www.blenheimgolfclub.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:79:e1:7a:04:0d:a3:0b:0c:53:3f:95:00:05:93:32:e1:de was issued on by Let's Encrypt.

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.blenheimgolfclub.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:79:e1:7a:04:0d:a3:0b:0c:53:3f:95:00:05:93:32:e1:de
Serial Number (int): 302810734034192705279595135528358819062238
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:f4:85:0e:b3:d4:45:6d:b0:e4:33:4e:5a:98:01:c0:3f:b0:55:83
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3a:c7:3c:ae:ee:2b:15:ad:c5:b9:b7:0d:f8:9d:19:3e:51:83:51:f8
Fingerprint (sha256): 05:33:3c:6a:8d:1a:cb:e6:fc:62:a0:f8:ac:02:dd:66:72:99:9e:42:a8:e6:bd:9b:1e:f9:76:6a:af:ec:fe:a3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.blenheimgolfclub.co.nz

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.blenheimgolfclub.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sporty-production2.trafficmanager.net
www.aafl.co.nz
www.actc.org.nz
www.aucklandmarist.co.nz
www.basketballtaranaki.co.nz
www.blenheimgolfclub.co.nz
www.bsgevents.co.nz
www.bullernetball.co.nz
www.hastings-central.school.nz
www.hbcommunityfitness.co.nz
www.hbcommunityfitness.org.nz
www.hillseekers.co.nz
www.hillseekers4wd.co.nz
www.lucknow.school.nz
www.melrosetargetshooting.co.nz
www.mesoball.co.nz
www.netballmanawatu.org.nz
www.northcoterugby.co.nz
www.northharbourtag.co.nz
www.nztua.com
www.pcjcc.org.nz
www.rangitikeigolfclub.co.nz
www.schoolground.com
www.shoreroversnetball.co.nz
www.southerntack.co.nz
www.southlandolympicweightlifting.co.nz
www.sportsground.com
www.stjosephschb.school.nz
www.sunrisecottage.co.nz
www.tabletennis.org.nz
www.temata.school.nz
www.terracechb.school.nz
www.tutangiora.nz
www.ultrarunner.org.nz
www.waikatohockey.org.nz
www.wops.co.nz

Other certificates including the domain name blenheimgolfclub.co.nz

(limited to 100 certificates)
www.nelsoncarclub.co.nz
willowpark.school.nz
www.blenheimgolfclub.co.nz
sporty.co.nz
www.tabletennis.org.nz
sporty.co.nz
meeanee.school.nz
sporty.co.nz
www.taranakihockey.org.nz
southlandmtbclub.co.nz
www.oacnz.org
sporty.co.nz
sporty.co.nz
trenthamrifleclub.co.nz
sporty.co.nz
sporty.co.nz
canterburybaseball.co.nz
www.wmsc.org.nz
uniss.co.nz
www.badmintonhb.co.nz
pioneerbasketballclub.co.nz
canterburybaseball.co.nz
meeanee.school.nz
www.mttauharagymnastics.co.nz
yes.stockx.co.nz
sporty.co.nz
basketballtaranaki.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for www.blenheimgolfclub.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLsHdmFSuo6+9mlowPKp
QPxoSPAARDXAQsganwz4CHXIg/oj+NZXa6lAKHnKPQ835zKmaHVrfU9Z3QayodkU
nJi/6c6zOqmWg6ZZsbshmzklnhhAcItOeDTUgFJmnZ+ZU3WZ5fonFdBgXhlu6sS8
R6N7jhviMI2FwVdnnfWxqFHrQmQme4GaT8Nv0TEwrXrFjQ+FUO3E/qfqmIXZSaPt
KlbCZrYMSwJ4s287j15gbTSbsNXG1SLUDEN8Xbjeakf2E3NSTT2W314R/3D6Efbc
tU1gPZt+4loeBB9oygtDG8J7e5n3N/Ox/lvjpiml8OUtIHuwy34zM15WiOtYcK+Y
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302810734034192705279595135528358819062238
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 16:30:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 16:30:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.blenheimgolfclub.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17260636986658794635161842848542240574365099191465811386524897712827165779444840214642923955021924446879678109115522362588159219107321683574711948059055263455648698198706971027616245769383508334754909863776421340722858127343573291503549862996653787588740888274336028493676921127066423365981854486458526685219168985355274615595286050679196500852959962348868791862008135054231621016562564039266497149800663278996136279991269366632349202361950836200411325339180432497513113880565043598009120124855573744739900369555870400811823620658921795849570230928556168129969741687693818638748646513869948310339680019655130428184771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78f4850eb3d4456db0e4334e5a9801c03fb05583
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (918 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty-production2.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketballtaranaki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsgevents.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcommunityfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcommunityfitness.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesoball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcoterugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharbourtag.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangitikeigolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandolympicweightlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephschb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunrisecottage.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tutangiora.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatohockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fed340c5a0000040300483046022100d10a0f0bc4a4329c8660de82d3129c9933f9dba2d700a921be30536b92d82ad5022100eaaabc6bf4b753df7156e7821245e268eac128fb0de82110cfc8c774dfc6916000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fed340c350000040300473045022100da378d13fd189cf8db389c2f9cc1230539ac84016fa2fee6c42a7441309035930220205739be5422ba232da6a1ce0a52574f50feea36dab2030bdf5eef5d3fbcf0aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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