partnernetzwerk.ionos.de

- IONOS SE -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0d:f9:ec:8f:49:6d:32:9c:e1:95:bc:93:bb:72:a6:15 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IONOS SE

Organization: IONOS SE
State / Province: Rheinland-Pfalz
Locality: Montabaur
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:f9:ec:8f:49:6d:32:9c:e1:95:bc:93:bb:72:a6:15
Serial Number (int): 18577643863997197404841422148366149141
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 89:e0:5f:5c:f6:7b:fb:6f:55:1e:79:fc:2b:5a:14:47:10:1b:c8:6a
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): d6:c4:f0:0f:0d:8a:d5:a2:da:c2:59:88:ed:61:6a:eb:bc:d4:9e:a3
Fingerprint (sha256): 01:92:b0:17:66:42:40:f2:89:76:61:14:21:5b:0f:7b:23:89:24:11:ce:9d:ee:52:18:b7:50:c0:8e:38:df:be

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate partnernetzwerk.ionos.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for partnernetzwerk.ionos.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

partnernetzwerk.ionos.de
partnernetwork.ionos.es
partnernetwork.ionos.it
partnernetwork.ionos.co.uk
partnernetwork.ionos.uk
partnernetwork.ionos.fr

Other certificates including the domain name ionos.de

(limited to 100 certificates)
ssl.ionos.de
api.analyze-eu.ionos.com
ionos.de
partnernetzwerk.ionos.de
partnernetwork.ionos.de
ntld-status.ionos.de
cdn.ionos.de
mike.1und1.de
hidrive.ionos.com
registrar.ionos.de
ssl.ionos.de
hidrive.ionos.com
passwort.ionos.de
upselling.ionos.de
ionos.de
inside.ionos.de
postmaster-contact.ionos.de
server-services.ionos.de
login.ionos.de
vertrag.ionos.de
location-marketing.ionos.de
ias.ionos.de
partnernetwork.ionos.de
exchange2019.ionos.eu
jobs.ionos.de
digital-success.ionos.de
login.ionos.de
images-1.partnerportal.ionos.de
oertel.ca
ionos.de
ntld-status.ionos.de
email.ionos.de
jobs.ionos.de
shop.ionos.de
ionos.de
jobs.ionos.de
analytics.ionos.de
digitalguide.ionos.de
jobs.ionos.de
archiv.ionos.de
pixel.ionos.de
digital-success.ionos.de
email-marketing.ionos.de
wde.ionos.de
images.partnernetzwerk.ionos.de
partnernetwork.ionos.de
shop.ionos.de
partnerportal.ionos.de
exchange2019.ionos.eu
mawa.ionos.de
api.analyze-eu.ionos.com
ias.ionos.de
domainconnect.ionos.de
pixel.ionos.de
sherlock.ionos.com
analytics.ionos.de
postmaster-contact.ionos.de
postmaster-contact.ionos.de
contents-1.partnerportal.ionos.de
upselling.ionos.de
yourvoice.ionos.de
images.partnerportal.ionos.de
api.partnernetwork-eu.ionos.com
beta.ssl.ionos.de
developer.hosting.ionos.com
ionos.cloud
adressbuch.ionos.de
ssl.ionos.de
xadmin.exchange.ionos.eu
partnerportal.ionos.de
identity.ionos.de
shop-api.ionos.com
resources.ionos.de
hed.ionos.de
account.ionos.de
ionos-status.de
email.ionos.de
metrics.ionos.de
partnerportal.ionos.de
postmaster-contact.ionos.de
ionos.de
account.ionos.de
mein.ionos.de
partnernetwork.ionos.de
telesales.ionos.de
telesales.ionos.de
ntld-status.ionos.de
salestool.ionos.de
images-2.partnerportal.ionos.de
status-ionos.de
1.exchange.1and1.eu
mail.ionos.de
cloudpanel.ionos.com
mein.ionos.de
mein.ionos.de
email.ionos.de
metrics.ionos.de
oc.ionos.com
microshop.ionos.de
ionos-status.de

Certificate

The complete raw certificate details for partnernetzwerk.ionos.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudu5zhIuCuSwxKb3Uqa9
JR4SrGDe+GcxqsxV6EMAv7Sh/RmJ26mAjdM4Z+BQXQCFoFQM6nWPRJ0pHHgjQmHk
HggYKMk7a0XNc3PBQp04h7pwX3285uDesYOkbGqD0TQEBVRHLYgMDpKWnL95w4qp
JdeUqnjaYKNdqGnkVOaQV8/ZnhvjgI+D98V0yo3g/rgJKAcmKITZGZKbRZprXkQN
Bv/nL3vr1FhNUYBL8ep6MbPsm8/wd/VVcYu89j79D6p8SKl2KwhcwKTbK8PNUR9t
Ayaa+MSsAE+gcegTuYZUzLfsJd1qq65z5gpVbnBGpWcyuI/PW74bjYXF07ueziIi
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18577643863997197404841422148366149141
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montabaur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IONOS SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'partnernetzwerk.ionos.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23462437249309234507380667447783940165830691280667465244393336915668047237725156919831100295223670252541204999257869392915427234406946775615320340419256382566582305138725279267325263067208426012451458904798348200521032453284111837246494685152895901871446037482510282114652142011148472382685388743914448957156196458288528267114540625006796718671675793011159399655485643451730487468930600275216772954085276044382999885936008433807584247598475751293077597484843914185411758850459009082934193423645935411579338468543178676156578475099838439693671563152937361018930796899007153002097105452608349046079563258238631399268929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89e05f5cf67bfb6f551e79fc2b5a1447101bc86a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnernetzwerk.ionos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnernetwork.ionos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnernetwork.ionos.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnernetwork.ionos.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnernetwork.ionos.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnernetwork.ionos.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							0165007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017e7c77a465000004030046304402202905ca823f1d7ca6cc8403368a52933310b55b12434d20f416544cc06960fcd1022051d97111c53e16b5bee7d1ba5183a8a791191e29db44aecd31def99c03a0f98a00750035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000017e7c77a43d0000040300463044022020fd4c106bb0200735be04f55eb500eeafe92dfcc9a4d7849af8d7f75dfd9447022033c9a5e266168fbb5c86f46731c74b50c172c686eddf5c833ec62acba9a39c5d007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017e7c77a476000004030046304402203f7682051a1c101553e7f6757ccdfe7e76b9e4d035f983e4cc247a9cf727f52b02206c6924b33b380e4d631aef522fe59e18b7380bc0cf0a2a991b94b4893539047f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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