CBJ01-T0-LB01.greateasternlife.com

- Great Eastern Life Assurance (Malaysia) Berhad -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:25:9d:b2:65:1a:b2:0c:56:7b:a2:ad:74:61:b0:a1 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Great Eastern Life Assurance (Malaysia) Berhad

Organization: Great Eastern Life Assurance (Malaysia) Berhad
State / Province: Wilayah Persekutuan Kuala Lumpur
Locality: Kuala Lumpur
Country: MY

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:25:9d:b2:65:1a:b2:0c:56:7b:a2:ad:74:61:b0:a1
Serial Number (int): 4182997443331495964368166270667960481
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 22:ab:e4:4b:dc:fd:be:88:18:fa:9a:aa:bc:8b:f6:ba:f0:aa:e7:85
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): b9:c6:fb:bc:18:c5:37:f3:47:7c:38:6c:a7:dd:56:d2:35:d3:28:74
Fingerprint (sha256): 09:47:51:40:02:6d:3c:74:c1:29:f5:8b:0c:e2:fe:7f:67:cb:1c:c5:a5:10:98:3d:06:b4:cd:a0:77:b6:5d:6a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl

Check the revocation status for certificate CBJ01-T0-LB01.greateasternlife.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for CBJ01-T0-LB01.greateasternlife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

CBJ01-T0-LB01.greateasternlife.com

Other certificates including the domain name greateasternlife.com

(limited to 100 certificates)
www.greateasternlife.com
imperva.com
imperva.com
sso-mymob.greateasternlife.com
upgreat.greateasternlife.com
internal-brandportal.greateasternlife.com
imperva.com
exchange.greateasternlife.com
econnect-my.greateasternlife.com
brandportal.greateasternlife.com
esso-sgmob.greateasternlife.com
aemportal-staging.greateasternlife.com
tracking.csd-my.greateasternlife.com
sso-sgweb.greateasternlife.com
ge-assess.greateasternlife.com
groupinsurance.greateasternlife.com
app.greateasternlife.com
imperva.com
mst.greateasternlife.com
tracking.digital-my.greateasternlife.com
greatlink.greateasternlife.com
secureapp-web2.greateasternlife.com
ge-assess.greateasternlife.com
econnect-id.greateasternlife.com
mpos-my.greateasternlife.com
imperva.com
greatlink.greateasternlife.com
lw-int.greateasternlife.com
greatactivity-uat.greateasternlife.com
cfecampus.greateasternlife.com
fa-epartner-my.greateasternlife.com
ebhub.greateasternlife.com
lifehubapps.greateasternlife.com
ais.greateasternlife.com
fa-epartner-my.greateasternlife.com
bsc-ext.greateasternlife.com
greatactivity.greateasternlife.com
go.greateasternlife.com
tracking.greateasternlife.com
exchange.greateasternlife.com
esso-sgweb.greateasternlife.com
newrep-cfecampus.greateasternlife.com
tableau-gelm.greateasternlife.com
imperva.com
securemail.greateasternlife.com
ulapiapgr.digitalsign.greateasternlife.com
CBJ01-T0-LB01.greateasternlife.com
GELS.FATCA.GREATEASTERNLIFE.COM
tracking.digital-my.greateasternlife.com
sso-sguweb.greateasternlife.com
exchange.greateasternlife.com
app.greateasternlife.com
go.greateasternlife.com
mylamp.greateasternlife.com
app1.greateasternlife.com
filegateway.greateasternlife.com
greatadvice-gels-sg.greateasternlife.com
supremecare.greateasternlife.com
greatactivity.greateasternlife.com
filegateway.greateasternlife.com
sso-mymob.greateasternlife.com
greatidsgfindexsign.greateasternlife.com
tracking.csd-my.greateasternlife.com
synergeoffline-sg.greateasternlife.com
sso-myuweb.greateasternlife.com
uatrewards-sg.greateasternlife.com
imperva.com
imperva.com
tracking.csd-my.greateasternlife.com
cfecontent.greateasternlife.com
giexchange-my.greateasternlife.com
giexchange-sg.greateasternlife.com
epartner-my.greateasternlife.com
rep-admin.greateasternlife.com
erecruitment.greateasternlife.com
imperva.com
pos-vn.greateasternlife.com
tracking.affinity-my.greateasternlife.com
e-sso.greateasternlife.com
imperva.com
imperva.com
tracking.greateasternlife.com
imperva.com
domains2.clickmeter.com
imperva.com
apiuat.greateasternlife.com
bancarome-gw-my.greateasternlife.com
uatrewards-my.greateasternlife.com
GETB.CRS.GREATEASTERNLIFE.COM
imperva.com
imperva.com
mylamp-cfecontent.greateasternlife.com
fpms-id.greateasternlife.com
sso-myumob.greateasternlife.com
glsexp1.greateasternlife.com
uat-bancarome-gw-my.greateasternlife.com
api-geapp.greateasternlife.com
document-uat.greateasternlife.com
imperva.com
securemail.greateasternlife.com

Certificate

The complete raw certificate details for CBJ01-T0-LB01.greateasternlife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OfuZI0FqROGNxcYVlmz
D5S8M/8KOUbICNGZ19WffQB24pneFo98qS5bUWrHNP6AiSEjbZo52rDdAZ0Ct1Qi
U9NsK2EYvg2oAC8jCNdXUDw1hyKGvpEnCsTGYsiHs8M3SRSej14URdHhxSi/yEBN
nm0xS+wuSEb73KKj5wvMyB13GWSVVaEqr1wPfX8r/pO002FjetC/1gnvWzVLlywx
TOldNne5mFt6t6VUdLXBXgqRmtwI3MKb4B21UxpzmXLT94QzETMDmGEnxY4L1DI8
E/hFlifXhRr3vR6wQT8isZESIxnBbk5Rp/+6p9+T78NV4ZM49Mn1oXnzIh2xI+x9
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4182997443331495964368166270667960481
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilayah Persekutuan Kuala Lumpur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kuala Lumpur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Great Eastern Life Assurance (Malaysia) Berhad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CBJ01-T0-LB01.greateasternlife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27886796640606254908772503329942631858940240113973492638914229076875538720053406826298579048700098769222148414767995731670595846215767234217067776908746379449394365887376126524608231518381803223871010949423580408179950010075302383017888884759001210150056285088856046053086505011857244082102980715269297895114729459361308764008487599430532177571669291369430529964406820384018424486512699879242643025696919522416717505459159873698788721984137489597739870842574989351718284485032467565830417071873192839579912269312685088505798996747512688819168085687160596227673868996098582543343278818411977903434117396008445078699471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22abe44bdcfdbe8818fa9aaabc8bf6baf0aae785
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'CBJ01-T0-LB01.greateasternlife.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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