img.chintai.net

- CHINTAI Corporation -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 75:b2:1c:75:91:47:e8:b2:89:33:19:99:6a:ef:b0:0d was issued on by GeoTrust Inc..

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

CHINTAI Corporation

Organization: CHINTAI Corporation
Organization unit: Media Planning Group Media Division
State / Province: Tokyo
Locality: Minato-ku
Country: JP

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 75:b2:1c:75:91:47:e8:b2:89:33:19:99:6a:ef:b0:0d
Serial Number (int): 156444481569780531903041641635290001421
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): e6:69:ec:66:f0:0b:cb:bd:52:d9:48:05:0b:08:e5:dc:28:74:43:6f
Fingerprint (sha256): 6d:ad:d6:fa:f2:88:e4:6c:f5:4a:5d:b0:81:61:b0:7b:16:1c:a8:f5:ae:67:43:42:4f:b1:3d:4a:1f:77:f0:f8

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate img.chintai.net

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for img.chintai.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

img.able.co.jp
www.test-able.jp
sp.test-able.jp
www.m1.test-able.jp
img.test-able.jp
img.test-chintai.net
www.test-chintai.net
sp.test-chintai.net
www.chintai.net
sp.chintai.net
img.chintai.net

Other certificates including the domain name chintai.net

(limited to 100 certificates)
mng.chintai.net
ajuda.mkfull.com.br
mng.chintai.net
ajuda.mkfull.com.br
faq.able.co.jp
sso.chintai.net
faq8now.8securities.co.jp
logap.chintai.net
*.chintai.net
www.chintai.net
ajuda.mkfull.com.br
img.chintai.net
crm.chintai.net
sp.chintai.net
mng.chintai.net
net-kanri.chintai.net
faq.test-able.jp
system.chintai.net
www.chintai.net
ad.chintai.net
mng.chintai.net
csmfaq.refuel4.com
*.chintai.net
sp.chintai.net
kaigai.chintai.net
*.chintai.net
faqchloe.8securities.co.jp
system.chintai.net
image.chintai.net
mng.chintai.net
*.chintai.net
*.chintai.net
faq.drivehub.co
img.chintai.net
faqchloe.8securities.co.jp
sso.chintai.net
sso.chintai.net
sd.itsmcorp.com
www0.chintai.net
sso.chintai.net
image.chintai.net
mng.chintai.net
img.chintai.net
journal.chintai.net
gtgvze.chintai.net
offer.able.co.jp
kaigai.chintai.net
offer.able.co.jp
support.omegaedi.com
image.chintai.net
kaigai.chintai.net
mobile.chintai.net
www0.chintai.net
mobile.chintai.net
www0.chintai.net
*.chintai.net
img.chintai.net
image.chintai.net
mobile.chintai.net
ad.chintai.net
ajuda.mkfull.com.br
image.chintai.net
image.chintai.net
kaigai.chintai.net
offer.able.co.jp
logap.chintai.net
crm.chintai.net
ad.chintai.net
sp.chintai.net
help.steadyhq.com
img.chintai.net
wiki.intellyo.com
help.tidy.com
mng.chintai.net
net-kanri.chintai.net
mobile.chintai.net
*.chintai.net
www0.chintai.net
mypage.chintai.net
crm.chintai.net
faq.utick.net
sp.chintai.net
csmfaq.refuel4.com
kaigai.chintai.net
faq.earpeace.com
*.chintai.net
faq.avvocato360.it
img.chintai.net
img.chintai.net
crm.chintai.net
img.chintai.net
mobile.chintai.net
crm.chintai.net
*.chintai.net
help.littlepok.com
journal.chintai.net
gakusei.chintai.net
gakusei.chintai.net
cs.chintai.net
cs.chintai.net

Certificate

The complete raw certificate details for img.chintai.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbk3TxrF1Jiy53dizE5w
zE+OVHIT0lhucWYYFggB2oLNlUpksyO97DsnBzCP0+1Psfd3pvfJhIzkivmOBCph
CseB8sP2dgL1s1b0eRFAfZMXlj8QTRtyjrJFH6NX9QScfSwEmIcJXwriGflAHA+C
As/tEZqu0XiNcgsQHT2mdMCkIuHhP36fbIhfKUiB5Fz1GnmQTN4mhKjuK67WKMRh
u8zw4PQ1gWBG5SeitXx5I91JQ4WJudi/TEF2AA8IPmcCDodMGpPFDhtncZe7tt/q
Lr/txabbBgNx4e20K7xurtFf9a6JKJ7eiF9fotgUuIV5Km/yvB8djbou7iqAgyFV
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 156444481569780531903041641635290001421
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Minato-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CHINTAI Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Media Planning Group Media Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'img.chintai.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24455326297137798005921932451314534500806973796383064800648359620099719662297653084990826037215576475067103375043186463823948174201761111799784331582360674416519533821232710784382262756837810759556019625868206468180657043186518822773816878738032590285423258344550668780237186218491126966752281661964493693406547462640799756649885417039776354929162850023241532412801321530894141665364536226822283046019790574689256855088727444148817253943721100553024713642681111321653816808515549764568240829895046644468112837845470458556719444064980152340952188690457785977722271659221687361803493339132192669489048695945609206650271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (208 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.able.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-able.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.test-able.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m1.test-able.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.test-able.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.test-chintai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-chintai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.test-chintai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chintai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.chintai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.chintai.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015bb3652340000004030047304502210093a09be0eed0ae4685536532159fef2a248da500e28f0041126d74e0ecd550d0022031bcf691b9bacf7c121bf41814419e4dfd0fe9f9647261a74bdf22e3af7e062f007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015bb365237e000004030047304502210089420b391f97eb6c3888ee3175456ba5cccb2b1ff0c5ecdb5c799cd887533596022006a7f10b232c62fd075ad36ca9d616f489c6d824c30018bc0801745edb10fd7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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