whstatic.ionos.com

- IONOS Inc. -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 05:35:31:3a:2e:e5:26:a1:d9:1b:e6:59:f7:44:8a:6b was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IONOS Inc.

Organization: IONOS Inc.
State / Province: Pennsylvania
Locality: Chesterbrook
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:35:31:3a:2e:e5:26:a1:d9:1b:e6:59:f7:44:8a:6b
Serial Number (int): 6922330160244266887983624608492587627
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 57:30:39:ef:1a:7f:05:02:82:c9:8f:2b:aa:ab:01:44:49:2d:16:d8
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): f5:51:97:f8:af:97:f8:11:42:8a:52:ff:0d:f9:c6:d2:52:39:09:32
Fingerprint (sha256): 12:c7:42:a5:09:31:c9:bf:94:a8:11:5c:c4:8e:9c:53:c6:ce:33:46:1d:d2:50:0b:ea:00:78:6f:61:dd:e5:03

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate whstatic.ionos.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for whstatic.ionos.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

whstatic.ionos.com

Other certificates including the domain name ionos.com

(limited to 100 certificates)
ssl.ionos.de
*.cert062.stage.mongodb.de-fkb.ionos.com
api.analyze-eu.ionos.com
r1.m-e9d6cbc3331b1508.mongodb.de-txl.ionos.com
myw5.ionos.com
dcd.ionos.com
partnerportal.ionos.com
backup.ionos.com
ntld-status.ionos.de
pg-77n6h8jrvqg58gpf.postgresql.de-txl.ionos.com
cdn.ionos.de
reseller-api.ionos.com
hidrive.ionos.com
devops.ionos.com
qa.dns.de-txl.ionos.com
pg-hhqovess3o8bupu4.postgresql.de-txl.ionos.com
registrar.ionos.de
ssl.ionos.de
hidrive.ionos.com
xadmin.exchange.1and1.us
passwort.ionos.de
upselling.ionos.de
bf7c540a-69c2-4623-b6c6-311a5f6cb6ef.qa.redis.de-txl.ionos.com
loki.stage42.cluster.ionos.com
1.exchange.1and1.us
myw2.ionos.com
oc.ionos.com
*.cert052.stage.mongodb.de-fkb.ionos.com
dcd.ionos.com
xadmin.exchange2019.ionos.com
laas-rest-api.vnf.stg.cluster.ionos.com
pg-3g4jvjf77mjsm6bn.postgresql.de-txl.ionos.com
postmaster-contact.ionos.de
server-services.ionos.de
login.ionos.de
hidrive-help.ionos.com
vertrag.ionos.de
shop.ionos.com
cloudpanel.ionos.com
myw1.ionos.com
api.analyze-us.ionos.com
myw3.ionos.com
location-marketing.ionos.de
ias.ionos.de
screenshot.ionos.com
museum.k8s.cluster.ionos.com
myw1.ionos.com
ftp-fra.ionos.com
auth.registry.k8s.cluster.ionos.com
simg.ionos.com
jobs.ionos.de
r2.m-46051fb525db90e8.mongodb.de-fra.ionos.com
digital-success.ionos.de
login.ionos.de
museum.k8s.cluster.ionos.com
reseller-api.ionos.com
*.b0a2b2c0241e.logging.de-txl.ionos.com
*.m-00419ac6f799f1f2.mongodb.de-fra.ionos.com
ftp-fra.ionos.com
analytics-reports.ionos.de
r2.m-9704cc5f2b3e83b6.mongodb.de-fra.ionos.com
cmc.ionos.com
pg-g7ksht3hh9as1hk9.postgresql.de-txl.ionos.com
*.m-f3570c5cf4213848.mongodb.de-fra.ionos.com
myw3.ionos.com
backup.ionos.com
ntld-status.ionos.de
ftp-las.ionos.com
dcd.ionos.com
pg-4lcel6s28r2d84d7.postgresql.de-fra.ionos.com
jobs.ionos.de
*.m-1913f83f044a5178.mongodb.de-txl.ionos.com
ionos.com
emailarchive.ionos.com
IONOS SE
*.m-dce5f2b30ac22b6f.mongodb.de-fra.ionos.com
jobs.ionos.de
*.m-3a6d2fe88d0e4692.mongodb.es-vit.ionos.com
websitebuilder.ionos.com
cmc.ionos.com
analytics.ionos.de
exchange2019.ionos.com
*.onehoster.ionos.com
logo-generator.ionos.com
pg-7jb2eshpk4i6ps4k.postgresql.de-fra.ionos.com
whstatic.ionos.com
xadmin.exchange.1and1.us
pg-kc581dr2ummrc965.postgresql.de-txl.ionos.com
*.m-523852f5230d6d13.mongodb.de-txl.ionos.com
r2.m-356e385b5d1de0d0.mongodb.de-fra.ionos.com
*.m-9a35053173df9b7b.mongodb.de-fra.ionos.com
*.onehoster.ionos.com
jobs.ionos.de
r2.m-46051fb525db90e8.mongodb.de-fra.ionos.com
ftp-ewr.ionos.com
ipc.help.ionos.com
ionos.com
*.stage.cr.es-vit.ionos.com
*.m-13578c5bb955e91e.mongodb.de-txl.ionos.com
karma.infra.cluster.ionos.com

