selectnew.mercer.com
- Mercer US Inc. -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0a:ba:24:69:0e:34:80:4a:6f:07:a0:d4:8b:83:25:b2 was issued on by DigiCert Inc.
With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Mercer US Inc.
Organization:
Mercer US Inc.
State / Province:
New York
Locality: New York
Country: US
Locality: New York
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:ba:24:69:0e:34:80:4a:6f:07:a0:d4:8b:83:25:b2Serial Number (int): 14258785663635692241923652889306408370
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: a2:3d:87:35:79:a4:b9:9e:19:e6:1d:bf:c4:41:d4:60:63:a0:2b:35
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 64:1c:12:8c:bb:3c:df:91:68:c0:55:9c:ff:e6:97:c1:13:1e:4b:16
Fingerprint (sha256): 05:ed:c5:81:82:91:75:3b:a7:25:55:3c:8f:3c:f1:1b:39:e9:c7:0a:10:67:d1:07:00:13:dd:ad:25:7c:f4:5c
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate selectnew.mercer.com
46
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for selectnew.mercer.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
selectnew.mercer.com
www.benecignatrustedadvisor.mybenefitsolutions.com
www.idtcignatrustedadvisor.mybenefitsolutions.com
www.dlccignatrustedadvisor.mybenefitsolutions.com
www.fluorcignatrustedadvisor.mybenefitsolutions.com
www.griffoncignatrustedadvisor.mybenefitsolutions.com
www.lufthansacignatrustedadvisor.mybenefitsolutions.com
selfserve.mercer.com
www.mijl.mercer.co.jp
www.lvhncignatrustedadvisor.mybenefitsolutions.com
cigna.cignatrustedadvisor.com
www.bohenhancedbenefits.com
www.workforce-analytics.mercer.com
www.democignatrustedadvisor.mybenefitsolutions.com
www.rimcignatrustedadvisor.mybenefitsolutions.com
www.segalcignatrustedadvisor.mybenefitsolutions.com
www.coamemberinsurance.com
voiceongrowth.mercer.com
www.genesyscignatrustedadvisor.mybenefitsolutions.com
www.cignaretireecignatrustedadvisor.mybenefitsolutions.com
www.aimcocignatrustedadvisor.mybenefitsolutions.com
www.mercer-digital.com
www.bgclubsinsurance.com
www.stanleycignatrustedadvisor.mybenefitsolutions.com
www.superiorcourtfresnocignatrustedadvisor.mybenefitsolutions.com
www.cornellretireecignatrustedadvisor.mybenefitsolutions.com
benefits-reimagined.mercer.com.cn
www.peoplesunitedcignatrustedadvisor.mybenefitsolutions.com
www.countycmamemberinsurance.com
mijl.mercer.co.jp
www.siteonecignatrustedadvisor.mybenefitsolutions.com
www.carouselcignatrustedadvisor.mybenefitsolutions.com
www.aanpinsurance.com
africa.mercer.com
www.cignacignatrustedadvisor.mybenefitsolutions.com
www.ajgcignatrustedadvisor.mybenefitsolutions.com
benefits-reimagined.mercer.com
www.idacignatrustedadvisor.mybenefitsolutions.com
www.oceanspraycignatrustedadvisor.mybenefitsolutions.com
www.johnsoncignatrustedadvisor.mybenefitsolutions.com
www.cphamemberinsurance.com
www.iagnrmasuper.com.au
www.alumniplans.com
www.jennisoncignatrustedadvisor.mybenefitsolutions.com
voice-on-growth.mercer.com
www.mercer.at
www.benecignatrustedadvisor.mybenefitsolutions.com
www.idtcignatrustedadvisor.mybenefitsolutions.com
www.dlccignatrustedadvisor.mybenefitsolutions.com
www.fluorcignatrustedadvisor.mybenefitsolutions.com
www.griffoncignatrustedadvisor.mybenefitsolutions.com
www.lufthansacignatrustedadvisor.mybenefitsolutions.com
