*.rhein-zeitung.net

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 64:54:02:f1:22:f0:31:34:9b:5e:1b:6f:b9:1c:d2:de was issued on by SSL Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.rhein-zeitung.net

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 64:54:02:f1:22:f0:31:34:9b:5e:1b:6f:b9:1c:d2:de
Serial Number (int): 133359012184227750949240487332718367454
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ba:73:0f:29:8d:b3:09:93:20:46:be:12:ba:1b:54:e5:79:a5:73:65
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 9d:5e:91:b8:c8:9d:13:c3:13:30:49:3a:bf:c7:4c:d9:04:c6:1a:c8
Fingerprint (sha256): 85:d0:50:68:3a:fa:2a:bc:9f:d7:69:15:28:4e:bc:3c:79:db:a2:53:30:0d:6e:87:0a:27:ca:98:17:8a:4d:d9

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate *.rhein-zeitung.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.rhein-zeitung.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.rhein-zeitung.net
rhein-zeitung.net

Other certificates including the domain name rhein-zeitung.net

(limited to 100 certificates)
*.rhein-zeitung.net
*.int.rhein-zeitung.net
*.rhein-zeitung.net
*.rhein-zeitung.net
*.rhein-zeitung.net
watchg-qms.rhein-zeitung.net
*.rhein-zeitung.net
*.rhein-zeitung.net
*.rhein-zeitung.net
*.prod.rhein-zeitung.net
*.rhein-zeitung.net
*.rhein-zeitung.net
karriere.rhein-zeitung.net
karriere.rhein-zeitung.net
*.rhein-zeitung.net
*.rhein-zeitung.net
*.rhein-zeitung.net
*.int.rhein-zeitung.net
karriere.rhein-zeitung.net

Certificate

The complete raw certificate details for *.rhein-zeitung.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF6jCCA9KgAwIBAgIQZFQC8SLwMTSbXhtvuRzS3jANBgkqhkiG9w0BAQsFADBp
MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x
GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg
U1NMIHN1YkNBMB4XDTIyMTExMTExMjI1OVoXDTIzMTIxMjExMjI1OVowHjEcMBoG
A1UEAwwTKi5yaGVpbi16ZWl0dW5nLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMUI6QKUZHtLxaL+813TZrZ7lWPkFLDNkHOgLBFIS/YCAsZ+Ud00
ojEC+rsLxu1qjCxnaGBwPXEH9nFI1PQLWKfubmqllrCAbPReyxHB+dh1yCEWcbB+
yXmy2Lyltbdf4f8SQw/81hd/8NuO4cDdYe5UcygVVcysqjUNN5uWP3mHUjf7KGKG
GGQNXKNGfneJ62Zy+I93ludPgz7iYT9PoD+BA38ztr+ZD+myeqpoUGy+FK47j0GM
K+IuEtY0T0WG9DwKPB6PWE1jAEuw8365WewXPCq8Vs81pzVdxth+tkHLmgbB2fuO
Jbd3gigiIcxe3dHQe3K5Ovi2GYTo/ffc/7kCAwEAAaOCAdcwggHTMAwGA1UdEwEB
/wQCMAAwHwYDVR0jBBgwFoAUJhR+4NzXpvfi1AQn32HxwuznMsowcgYIKwYBBQUH
AQEEZjBkMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydC5zc2wuY29tL1NTTGNvbS1T
dWJDQS1TU0wtUlNBLTQwOTYtUjEuY2VyMCAGCCsGAQUFBzABhhRodHRwOi8vb2Nz
cHMuc3NsLmNvbTAxBgNVHREEKjAoghMqLnJoZWluLXplaXR1bmcubmV0ghFyaGVp
bi16ZWl0dW5nLm5ldDBRBgNVHSAESjBIMAgGBmeBDAECATA8BgwrBgEEAYKpMAED
AQEwLDAqBggrBgEFBQcCARYeaHR0cHM6Ly93d3cuc3NsLmNvbS9yZXBvc2l0b3J5
MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATBFBgNVHR8EPjA8MDqgOKA2
hjRodHRwOi8vY3Jscy5zc2wuY29tL1NTTGNvbS1TdWJDQS1TU0wtUlNBLTQwOTYt
UjEuY3JsMB0GA1UdDgQWBBS6cw8pjbMJkyBGvhK6G1TleaVzZTAOBgNVHQ8BAf8E
BAMCBaAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggIBADFi
BbXzz9Zrw/nwXdyGPXdo7dIJbiMi4QX7PwFSKp4C+8/dx7ty87sJuU5SfAe2BRgS
HxxMnikgS/CADZSgyMq8daQrmprUKJDEs+0e5AU5lLSkIfBrzarOPQHAHISlngLK
ia5xCj1iJQjEcpKd7ZXun/oqHReydTFE1JymSUKju+Ut5gqhe1YEs8rnDOOy869P
WE/B3aZlYCmStd9e0hHjAz5AuhYnN1wy6rntyfRshuGkrx8TbtOKgSmzoTLVAnqm
PSNetzTwrR7wx0kv1LUyQ7XfduoDS5qTGs2LU4xFl1/+jBmg3YHYP5EM+yak+nqL
ylG0tv4EOSXOrJTtEetZ6Sl/FsiAbVJwV15mpGKhkPvKCiCM0xtji1BStXty5kYg
ctGhCt4wLTyhRm7hAL6aziV1wFZwq87Nhc/CQDrJqEbV/Q3Gq4OlZJDeLmln/++n
GW2b4G6+rT6UNCdGrWKHMlZ3icVt5ZcU/gjrdJuTlGquxlG6ToaZ8IQu2/99OjA/
B/mUOQgq4CC/klrooK6t6peOR7G6tSJba8gTdlNgbggQUBIJLqBRxUzvujki+eZi
9nOYxgA9LMbCbRZLCQ8rsCf1pyYFxJiRW4wH46/98TM+Jtkl3rNCfwgcEUCHzT96
qmTS+Ax3ysaOjB8ONfJ1lVmY7yzdh1EzG35pfZYK
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQjpApRke0vFov7zXdNm
tnuVY+QUsM2Qc6AsEUhL9gICxn5R3TSiMQL6uwvG7WqMLGdoYHA9cQf2cUjU9AtY
p+5uaqWWsIBs9F7LEcH52HXIIRZxsH7JebLYvKW1t1/h/xJDD/zWF3/w247hwN1h
7lRzKBVVzKyqNQ03m5Y/eYdSN/soYoYYZA1co0Z+d4nrZnL4j3eW50+DPuJhP0+g
P4EDfzO2v5kP6bJ6qmhQbL4UrjuPQYwr4i4S1jRPRYb0PAo8Ho9YTWMAS7DzfrlZ
7Bc8KrxWzzWnNV3G2H62QcuaBsHZ+44lt3eCKCIhzF7d0dB7crk6+LYZhOj999z/
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 133359012184227750949240487332718367454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-11 11:22:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 11:22:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rhein-zeitung.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24873339859528521469862550013718452293702397940427885847167457554352331681950035452422650952398765592964936633142982740577599942705170303938601959694528695661856168877597116951134506514506601591720798387190185604645497939070611462585464600332884243780366375400872080083049925885385647532380733733709215862161046778737672212048451948918362577094018827139035522573445961047296674971340808403577163107562532410357524502992457798864618030536283728521655369715605079048772142053900538712215157414188394516951590133832304138389958754431461677965472354950314245444746961331847820819346574637196765375830943969946815900221369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhein-zeitung.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhein-zeitung.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba730f298db309932046be12ba1b54e579a57365
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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