parentsinclusionnetwork.org.uk

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number c3:38:46:0f:65:a2:4e:fd:6a:04:47:77:ef:6a:02:75 was issued on by Sectigo Limited.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=parentsinclusionnetwork.org.uk

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): c3:38:46:0f:65:a2:4e:fd:6a:04:47:77:ef:6a:02:75
Serial Number (int): 259491648790685443888319470556571894389
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 6e:d8:51:9b:c0:15:85:b2:77:bd:15:27:22:01:f0:ba:26:0a:d2:0f
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 74:39:4c:b6:14:9e:7b:1c:3f:f2:fe:74:ca:17:7e:ab:04:40:cf:49
Fingerprint (sha256): bb:bc:46:21:89:b7:da:bd:f8:64:41:92:01:f9:50:ac:dd:f9:fb:1a:f3:fd:fe:3f:b3:f2:8c:81:1d:a9:5a:4f

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate parentsinclusionnetwork.org.uk

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for parentsinclusionnetwork.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

parentsinclusionnetwork.org.uk
parentsinclusionnetwork.org.uk.websitebuilder.partnersitehosting.co.uk
www.parentsinclusionnetwork.org.uk
www.parentsinclusionnetwork.org.uk.websitebuilder.partnersitehosting.co.uk

Other certificates including the domain name parentsinclusionnetwork.org.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for parentsinclusionnetwork.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGhjCCBW6gAwIBAgIRAMM4Rg9lok79agRHd+9qAnUwDQYJKoZIhvcNAQELBQAw
gY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE
AxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD
QTAeFw0yMDAzMTIwMDAwMDBaFw0yMDA2MTAyMzU5NTlaMCkxJzAlBgNVBAMTHnBh
cmVudHNpbmNsdXNpb25uZXR3b3JrLm9yZy51azCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOXPpNbYBGWlMZoYAOzzUvAi2qLz4yv7NrIcRYyNbTZ8KCjY
p7kmJPq49BaUQ9Y2IUzi6FG5ZYoqR8crVwQIJ7Dl2zqmRtgpsYewIEWdF6wzKs9d
kiFgrJPrGIvSPPOLKJmIn+rN8HY2nQUr76HXot76PNhpa2FJFtPYWrcyMT9xQxjI
P92PgD7eEFD5+BAt56AHxawM0uKPHJ55wmZQjNV35dFGdJiCWEvHVGbpZs/DN1/2
94b27ZC1Jue+/wXIbkE+TZ8vMkU8MlJsVbd9q97CU0aQcWTCl8PQJY1cEZvM7uqO
Z5jM/zpanUVXAX5v0Bv3NSTUOIzggGRXnYAqJ1kCAwEAAaOCA0AwggM8MB8GA1Ud
IwQYMBaAFI2MXsRUrYrhd+mb+ZsF4bgBjWHhMB0GA1UdDgQWBBRu2FGbwBWFsne9
FSciAfC6JgrSDzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQIC
BzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwB
AgEwgYQGCCsGAQUFBwEBBHgwdjBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5zZWN0
aWdvLmNvbS9TZWN0aWdvUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNB
LmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wggEDBgor
BgEEAdZ5AgQCBIH0BIHxAO8AdQAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToa
adOiHAAAAXDNVVjtAAAEAwBGMEQCIGTnH+my+t7A6YUO7NYFBesT5yP54Czhn3ba
oRDgkft4AiBC27wa/aoY0xpuLqHsMePqPMYFAMwSeLsis9LPGwvRWgB2AOcS8rA3
fhpi+47JDGGE8ep7N8tWHREmW/Pg80vyQVRuAAABcM1VWPMAAAQDAEcwRQIgVDts
MeDvvJ8Oy7syOENIVr8E2Eh/yzik/4qlWKnwqGsCIQCrF2F3sY8dRcFfbVj+YPsj
STCKXSiZMULkC/jsV0OYxjCB4wYDVR0RBIHbMIHYgh5wYXJlbnRzaW5jbHVzaW9u
bmV0d29yay5vcmcudWuCRnBhcmVudHNpbmNsdXNpb25uZXR3b3JrLm9yZy51ay53
ZWJzaXRlYnVpbGRlci5wYXJ0bmVyc2l0ZWhvc3RpbmcuY28udWuCInd3dy5wYXJl
bnRzaW5jbHVzaW9ubmV0d29yay5vcmcudWuCSnd3dy5wYXJlbnRzaW5jbHVzaW9u
bmV0d29yay5vcmcudWsud2Vic2l0ZWJ1aWxkZXIucGFydG5lcnNpdGVob3N0aW5n