selfserve.mercer.com
www.mijl.mercer.co.jp
www.lvhncignatrustedadvisor.mybenefitsolutions.com
cigna.cignatrustedadvisor.com
www.bohenhancedbenefits.com
www.workforce-analytics.mercer.com
www.democignatrustedadvisor.mybenefitsolutions.com
www.rimcignatrustedadvisor.mybenefitsolutions.com
www.segalcignatrustedadvisor.mybenefitsolutions.com
www.coamemberinsurance.com
voiceongrowth.mercer.com
www.genesyscignatrustedadvisor.mybenefitsolutions.com
www.cignaretireecignatrustedadvisor.mybenefitsolutions.com
www.aimcocignatrustedadvisor.mybenefitsolutions.com
www.mercer-digital.com
www.bgclubsinsurance.com
www.stanleycignatrustedadvisor.mybenefitsolutions.com
www.superiorcourtfresnocignatrustedadvisor.mybenefitsolutions.com
www.cornellretireecignatrustedadvisor.mybenefitsolutions.com
benefits-reimagined.mercer.com.cn
www.peoplesunitedcignatrustedadvisor.mybenefitsolutions.com
www.countycmamemberinsurance.com
mijl.mercer.co.jp
www.siteonecignatrustedadvisor.mybenefitsolutions.com
www.carouselcignatrustedadvisor.mybenefitsolutions.com
www.aanpinsurance.com
africa.mercer.com
www.cignacignatrustedadvisor.mybenefitsolutions.com
www.ajgcignatrustedadvisor.mybenefitsolutions.com
benefits-reimagined.mercer.com
www.idacignatrustedadvisor.mybenefitsolutions.com
www.oceanspraycignatrustedadvisor.mybenefitsolutions.com
www.johnsoncignatrustedadvisor.mybenefitsolutions.com
www.cphamemberinsurance.com
www.iagnrmasuper.com.au
www.alumniplans.com
www.jennisoncignatrustedadvisor.mybenefitsolutions.com
voice-on-growth.mercer.com
www.mercer.at
Other certificates including the domain name mercer.com
(limited to 100 certificates)
us-east-1.stage.awsapp.mercer.com
proliability.mercer.com
pre-merceroneview.mercer.com
ghrm-entitlementtool.mercer.com
mas-nms.mercer.com
passkeyservicedev.mercer.com
helplinechatbot-anz.dev.mercer.com
uat.beneflex.mercer.com
managementapi-apigee.on-dallas.prod.admin.mercer.com
benefitcenter.mercer.com
www.census.mercer.com
bi-dev.mercer.com
www.smartirlsit.mercer.com
benefitsuite.mercer.com
tbo-ftp.mercer.com
selectnew.mercer.com
matomo.us-east-1.prod.ext.mercer.com
investor.mercer.com
dr.eprism.win.mercer.com
kroger-ua.mercer.com
mas-ipos.mercer.com
employeesurveys.mercer.com
hbcognos.mercer.com
fe.bclifecycle.mercer.com
canadadcrkdatabase.mercer.com
selectnew.mercer.com
uat.roleprofilebuilder.mercer.com
ncfu-otr-uat.mercer.com
enhance-operations-auth.us-east-1.dev.awsadmin.mercer.com
qa.comptryx.mercer.com
uat.workforce.mercer.com
proliability.mercer.com
bsuitecognos.dr.mercer.com
msso1-uat.mercer.com
www.assurant-uat.mercer.com
remportal.mercer.com
passkeyservicepre.mercer.com
helplinechatbot-anz.dev.mercer.com
api.mmp.us-east-1.dev.int.mercer.com
consumerone.mercer.com
uat.benefitsmonitor.mercer.com
associationlh-moso.mercer.com
uat.recomposicionsalarial.mercer.com
selectnew.mercer.com
common.mercer.com
www.krogerng-auth.mercer.com
admin.bi-analytics-int.us-east-1.stage.int.mercer.com
febe.nifi01.kf.euwt1.prd.oss2.mercer.com
hli.na.qa.app.mercer.com
dashboard.pndb.euwt1.prd.app.mercer.com
be.warrenmt.usinternal.stage.admin.mercer.com
bsuitesp.uat.mercer.com
selectnew.mercer.com
www.apigee.apac.prod.app.mercer.com
stg-entitlement-api.mobility.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
