news.pennstatehealth.org

Issued by R3

About this certificate

This digital certificate with serial number 03:58:54:b9:91:e5:c3:a1:ce:a5:41:06:78:cc:6e:dd:b5:1d was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=news.pennstatehealth.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:54:b9:91:e5:c3:a1:ce:a5:41:06:78:cc:6e:dd:b5:1d
Serial Number (int): 291394324770041273536170620730040249070877
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c7:0b:16:2e:3b:8d:92:8d:76:42:d5:16:25:83:65:a0:09:40:39:75
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): af:eb:69:90:30:b7:84:e4:c6:20:05:d2:af:6a:20:87:03:f4:b8:9d
Fingerprint (sha256): 05:4c:f7:cf:40:eb:a2:78:af:0d:f6:cb:a5:47:bb:4a:c6:0d:86:da:e6:45:3a:9a:27:1f:90:ef:6b:74:b4:f2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate news.pennstatehealth.org

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for news.pennstatehealth.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

news.pennstatehealth.org
pennstatehealthnews.org
pennstatehealthnews.vmhost.psu.edu
psh-newsroom.vmhost.psu.edu
www.pennstatehealthnews.org

Other certificates including the domain name pennstatehealth.org

(limited to 100 certificates)
pennstatehealthnews.org
engage.pennstatehealth.org
careers.pennstatehealth.org
news.pennstatehealth.org
news.pennstatehealth.org
veteranjobs.pennstatehealth.org
pennstatehealth.org
esteem.pennstatehealth.org
veteranjobs.pennstatehealth.org
www.pennstatehealth.org
www.pennstatehealth.org
thisispennstatehealth.org
careers.pennstatehealth.org
ufc.pennstatehealth.org
careers.pennstatehealth.org
pennstatehealthnews.org
this.pennstatehealth.org
ufc.pennstatehealth.org
news.pennstatehealth.org
medgroup.pennstatehealth.org
prowellness.childrens.pennstatehealth.org
pennstatehealth.org
careers.pennstatehealth.org
pennstatehealth.org
*.pennstatehealth.org
careers.pennstatehealth.org
medicalupdate.pennstatehealth.org
pennstatehealthnews.org
esteem.pennstatehealth.org
cc.pennstatehealth.org
*.pennstatehealth.org
ufc.pennstatehealth.org
news.pennstatehealth.org
engage.pennstatehealth.org
careers.pennstatehealth.org
news.pennstatehealth.org
careers.pennstatehealth.org
this.pennstatehealth.org
veteranjobs.pennstatehealth.org
esteem.pennstatehealth.org
this.pennstatehealth.org
www.pennstatehealth.org
news.pennstatehealth.org
careers.pennstatehealth.org
pennstatehealthnews.org
careers.pennstatehealth.org
news.pennstatehealth.org
pennstatehealthnews.org
ufc.pennstatehealth.org
pennstatehealth.org
engage.pennstatehealth.org
thisispennstatehealth.org
medicalupdate.pennstatehealth.org
careers.pennstatehealth.org
medicalupdate.pennstatehealth.org
engage.pennstatehealth.org
engage.pennstatehealth.org
yourcare.pennstatehealth.org
careers.pennstatehealth.org
engage.pennstatehealth.org
ufc.pennstatehealth.org
medgroup.pennstatehealth.org
pennstatehealthnews.org
medicalupdate.pennstatehealth.org
engage.pennstatehealth.org
pennstatehealth.org
thisispennstatehealth.org
veteranjobs.pennstatehealth.org
veteranjobs.pennstatehealth.org
prowellness.childrens.pennstatehealth.org
psh-newsroom.vmhost.psu.edu
pennstatehealth.org
survivorship.childrens.pennstatehealth.org
pennstatehealth.org
news.pennstatehealth.org
engage.pennstatehealth.org
medicalupdate.pennstatehealth.org
news.pennstatehealth.org
www.pennstatehealth.org
engage.pennstatehealth.org
cc.pennstatehealth.org
news.pennstatehealth.org
pennstatehealth.org
esteem.pennstatehealth.org
veteranjobs.pennstatehealth.org
this.pennstatehealth.org
veteranjobs.pennstatehealth.org
veteranjobs.pennstatehealth.org
news.pennstatehealth.org
veteranjobs.pennstatehealth.org
medicalupdate.pennstatehealth.org
engage.pennstatehealth.org
news.pennstatehealth.org
survivorship.childrens.pennstatehealth.org
ufc.pennstatehealth.org
careers.pennstatehealth.org
cc.pennstatehealth.org
esteem.pennstatehealth.org
survivorship.childrens.pennstatehealth.org