LmNvLnVrMA0GCSqGSIb3DQEBCwUAA4IBAQABa6ahzDhVvMAUfPX/3JNTvZENw7mg
xNGRuxcqNfLKI20oMR9Tobd1NCmOfoFmbf4IdeJVkM31BsvU6w3IFDAF2yU4B9o9
98+eWGc6BbYRdRKISYIhnzOPC7S0J1IO37LUc1r549YZaxldjLsvEEgJQXFMiGgg
bu/WWysgImgpGeaUowNwTEkR/kPiyRIKvoZMKG7WqLbhVRzDbXAIF7BgI7k0j6Yq
ZH3iNOs6OLtlvCg/9vhIuLICDl2GwghKNaHyBpfMffJPnp/DlfF6zIxu35+64aAm
GQnadREpsqQRnoNKh6zdX2cC0sxPvrq+eWSOwiFpI5jLP8hSwPcfQ9hS
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5c+k1tgEZaUxmhgA7PNS
8CLaovPjK/s2shxFjI1tNnwoKNinuSYk+rj0FpRD1jYhTOLoUblliipHxytXBAgn
sOXbOqZG2Cmxh7AgRZ0XrDMqz12SIWCsk+sYi9I884somYif6s3wdjadBSvvodei
3vo82GlrYUkW09hatzIxP3FDGMg/3Y+APt4QUPn4EC3noAfFrAzS4o8cnnnCZlCM
1Xfl0UZ0mIJYS8dUZulmz8M3X/b3hvbtkLUm577/BchuQT5Nny8yRTwyUmxVt32r
3sJTRpBxZMKXw9AljVwRm8zu6o5nmMz/OlqdRVcBfm/QG/c1JNQ4jOCAZFedgCon
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 259491648790685443888319470556571894389
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'parentsinclusionnetwork.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29010964862163499128841336897554014254029113954572032784900059152234584260618886879467465472313609742224702150196799713620879799757509177955877779760833056588289331405626758179310929156575188368848084281039947827729544287545417005674660317296070151839188930483664095274113098971227414619979833874180230374576821099657448746977157192903485215278460086609025044720311817110208259480593728946898785629517047586346462624971267375143977427270982927412057748610524289119651339894345528459355049657478806281441356903937457545134066722465881011560395670168665080950387923845751618149239732108781123912630391950883325389449049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ed8519bc01585b277bd15272201f0ba260ad20f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170cd5558ed0000040300463044022064e71fe9b2fadec0e9850eecd60505eb13e723f9e02ce19f76daa110e091fb78022042dbbc1afdaa18d31a6e2ea1ec31e3ea3cc60500cc1278bb22b3d2cf1b0bd15a007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170cd5558f300000403004730450220543b6c31e0efbc9f0ecbbb3238434856bf04d8487fcb38a4ff8aa558a9f0a86b022100ab176177b18f1d45c15f6d58fe60fb2349308a5d28993142e40bf8ec574398c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (219 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parentsinclusionnetwork.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parentsinclusionnetwork.org.uk.websitebuilder.partnersitehosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parentsinclusionnetwork.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parentsinclusionnetwork.org.uk.websitebuilder.partnersitehosting.co.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00016ba6a1cc3855bcc0147cf5ffdc9353bd910dc3b9a0c4d191bb172a35f2ca236d28311f53a1b77534298e7e81666dfe0875e25590cdf506cbd4eb0dc8143005db253807da3df7cf9e58673a05b6117512884982219f338f0bb4b427520edfb2d4735af9e3d6196b195d8cbb2f10480941714c8868206eefd65b2b2022682919e694a303704c4911fe43e2c9120abe864c286ed6a8b6e1551cc36d700817b06023b9348fa62a647de234eb3a38bb65bc283ff6f848b8b2020e5d86c2084a35a1f20697cc7df24f9e9fc395f17acc8c6edf9fbae1a0261909da751129b2a4119e834a87acdd5f6702d2cc4fbebabe79648ec221692398cb3fc852c0f71f43d852