ad-uat.mercer.com
www.cswebr2uat.mercer.com
stg-internal-europe-nexus.mercer.com
bhips.mercer.com
uat-admin.employeeinsight.mercer.com
uat.mercergold.mercer.com
www.mas-bamboo.mercer.com
historiasclinicas.mercer.com
www.cswebr2uat.mercer.com
historiasclinicas.mercer.com
stg.tx.mercerharmonise.mercer.com
home.ap.mercer.com
common.mercer.com
beneflex.uat.mercer.com
securestg.mercer.com
be.image.mobile.euwt1.stg.oss2.mercer.com
app-v010-harmonise.mercer.com
mercer.com
www.mags.mercer.com
hrbauat.mercer.com
main.digicon.ext.prd.aws-uset1-dmz.mosedge.mercer.com
mags.mercer.com
image.livy01.kf.euwt1.prd.oss2.mercer.com
connectweb4.mercer.com
api.main.mobile.euwt1.stg.oss2.mercer.com
helplinechatbot-anz.dev.mercer.com
apigee.on-dallas.prod.admin.mercer.com
select.mercer.com
common.mercer.com
psa-mbses.mercer.com
www.auth-qa.mercer.com
selectnew.mercer.com
admin.puat-mbm.mercer.com
www.mercerapploginirlsit.mercer.com
emea.analytics.benefitsuite.mercer.com
mfa-admin.mercer.com
channel4.flexsite.mercer.com
apps.mercer.com
mas-vdi.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
main.pndb.euwt1.dev.int.mercer.com
hli-drupal.emea.prod.admin.mercer.com
cator11db31cn3.mercer.com
consumer.mercer.com
proliability.mercer.com
pre-merceroneview.mercer.com
ghrm-entitlementtool.mercer.com
mas-nms.mercer.com
passkeyservicedev.mercer.com
helplinechatbot-anz.dev.mercer.com
uat.beneflex.mercer.com
managementapi-apigee.on-dallas.prod.admin.mercer.com
benefitcenter.mercer.com
www.census.mercer.com
bi-dev.mercer.com
www.smartirlsit.mercer.com
benefitsuite.mercer.com
tbo-ftp.mercer.com
selectnew.mercer.com
matomo.us-east-1.prod.ext.mercer.com
investor.mercer.com
dr.eprism.win.mercer.com
kroger-ua.mercer.com
mas-ipos.mercer.com
employeesurveys.mercer.com
hbcognos.mercer.com
fe.bclifecycle.mercer.com
canadadcrkdatabase.mercer.com
selectnew.mercer.com
uat.roleprofilebuilder.mercer.com
ncfu-otr-uat.mercer.com
enhance-operations-auth.us-east-1.dev.awsadmin.mercer.com
qa.comptryx.mercer.com
uat.workforce.mercer.com
proliability.mercer.com
bsuitecognos.dr.mercer.com
msso1-uat.mercer.com
www.assurant-uat.mercer.com
remportal.mercer.com
passkeyservicepre.mercer.com
helplinechatbot-anz.dev.mercer.com
api.mmp.us-east-1.dev.int.mercer.com
consumerone.mercer.com
uat.benefitsmonitor.mercer.com
associationlh-moso.mercer.com
uat.recomposicionsalarial.mercer.com
selectnew.mercer.com
common.mercer.com
www.krogerng-auth.mercer.com
admin.bi-analytics-int.us-east-1.stage.int.mercer.com
febe.nifi01.kf.euwt1.prd.oss2.mercer.com
hli.na.qa.app.mercer.com
dashboard.pndb.euwt1.prd.app.mercer.com
be.warrenmt.usinternal.stage.admin.mercer.com
bsuitesp.uat.mercer.com
selectnew.mercer.com
www.apigee.apac.prod.app.mercer.com
stg-entitlement-api.mobility.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
ad-uat.mercer.com
www.cswebr2uat.mercer.com
stg-internal-europe-nexus.mercer.com
bhips.mercer.com
uat-admin.employeeinsight.mercer.com
uat.mercergold.mercer.com
www.mas-bamboo.mercer.com
historiasclinicas.mercer.com
www.cswebr2uat.mercer.com
historiasclinicas.mercer.com
stg.tx.mercerharmonise.mercer.com
home.ap.mercer.com
common.mercer.com
beneflex.uat.mercer.com
securestg.mercer.com
be.image.mobile.euwt1.stg.oss2.mercer.com
