fs.stanfordchildrens.org

- Lucile Salter Packard Children's Hospital at Stanford -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 07:eb:40:c0:cb:6c:20:61:67:a5:0c:08:1b:b1:ae:1d was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lucile Salter Packard Children's Hospital at Stanford

Organization: Lucile Salter Packard Children's Hospital at Stanford
State / Province: CA
Locality: Palo Alto
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:eb:40:c0:cb:6c:20:61:67:a5:0c:08:1b:b1:ae:1d
Serial Number (int): 10526099081228105943472711310349807133
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3e:18:b5:c8:07:a3:f2:a6:62:3f:fd:95:e6:a5:01:42:38:45:5c:2d
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 09:f4:60:8a:ea:8a:1d:d2:35:04:f0:d6:e8:63:66:69:d6:ed:06:db
Fingerprint (sha256): 68:8e:20:b0:fd:cd:dd:ff:a7:3a:72:64:68:f4:74:ef:7c:59:a7:f7:24:5f:b7:8e:08:9f:d1:69:79:52:c4:3a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl

Check the revocation status for certificate fs.stanfordchildrens.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fs.stanfordchildrens.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fs.stanfordchildrens.org
fs.lpch.org
sts-sch.lpch.org

Other certificates including the domain name stanfordchildrens.org

(limited to 100 certificates)
cert00026-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
cert00026-azurecdn.akamaized.net
changepassword.stanfordchildrens.org
cert00050-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00026-azurecdn.akamaized.net
cert00026-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00026-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
datavizdev.stanfordchildrens.org
cert00026-azurecdn.akamaized.net
newhospital.stanfordchildrens.org
myphone.lpch.org
treat-epilepsy.stanfordchildrens.org
insight.lpch.org
cert00078-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
guestwifi2.stanfordchildrens.org
cert00078-azurecdn.akamaized.net
cert00050-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
formsqa.stanfordchildrens.org
bmswebctrl.stanfordchildrens.org
cert00026-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
careers.stanfordchildrens.org
cds.stanfordchildrens.org
formsstaging.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
epicprodce.stanfordchildrens.org
treat-chiari-malformation.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
lifeimage.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
hylandprd.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
cert00026-azurecdn.akamaized.net
stanfordchildrens.org
bmswebctrl.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
wech-cuclpcup01.lpch.org
treat.stanfordchildrens.org
mychart.stanfordchildrens.org
www.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
pam.stanfordchildrens.org
treat-chiari-malformation.stanfordchildrens.org
cert00078-azurecdn.akamaized.net
secure5s.scene7.com
admin.stanfordchildrens.org
vandam.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
cert00026-azurecdn.akamaized.net
sch.beam3.monigle.net
secure5s.scene7.com
cert00057-azurecdn.akamaized.net
cert00050-azurecdn.akamaized.net
pssesqa.stanfordchildrens.org
cert00050-azurecdn.akamaized.net
voalte.stanfordchildrens.org
cert00078-azurecdn.akamaized.net
accesscontrol.stanfordchildrens.org
treat-concussion.stanfordchildrens.org
MDPortal.stanfordchildrens.org
qa.stanfordchildrens.org
vandam.stanfordchildrens.org
MDPortal.stanfordchildrens.org
treat-concussion.stanfordchildrens.org
securemail.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
healthier.stanfordchildrens.org
apps.stanfordchildrens.org
passwordmanager.stanfordchildrens.org
forms.stanfordchildrens.org
cert00026-azurecdn.akamaized.net
sch.beam3.monigle.net
cert00057-azurecdn.akamaized.net
cas.stanfordchildrens.org
awsegprodo365.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
hugstst01.stanfordchildrens.org
brand.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
trackcore.stanfordchildrens.org
cert00026-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
healthier.stanfordchildrens.org

Certificate

The complete raw certificate details for fs.stanfordchildrens.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj3nTV4QfezDmtxqoFMc
Ydk3p09TQPDnONvw+AJdK5NhcY2ft15dlpAWi1PYaDrOYPeCc61ubkfw0pqetL8Q
OTFL2TQ5bBlxjCWa1RZmoQRB03afcpraE6e9JXl8m3vWRyJVGavZStZq4RIEWF7I
J7h/g5DXI4mM0HFXm9LL3+xha3zBf/ROTkbcRcal1xe3w2K66Uscxdff20VbhdaY
OHOFWmFqqSC7MOgsHkcaF0B0q55b4X9DoNPhZ6F7MpdvGGHTpX7hEagGEmURJ/oA
Kl4g5YJBYpuODmMR6o+y+mKQbU23ImYmP2A7MC2B6wS1Ys6xRpThVBHOXEkd9oA9
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10526099081228105943472711310349807133
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Palo Alto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lucile Salter Packard Children's Hospital at Stanford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fs.stanfordchildrens.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20481131170036520194574573798545137018814830155400971023012305512760464274952775759348753896869710123655652940643496479151751876970471070155963314130361833469530783931449568812247631709052962629113307436720123875923777269206265209204053354518460487449484149381795997414951027592283659896174533297335192077180459448169778340650079477180005939014248519713027563374991183543962380939954505127635349325054245383883958396641191573988004849588364765661388476832315877750214721436154386241300253112725586817599245388003858606675359748483019821518217626256563615510499544118786569079912393539507825958146597576116866033663291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e18b5c807a3f2a6623ffd95e6a5014238455c2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.stanfordchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.lpch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts-sch.lpch.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b6b78a2de79591987c7f87600f2f17c9831904cda25b45478a0060970522f9eb87a58c198402d7526d819255a9ced15643a4c75bbb87e0a0d29116ca53c408c0ca82e5ab4a8ef8d77ae84245a69f5a3f9432b287bc3c9d99cc6c3059d33f8862866538dba68723ce42a7b00da93e0330b832102a2cc5924cd72b858f53fc178d71f98906e76239fbef12508b1212226d26cd1cecc36b68264046985b8177d752fcbf0f9ac3e32fa9c84af24a27499b1112f1fd54fd5b425170425eb461a51d4a4f176e1223283246b5bca7f74d6b9ac2128e21bfd09beefb89c2cebfb9a31b3a3c6b1fa9996bd2433125dcc7e02ec00d372a424860ec60961b98b6c7402b5f63