www.yorkprepsc.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a5:f2:c7:e6:2e:dd:57:78:db:e5:a7:2b:69:47:1b:5a:c7 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.yorkprepsc.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a5:f2:c7:e6:2e:dd:57:78:db:e5:a7:2b:69:47:1b:5a:c7Serial Number (int): 317806159447957590733266851520881071184583
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 8d:d8:eb:39:72:ec:93:7d:eb:f8:b8:30:29:52:46:65:41:ac:f5:a0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 12:68:ae:8a:cb:38:d9:b4:7e:72:3d:a0:12:69:c8:06:34:72:5d:15
Fingerprint (sha256): 0c:ed:12:58:93:2f:b9:2e:7e:74:9d:33:73:c8:ef:2f:a1:4c:66:ac:b4:94:f2:fd:fe:b3:06:ab:1d:5b:d3:29
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.yorkprepsc.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.yorkprepsc.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.yorkprepsc.org
Other certificates including the domain name yorkprepsc.org
(limited to 100 certificates)
www.brewermiddleschool.wsisd.com
www.yorkprepsc.org
admin.bakerschools.org
admin.fruitvale.k12.ca.us
www.yorkprepsc.org
admin.bakerschools.org
admin.bakerschools.org
admin.athenour.unionsd.org
www.yorkprepsc.org
admin.msab.msa.state.mn.us
admin.bakerschools.org
yorkprepsc.org
admin.lds.freeholdtwp.k12.nj.us
admin.bakerschools.org
admin.ecps.us
paralosninoscms.org
admin.bakerschools.org
admin.bakerschools.org
www.sehstigers.com
admin.unionsd.org
yorkprepsc.org
yorkprepsc.org
admin.bakerschools.org
admin.yorkprepsc.org
admin.durangoschools.org
yorkprepsc.org
www.paralosninoscms.org
yorkprepsc.org
www.yorkprepsc.org
admin.bakerschools.org
www.yorkprepsc.org
www.is228.org
www.yorkprepsc.org
yorkprepsc.org
yorkprepsc.org
admin.cra.freeholdtwp.k12.nj.us
admin.athenour.unionsd.org
yorkprepsc.org
eas.mynhusd.org
admin.athenour.unionsd.org
paralosninoscms.org
www.yorkprepsc.org
admin.athenour.unionsd.org
yorkprepsc.org
admin.oshs.roaneschools.com
admin.bakerschools.org
admin.bakerschools.org
admin.is228.org
yorkprepsc.org
admin.bakerschools.org
admin.kit.mynhusd.org
admin.yorkprepsc.org
admin.ps38.jcboe.org
admin.athenour.unionsd.org
admin.bakerschools.org
admin.athenour.unionsd.org
admin.yorkprepsc.org
www.yorkprepsc.org
admin.hes.jcsd.net
www.cienegaelementary.org
admin.athenour.unionsd.org
yorkprepsc.org
admin.bakerschools.org
www.yorkprepsc.org
admin.bakerschools.org
admin.fruitvale.k12.ca.us
www.yorkprepsc.org
admin.bakerschools.org
admin.bakerschools.org
admin.athenour.unionsd.org
www.yorkprepsc.org
admin.msab.msa.state.mn.us
admin.bakerschools.org
yorkprepsc.org
admin.lds.freeholdtwp.k12.nj.us
admin.bakerschools.org
admin.ecps.us
paralosninoscms.org
admin.bakerschools.org
admin.bakerschools.org
www.sehstigers.com
admin.unionsd.org
yorkprepsc.org
yorkprepsc.org
admin.bakerschools.org
admin.yorkprepsc.org
admin.durangoschools.org
yorkprepsc.org
www.paralosninoscms.org
yorkprepsc.org
www.yorkprepsc.org
admin.bakerschools.org
www.yorkprepsc.org
www.is228.org
www.yorkprepsc.org
yorkprepsc.org
yorkprepsc.org
admin.cra.freeholdtwp.k12.nj.us
admin.athenour.unionsd.org
yorkprepsc.org
eas.mynhusd.org
admin.athenour.unionsd.org
paralosninoscms.org
www.yorkprepsc.org
admin.athenour.unionsd.org
yorkprepsc.org
admin.oshs.roaneschools.com
admin.bakerschools.org
admin.bakerschools.org
admin.is228.org
yorkprepsc.org
admin.bakerschools.org
admin.kit.mynhusd.org
admin.yorkprepsc.org
admin.ps38.jcboe.org
admin.athenour.unionsd.org
admin.bakerschools.org
admin.athenour.unionsd.org
admin.yorkprepsc.org
www.yorkprepsc.org
admin.hes.jcsd.net
www.cienegaelementary.org
admin.athenour.unionsd.org
yorkprepsc.org
admin.bakerschools.org
Certificate