app-v010-harmonise.mercer.com
mercer.com
www.mags.mercer.com
hrbauat.mercer.com
main.digicon.ext.prd.aws-uset1-dmz.mosedge.mercer.com
mags.mercer.com
image.livy01.kf.euwt1.prd.oss2.mercer.com
connectweb4.mercer.com
api.main.mobile.euwt1.stg.oss2.mercer.com
helplinechatbot-anz.dev.mercer.com
apigee.on-dallas.prod.admin.mercer.com
select.mercer.com
common.mercer.com
psa-mbses.mercer.com
www.auth-qa.mercer.com
selectnew.mercer.com
admin.puat-mbm.mercer.com
www.mercerapploginirlsit.mercer.com
emea.analytics.benefitsuite.mercer.com
mfa-admin.mercer.com
channel4.flexsite.mercer.com
apps.mercer.com
mas-vdi.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
main.pndb.euwt1.dev.int.mercer.com
hli-drupal.emea.prod.admin.mercer.com
cator11db31cn3.mercer.com
consumer.mercer.com
Certificate
The complete raw certificate details for selectnew.mercer.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMozCCC4ugAwIBAgIQCrokaQ40gEpvB6DUi4MlsjANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgxMDI1MDAwMDAwWhcN MTkwMTI5MTIwMDAwWjBrMQswCQYDVQQGEwJVUzERMA8GA1UECBMITmV3IFlvcmsx ETAPBgNVBAcTCE5ldyBZb3JrMRcwFQYDVQQKEw5NZXJjZXIgVVMgSW5jLjEdMBsG A1UEAxMUc2VsZWN0bmV3Lm1lcmNlci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPA4cxxFX+mnQbN2Ggz95hSKwIxebKc58sIJlIhp6sY9Miv9k1 Mdh+VbnrGcNzf9LPBMtvxneXaPm1z6pzSWfuHXpFTziIXCguRHxCcbiZUimpA3FZ Q1B6cPXUpnxZp286djNx/v8yDyTLWThOLE3o2gxFK2bo/YEeCSvZ3ehSfIbmgUqI fSza3zAPSmmVR8WVUq8/CA6EmjTpfsax3l0DD0fBs4HPTRbRHZ8I2383nP3axQte 6olWbVNvumftx40+XfkwGOvzdLkv3sPq2T9TamgQsbD+HixOsqqVJnpEuLvLMLgW S3a7hrU91lQQbUUXDIpdd2nO06+BQBr7xNj5AgMBAAGjgglfMIIJWzAfBgNVHSME GDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUoj2HNXmkuZ4Z5h2/ xEHUYGOgKzUwggePBgNVHREEggeGMIIHgoIUc2VsZWN0bmV3Lm1lcmNlci5jb22C Mnd3dy5iZW5lY2lnbmF0cnVzdGVkYWR2aXNvci5teWJlbmVmaXRzb2x1dGlvbnMu Y29tgjF3d3cuaWR0Y2lnbmF0cnVzdGVkYWR2aXNvci5teWJlbmVmaXRzb2x1dGlv bnMuY29tgjF3d3cuZGxjY2lnbmF0cnVzdGVkYWR2aXNvci5teWJlbmVmaXRzb2x1 dGlvbnMuY29tgjN3d3cuZmx1b3JjaWduYXRydXN0ZWRhZHZpc29yLm15YmVuZWZp dHNvbHV0aW9ucy5jb22CNXd3dy5ncmlmZm9uY2lnbmF0cnVzdGVkYWR2aXNvci5t eWJlbmVmaXRzb2x1dGlvbnMuY29tgjd3d3cubHVmdGhhbnNhY2lnbmF0cnVzdGVk YWR2aXNvci5teWJlbmVmaXRzb2x1dGlvbnMuY29tghRzZWxmc2VydmUubWVyY2Vy LmNvbYIVd3d3Lm1pamwubWVyY2VyLmNvLmpwgjJ3d3cubHZobmNpZ25hdHJ1c3Rl ZGFkdmlzb3IubXliZW5lZml0c29sdXRpb25zLmNvbYIdY2lnbmEuY2lnbmF0cnVz dGVkYWR2aXNvci5jb22CG3d3dy5ib2hlbmhhbmNlZGJlbmVmaXRzLmNvbYIid3d3 Lndvcmtmb3JjZS1hbmFseXRpY3MubWVyY2VyLmNvbYIyd3d3LmRlbW9jaWduYXRy dXN0ZWRhZHZpc29yLm15YmVuZWZpdHNvbHV0aW9ucy5jb22CMXd3dy5yaW1jaWdu YXRydXN0ZWRhZHZpc29yLm15YmVuZWZpdHNvbHV0aW9ucy5jb22CM3d3dy5zZWdh bGNpZ25hdHJ1c3RlZGFkdmlzb3IubXliZW5lZml0c29sdXRpb25zLmNvbYIad3d3 LmNvYW1lbWJlcmluc3VyYW5jZS5jb22CGHZvaWNlb25ncm93dGgubWVyY2VyLmNv bYI1d3d3LmdlbmVzeXNjaWduYXRydXN0ZWRhZHZpc29yLm15YmVuZWZpdHNvbHV0 aW9ucy5jb22COnd3dy5jaWduYXJldGlyZWVjaWduYXRydXN0ZWRhZHZpc29yLm15 YmVuZWZpdHNvbHV0aW9ucy5jb22CM3d3dy5haW1jb2NpZ25hdHJ1c3RlZGFkdmlz b3IubXliZW5lZml0c29sdXRpb25zLmNvbYIWd3d3Lm1lcmNlci1kaWdpdGFsLmNv bYIYd3d3LmJnY2x1YnNpbnN1cmFuY2UuY29tgjV3d3cuc3RhbmxleWNpZ25hdHJ1 c3RlZGFkdmlzb3IubXliZW5lZml0c29sdXRpb25zLmNvbYJBd3d3LnN1cGVyaW9y Y291cnRmcmVzbm9jaWduYXRydXN0ZWRhZHZpc29yLm15YmVuZWZpdHNvbHV0aW9u cy5jb22CPHd3dy5jb3JuZWxscmV0aXJlZWNpZ25hdHJ1c3RlZGFkdmlzb3IubXli