syncservice.partner.microsoftonline.cn

- Shanghai Blue Cloud Technology Co., Ltd. -

Issued by DigiCert Basic RSA CN CA G2

About this certificate

This digital certificate with serial number 04:f0:10:61:94:c0:28:c8:60:69:ae:9f:d6:9b:42:79 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Shanghai Blue Cloud Technology Co., Ltd.

Organization: Shanghai Blue Cloud Technology Co., Ltd.
State / Province: Shanghai
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:f0:10:61:94:c0:28:c8:60:69:ae:9f:d6:9b:42:79
Serial Number (int): 6563395478909532234710561492167246457
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 24:ff:34:0b:4d:02:85:42:f8:c7:64:2c:cb:4b:c2:20:09:1f:d1:4e
AuthorityKeyId: 06:bd:a6:9b:60:79:50:31:be:d5:a9:02:4a:a0:d0:95:53:8b:2f:34

Fingerprint (sha1): 9b:98:b1:41:fa:55:4c:31:73:ff:37:fd:1e:a5:7f:9f:58:be:53:b3
Fingerprint (sha256): 07:bb:2d:f8:62:ba:b3:a2:5b:d5:aa:98:7d:ac:82:ec:ad:96:bc:40:a6:da:29:f9:2c:88:96:6e:b8:af:86:93

Issuing Certificate URL: http://cacerts.digicert.cn/DigiCertBasicRSACNCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.cn
CRL Distribution Point: http://crl.digicert.cn/DigiCertBasicRSACNCAG2.crl

Check the revocation status for certificate syncservice.partner.microsoftonline.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for syncservice.partner.microsoftonline.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

syncservice.partner.microsoftonline.cn

Other certificates including the domain name microsoftonline.cn

(limited to 100 certificates)
IntuneDeviceUnlockAADSP.manage-ppe.microsoftonline.cn
acmsportal.infra.teams.microsoftonline.cn
usage.cp.microsoftonline.cn
acms.infra.teams.microsoftonline.cn
suite.partner.microsoftonline.cn
SCOnlinePREncryptionCert.manage.microsoftonline.cn
Portal.chinanorth2.manage-ppe.microsoftonline.cn
Portal.manage-ppe.microsoftonline.cn
mam.manage.microsoftonline.cn
adminwebservice.partner.microsoftonline.cn
test.microsoftonline.cn
msm-int-provision.partner.microsoftonline.cn
dms.partner.microsoftonline.cn
mambackendsp.mam.manage-ppe.microsoftonline.cn
msm.partner.microsoftonline.cn
CompanyManager.partner.microsoftonline.cn
companymanager.partner.microsoftonline.cn
syncservice.partner.microsoftonline.cn
JwtTokenSigning.manage.microsoftonline.cn
toolsclient.cp.partner.microsoftonline.cn
mosiot.partner.microsoftonline.cn
AdminWebService.partner.microsoftonline.cn
partner.partnercenter.microsoftonline.cn
IntuneServiceDiscoveryAADSP.manage.microsoftonline.cn
signupprd.partner.microsoftonline.cn
LogManagerService.manage.microsoftonline.cn
ocpmonitor.partner.microsoftonline.cn
onboarding-stx.partner.microsoftonline.cn
FEAADCertClient.CNPASU01.manage.microsoftonline.cn
dmsreadaccess.partner.microsoftonline.cn
dev.login.partner.microsoftonline.cn
becread.partner.microsoftonline.cn
FCS1.CNBASU01.manage-ppe.microsoftonline.cn
aadg.chinacloudapi.cn
mospop.partner.microsoftonline.cn
provisioningapi.partner.microsoftonline.cn
azurerdp.enterpriseregistration.partner.microsoftonline.cn
AdminWebService.partner.microsoftonline.cn
companymanager.partner.microsoftonline.cn
*.iga.azure.cn
client.kst.cp.partner.microsoftonline.cn
mygroups.microsoftonline.cn
CompanyManager.partner.microsoftonline.cn
myapplications.microsoftonline.cn
myoffer365elf.partner.microsoftonline.cn
HeadSecurityTokenServiceForOAuth.manage.microsoftonline.cn
UITailSTS.manage.microsoftonline.cn
FEF.cnpasu01.manage.microsoftonline.cn
KeyRecoveryAgent.manage-ppe.microsoftonline.cn
azurerdp.enterpriseregistration.partner.microsoftonline.cn
*.mdmrp-mooncake.msftcloudes.cn
drs.cp.partner.microsoftonline.cn
client.commercerestauthorization.partner.microsoftonline.cn
tools.cp.partner.microsoftonline.cn
api.scheduler.teams.microsoftonline.cn
Portal.manage-ppe.microsoftonline.cn
*.partner.microsoftonline.cn
bapkvsecretencryption.api.bap.partner.microsoftonline.cn
syncservice.partner.microsoftonline.cn
pgw.cp.partner.microsoftonline.cn
IntuneAccountRunnermooncakeProd.manage-ppe.microsoftonline.cn
api.myapps.microsoftonline.cn
partner.partnercenter.microsoftonline.cn
FEAADCertClient.CNPASU01.manage.microsoftonline.cn
FCS1.CNBASU01.manage-ppe.microsoftonline.cn
syncservice-stx.partner.microsoftonline.cn
buildtimepackage.dummy.partner.microsoftonline.cn
docret.wh.records.infra.teams.microsoftonline.cn
aadg.chinacloudapi.cn
tdsencryt.configure.partner.microsoftonline.cn
acisclient.cnpmsua01.manage.microsoftonline.cn
XLens.manage-ppe.microsoftonline.cn
deployment.usagesyncagent.cp.microsoftonline.cn
iwazprd.partner.microsoftonline.cn
myprofile.microsoftonline.cn
SCOnlinePREncryptionCert.manage.microsoftonline.cn
companymanager.partner.microsoftonline.cn
client.commercerestentitlement.partner.microsoftonline.cn
sps-archive.cp.partner.microsoftonline.cn
spssmoketest.cp.partner.microsoftonline.cn
commerce.partner.microsoftonline.cn
aadonboardingtest.bec.microsoftonline.cn
boxshellclient.partner.microsoftonline.cn
FCC1.CNPASU01.manage.microsoftonline.cn
vlp-test-client.partner.microsoftonline.cn
AdminApiService.manage.microsoftonline.cn
FCC1.CNPASU01.manage.microsoftonline.cn
aadg.chinacloudapi.cn
partner.partnercenter.microsoftonline.cn
dataagent.portal.partner.microsoftonline.cn
syncservice.partner.microsoftonline.cn
wip.mam.manage.microsoftonline.cn
GPAnalyticsStorage.manage.microsoftonline.cn
dcscheduler.partner.microsoftonline.cn
suite.partner.microsoftonline.cn
uidelegationclient.partner.microsoftonline.cn
commercepaycallback.cp.partner.microsoftonline.cn
signupprd.partner.microsoftonline.cn
DEServerAuthCert.cnpmsua01.manage.microsoftonline.cn
PcfAgent.ngpproxy.microsoftonline.cn

