eclink.mcfarlandclinic.com

- McFarland Clinic PC -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 01:af:e1:f4:40:46:c6:d0:3e:c1:b7:92:dd:1b:8a:f0 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

McFarland Clinic PC

Organization: McFarland Clinic PC
Organization unit: MIS
State / Province: Iowa
Locality: Ames
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:af:e1:f4:40:46:c6:d0:3e:c1:b7:92:dd:1b:8a:f0
Serial Number (int): 2242462839753590120187986178370931440
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 1f:93:9c:19:23:ba:a3:d7:32:3b:4f:7d:8d:f4:51:4a:c3:02:f7:e8
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): b4:c6:2f:f1:11:d0:06:fd:97:33:d9:d6:90:9a:af:7b:66:71:34:ac
Fingerprint (sha256): 08:1f:df:7b:44:6a:3a:70:20:e6:04:bb:88:22:7b:64:a4:ac:0a:bd:19:e7:47:02:c3:2a:ba:43:e9:de:6b:c5

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate eclink.mcfarlandclinic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eclink.mcfarlandclinic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eclink.mcfarlandclinic.com

Other certificates including the domain name mcfarlandclinic.com

(limited to 100 certificates)
sso2.mcfarlandclinic.com
sfdmcf.mcfarlandclinic.com
update.mcfarlandclinic.com
demosched.mcfarlandclinic.com
pacs.mcfarlandclinic.com
sfdtest.mcfarlandclinic.com
tmtest.mcfarlandclinic.com
sso1.mcfarlandclinic.com
eclink.mcfarlandclinic.com
demosched.mcfarlandclinic.com
webvpn.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
epiphany.mcfarlandclinic.com
apps.mcfarlandclinic.com
tm01.mcfarlandclinic.com
sso.mcfarlandclinic.com
eclink.mcfarlandclinic.com
sso.mcfarlandclinic.com
emrproxy.mcfarlandclinic.com
sched.mcfarlandclinic.com
access.mcfarlandclinic.com
work.mcfarlandclinic.com
password.mcfarlandclinic.com
access.mcfarlandclinic.com
mcfarlandclinic.com
password.mcfarlandclinic.com
www.mitsubishidrummondville.com
citrix.mcfarlandclinic.com
share.mcfarlandclinic.com
emrproxy.mcfarlandclinic.com
tokensigning1.mcfarlandclinic.com
password.mcfarlandclinic.com
app.sukii.at
sfdtest.mcfarlandclinic.com
apps.mcfarlandclinic.com
citrix.mcfarlandclinic.com
mcfarlandclinic.com
sfdmcf.mcfarlandclinic.com
www.mcfarlandclinic.com
pacs.mcfarlandclinic.com
update.mcfarlandclinic.com
www.ultimatesoundgroup.com
epiphany.mcfarlandclinic.com
tokensigning1.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
*.mcfarlandclinic.com
epiphany.mcfarlandclinic.com
nasb.beta.literalword.com
pacs.mcfarlandclinic.com
remote.mcfarlandclinic.com
rte.mcfarlandclinic.com
emrproxy.mcfarlandclinic.com
www.mcfarlandclinic.com
password.mcfarlandclinic.com
update.mcfarlandclinic.com
sched.mcfarlandclinic.com
schedule.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
mcf-fresh.mcfarlandclinic.com
emrproxytst.mcfarlandclinic.com
share.mcfarlandclinic.com
webvpn.mcfarlandclinic.com
access.mcfarlandclinic.com
pacs.mcfarlandclinic.com
password.mcfarlandclinic.com
access.mcfarlandclinic.com
password.mcfarlandclinic.com
demosched.mcfarlandclinic.com
epiphany.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
rte.mcfarlandclinic.com
tm01.mcfarlandclinic.com
access.mcfarlandclinic.com
apps.mcfarlandclinic.com
app.masworldsuite.com
mycharttst.mcfarlandclinic.com
sso2.mcfarlandclinic.com
mcfarlandclinic.com
citrix.mcfarlandclinic.com
renouf.dev
MYCHARTTST.MCFARLANDCLINIC.COM
PASSWORD.MCFARLANDCLINIC.COM
webvpn.mcfarlandclinic.com
eclink.mcfarlandclinic.com
apps.mcfarlandclinic.com
securelink.mcfarlandclinic.com
mycharttst.mcfarlandclinic.com
epiphany.mcfarlandclinic.com
sfdtest.mcfarlandclinic.com
citrix.mcfarlandclinic.com
share.mcfarlandclinic.com
tm01.mcfarlandclinic.com
mcfarlandclinic.com
mcffed.mcfarlandclinic.com
mcfarlandclinic.com
www.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
sso.mcfarlandclinic.com
mycharttst.mcfarlandclinic.com
citrix.mcfarlandclinic.com

Certificate

The complete raw certificate details for eclink.mcfarlandclinic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91+M5YPxAG1r57lFTP/Z
AJna4gaMwwrHiNAmPVpEw9T+D7cy/GVhd8roLnNqrwihQ/wSFvjs+rb8TDvWmuq+
C77kROSbHp0P+iVUQ1MBJbwzkgQSYz+c9Lf9iPiMn601cr5C6VXwenrbjYkNCLlv
V1wMrc6OvQRah7LjqHJ01ANjtrGmdzLug4rWbGN1LnBzm2z3UL9uAEQVYusefVm6
4XLiF9jkEekWst8rQ6pkNpZ5Zry5U4qryTEi4gk2bmjQknxoD7sQT5gTyGW4hbfg
38u6EQjpBfTQ9+9N+08PbA0Ea2DhwRN46rLCAbA5pL8mtUempGQ6Q65ewKDsdfuR
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2242462839753590120187986178370931440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Iowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ames'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'McFarland Clinic PC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eclink.mcfarlandclinic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31227978973676566428946500903032154272276989463494713309083595650016734262141491991059792749759022096014748558430068906251319048669648155672875098038113169457144312898617436476951935682721982831929514214576184483703890323379360682500341349150515443950311893906160320890646405398081346848764254361988511677683787419785988121274377819696949049869493889327953564988717534922711222550501168217785489148157108488262924493206489779007523498307830029311007809425098025688223836253758566714758869248256756504339494350342782044064154662563997585088757893112362031002715632152849718778131507258972614879104858465971635222188377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f939c1923baa3d7323b4f7d8df4514ac302f7e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclink.mcfarlandclinic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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