citrix.mcfarlandclinic.com

- McFarland Clinic PC -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 03:6d:49:d3:96:1c:08:59:ed:65:61:56:23:21:6c:96 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

McFarland Clinic PC

Organization: McFarland Clinic PC
Organization unit: MIS
State / Province: Iowa
Locality: Ames
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:49:d3:96:1c:08:59:ed:65:61:56:23:21:6c:96
Serial Number (int): 4555141724435041745886666892985330838
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 1f:93:9c:19:23:ba:a3:d7:32:3b:4f:7d:8d:f4:51:4a:c3:02:f7:e8
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 7c:ce:69:10:6f:96:de:a6:2f:c8:d7:b2:a1:73:74:dc:af:b9:49:74
Fingerprint (sha256): 1d:55:7b:b7:bb:dd:59:e0:ac:c5:b4:07:f3:db:a1:f7:c2:f6:ce:8b:d1:20:13:73:e4:04:53:2b:b8:7d:bd:8b

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate citrix.mcfarlandclinic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citrix.mcfarlandclinic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citrix.mcfarlandclinic.com

Other certificates including the domain name mcfarlandclinic.com

(limited to 100 certificates)
sso2.mcfarlandclinic.com
sfdmcf.mcfarlandclinic.com
update.mcfarlandclinic.com
demosched.mcfarlandclinic.com
pacs.mcfarlandclinic.com
sfdtest.mcfarlandclinic.com
tmtest.mcfarlandclinic.com
sso1.mcfarlandclinic.com
eclink.mcfarlandclinic.com
demosched.mcfarlandclinic.com
webvpn.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
epiphany.mcfarlandclinic.com
apps.mcfarlandclinic.com
tm01.mcfarlandclinic.com
sso.mcfarlandclinic.com
eclink.mcfarlandclinic.com
sso.mcfarlandclinic.com
emrproxy.mcfarlandclinic.com
sched.mcfarlandclinic.com
access.mcfarlandclinic.com
work.mcfarlandclinic.com
password.mcfarlandclinic.com
access.mcfarlandclinic.com
mcfarlandclinic.com
password.mcfarlandclinic.com
www.mitsubishidrummondville.com
citrix.mcfarlandclinic.com
share.mcfarlandclinic.com
emrproxy.mcfarlandclinic.com
tokensigning1.mcfarlandclinic.com
password.mcfarlandclinic.com
app.sukii.at
sfdtest.mcfarlandclinic.com
apps.mcfarlandclinic.com
citrix.mcfarlandclinic.com
mcfarlandclinic.com
sfdmcf.mcfarlandclinic.com
www.mcfarlandclinic.com
pacs.mcfarlandclinic.com
update.mcfarlandclinic.com
www.ultimatesoundgroup.com
epiphany.mcfarlandclinic.com
tokensigning1.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
*.mcfarlandclinic.com
epiphany.mcfarlandclinic.com
nasb.beta.literalword.com
pacs.mcfarlandclinic.com
remote.mcfarlandclinic.com
rte.mcfarlandclinic.com
emrproxy.mcfarlandclinic.com
www.mcfarlandclinic.com
password.mcfarlandclinic.com
update.mcfarlandclinic.com
sched.mcfarlandclinic.com
schedule.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
mcf-fresh.mcfarlandclinic.com
emrproxytst.mcfarlandclinic.com
share.mcfarlandclinic.com
webvpn.mcfarlandclinic.com
access.mcfarlandclinic.com
pacs.mcfarlandclinic.com
password.mcfarlandclinic.com
access.mcfarlandclinic.com
password.mcfarlandclinic.com
demosched.mcfarlandclinic.com
epiphany.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
rte.mcfarlandclinic.com
tm01.mcfarlandclinic.com
access.mcfarlandclinic.com
apps.mcfarlandclinic.com
app.masworldsuite.com
mycharttst.mcfarlandclinic.com
sso2.mcfarlandclinic.com
mcfarlandclinic.com
citrix.mcfarlandclinic.com
renouf.dev
MYCHARTTST.MCFARLANDCLINIC.COM
PASSWORD.MCFARLANDCLINIC.COM
webvpn.mcfarlandclinic.com
eclink.mcfarlandclinic.com
apps.mcfarlandclinic.com
securelink.mcfarlandclinic.com
mycharttst.mcfarlandclinic.com
epiphany.mcfarlandclinic.com
sfdtest.mcfarlandclinic.com
citrix.mcfarlandclinic.com
share.mcfarlandclinic.com
tm01.mcfarlandclinic.com
mcfarlandclinic.com
mcffed.mcfarlandclinic.com
mcfarlandclinic.com
www.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
sso.mcfarlandclinic.com
mycharttst.mcfarlandclinic.com
citrix.mcfarlandclinic.com

Certificate

The complete raw certificate details for citrix.mcfarlandclinic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91+M5YPxAG1r57lFTP/Z
AJna4gaMwwrHiNAmPVpEw9T+D7cy/GVhd8roLnNqrwihQ/wSFvjs+rb8TDvWmuq+
C77kROSbHp0P+iVUQ1MBJbwzkgQSYz+c9Lf9iPiMn601cr5C6VXwenrbjYkNCLlv
V1wMrc6OvQRah7LjqHJ01ANjtrGmdzLug4rWbGN1LnBzm2z3UL9uAEQVYusefVm6
4XLiF9jkEekWst8rQ6pkNpZ5Zry5U4qryTEi4gk2bmjQknxoD7sQT5gTyGW4hbfg
38u6EQjpBfTQ9+9N+08PbA0Ea2DhwRN46rLCAbA5pL8mtUempGQ6Q65ewKDsdfuR
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4555141724435041745886666892985330838
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Iowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ames'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'McFarland Clinic PC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citrix.mcfarlandclinic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31227978973676566428946500903032154272276989463494713309083595650016734262141491991059792749759022096014748558430068906251319048669648155672875098038113169457144312898617436476951935682721982831929514214576184483703890323379360682500341349150515443950311893906160320890646405398081346848764254361988511677683787419785988121274377819696949049869493889327953564988717534922711222550501168217785489148157108488262924493206489779007523498307830029311007809425098025688223836253758566714758869248256756504339494350342782044064154662563997585088757893112362031002715632152849718778131507258972614879104858465971635222188377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f939c1923baa3d7323b4f7d8df4514ac302f7e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix.mcfarlandclinic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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