Certificate

The complete raw certificate details for news.pennstatehealth.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgISA1hUuZHlw6HOpUEGeMxu3bUdMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MDIyMDUyMzNaFw0yMzEwMzEyMDUyMzJaMCMxITAfBgNVBAMT
GG5ld3MucGVubnN0YXRlaGVhbHRoLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANn/bw9jPRPY3LNXWH06hO6RplR7qJPMz0lzKcpdiFDcnihmN4Wv
qA+Cq3VjaRIzhFFFT7p4Zj+phalEqhc5JAQh1diuZR/Pr4g6fv1sVAa1V/+hPFZk
4A67RqD/PMB9ZeZoiy2RtlWaPq/x6DWx3Wr72BBB7OJdpxSbrNFPgX6RibC70qgo
X86EdUtrkEOEJJtstiCz3+PUWyLz6TdxiqejWsY5FLHNHt2JhpZMeAr/0mWFzFkq
Smy+spqCiBVOclcowrPWWKb2rhhAnumUG1mLcJbnNNdxjkiA6sH9YGr9GjAxEuNz
1CL+FdGWQtR9+nPhdUXZxA7hD0LcV7oQsp8CAwEAAaOCApMwggKPMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUxwsWLjuNko12QtUWJYNloAlAOXUwHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wgZwGA1UdEQSBlDCBkYIYbmV3cy5wZW5uc3RhdGVoZWFsdGgu
b3JnghdwZW5uc3RhdGVoZWFsdGhuZXdzLm9yZ4IicGVubnN0YXRlaGVhbHRobmV3
cy52bWhvc3QucHN1LmVkdYIbcHNoLW5ld3Nyb29tLnZtaG9zdC5wc3UuZWR1ght3
d3cucGVubnN0YXRlaGVhbHRobmV3cy5vcmcwEwYDVR0gBAwwCjAIBgZngQwBAgEw
ggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQC3Pvsk35xNunXyOcW6WPRsXfxCz3qf
NcSeHQmBJe20mQAAAYm4PQJlAAAEAwBGMEQCIBltNpYx/RXKLw9EA9+QU3TENyTb
o5jxUc5V6h5Hin1/AiAeIjqurnNQkKE23kYdGylER7l1YYOPrMCKbNTQIYxqUAB2
AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABibg9AowAAAQDAEcw
RQIhAJxfSIdX/1C4uJ1kAUM6SV3SLy46LEzE+CBRzSys7qFnAiBLi/THptYDZO2X
q8VNyoH+mQTeUyFKQSokzMx/MVOdbDANBgkqhkiG9w0BAQsFAAOCAQEAElFDc0GF
Qp3Dqe47pXmJWxLk5XpvlA1bZtGSh1uAPYrKuJFcm6Ss/UwP5vrLlZxMrjXv5gJz
eaZvGcTN6F0hOx+VGVtjjdlC91EO4QOa1ZXu0IU3ENpOPdlOqWNUNlKUEiIQXxqX
TTvxMmWp2RlqtfRkzBhi8FPYeCpQ49/X79wnkK3ER/bBHq00zzTYPn8F11aX34Vh
JZ5KumG+kYL2qb0wR4L+zAngCn8ZJVA3vNOkR6OyhPpwtdYYySqI/COtJ/3IYSf4
M5/mTgWuiRl2clG4tbX8Ouslc7Q+dD0S3s4CFDvEiMTVqWjpc2TwzdhqVTuBLjrc
y84AbzrR2old/g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f9vD2M9E9jcs1dYfTqE
7pGmVHuok8zPSXMpyl2IUNyeKGY3ha+oD4KrdWNpEjOEUUVPunhmP6mFqUSqFzkk
BCHV2K5lH8+viDp+/WxUBrVX/6E8VmTgDrtGoP88wH1l5miLLZG2VZo+r/HoNbHd
avvYEEHs4l2nFJus0U+BfpGJsLvSqChfzoR1S2uQQ4Qkm2y2ILPf49RbIvPpN3GK
p6NaxjkUsc0e3YmGlkx4Cv/SZYXMWSpKbL6ymoKIFU5yVyjCs9ZYpvauGECe6ZQb
WYtwluc013GOSIDqwf1gav0aMDES43PUIv4V0ZZC1H36c+F1RdnEDuEPQtxXuhCy
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291394324770041273536170620730040249070877
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 20:52:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 20:52:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'news.pennstatehealth.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27519671293051727183267448979807597073039217489316824424392492809642533226518447941488549518838182351371982611933867019205358686002886058235486501512795448928468446927554289998215867651923630387040758252026563942283634397339030882887866312818711800988468498671851433551409260089476649753170152413687476825691446133275020913847639472102998796071418096066124607795790340962478492752031584476287049542626240194661412584913673709176735723635378550022497412358091546380433584692691144392092889505209887870249065633037616182794144144490142106704236609978839014918742558942244568295421215993517727900921977402399995070558879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c70b162e3b8d928d7642d516258365a009403975
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (148 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.pennstatehealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennstatehealthnews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennstatehealthnews.vmhost.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psh-newsroom.vmhost.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennstatehealthnews.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189b83d026500000403004630440220196d369631fd15ca2f0f4403df905374c43724dba398f151ce55ea1e478a7d7f02201e223aaeae735090a136de461d1b294447b97561838facc08a6cd4d0218c6a50007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189b83d028c00000403004730450221009c5f488757ff50b8b89d6401433a495dd22f2e3a2c4cc4f82051cd2caceea16702204b8bf4c7a6d60364ed97abc54dca81fe9904de53214a412a24cccc7f31539d6c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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