Decode or build IECS certificate Functional Bit Mask payloads. Paste a cert title (IECS-APP-I/E/A-FBM-…) or Base64 — inspect permission bits (bytes 0–32), supplier ID (bytes 33–34), and whether supplier enforcement is active.
Title: IECS-[APP]-[I/E/A]-FBM-[Base64]
Canonical payload: 35 bytes — bytes 0–32 permission bitmap (bits 0–263), bytes 33–34 supplier ID as raw big-endian uint16.
Supplier wildcard: 0x00 0x00 in a 35-byte mask allows any supplier. Masks shorter than 35 bytes silently behave the same in Java — flagged as not enforced.