Certificate

The complete raw certificate details for whstatic.ionos.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6922330160244266887983624608492587627
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chesterbrook'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IONOS Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'whstatic.ionos.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 923665838325692387306391806178888460130842403929390110251698568358638467297722066716124539129091739715581287296809195856819732415995344944967910387419279052817537570005656264924984735280678890908889107032987938522990855958295022571454451543188527016323323904692319912715515061908965900857956662249856088303452938304228388873216646195380681682769494819506014095730643177706184309679253286470045300224983121213331313705988176832228611740915120644086550601986026932951821951694623894967490990459997647413549727886933707596729888474546208493197566893818102245157722131146912952664291211072463147439506234063409400136606320647321246830018298192781746372388184513221126590783225939534692183384705622245282757330466869003962508162439253478197338599697906688431571167493932428008599600387206965168730686408409683181121768145192923452778922544569658984034767627332115578254158710212566005469607172016446829057973487383882694042830939895292210048931751267116133652025709517263104917741049534921546064027355085607893459122688484044900606628498293291651988586330961245994795936562414455831455649975631489436712320511855120948942588134292930407679393930928919526133834238392430157083082710577186205526902521711331371551801636165430626090867663327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							573039ef1a7f050282c98f2baaab0144492d16d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whstatic.ionos.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000188944338a600000403004730450221009024155f427a5de94691ba57b05b2b9a662220bc952bbe33fe338fa88bd2a9ef022056847b46b4a316aa72917e6a6d293bd4902d1a43ed61a5d10df43c23d0ac993900750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001889443386e0000040300463044022057891cfd8eb272a14c3b99a2996da5a20b495b404149f11c8905cb21db10229402206aee781d65eb5ced0e7cca269bf6965e2c28acd189f0aa508fa1b4323083c13c007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000188944338390000040300473045022100a245ed313dcdca7c860312010cc25772983b5bc5fac4f8166cfef345b326c605022047d1892c0190a5db16eadc1b38380ed530f697d79f993a12ee8779d41f173e70
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006356f6c5321ecbcb21e50488ef47b2b4f4961e1d18a3cac06b223af08e1ce65036b5bc34477dcc9bcf606a7397ca5c53b83185a73ced4099d483ae4b6a106c46fcb7aae0bacfcca0d6fec34a44bf35cbdcca939cc60314a40456355100a4ad42fd8eba64ee282c2d155fa63006e5d1b22ad42375fea765e0cb2ce974072c3345a1e7a1b0ef1733f7d597922c49b26b2fb0f269ff7c122801ca2983ef120285fc578f3067360be7e5edc14f2437fdf8a825b0a5606036213feac86db54c475b7361c715fab0f87a55c8a9dbcf0ba22061cb2a43b1781ada58eaac8e16589223423846c79ce8d022dbc6aec4e5e545a76b5ac93578c42444d4756afb031b818a92