ZW5lZml0c29sdXRpb25zLmNvbYIhYmVuZWZpdHMtcmVpbWFnaW5lZC5tZXJjZXIu Y29tLmNugjt3d3cucGVvcGxlc3VuaXRlZGNpZ25hdHJ1c3RlZGFkdmlzb3IubXli ZW5lZml0c29sdXRpb25zLmNvbYIgd3d3LmNvdW50eWNtYW1lbWJlcmluc3VyYW5j ZS5jb22CEW1pamwubWVyY2VyLmNvLmpwgjV3d3cuc2l0ZW9uZWNpZ25hdHJ1c3Rl ZGFkdmlzb3IubXliZW5lZml0c29sdXRpb25zLmNvbYI2d3d3LmNhcm91c2VsY2ln bmF0cnVzdGVkYWR2aXNvci5teWJlbmVmaXRzb2x1dGlvbnMuY29tghV3d3cuYWFu cGluc3VyYW5jZS5jb22CEWFmcmljYS5tZXJjZXIuY29tgjN3d3cuY2lnbmFjaWdu YXRydXN0ZWRhZHZpc29yLm15YmVuZWZpdHNvbHV0aW9ucy5jb22CMXd3dy5hamdj aWduYXRydXN0ZWRhZHZpc29yLm15YmVuZWZpdHNvbHV0aW9ucy5jb22CHmJlbmVm aXRzLXJlaW1hZ2luZWQubWVyY2VyLmNvbYIxd3d3LmlkYWNpZ25hdHJ1c3RlZGFk dmlzb3IubXliZW5lZml0c29sdXRpb25zLmNvbYI4d3d3Lm9jZWFuc3ByYXljaWdu YXRydXN0ZWRhZHZpc29yLm15YmVuZWZpdHNvbHV0aW9ucy5jb22CNXd3dy5qb2hu c29uY2lnbmF0cnVzdGVkYWR2aXNvci5teWJlbmVmaXRzb2x1dGlvbnMuY29tght3 d3cuY3BoYW1lbWJlcmluc3VyYW5jZS5jb22CF3d3dy5pYWducm1hc3VwZXIuY29t LmF1ghN3d3cuYWx1bW5pcGxhbnMuY29tgjZ3d3cuamVubmlzb25jaWduYXRydXN0 ZWRhZHZpc29yLm15YmVuZWZpdHNvbHV0aW9ucy5jb22CGnZvaWNlLW9uLWdyb3d0 aC5tZXJjZXIuY29tgg13d3cubWVyY2VyLmF0MA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0 cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0 dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARF MEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2lj ZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcw AYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8v Y2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0Eu Y3J0MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL BQADggEBAEspG6eASN3FFwgC5/BnjNQtnR79mvxRBjuDgFW4j0ojuX2raQTYaDKr vyGEw9o6ycG9pjo1Xs3xUS9wVTX8dVBpbz3LnYrjfsSEHrDE2Grm1tE4azvUBYyu 8qtIF+PShHyBpVE/KRV1iO+P7pigm8aA+QJKA9+UvCsBtD2ocxO+4T658de+/XBm AjdsWRHFZ+KtypDAVnUfRBXP6miHlOEuB72kSfQ17Dvf9HOiw9dVjeKEeyy4ZXu5 kBKIiHncSos2UtaKNH9CR/koRJmCwyx3kUohVPSWL8UDEbxhoGxcDvxxwaIg1a7j 9c/8iICL/rSkFnK5pv2vblN2JDphAHo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwOHMcRV/pp0GzdhoM/e YUisCMXmynOfLCCZSIaerGPTIr/ZNTHYflW56xnDc3/SzwTLb8Z3l2j5tc+qc0ln 7h16RU84iFwoLkR8QnG4mVIpqQNxWUNQenD11KZ8WadvOnYzcf7/Mg8ky1k4TixN 6NoMRStm6P2BHgkr2d3oUnyG5oFKiH0s2t8wD0pplUfFlVKvPwgOhJo06X7Gsd5d Aw9HwbOBz00W0R2fCNt/N5z92sULXuqJVm1Tb7pn7ceNPl35MBjr83S5L97D6tk/ U2poELGw/h4sTrKqlSZ6RLi7yzC4Fkt2u4a1PdZUEG1FFwyKXXdpztOvgUAa+8TY +QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14258785663635692241923652889306408370 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mercer US Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'selectnew.mercer.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26133068900471323011849096835973349958477926577562904003110919496788821606071707875123895370651956652893603076472633536966763951573729689657014364233699231000764357868380009181346207318780968456551462795840011404425628818354443613599952037288502354584681857158813941005185894803519060014716752990830973202012947515555895123634612655391312069434020941099431194271749394809539897900845312140711718942030375389515687948894000573976531347497830037887406668181975397172486726591125800791744678475609511845036263736475166142396674105947869934706901341859471305430472163805927529714137924424147600344520557567590892046702841 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a23d873579a4b99e19e61dbfc441d46063a02b35 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1926 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selectnew.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benecignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idtcignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlccignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fluorcignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.griffoncignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lufthansacignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfserve.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mijl.mercer.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvhncignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cigna.cignatrustedadvisor.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bohenhancedbenefits.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workforce-analytics.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.democignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rimcignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.segalcignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coamemberinsurance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voiceongrowth.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genesyscignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cignaretireecignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aimcocignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer-digital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgclubsinsurance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanleycignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superiorcourtfresnocignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornellretireecignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits-reimagined.mercer.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoplesunitedcignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countycmamemberinsurance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijl.mercer.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siteonecignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carouselcignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aanpinsurance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africa.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cignacignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ajgcignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits-reimagined.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idacignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceanspraycignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnsoncignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cphamemberinsurance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iagnrmasuper.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniplans.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jennisoncignatrustedadvisor.mybenefitsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voice-on-growth.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.at' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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