*.mediq.com

- Mediq B.V. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 01:fd:a3:28:f3:59:3b:24:3a:af:d3:9a:58:8c:4d:8b was issued on by DigiCert Inc.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mediq B.V.

Organization: Mediq B.V.
State / Province: Zuid-Holland
Locality: Utrecht
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:fd:a3:28:f3:59:3b:24:3a:af:d3:9a:58:8c:4d:8b
Serial Number (int): 2646188378198854128241290669560974731
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 86:91:d5:fb:91:a1:58:d1:c2:39:81:93:a3:b4:ae:c8:df:b6:e5:0c
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 2a:85:dc:73:28:46:cc:43:ef:8b:86:34:13:27:5e:af:63:49:b3:6f
Fingerprint (sha256): 85:9d:cb:96:4e:ef:c1:8f:f5:5e:3b:0d:11:01:e8:1c:1b:81:f1:8d:40:dc:aa:e2:7a:21:7d:c3:92:3f:82:e7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g4.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g4.crl

Check the revocation status for certificate *.mediq.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.mediq.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.mediq.com
mediq.com
nlxmdq125.WMP.mediq.com
nlxmdq320.WMP.mediq.com
nlxmdq321.WMP.mediq.com
nlxmdq322.WMP.mediq.com
nlxmdq323.WMP.mediq.com
nlxmdq324.WMP.mediq.com
nlxmdq325.WMP.mediq.com
nlxmdq398.WMP.mediq.com
nlxmdq399.WMP.mediq.com
nlwmdq327.WMP.mediq.com

Other certificates including the domain name mediq.com

(limited to 100 certificates)
*.mediq.com
Mediq B.V.
*.mediq.com
mbyrlyncedge.byramhealthcare.com
*.mediq.com
myapps.mediq.com
*.log.mediq.com
sni.cloudflaressl.com
*.mediq.com
*.mediq.com
*.mediq.com
*.log.mediq.com
*.mediq.com
*.wm.mediq.com
*.mediq.com
*.wm.mediq.com
*.mediq.com
*.mediq.com
brandportal.mediq.com
*.mediq.com
sni.cloudflaressl.com
*.wm.mediq.com
*.sap.mediq.com
e.mediq.com
medbistestnew.mediq.com
medbistest.mediq.com
medbisacc.mediq.com
*.mediq.com
*.mediq.com
*.mediq.com
*.mediq.com
*.mediq.com
*.mediq.com
brandportal.mediq.com
*.mediq.com
*.mediq.com
*.mediq.com
medbistest.mediq.com
*.mediq.com
myapps.mediq.com
*.mediq.com
outlook.mediq.com
one.mediq.com
*.sap.mediq.com
medbistest.mediq.com
one.mediq.com
*.mediq.com
*.sap.mediq.com
brandportal.mediq.com
crm.mediq.com
*.sap.mediq.com
*.log.mediq.com
one.mediq.com
intake.mediq.com
*.mediq.com
*.mediq.com
Mediq B.V.
*.mediq.com
*.mediq.com
*.mediq.com
*.mediq.com
*.mediq.com
*.mediq.com
*.mediq.com
*.sap.mediq.com
webmail.mediq.com
*.sap.mediq.com
*.mediq.com
learningcenter.mediq.com
intake.mediq.com
*.mediq.com
*.mediq.com
brandportal.mediq.com
Mediq B.V.
*.mediq.com
*.slim4.mediq.com
*.log.mediq.com
*.sap.mediq.com
one.mediq.com
*.mediq.com
sni.cloudflaressl.com
*.mediq.com
*.mediq.com
radius.mediq.com
brandportal.mediq.com
*.mediq.com
*.wm.mediq.com
medbistestnew.mediq.com
*.mediq.com
sni.cloudflaressl.com
crm.mediq.com
*.mediq.com
*.mediq.com
medbisacc.mediq.com
gateway.mediq.com
*.mediq.com
*.mediq.com
*.mediq.com
*.mediq.com
*.sap.mediq.com

Certificate

The complete raw certificate details for *.mediq.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FErwaYh4vYSOnof6TnE
35xrEr8IrtZv0C2nX5NLBd0d5oLzKksTmyq1twMmtgYkxQDU8cjO2ouoblO5g/II
2IaQ2Cvo8oSisCEaCqYCxmcVi7R8Epyy5/S7MIdPpCTyZeVpIKi06ZwPOy/Ywq+F
+BHVDMIUMN9hhTYfDjcyBt+/DBV/EWXV0XokmaFdEuZiLilQ6Lh3tu3QN8UljWu7
3ougGv4dm2o4syFecpJ4VKOfyhVzRXWN5VW+BMP5h/VbcYfBJjZBiJ2NuSDPrxBv
dT2KoR0szXLUU3DGJJv00494CMztfIYjxCfUDT0124BkJm9QYVR5sJTCvji3lRKS
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2646188378198854128241290669560974731
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utrecht'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mediq B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.mediq.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28822360406509843963909530370195649939684117523667135254845426529324253176158801875007517206821986589393943757438447166461259902164254959871951955021161817405077263209486227780041886475941127604865911620340265053299936928951056773060365582161997980248189052839173557679333235178564190697015509141389680999495815572540595195829660984758286444214391692430696135577485509343312086092752068822735867632310077758352008988236539761811591791966021373641711807591022199439754363537126396079438151768679144271314953480608416001026213520712972121863740469572810896956548905879963869405343013180377265876538783054057374993257213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8691d5fb91a158d1c2398193a3b4aec8dfb6e50c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (278 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlxmdq125.WMP.mediq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlxmdq320.WMP.mediq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlxmdq321.WMP.mediq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlxmdq322.WMP.mediq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlxmdq323.WMP.mediq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlxmdq324.WMP.mediq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlxmdq325.WMP.mediq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlxmdq398.WMP.mediq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlxmdq399.WMP.mediq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlwmdq327.WMP.mediq.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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