ccs.join.swisscom.ch

- Swisscom (Schweiz) AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 19:60:21:75:c5:a9:70:9f:de:64:97:b9:5d:88:07:eb:79:e8:a5:b6 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Swisscom (Schweiz) AG

Organization: Swisscom (Schweiz) AG
State / Province: BE
Locality: Worblaufen
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 19:60:21:75:c5:a9:70:9f:de:64:97:b9:5d:88:07:eb:79:e8:a5:b6
Serial Number (int): 144868555590865303400057132548051494335448393142
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 24:06:f0:93:49:c5:b3:80:7b:b8:b6:bd:57:32:ae:05:66:16:aa:81
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 17:78:28:57:db:97:5e:8b:25:3a:94:3b:98:55:c0:96:35:16:11:9e
Fingerprint (sha256): 01:a6:10:8b:da:ff:91:17:e2:36:d4:99:bf:ab:5c:27:4d:75:28:b3:3f:2e:d4:c6:6c:3c:70:04:f6:11:46:18

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate ccs.join.swisscom.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ccs.join.swisscom.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ccs.join.swisscom.ch
www.ccs.join.swisscom.ch

Other certificates including the domain name swisscom.ch

(limited to 100 certificates)
olr-stag.swisscom.ch
cms.staging.entertainment.swisscom.ch
email.swisscom.ch
cp.cspp.swisscom.ch
spscms4linux02.exotrack.swisscom.ch
tvnow.swisscom.ch
internetbox-nas.staging.swisscom.ch
issue.swisscom.ch
secure04.stage.lithium.com
blockchain.swisscom.ch
partner-authz-staging.swisscom.ch
netzausbaukarte.swisscom.ch
magazin.swisscom.ch
i.swisscom.ch
docsafe-beta.swisscom.com
twint-prd.swisscom.ch
ssc1.imst.swisscom.ch
octane.swisscom.ch
*.portal.bankinghub.swisscom.ch
gaia-gateway.vega.m6s.swisscom.ch
iot.vodafone.swisscom.ch
sbc1-emea-che-zhh.teamsa.swisscom.ch
ccs.join.swisscom.ch
*.tcsbc02.teamsa.swisscom.ch
multi.swisscom.ch
l2.shared.global.fastly.net
bcs.join.swisscom.ch
secure05.lithium.com
wast.swisscom.ch
sdx.swisscom.ch
identity.phoenix.m6s.swisscom.ch
ccs.join.swisscom.ch
l2.shared.global.fastly.net
global-portal-dev.swisscom.ch
l2.shared.global.fastly.net
btbcs.swisscom.ch
tools.swisscom.ch
l2.shared.global.fastly.net
ssc1.ims.swisscom.ch
internetbox-nas.staging.swisscom.ch
lite.m2m.swisscom.ch
vimaphet-dasbc1.joind.swisscom.ch
extranet-acc.swisscom.ch
extranet-int.swisscom.ch
shop.swisscom.ch
secure05.stage.lithium.com
internetbox-nas.swisscom.ch
media.oid.swisscom.ch
5670976570261504-fe4.pantheonsite.io
acs.joind.swisscom.ch
secure04.stage.lithium.com
dis.swisscom.ch
wrc.joind.swisscom.ch
*.tasbc01.teamsd.swisscom.ch
sensu-backend-8.exotrack.swisscom.ch
simple2.swisscom.ch
secure04.stage.lithium.com
srv04795.int.bkw.ch.exotrack.swisscom.ch
5754818358411264-fe2.pantheonsite.io
issue-int.swisscom.ch
l2.shared.global.fastly.net
wmt5443.conferencing.swisscom.ch
check.swisscom.ch
clientrvk.testweb38.swisscom.ch
tpe-staging.swisscom.ch
marketplace.bankinghub.swisscom.ch
inone-game.swisscom.ch
check.swisscom.ch
dns-vetting1e.map.fastly.net
handyhilfe.swisscom.ch
secure04.stage.lithium.com
hpalm-app-prd.swisscom.ch
cockpit.dev1.swisscom.ch
secure05.stage.lithium.com
rtc-dis.swisscom.ch
het-cds.swisscom.ch
mds01.swisscom.ch
www.survey.swisscom.ch
wfmweb.swisscom.ch
tv-thankyou.swisscom.ch
inone.swisscom.ch
buyback.swisscom.ch
secure04.stage.lithium.com
stag-messagingproxy.swisscom.ch
secure05.lithium.com
oms-tst.omsaas.swisscom.ch
cockpit.swisscom.ch
vergleich-server-cloud.swisscom.ch
buyback.swisscom.ch
hipchat.swisscom.ch
regapi-1olb.swisscom.ch
stream.swisscom.ch
repairmanager.swisscom.ch
robotics.swisscom.ch
zhheapp-sasbc01.joineapp.swisscom.ch
git-test.swisscom.ch
5754818358411264-fe2.pantheonsite.io
acs.gated.swisscom.ch
www.lawe-network.lime.novu.ch
chat.projuventute.swisscom.ch