The complete raw certificate details for www.yorkprepsc.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgISA6Xyx+Yu3Vd42+WnK2lHG1rHMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTQwMDEwMzZaFw0y MDA1MTQwMDEwMzZaMB0xGzAZBgNVBAMTEnd3dy55b3JrcHJlcHNjLm9yZzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALz6HgEd1Jee8HSPZfhiufJZJK1L znO5M/j3coEPiJzWdBl1a5kQO9MzcaeB0KKs5PMmdQ2r1dcKRgF7oUpDk5wbeaAi Mvwz2sa18ZqhkCyIpFlW315jX/aZVguvR6NOM9EKotnkvuk54QgHUUvDZi64Q1+X SV8cCXGIxdvakkhEKN8GWANWJG0K7oKQ5YZL5TXgibgcG0JQfZ/t3DeC0+bd9Xwv ooRXIIpbbPaAT+pMjMbmjHUvrUwVn39mBgXEFeWNJwT6Em3oeVOalmUF7x2+Al1A oza10BwFbDMJrNYUKq5Kw4XO8B76QcVogExXOXHq8LYcTGyXy3ULo25ihnMCAwEA AaOCAmcwggJjMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUjdjrOXLsk33r+LgwKVJG ZUGs9aAwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzAdBgNVHREEFjAUghJ3d3cueW9ya3ByZXBzYy5vcmcwTAYDVR0gBEUw QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgCy HgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAXBBP109AAAEAwBHMEUC IQD2m/vXDd7Esiti6CvBi6ZArXisZU3FIzYs91NrqlaNBQIgGm5N98MRHuFZrYWV XiD5Mgmr5k+igSLvg0kHl/SM1l4AdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkG jbIImjfZEwAAAXBBP13eAAAEAwBHMEUCIC4M5bjSA08G1YVEfOcZiPBVBSaLvDr9 EjWAzMyzemtzAiEAjw42aVRe4hXR4ufwBcgf4FOnxA6YP+ULqfN2fC+puvgwDQYJ KoZIhvcNAQELBQADggEBACj+LymIDS5kV+nFctbRinxu3uKG6OAJQDY3JfPNawSb yQqzcy3bGjOkwPKghZuFVVsGhRmUaevj/ZB9e01PLVDnNbZE7kZQc91DAVCyka22 Zr0S1/De6T3mgw/nm2gZhY4seChYkGoaXanQar2ZOHfn4vTiMTIVQ6rVBTmeiI1N axQfzHoCOEeadLo/vEo1kL7gqJUZoi1IYzsRuKT2wbzMNIFZ/IV+mqJFX4FdmTkd VkA1hrO8t4JDxRzcloCepveOzu7QSngpsFJ4Fss9AYl3jPAYZzAe2dNJXt5xsvqp 3wxLY+c4jZ5etoPUM46Fv6VB1kZcpzU/7wEE8HOy4rk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPoeAR3Ul57wdI9l+GK5 8lkkrUvOc7kz+PdygQ+InNZ0GXVrmRA70zNxp4HQoqzk8yZ1DavV1wpGAXuhSkOT nBt5oCIy/DPaxrXxmqGQLIikWVbfXmNf9plWC69Ho04z0Qqi2eS+6TnhCAdRS8Nm LrhDX5dJXxwJcYjF29qSSEQo3wZYA1YkbQrugpDlhkvlNeCJuBwbQlB9n+3cN4LT 5t31fC+ihFcgilts9oBP6kyMxuaMdS+tTBWff2YGBcQV5Y0nBPoSbeh5U5qWZQXv Hb4CXUCjNrXQHAVsMwms1hQqrkrDhc7wHvpBxWiATFc5cerwthxMbJfLdQujbmKG cwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 317806159447957590733266851520881071184583 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-14 00:10:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-14 00:10:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.yorkprepsc.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23856138724023620072492978113789699385427698643070219879842124515154469054965445120455281946527180383006859364491208432086853361730551974398350789797164935758491756831626390783006835227792674044392998301569317936544506863860695601069075837329230964472586352407676999728946588338146722928668784383312951973783488186285550801823437672912966787712106024508817088205760700138676718811214143157893753722431864473291604375092599198452293809693362168791263312654274884559872944512647639266016747146583528834318480883796750089174190694868440670147930171490320779979667873978398431656364784291897846958663955540405906273633907 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8dd8eb3972ec937debf8b8302952466541acf5a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yorkprepsc.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170413f5d3d0000040300473045022100f69bfbd70ddec4b22b62e82bc18ba640ad78ac654dc523362cf7536baa568d0502201a6e4df7c3111ee159ad85955e20f93209abe64fa28122ef83490797f48cd65e0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170413f5dde000004030047304502202e0ce5b8d2034f06d585447ce71988f05505268bbc3afd123580ccccb37a6b730221008f0e3669545ee215d1e2e7f005c81fe053a7c40e983fe50ba9f3767c2fa9baf8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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