pdxs-sat.dpw.state.pa.us

- Pennsylvania Department of Human Services -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 9d:b4:4e:75:d8:af:2c:2b:00:00:00:00:50:f5:47:d0 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Pennsylvania Department of Human Services

Organization: Pennsylvania Department of Human Services
State / Province: Pennsylvania
Locality: Harrisburg
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 9d:b4:4e:75:d8:af:2c:2b:00:00:00:00:50:f5:47:d0
Serial Number (int): 209625000137472692735432100518900877264
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c9:a2:85:89:c4:55:33:43:ca:54:5d:e3:c3:9f:91:b4:72:bf:bc:eb
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): e5:98:da:20:9e:44:5e:e2:39:5b:e4:46:4c:24:8b:d8:b2:0e:a5:da
Fingerprint (sha256): 04:3e:21:94:12:d4:64:c5:23:e1:e3:0a:4a:90:7a:42:0f:bc:05:2f:44:87:06:43:79:3e:19:16:7b:9c:db:da

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate pdxs-sat.dpw.state.pa.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pdxs-sat.dpw.state.pa.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pdxs-sat.dpw.state.pa.us

Other certificates including the domain name state.pa.us

(limited to 100 certificates)
www.pasuppliersrm2.beta.state.pa.us
dliftpua.state.pa.us
www.puc.state.pa.us
uat.calcrite.cor.state.pa.us
www.dotdom3.state.pa.us
secure.courts.state.pa.us
mapir.dpw.state.pa.us
www.stebapp.state.pa.us
pa.direct.file.state.pa.us
www.dot14.state.pa.us
www.dotdom3.state.pa.us
www.state.pa.us
www.leadstracking.dced.state.pa.us
awds.beta.psp.state.pa.us
padlsonline.pa.gov
www.hspaymentgateway.state.pa.us
ldap-mo.dpw.state.pa.us
intraapps-r.dpw.state.pa.us
www.papsrs.state.pa.us
www.pspleot.state.pa.us
www.nedss.state.pa.us
www.aopc.jnet.state.pa.us
ESECagSANCertSyst.dot.pa.gov
apps02.ins.state.pa.us
www.dossurvey.state.pa.us
www.doreservices.state.pa.us
www.jobgatewaytr.pa.gov
lms.state.pa.us
missl.dhs.state.pa.us
www.puc.state.pa.us
www.pasuppliersrm.state.pa.us
www.papsrs.state.pa.us
dliftpua.state.pa.us
www.fd.state.pa.us
tacs.state.pa.us
www.icopapki.state.pa.us
www.JobGatewayrpt.state.pa.us
www.hava.state.pa.us
www.vplan.state.pa.us
www.mpoetc.state.pa.us
www.agtrans.pa.gov
www.agtrans.state.pa.us
pdxs-sat.dpw.state.pa.us
www.humanservices-t.state.pa.us
provider.enrollment.dpw.state.pa.us
www.pimsreports.state.pa.us
www.dot12.state.pa.us
www.nedss.state.pa.us
www.fwgs.beta.state.pa.us
www.pgcb.state.pa.us
www.gis.dcnr.beta.state.pa.us
www.oit.state.pa.us
www.tcs.ed.state.pa.us
www.PAFoodSafety.pa.gov
www.pelican.state.pa.us
www.boardofappeals.state.pa.us
rtm.clean.beta.state.pa.us
www.dot2.state.pa.us
www.handsstaging.state.pa.us
www.nedsstest.state.pa.us
www.pasuppliersrm.state.pa.us
www.hhsapps.state.pa.us
dot11.state.pa.us
www.dpwtxns.state.pa.us
www.nedss.state.pa.us
bdap.health.state.pa.us
www.dot16.pa.gov
WWW.PEMAWEBTOOLS.STATE.PA.US
www.helpinpa.state.pa.us
pew.dpw.state.pa.us
www.depgis.state.pa.us
www.avl.state.pa.us
www.pema.state.pa.us
*.lgc.state.pa.us
www.pennfirs.state.pa.us
www.paltcreporting.state.pa.us
www.dottrn34.state.pa.us
qars.penndot.gov
ESECagSANCertSyst.dot.pa.gov
www.pennfirs.state.pa.us
RSA1.legis.state.pa.us
www.hhsidm-sat.state.pa.us
www.grants.dcnr.state.pa.us
www.cwdsua.pa.gov
www.services.dcnr.state.pa.us
www.paemployee.lottery.state.pa.us
www.dotdev12.state.pa.us
pew.dpw.state.pa.us
www.cwdsua.pa.gov
www.humanservices-t.state.pa.us
*.legis.state.pa.us
ldap-uat.dpw.state.pa.us
www.purta.state.pa.us
www.fctms.state.pa.us
dliiamtr.state.pa.us
imaging.dpw.state.pa.us
www.pdotdev1.state.pa.us
store.cpc.state.pa.us
www.rbauth-s.state.pa.us
www.portal.state.pa.us

Certificate

The complete raw certificate details for pdxs-sat.dpw.state.pa.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdBxeW3zOS+29QQwkZQU
InN6LTesgxaUPEzT79TJlGicwXbv8FBoVx3WsPHVqQOvS5vuwgmB50OZ7hferBox
zo7B4PXazw7nsD72Gqk6uPTfvrM9GCSXoOjKBkgxN6GPq0/3Pl6RKUQbXjNUoP3A
mODtwTSu1cJcNJ9kQDXYe6HTacQ3wR88/sojbatJ2EaHazBNPXXli1aZ3lrxnf1X
aGefKIlpVfX+ftxwUsjzaSrbc1hhmRHoCYaQ8HedQbhPWWA6lNCyCiPcbz8lyPnT
B5PAFi6cciDlnbZDB3nfZs5wLvTKUO3NQfoyh9hiJfKJTIFp+ema/RSwmCIOseMs
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 209625000137472692735432100518900877264
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-02 17:44:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-24 18:14:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Harrisburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania Department of Human Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pdxs-sat.dpw.state.pa.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21942013961130222232654431463728190096817148892461785538847451217865798232896826455813253998686491194115642797609243785608965839292165882750872369326492457197519859369784987011779271145069377596008055763927847645421574156284316244542546068983436641372575165118893289736670302903443802302083336735037586750369358032026580271136727751104270021349051954819946591080815524849983146966650693181564432455451979153571403995596656207238499929004103570775703383147855496726154412687897190585381114159052369431994652148890567695459304336220560555204779039503312239559659326608560840060008416906368727125563442517765079091588229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdxs-sat.dpw.state.pa.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9a28589c4553343ca545de3c39f91b472bfbceb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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