Certificate

The complete raw certificate details for ccs.join.swisscom.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 144868555590865303400057132548051494335448393142
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-03 07:43:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-03 07:43:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Worblaufen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ccs.join.swisscom.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730206807407030663973463950910984051639004794504448067590691159307316891719762819342432868449673979604482238657967026282847669482332209548894956101211668643772456009503840217231413745618622976463800167169287078779382563139772572638062284395032634089559216572180931506177605324158827038150409532478362359113242472627162007341895869999745557567452058969932697224421018440588692309303748961406662253448119270103845227656251744022381178123005657174699214760181588103616430386493903196692831419389263116068790201868568736536482579668835902823090657146428339077554966390968476678154341401696144463822004555016785247676287188864379446550210985986962391410675113861660660802316691686532415168462567186511312608866167769742981369427259514093592894374139074136413135182161676107144575023250662277352684004672357928120849672399565714916276634546021167581582311082766119215479378425497214707676706203015311666079147445688703332745554233577486111817743562884628234034844745141861807835642353290337995297482509038651442964727856769217399233722687948382686026643857178814172141331844241118676607131867518288368783959279912783839031135582201139492256107013005282004748814369302841749407005165576731334325579830944982096154368101631440276601951492947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccs.join.swisscom.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccs.join.swisscom.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2406f09349c5b3807bb8b6bd5732ae056616aa81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00af232db4884eb4e26b205f25378a462694fc83508ad37856cfca65ebbd2ddd2add42ec99df9cabec1c0acf74df223c909e3911c8a4799a725083132a055ccd5b2bb67212ead0c41fd778be0853fcf21b70a1bcc09f46623015ff1ae0948bbb167b95b1d1ede24560624e3398ec4299230ca2353ac4dc6802ff4f4530da602ad4f0fa659d058fe3987f137aad0ea4f429448ec1150a52461d5880fc6425b29db6c56b08dd4fa6a91bed413c1c3d53de1bce1373dbc6c6b5055679accf93179c1bd0a96b43b521059bd722a2ff7b2384cb85936506776973054fb077d4dde779bf2f9e3f3803f2b744312cf90d82268e9d417f6d06cd7b8b295a036e5aab379c7b7f989e49691df892c89b07261173d9b9ca7aacbf990afdfc4ee597ec11a6b2627109cb5e1fcc588e9895a1658bd0fbff100aa5285f389f0725627cd7849b39712f082531c6870a28a0e1af90a54546299ecaf64d48cfa18c1ed57545bdb9807ab5eae478a3435930ced503aba4f0eec5205823dc61d0d04d55334badf2223da805d5f289d73afa4be902dd200dac0980b182331bdef84fd2e81ada0411bd63544ecbf4d47f280cb8a6e76da6e58c3217959a054e4313e3a03141a4924f87957b17a4c71a0319c8b23c1a0d5ef09e99c815576c9c766e003ff45b954d41d5b21f9c1f7f773b25b2a1fed938cbc85090190bb8e1d01577ef12ead192835069867d