mfaweb.lexisnexis.com

- RELX Inc. -

Issued by Trustwave OV SHA256 Pre-Certificate CA

About this certificate

This digital certificate with serial number 06:fc:a2:fa:61:61:15:81:ad:25:7b:fe:4b:3f:af:d5:58:af:05 was issued on by Trustwave Holdings, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

RELX Inc.

Organization: RELX Inc.
State / Province: New York
Locality: New York City
Country: US

Trustwave Holdings, Inc.

Organization: Trustwave Holdings, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:fc:a2:fa:61:61:15:81:ad:25:7b:fe:4b:3f:af:d5:58:af:05
Serial Number (int): 155812225802049352197945565078409397348642565
Serial Number lenght: 147 bits, 19 octets

SubjectKeyId: e2:56:bb:94:4f:87:d1:75:3a:41:94:44:eb:80:66:8b:ff:a6:3d:f2
AuthorityKeyId: c0:ce:4c:b0:06:48:21:0b:4d:f4:a5:ac:f7:6b:f7:ba:dd:4e:04:4f

Fingerprint (sha1): b2:08:c8:1e:0f:58:d7:c9:36:65:c1:ea:eb:af:52:12:d6:5b:f9:4f
Fingerprint (sha256): 02:4e:c1:1b:ed:ea:05:0b:71:b4:b8:64:2e:a9:6c:17:14:f6:0e:4e:9f:79:9c:ba:eb:c4:fa:fd:0c:c4:27:07

Issuing Certificate URL: http://ssl.trustwave.com/issuers/OVCA2_L1.crt

Revocation information

OCSP Server: http://ocsp.trustwave.com/
CRL Distribution Point: http://crl.trustwave.com/OVCA2_L1.crl

Check the revocation status for certificate mfaweb.lexisnexis.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mfaweb.lexisnexis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mfaweb.lexisnexis.com
mfaweb2.lexisnexis.com

