elections.psu.edu

- The Pennsylvania State University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number a5:9b:c7:fe:c6:9c:cc:31:ed:42:12:76:38:10:1a:63 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Pennsylvania State University

Organization: The Pennsylvania State University
Organization unit: Division of Student Affairs
Postal code: 16802
State / Province: PA
Locality: University Park
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a5:9b:c7:fe:c6:9c:cc:31:ed:42:12:76:38:10:1a:63
Serial Number (int): 220131481702516011273341924353015552611
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ff:90:0d:67:84:fe:7a:92:fc:58:03:ec:35:cd:da:c2:f3:54:73:23
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 9b:5f:c4:90:41:6e:a5:39:15:01:a6:6c:8c:8c:9d:d8:63:ec:0a:66
Fingerprint (sha256): 01:cf:89:bd:76:b7:c8:aa:3a:84:48:d8:a3:38:36:d9:b5:34:da:1a:b4:95:3f:16:0e:ad:21:ac:45:9f:26:b6

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate elections.psu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elections.psu.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elections.psu.edu

Other certificates including the domain name psu.edu

(limited to 100 certificates)
cds4.cvent.com
pennstatehealthnews.org
nemesis.vmhost.psu.edu
apply.psu.edu
d5-gogreenfront.ddar.psu.edu
vpfa.psu.edu
5693703389708288-fe3.pantheonsite.io
crmcn-prd-db.windom.outreach.psu.edu
apps.opp.psu.edu
prod-web10.lionpath.psu.edu
idashboard.hbg.psu.edu
svrp.psu.edu
www.causeweb.org
harrelllibcal.library.psu.edu
carpepm.almonds.com
webfiles.psu.edu
harrell.library.psu.edu
fandb.psu.edu
coaction.psu.edu
us.prod.campusgroups.com
qaauth.libraries.psu.edu
online.ist.psu.edu
morph-331.vmhost.psu.edu
angelshibaccept.ais.psu.edu
schoolresources.militaryfamilies.psu.edu
hrservdc.ohrrider.psu.edu
ssc1.wpsu.psu.edu
watchdog.vmhost.psu.edu
mkt-prod-db.windom.outreach.psu.edu
scholarsphere-qa.dlt.psu.edu
secure.smeal.psu.edu
collegian.psu.edu
www.ems.psu.edu
www.solutions2wxrisk.psu.edu
ucdc.edu
methodology.psu.edu
us.prod.campusgroups.com
ezaccess.libraries.psu.edu
usegalaxy.org
apps.tlt.psu.edu
alumni.libraries.psu.edu
exchange.ag.psu.edu
nartc.fcm.arizona.edu
egsc.psu.edu
calendar.sdzsafaripark.org
grafana.ais.psu.edu
artedu.vmhost.psu.edu
com-ce.vmhost.psu.edu
www.engr.psu.edu
webdev.research.psu.edu
mrsec.psu.edu
isserv83.psuas.psu.edu
nrotc.psu.edu
www.bookrequest.psu.edu
ocaltest.aset.psu.edu
courses.schoolresources.militaryfamilies.psu.edu
5693703389708288-fe3.pantheonsite.io
openid.et-test.psu.edu
f1adp-smartpark.ad.psu.edu
current.it.psu.edu
cas-cp-01.ag.psu.edu
inclusivity.psu.edu
vivid.cse.psu.edu
morgancenter.psu.edu
www.vmhost.psu.edu
www.studentloans.psu.edu
cds4.cvent.com
math.science.psu.edu
uconnectlabs.com
chat.pshs.psu.edu
cpy-web1.lionpath.psu.edu
campusmap.psu.edu
www.opia.psu.edu
science.aws.science.psu.edu
genuinerisk.bmb.psu.edu
delta.csec-cra.psu.edu
cdn-test.battlefields.org
psualert-test.iam.psu.edu
e8-pnc-sep.ad.psu.edu
staging.aws.science.psu.edu
test.eis.uw.edu
dev.e-education.psu.edu
admissions.med.psu.edu
etda-explore-prod.libraries.psu.edu
secure.wpsu.psu.edu
www2.ems.psu.edu
admin.hhdev.psu.edu
citeak.multidevcom.uaf.edu
newton.vmhost.psu.edu
5693703389708288-fe3.pantheonsite.io
www.design-engineering.princeton.edu
latinocaucus.psu.edu
jupyterhub.ist.psu.edu
uconnectlabs.com
thrive.psu.edu
admin.odiapp-d01.lionpath.psu.edu
richc.et-test.psu.edu
qa.libraries.psu.edu
elections.psu.edu
sni.cloudflaressl.com

Certificate

The complete raw certificate details for elections.psu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 220131481702516011273341924353015552611
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '16802'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University Park'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Pennsylvania State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Division of Student Affairs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elections.psu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 627215684173506928735915142083522532108342998428485695671187264447828792947645384323765295002621824252339462351158147381640489051088952445210923515009129199645154558262564019047955434295548099151724884827308961902460838670991339130579275443574948282648332303554040442272643085098260199532729658851446266707996305271729363362463486771048691430636074909797649035947585535492292464014773785804905072614287667143804387729664762997630485257765121670017466451488485679017586086823648449212977713384873103792361032638040978264656932725905252124646967314922722694602197541978854299297915217021328902083911101942017070678069758282141674061423895991032204293431425162269502474363043552891603495998126364959847013318524788530293988112410655674164709380144870035843171197028094135277264872481664565448499647129518450184289859189106068607441331504918540513625220087930031360289034056095560233347223789828941018690017060443486016770105124145247373205347827360096115803129864614038904577035494532605761758444309783260703514605641337249259086950331124380287299224453691358762202057023059970318467054890909118123332201205502218350920078619149455023652471563212266247983324018802899531608439163029481920506146408713782538835246519761926810365346865161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff900d6784fe7a92fc5803ec35cddac2f3547323
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elections.psu.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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