsondiocese.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/rBMEEVUA7-8.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189dcf42acd0000040300473045022100bb7c37e339163cdf79baceeff8368e374e36a2fa7cb91bb9f7621085440d9ff30220470f22934c82ff28aaab97dd5cdd212f65d54b0f6ec80e074fa0fd00c27cb2a2007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189dcf426b30000040300483046022100eccbd14349b73d4b9fd292f4c296c3fdaf09bbc4d97f356bb541a722c44dd2bc022100e9be3bff3855dca52f52b46b01b22d9d72257e711f111635279c688c5ff2eae7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0060f1e24362a2221888513d1e5e12c38d3b56b4e0c66571959eccceb9f2f2f9d538441362b689c2e9935564820a927b6d570f797a894992957146c53fd70d613dfe488d5657da838133fc30f9c0bdfd90db508df32d1afa6594bf2755f5c635859a603348dc560fb37624c5cec24ebda2f970d905bf2c6d14f94b3af35c82abb0757388672e3d87331e4f3e12cadaee2cecc38180f993734d700511998f1a11560691ce0c960527c3357425fade5189b97e59fae0003844227119fac4862c0be2d616c0b32bd71e99105ef194bca12039f8c9a8ff51edadbd2d4cfb9b99427731a8b113a9f1cda88bf48a31a75450af3d87ea1f1900c921237ada1077a63a69cc