Certificate

The complete raw certificate details for syncservice.partner.microsoftonline.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPBf3IhKI3EiJGghf8a8
XFwG51ZSfOxYsbjj8gf+1vupEuhQ8YdY43rdkofG3AMamEHSLbXsftt4bEJWxsRp
rZXbdBpUHGTCkObsumLF6fEhZVDHWSg5ytIEnRu8CBe9TZVpoCZ6g9EogQfNM/OV
QqaJRiDSSbjFQRd7j5UOVd0n76DtEy5OPWfqScDU2n65DBzyDKI040WAeLIevnnt
KjXtJMEz3rorsZngDUa+oCYSyzdpvJ4KJGexhqJND0fe4nMXopoy7V49E03B9qaJ
WNka7AKY+YZJXeCpa1puuW+vA7cDvt3XfQT9cw8DXgqKhplcFcWXUIwqOFZcoWnt
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6563395478909532234710561492167246457
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Basic RSA CN CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai Blue Cloud Technology Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'syncservice.partner.microsoftonline.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21831521517587631320813174797714975795310783204050867523608743228072040205103823854827624176629063900779100489860765689759513921754170806660752067759762765188696457590882510125082734951345365415595884584618691876354475321275881706524826904648716885610316434844162092755469575475341168504387928237213613427193108773894469634726735642365790864164084346186126559090874124174432665699456882990246257202918281409429150146280897918475436503037266636579325002906578721261055990353724440867791154208497775462258381287015485656429567952552451421297957717669873358790631641892970598891351372381752782955403959960605499801071069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 06bda69b60795031bed5a9024aa0d095538b2f34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24ff340b4d028542f8c7642ccb4bc220091fd14e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syncservice.partner.microsoftonline.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.cn/DigiCertBasicRSACNCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.cn/DigiCertBasicRSACNCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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