employeeportal-es.bmwgroup.net

- Bayerische Motoren Werke AG -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 43:6b:c4:49:49:17:50:6d:e0:2a:a8:21 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 43:6b:c4:49:49:17:50:6d:e0:2a:a8:21
Serial Number (int): 20865777656438611479588677665
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: b3:24:22:35:64:2e:79:ba:17:5b:dd:0c:dd:41:57:9b:92:0c:13:1d
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): b5:b6:ea:63:02:dd:1b:06:10:2f:f6:5b:f8:6a:52:e0:09:69:bb:59
Fingerprint (sha256): 00:9d:14:d6:73:56:91:23:ac:e9:c5:6b:17:ac:4a:6e:c0:45:25:23:d9:49:b9:15:91:9a:b8:25:c0:ad:a5:b3

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate employeeportal-es.bmwgroup.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for employeeportal-es.bmwgroup.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

employeeportal-es.bmwgroup.net

Other certificates including the domain name bmwgroup.net

(limited to 100 certificates)
bip-tool-int.bmwgroup.net
test-infobahn-us.bmwgroup.net
tsp-apac.bmwgroup.net
cc-ts-ts-bs-patchcamp-us-prod.bmwgroup.net
eutolerantmatch-carmen-t.bmwgroup.net
itsm-tdq.bmwgroup.net
cc-conn-vps-admin-cn-inte2e-ui.bmwgroup.net
itssp-gl3-int.bmwgroup.net
cc-conn-nop-archiv-emea-intit.bmwgroup.net
kgs-rpk-r1-prod.bmwgroup.net
netftnoa-int.bmwgroup.net
cc-rcc-lschttpreceiver-us-inte2e.bmwgroup.net
c2btolerant-bip-i.bmwgroup.net
prototype17.bmwgroup.net
codis-t-hn-int.bmwgroup.net
prokkat.bmwgroup.net
klocwork-swf-int.bmwgroup.net
rsp-ofco-int3.bmwgroup.net
ucp-int-sprint-1-cache.bmwgroup.net
bdp1.bmwgroup.net
cc-rcc-rs-us-prod.bmwgroup.net
int-b2vcsfleet.bmwgroup.net
lb-cnap-master.bmwgroup.net
apisec.bmwgroup.com
dmwf-int.bmwgroup.net
digitalshow.bmwgroup.net
rspmatchHDL-i.bmwgroup.net
scc-es.bmwgroup.net
rdecwls12.bmwgroup.net
benefits-p-docker.bmwgroup.net
portalm.bmwgroup.net
liscj01.bmwgroup.net
cc-ts-tsbm-us-inte2e.bmwgroup.net
fms-i-mat.bmwgroup.net
owa.bmwgroup.net
coin-i.bmwgroup.net
ucp-author.bmwgroup.net
dealernet-za.bmwgroup.net
srpnextt-project.bmwgroup.net
cc-nav-ddcrdr-emea-e2e.bmwgroup.net
ucpr-china-test.bmwgroup.net
mapp-int08-gf3.bmwgroup.net
tcmuc-cndmz.bmwgroup.net
dialer-proxy-p.bmwgroup.net
chronos.bmwgroup.net
cdms-lab-proj.bmwgroup.net
mpm-dmsi.bmwgroup.net
rdeckweb-prod.bmwgroup.net
mcib-ingest-prod.bmwgroup.net
oto-ci.bmwgroup.net
etk-test.bmwgroup.net
bobwprod.bmwgroup.net
artifactory.eu-central-1.grafana.ops.cc.bmwgroup.net
dataallocation-proxy-d.bmwgroup.net
aspr.bmwgroup.net
rrcmsdisp-rradmin.bmwgroup.net
employeeportal-es.bmwgroup.net
pmpae.bmwgroup.net
b2vcockpit-cn.bmwgroup.net
csbe-test-gf3.bmwgroup.net
dependency-graph.github-apps.cc-int.bmwgroup.net
fscalculatoreu-t.bmwgroup.net
eagle-int.bmwgroup.net
aem-inta6-disp.bmwgroup.net
itsm-tlp.bmwgroup.net
warrantypmus-t.bmwgroup.net
srd-mig.bmwgroup.net
test-estimatorminiusa-us.bmwgroup.net
lpotdnexus11.bmwgroup.net
bao-admin-int-gfv4.bmwgroup.net
impact-int.bmwgroup.net
tms-prod.bmwgroup.net
pcs-oui5-p02-prod.bmwgroup.net
captain-int.bmwgroup.net
contenthub-de.bmwgroup.net
promt4-ft.bmwgroup.net
h5vco-ux-int.bmwgroup.net
aida-t.bmwgroup.net
asecppi-test.bmwgroup.net
c2b2bmwtest.bmwgroup.net
spotdwh-mi-int4.bmwgroup.net
int-api-manager.bmwgroup.net
gstest20240307c.bmwgroup.net
cc-ts-tsc1-us-inte2e.bmwgroup.net
opctest.bmwgroup.net
ucp-int-uat-2-srvs-access.bmwgroup.net
wls12-t-odm-aol.bmwgroup.net
h5vco-cn-int.bmwgroup.net
aem-pre2-disp.bmwgroup.net
april-device-qa2.bmwgroup.net
ecom-prod.bmwgroup.net
codis-t-hn-2016-int.bmwgroup.net
rema-i4.bmwgroup.net
web-vrs-ml7.bmwgroup.net
servicenet.bmwgroup.net
itsmbao-bgi-t.bmwgroup.net
prod-centralup2drive-us.bmwgroup.net
gwm4-test.bmwgroup.net
intams-t.bmwgroup.net
cs-cs-encrypt-int.bmwgroup.net

Certificate

The complete raw certificate details for employeeportal-es.bmwgroup.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyQsDO7RBD1tTt4Llj8a
kWn26TLpZR6Lvxl+g3sNeLg6ikWd/ZuPJktLcmmmkORypafE9pfp7nZ+3pq3rVLI
u6dzTxTvMPhgnYDbyxo04j3ICYTh4qj50YqToIQI43UePqIHlYqprlunLnqETZZN
OQH0lQlMhMs9LHgwVvkd0fZAjpWJzuQQyUWdh/dYsVmZ4Tto/i7P4pG9QDGKbwEu
5BeCnhIY+HyM2fDujFE1HoueeujAcSk82g7/FaisZDlM/vvZjMS/+SsvXemKAk+F
b8Pw0OqXWzOrYlyK4owZpSLg0KqLH/jWm7AoLMu/QeoiutS7a7TFNzUNqxbn2MN5
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20865777656438611479588677665
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-21 09:46:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-31 09:45:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'employeeportal-es.bmwgroup.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21604587262865228553443537103439469109620739968725108836931731566822367866472389869170163274109787193422197043939971629173628787967949721507811819339217742825236933015526736942890349094708283037767412209932602433425178424530287913458337165789680798548880555878997311679369187008106806673744044866751330104479067921232426966659726369695989063203854938118494887928474411402722913479144662873129937632421004353594340264104914089182623726604107384557808990419755963691612697839333978451176332226889195095896196680234037520137151551821153990853948485300205454928359668630756065889093504890532992698401284030862378496391427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeeportal-es.bmwgroup.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3242235642e79ba175bdd0cdd41579b920c131d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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