Other certificates including the domain name lexisnexis.com

(limited to 100 certificates)
dev-clientshare.lexisnexis.com
insurancesolutions.lexisnexis.com
mfa.lexisnexis.com
personalreports.lexisnexis.com
*.product-aws-prod.nl.lexis.com
collectionsolutions.lexisnexis.com
cdn.insurancesolutions.lexisnexis.com
isit.lexisnexis.com
healthcareportal.lexisnexisrisk.com
dmvpre.alirts.lexisnexis.com
staging.identitymanagement.lexisnexis.com
apply.insurancelink.lexisnexis.com
sni.cloudflaressl.com
batchwebgateway.lexisnexis.com
uat.progressive.lexisnexis.com
risk.lexisnexis.com
RISK-OUT02.rsi.lexisnexis.com
images.solutions.lexisnexis.com
bender.lexisnexis.com
ukcrm.plcert.lexisnexis.com
bis.lexisnexis.com
idms.lexisnexis.com
docshare.lexisnexis.com
updatesxg.bridgerinsight.lexisnexis.com
gma.lexisnexis.com
equifaxconsumers.lexisnexis.com
mfaweb.lexisnexis.com
orders.paymentsolutions.lexisnexis.com
eo.lexisnexis.com
*.business.aws.lexis.com
san-005.ceros.com
risk.lexisnexis.com
demo.avcccert.lexisnexis.com
cdnfp.accurint.com
sni.cloudflaressl.com
test.telematics.lexisnexis.com
*.lexisnexis.com
*.content.aws.lexis.com
midex.lexisnexis.com
jprc.lexisnexis.com
espsso-sign-prd.risk.lexisnexis.com
Bridgerstaging.lexisnexis.com
pm.lexisnexis.com
BridgerDirect.LexisNexis.com
starsdocshare.risk.lexisnexis.com
sf.insurview.lexisnexis.com
dev.mobiledataprefill.lexisnexis.com
invoice.risk.lexisnexis.com
reporting-stg.identitymanagement.lexisnexis.com
link2.lexisnexis.com
professional.lexisnexis.com
*.midex.lexisnexis.com
recordsretrieval.lexisnexis.com
pas.campaignview.lexisnexis.com
solutions.risk.lexisnexis.com
optout.lexisnexis.com
global.lexisnexis.com
siris.lexisnexis.com
jiradev.rsi.lexisnexis.com
uw.insurancesolutions.lexisnexis.com
gma.lexisnexis.com
induservpn.risk.lexisnexis.com
wcoresearchtraining.risk.lexisnexis.com
WcoEditorialSearchQA.risk.lexisnexis.com
api-caseanalyser.lexisnexis.com
nac.lexisnexis.com
san-005.ceros.com
trial.mapview.lexisnexis.com
r3.lexisnexis.com
forms.consumer.risk.lexisnexis.com
erie.lexisnexis.com
cdnfp.accurint.com
bis.lexisnexis.com
apply.insurancelink.lexisnexis.com
track.risk.lexisnexis.com
*.lexisai.aws.lexis.com
*.issdev.lexisnexis.com
san-005.ceros.com
lexismarkettracker.lexisnexis.com
*.lexisnexis.com
gewpasp.iss.lexisnexis.com
altauth.courtlink.lexisnexis.com
healthcareportal.lexisnexis.com
paymentsolutions.lexisnexis.com
healthcareportaluat.lexisnexis.com
Bridgerstaging.lexisnexis.com
*.lexisnexis.com
sat.lexisnexis.com
social.lexisnexis.com
salesportal.lexisnexis.com
wcoaudit.risk.lexisnexis.com
riskauth.lexisnexis.com
risk.lexisnexis.com
transfer.lexisnexis.com
ride.lexisnexis.com
marketplace.lexisnexis.com
mapview.lexisnexis.com
*.b2b.lexisnexis.com
insurancesolutions.lexisnexis.com
*.content.aws.lexis.com

Certificate

The complete raw certificate details for mfaweb.lexisnexis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsXlI24kJmJUNO/Kp4s0
A7o5qc/o0xF5HX2Nk3M0GAuLKEU2YMdkCTxXDyQCbUCcIPrl6SnYgQVR4GQ+lrmQ
GtqUIV3bm6gaiQg536++2zC5DUHLTC7HPTNbnljortW2oaaupXncJn8oVrzSQT5r
JWPMZuYHbGbihex2mKN7fJq/lfIlMpVYWPurd5ARAMl4HgcKKhQ03k0CJF+CPbel
qOLPuc/sXZAwhesz7dH4xm8LjZKZ/qnw4PSvP6lcfskOaZaS7V9dkDB8SNinokDN
puT17gcxeEnp53vnrqkiiuTQizx5E8yfBiwx1SO1PpQ7GaLU8wjM6OKWE440nYug
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 155812225802049352197945565078409397348642565
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave OV SHA256 Pre-Certificate CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-17 13:44:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-08 19:44:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mfaweb.lexisnexis.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RELX Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20043237881646349881383719590680803744270839868556031853039498376168949659751905765107452423949417554207529752256593569371566228932782110549290568105249332121312616284887373621728504345723657695293195612447289314854046930992939650441173243450631316127852669369738839194562120264678173741359150530850389412874848915369408894354438883950932620669130527895518851044192030326941455577366801300104391947507195750344906986614172117147303237980323850895644729032445159108790090876075784720641094473458487197364163484354005656052698357829708705460034810691954550911164051216423584782570153518930810666535344330834888440389813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e256bb944f87d1753a419444eb80668bffa63df2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c0ce4cb00648210b4df4a5acf76bf7badd4e044f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://ssl.trustwave.com/CA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfaweb.lexisnexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfaweb2.lexisnexis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.trustwave.com/OVCA2_L1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trustwave.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl.trustwave.com/issuers/OVCA2_L1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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