pre1.ebanking.privatebanking.societegenerale.com

- Societe Generale -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:ad:44:a2:d2:44:be:19:f4:d4:9a:cf:68:58:89:19 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Societe Generale

Organization: Societe Generale
Organization unit: Securite Production
Locality: PARIS
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ad:44:a2:d2:44:be:19:f4:d4:9a:cf:68:58:89:19
Serial Number (int): 6216571443556521042421024820613908761
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 08:1f:49:8b:57:1d:d0:30:f2:fa:49:cb:fa:26:eb:1d:5e:a7:2e:6e
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): ac:ad:aa:02:40:0b:7b:84:7f:49:48:fd:dd:ec:bf:28:a8:00:46:6c
Fingerprint (sha256): 02:a2:f7:bf:fe:b3:3e:37:c6:5a:d0:07:4a:42:d0:64:a2:f4:40:59:fb:0a:5e:b9:a1:87:27:11:a4:9c:4e:49

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate pre1.ebanking.privatebanking.societegenerale.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pre1.ebanking.privatebanking.societegenerale.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pre1.ebanking.privatebanking.societegenerale.com
pre1.ebanking.privatebanking.societegenerale.ch

Other certificates including the domain name societegenerale.com

(limited to 100 certificates)
h2-imap.societegenerale.com
partners-api.bsc.societegenerale.com
ceros3.map.fastly.net
warrantspushserver.societegenerale.com
parlons-auto.societegenerale.com
cash2business.factoring.societegenerale.com
infact.factoring.societegenerale.fr
jazz-ou-sobrio.societegenerale.com
demo-sgw.societegenerale.com
ceros3.map.fastly.net
ceros3.map.fastly.net
hsharinbox.societegenerale.com
itsat.societegenerale.com
taleo.exit.societegenerale.com
document-de-reference.societegenerale.com
pre1.ebanking.privatebanking.societegenerale.com
privatebanking.societegenerale.com
h-report.vip.equipmentfinance.societegenerale.com
sso-sogecashweb.societegenerale.com
chatbotrcf.assurances.societegenerale.com
gesop-subscribe.societegenerale.com
webclear.societegenerale.com
filetransfer.hpr.tomf.societegenerale.com
careers.socgen.com
sni.cloudflaressl.com
suite3.securitiesservices.societegenerale.com
homowebclear.societegenerale.com
hsharinbox.societegenerale.com
careers.societegenerale.com
unified-access.societegenerale.com
sgnews.societegenerale.com
san-004.ceros.com
sni.cloudflaressl.com
h-esign.societegenerale.com
coxetnel-oeuffactory.societegenerale.com
seasonsgreetings.societegenerale.com
linstantprive.privatebanking.societegenerale.com
assurances.societegenerale.com
www.equipmentfinance.societegenerale.com
factoring.societegenerale.com
h-taleo.exit.societegenerale.com
www.blackbird.societegenerale.com
ambassadorsday.societegenerale.com
assurances.societegenerale.com
homo.webadmin.societegenerale.com
h-partners-api.bsc.societegenerale.com
homowebsight.societegenerale.com
sni.cloudflaressl.com
*.pinterestceros.com
ceros3.map.fastly.net
sourcing-hub-reporting.societegenerale.com
h-lamatinale.societegenerale.com
san-004.ceros.com
monsieurmadame.societegenerale.com
san-004.ceros.com
hob-isis.societegenerale.com
netkin.eu
Nouveauxmodeles.societegenerale.com
sf-webtocase.societegenerale.com
sogecash-ebics.societegenerale.com
appliactionnaire.societegenerale.com
login.securitiesservices.societegenerale.com
ambassadorsday.societegenerale.com
portail-pca.factoring.societegenerale.com
infact.factoring.societegenerale.fr
san-004.ceros.com
swordphish.cert.societegenerale.com
apps.bsc.aws.societegenerale.com
www.scf-servicing-hom.societegenerale.com
h2-imap.societegenerale.com
immsituadmin.societegenerale.com
careers.socgen.com
getready.societegenerale.com
www.soactif.societegenerale.com
carte-bancaire-gratuite.societegenerale.com
cert.societegenerale.com
innovshare.societegenerale.com
ceros3.map.fastly.net
projects.societegenerale.com
www.scf-servicing.societegenerale.com
suite3.securitiesservices.societegenerale.com
sso-sogecashweb.societegenerale.com
live.societegenerale.com
homo-login.securitiesservices.societegenerale.com
h-unified-access.societegenerale.com
san-004.ceros.com
www.equipmentfinance.societegenerale.com
reglement.societegenerale.com
h-report.vip.equipmentfinance.societegenerale.com
h-report.vip.equipmentfinance.societegenerale.com
activation.caff.societegenerale.com
jazz-ou-sobrio.societegenerale.com
sni.cloudflaressl.com
dublinportal.societegenerale.com
boxallinclusive.societegenerale.com
ceros3.map.fastly.net
hfilegtw.societegenerale.com
ceros3.map.fastly.net
ceros3.map.fastly.net
seasonsgreetings.societegenerale.com

Certificate

The complete raw certificate details for pre1.ebanking.privatebanking.societegenerale.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucqpjW7HqDwp3kBf2LGt
6fDsM27kJMaaeiMD0rHiweul23eGgOca8IDEcGiJOIWxwZ13X6Fi8nKY94dsqXVA
+fU11RLtQLDlvtA4Szb3b3IujPkTqDtq0qsiHts2YDSver67uYiil4nfI+7KnN/s
PLn+u5ew7/YUU3p/dDcM5xj76Kmxi+TbBDPglmqjKWuKnt49j52VEzgBbOtF+yc/
Q4LmjjVltZvflnMHlEPUsQLu1qW6psU/3FU2yh6OD8fZx58Ghse3Rdc3Ht8uzPZn
GfNS6nqB/yW/0hvRGAlUxuADyDulDQOfyyik12i1lHLrt5+rvuWjaAa/wc19GeEU
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6216571443556521042421024820613908761
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Societe Generale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Securite Production'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pre1.ebanking.privatebanking.societegenerale.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23454022930607817106226971722085968179055785096113904630753109784644957896017055458376641341267470584496692349696054821685233169820165722564713770796680042718215656848993561310209716761470079412003457595052684047860086793274343313642912520838369353018023931390899385392498675302756120925957077277684263275567062895482050529903132264952184641975885425642141288328077628185808541149601432181972990192975075333135623307612608739717375991727734427436944860792793656734388396705279820663401131123988782458435836001265440199565472709341633479051977864317186957915123342373758717895222070337343306382438700500317283679278101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							081f498b571dd030f2fa49cbfa26eb1d5ea72e6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre1.ebanking.privatebanking.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre1.ebanking.privatebanking.societegenerale.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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