*.freudenberg-it.com

- Freudenberg IT GmbH & Co.KG -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 78:36:1b:6b:db:68:55:74:fe:80:fc:a9:7e:03:e3:4a was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Freudenberg IT GmbH & Co.KG

Organization: Freudenberg IT GmbH & Co.KG
State / Province: Baden-Wuerttemberg
Locality: Weinheim
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 78:36:1b:6b:db:68:55:74:fe:80:fc:a9:7e:03:e3:4a
Serial Number (int): 159788299694926822057209846563000804170
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): aa:44:c3:af:f1:ae:c1:0d:85:92:53:b4:6a:09:4b:c0:cc:fe:6d:bf
Fingerprint (sha256): 60:01:3f:2b:bb:51:d2:f9:1e:8b:ee:36:89:24:c8:16:04:61:a1:91:e4:68:cb:a5:ad:70:4f:1f:aa:ae:4a:1a

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate *.freudenberg-it.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.freudenberg-it.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.freudenberg-it.com
freudenberg-it.com

Other certificates including the domain name freudenberg-it.com

(limited to 100 certificates)
Webmail.whm.freudenberg-it.com
infomail.freudenberg-it.com
*.freudenberg-it.com
74.123.36.235
support.freudenberg-it.com
webmail.us.freudenberg-it.com
infomail.freudenberg-it.com
mdm.freudenberg-it.com
webmail.cn.freudenberg-it.com
www.freudenberg-it.com
fcm.freudenberg-it.com
sip.freudenberg.com
itsslvpn.freudenberg-it.com
sip.freudenberg.com
info.freudenberg-it.com
panopa-websap.freudenberg-it.com
webmail.cn.freudenberg-it.com
fitcustomer.freudenberg-it.com
downloads.freudenberg-it.com
webmail.cn.freudenberg-it.com
itsslvpn.freudenberg-it.com
www.var.freudenberg-it.com
pool2.freudenberg.com
info.freudenberg-it.com
fit-as-ssl-vpn.freudenberg-it.com
www.freudenberg-it.com
panopa-websap-test.freudenberg-it.com
itsslvpn-ct.freudenberg-it.com
Itsslvpn.freudenberg-it.com
webmail.us.freudenberg-it.com
panopa-websap-test.freudenberg-it.com
www.var.freudenberg-it.com
www.freudenberg-it.com
*.freudenberg-it.com
info.freudenberg-it.com
servicedesk-qa.freudenberg-it.com
itsslvpn.freudenberg-it.com
servicedesk.freudenberg-it.com
www.freudenberg-it.com
pool2.freudenberg.com
integrationtest.freudenberg-it.com
sip.freudenberg.com
*.freudenberg-it.com
panopa-websap-test.freudenberg-it.com
infomail.freudenberg-it.com
webmail.whm.freudenberg-it.com
*.freudenberg-it.com
itwlc240129-29.freudenberg-it.com
downloads.freudenberg-it.com
infomail.freudenberg-it.com
webmail.cn.freudenberg-it.com
info.freudenberg-it.com
webmail.whm.freudenberg-it.com
relay.freudenberg-it.com
Itsslvpn.freudenberg-it.com
panopa-websap.freudenberg-it.com
downloads.freudenberg-it.com
crossgate.freudenberg-it.com
fcm.freudenberg-it.com
webmail.cn.freudenberg-it.com
beapartoffit.freudenberg-it.com
*.freudenberg-it.com
www.freudenberg-it.com
aw.freudenberg-it.com
fitcustomer.freudenberg-it.com
fitdemoic1.freudenberg-it.com
itsslvpn-ct.freudenberg-it.com
info.freudenberg-it.com
integration.freudenberg-it.com
servicedesk-interface.freudenberg-it.com
info.freudenberg-it.com
businesscards.freudenberg-it.com
downloads.freudenberg-it.com
boextern.freudenberg-it.com
Webmail.whm.freudenberg-it.com
PoolEU1.freudenberg.com
*.freudenberg-it.com
pool1.freudenberg.com
mail.freudenberg-it.com
itsslvpn.freudenberg-it.com
info.freudenberg-it.com
beapartoffit.freudenberg-it.com
info.freudenberg-it.com
www.freudenberg-it.com
sip.freudenberg.com
PoolEU1.freudenberg.com
mob-erp-m4s.freudenberg-it.com
relay.freudenberg-it.com
Itsslvpn.freudenberg-it.com
www.var.freudenberg-it.com
infomail.freudenberg-it.com
downloads.freudenberg-it.com
webmail.us.freudenberg-it.com
fitcustomer.freudenberg-it.com
fcm.freudenberg-it.com
downloads.freudenberg-it.com
id.freudenberg-it.com
saperion-asp.freudenberg-it.com
downloads.freudenberg-it.com
info.freudenberg-it.com

Certificate

The complete raw certificate details for *.freudenberg-it.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszsOi8CKZT8x+91Mc5j3
JPOle1fGBU8CPxzntlt807JxVujdjZtZn5i2QDNZNzMO7K2ef2y0sntAA+WWOkTY
Vm9QeOJ98e1O3QdAsryWvAfvD4hVB+Sau94ROTtE7Nj/PZpbfspohPKJS/KZPcnr
NdE8IcV1K8lwtNU46Sx2e+nvIX4+DtKEhTm9quhoJr8sjplpNazkiIeGTOhsoYby
iUD2+f25JbPDInYz01OBRTYRZIQrga9op03bnDjaRwVJPPI3wy5ciHCmkYRT24A+
pFomvXS5H9UY9ZqJalZStg8vXf5O4tIZ2TVDcIhSJU3TL1KXFMtgMXCpmX8OxX50
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 159788299694926822057209846563000804170
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Weinheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Freudenberg IT GmbH & Co.KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.freudenberg-it.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22625778592232776611457198325663595666692728065318875604166027148958314826144558567839039459828007759412878732194764372032365741188565178657331991441723093957343124528712265354708599253195694036110045852804195521363353541948474354020654482188940206625450562315047726682103539203457527684725726638065095537053985583403476583739059133806577271387536969786432541234060834410020164476821931082282380378306317885831417524649941864444757180012810370849012376895973081215470634641960152192795281655744407870016530041294926915313325403938277911044953054678229071706822980486946353702374856481423222790071420700789084583261221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freudenberg-it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freudenberg-it.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							01df007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015750d1b9150000040300473045022035f0ee0ae7e7a0e15c75b00f554cc145715fb3b544c3bcca7d4d730a2323d63e022100aa20ec7e67f7c2554bd9c5b8f98b5b70e188b1db1268f40fbca122e5df76611e00750068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000015750d1b955000004030046304402207ce8d30e9de2111726103f558a42f9f5ac44eb3ae3c8acfd82f95798b7162f7402203b524074f705585f38bf8d013ea9680bbf2739daa1fb77315ce47876d5f703d1007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015750d1b9b100000403004730450220053069189e0f40ca877180f6723079b03fecd467f0fdaafa6795f72a9ea67b34022100dc189dcfe3d0cd6122f91bdb002912c6bf126afdf73e257518f91608fe7f42a9007600bc78e1dfc5f63c684649334da10fa15f0979692009c081b4f3f6917f3ed9b8a50000015750d1ba1000000403004730450220151486a32870e4f522269476ae7f62ac925bd7fb0e25e3e1603cba814e8546250221008d19f29153125c776563bc94c170015653c452fc0f97c6d6419f98630bd200c4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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