developer-a.kbc.be

- KBC Group NV -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:ef:08:1e:58:d6:c3:19:f6:4a:13:cf:55:ae:df:b5 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

KBC Group NV

Organization: KBC Group NV
State / Province: Brussels
Locality: Brussels
Country: BE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:ef:08:1e:58:d6:c3:19:f6:4a:13:cf:55:ae:df:b5
Serial Number (int): 7887263591730420139087020485960982453
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3d:95:d2:3b:e3:a3:4c:91:80:78:74:fe:33:b9:7f:85:c9:4f:54:d8
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 95:80:85:58:e9:82:85:8c:98:a3:ce:39:89:da:39:a9:52:36:dc:d2
Fingerprint (sha256): 04:9f:07:b1:8f:a4:ed:f9:e9:48:35:a0:06:f7:ff:eb:69:a9:40:6a:3e:3f:d9:ba:5f:58:a6:fc:d3:91:ac:d8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate developer-a.kbc.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for developer-a.kbc.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

developer-a.kbc.be
www.developer-a.kbc.be

Other certificates including the domain name kbc.be

(limited to 100 certificates)
rewselect-a.kbc.be
landing-socialsharing.hr.kbc.be
link.socialsharing.corporatebanking.kbc.be
kbc.eu
media.kbc.be
www.kbcautolease.be
kbc.com
auth.jobs.kbc.be
support2.kbc.be
developer.kbc.be
business.api.kbc-group.com
speciaalvooru.kbc.be
publiccontent-f.kbc.be
forwrd.it
pdf-accept.kbc.be
migration.business.api.kbc-group.com
business.api.acc.kbc-group.com
landing-socialsharing.corporatebanking.kbc.be
wcmassets-a.kbc.be
MFTACC-NBBCAP12-0403211380.kbc.be
api.comfintouch.acc.kbc.be
KBCGroup-Checkdoc-Client-DEV.kbc.be
media.kbc.be
mobile-f.kbc.be
business.api.fet.kbc-group.com
dealingroom.kbc.be
auth.jobs.kbc.be
expense-management-f.kbc.be
app.brand.ambassify.eu
anexus3.kbc.be
psd2.api.acc.kbc-group.com
ipa2-a.kbc.be
t.info.kbc.be
socialsharing.hr.kbc.be
matti.securitiesservices.kbc.be
acmportal-f.kbc.be
investments.kbc.be
acm.kbc.be
rewselect-a.kbc.be
developer-a.kbc.be
socialsharing.brussels.kbc.be
ajenkinsegl.kbc.be
bluecandyapi.kbc-group.com
jobs.kbc.be
psd2.api.kbc-group.com
landing-socialsharing.securitiesservices.kbc.be
warrant.esop.kbc.be
warrant.esop.kbc.be
auth.jobs.kbc.be
MFTPRO-NBBCAP18-0426403684.kbc.be
kbctouch.kbc.be
auth.jobs.kbc.be
bluecandyapi.kbc-group.com
kbctouch.kbc.be
landing-socialsharing.securitiesservices.kbc.be
multimedia.kbc.be
psd2hub.qwac.client.api.kbc.be
elb-a.kbc.be
support.kbc.be
aalmcenter.kbc.be
kbctouch2-a.kbc.be
research.kbc.be
publiccontent.kbc.be
kbcinvest.kbc.be
design-f.kbc.be
socialsharing.bankenverzekering.kbc.be
bedankt.kbc.be
partner-a.login.kbc.be
media.kbc.be
landing-socialsharing.brussels.kbc.be
ambassadors.nationallottery.be
media.kbc.be
api.comfintouch.acc.kbc.be
kbcard.kbc.be
internal.acc.kbc-group.com
mftgtwp.servers.kbc.be
ipa-a.kbc.be
kbctouch-a.kbc.be
aalmaddons.kbc.be
ul-a.kbc.be
psd2-mtls.api.kbc-group.com
landing-socialsharing.securitiesservices.kbc.be
frontend.production.kbc.agiprod.agifly.cloud
warrant.esop.kbc.be
isupport.kbc.be
internal.kbc-group.com
zoomit-client.5000110952590.beta.zoomit.kbc.be
ul.kbc.be
touch.cbc.be
neon.securitiesservices.kbc.be
link.socialsharing.kbccorporatebanking.be
mras.kbc.be
landing-socialsharing.kbc.be
wcmassets.kbc.be
MFTPRO-NBBCAP1M-0444058872.kbc.be
socialsharing.corporatebanking.kbc.be
internal.kbc-group.com
failover2.kbc.be
dev-support2.kbc.be
ipa-a.kbc.be

Certificate

The complete raw certificate details for developer-a.kbc.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7887263591730420139087020485960982453
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KBC Group NV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'developer-a.kbc.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751013572434490954511701397279257332561485838644372092793552605601564862757928643147896452543245804143859172850078440726487822726172983834319680040923666823093693943778614471900903587240829930456718996798936562445659819896003459576440904667086403883425695451163378198388540434297883618683150745875300341269098800173173637889804204386912176368650331374559862838166841205669631551059418641246207717244757961900812525769679404241723388164684796829737835509631275748474351234652724794290759842655567701312903700245304569430600753477280203808777323904798525620791476466651520217137083331441047385341309853767558016901713734953266497838676083810595776973982951279580910538413675845616302352560378330064141693339362055918614778833466675278394763264097494300978327963838461416084258907164716420955105296514329331994316041006180136713695528503535407226155573950881222891458495677147150647855127307609712999015497972863002030797157858434006298732482135392361082028607355106380266346766177435036238321025266152627711340301932447959754168279735346107905930452552285323996649476799872833059086616252044638262574898092051933383457509411433151510272841985907294982675490828560003601051148629056656189793131276862678138412044025033365294438267383453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d95d23be3a34c91807874fe33b97f85c94f54d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer-a.kbc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developer-a.kbc.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017edf310b190000040300473045022025702ffec396ad8bdffdf2bab554acc27de4271ea870ac4685da2f4b2a6e7a3f022100d5a92e39c3d9d8137a3cf6f0f5b8525bca83dc82a34d860496be61e0a921a13400760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000017edf310b01000004030047304502200e2948e972aba9f99aef02a671ff8a5abef66eb59a9c8867d67db24c2213b3d1022100845e6e89a99bbf22573c7efd1293ff7e49033930906f29b8caa9dccc07d8e03d007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017edf310b310000040300483046022100b39de22cd4941d49fff01b409ddd99c44db146cd5e56cb0aff79b4bc67a06260022100e1c401212dfb9403817eaab81dd822259960381958b45c0f0cafcf1c132b2535
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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