eng.g2.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 66:7e:cd:95:7a:a9:00:90:0e:38:63:75:be:be:b8:e1 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eng.g2.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 66:7e:cd:95:7a:a9:00:90:0e:38:63:75:be:be:b8:e1
Serial Number (int): 136239654711163252854281168912352458977
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 29:33:00:7a:d0:31:3b:d9:fe:42:12:cd:41:f3:a2:50:e6:8c:c2:91
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 93:7c:d6:03:96:7b:1e:2e:95:25:92:d0:ba:dc:08:10:f6:d8:8f:34
Fingerprint (sha256): 0e:e0:7d:ec:c2:a1:55:2b:98:f1:87:b1:f4:9c:0a:f2:da:1e:91:64:66:c2:03:62:d3:37:c6:0c:0c:0d:a1:e7

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/cLWU28y6MXM
CRL Distribution Point: http://crls.pki.goog/gts1p5/kmvh2zciQAI.crl

Check the revocation status for certificate eng.g2.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eng.g2.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eng.g2.com

Other certificates including the domain name g2.com

(limited to 100 certificates)
swag.g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
research.g2.com
eng.g2.com
s5-sni.cloudinary.com
ssl906984.cloudflaressl.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
sell.g2.com
s5-sni.cloudinary.com
groove.ehlinks.com
s5-sni.cloudinary.com
connect.g2.com
track.g2.com
groove.simondata.com
s5-sni.cloudinary.com
looker.g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
learn.g2.com
sell.g2.com
s5-sni.cloudinary.com
eng.g2.com
g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
g2.com
groove.g2.com
s5-sni.cloudinary.com
sni.cloudflaressl.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
groove.robinpowered.com
g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
groove.swivl.com
groove.lyric.com
track.g2.com
culture.g2.com
groove.kiva.org
s5-sni.cloudinary.com
trust.g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
*.g2.com
s5-sni.cloudinary.com
engineering.g2.com
sell.g2.com
groove.ehlinks.com
track-sales.g2.com
s5-sni.cloudinary.com
g2.com
news.g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
refer.g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
groove.jebbit.com
s5-sni.cloudinary.com
track.g2.com
s5-sni.cloudinary.com
groove.jebbit.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
news.g2.com
s5-sni.cloudinary.com
groove.adpearance.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
track.g2.com
research.g2.com
users.g2.com
learn.g2.com
careers.g2.com
ssl906983.cloudflaressl.com
groove.cloudleaf.io
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
sni.cloudflaressl.com
news.g2.com
track-sales.g2.com

Certificate

The complete raw certificate details for eng.g2.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIQZn7NlXqpAJAOOGN1vr644TANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yMzAzMjkxMDA4NTFaFw0yMzA2Mjcx
MDA4NTBaMBUxEzARBgNVBAMTCmVuZy5nMi5jb20wggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCyk4pY4K7ua4WGefw9286ABpVI5FjOe90dJ7IRMcRuY9pN
Nj90hejNC47oEYqXt/Z6FVE6IGiPSpHgT28SWnH2G9BTpDkDwsafwIhHJbTFUxuk
DRT8SptGW0PWO8gHZ1FCPtmXpSVvHa/puSkXUrJodErlxugrSVz8t/wRoC4zXYlR
9WYrOY+V/LwhhLRdv0LCrEorJxZ3ypGBzkRHg6JuxH7umJ00x4R7imn95FbR5H1y
r6RRqH3CP3f04Mv+0hHr8aHMmjY4mbgKZSRGrLaDQAB11iJqhYvFgaZ5VRtv2Jw5
HVRKIzAbjIr65Pqf8nn0XmyYBapfb/0XWFVujzCBAgMBAAGjggJwMIICbDAOBgNV
HQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUKTMAetAxO9n+QhLNQfOiUOaMwpEwHwYDVR0jBBgwFoAU1fyeDd8e
yt0Il5duK8VfxSv17LgweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUFBzABhilodHRw
Oi8vb2NzcC5wa2kuZ29vZy9zL2d0czFwNS9jTFdVMjh5Nk1YTTAxBggrBgEFBQcw
AoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMXA1LmRlcjAVBgNVHREE
DjAMggplbmcuZzIuY29tMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkC
BQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMXA1
L2ttdmgyemNpUUFJLmNybDCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AHoyjFTY
ty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABhy0OaFEAAAQDAEcwRQIgZXIx
epzknaz4f/CvDcyjFZ9bMHLaCwOxc1klsd1nU7ACIQDNzq+6sztQDci8WQO+i/1O
s7W80vZ0IXycmnjcdt6YOgB1AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31t
Br1uAAABhy0OaAsAAAQDAEYwRAIgJ8Lr0UKhw1vpXUETguC0zVkRjRrI1jW37+Eb
AIFlhk0CID6ZnWvYVDlR+YVBdN4PH0s8ujw1WO6W5aC/wg+6SKi/MA0GCSqGSIb3
DQEBCwUAA4IBAQBwCzTuoC7JDdbHZJ5x9q5TsJKjRR2nopZJi/9uOcN2jGdgnHyj
g8TD9EPlNYg9gghKgKR8owwscp/BWIUcR+gy2OGAfZ+Pr3M1t5UDmE0Ig+2NmeuY
rtQ9wHBkCglYzllv+SW3UCgEE6BPLPMAXsWBnGP9X/IT9DdGx2ZSgLDWPl8p6xBV
Jz13Ze8yvod6U3mer7Af4rQw+4JL1l6dqd2LWVjEadud2FttJU8FOWaD8xxqty6L
0i/HyB6G0GVyls5ibf1K7bZlDvYRj9oJiJ03G3RTstcKyD/sxWT5/LtW+4sxd5nh
WtjWpgmRgBL8M5LQUKOmgRXr9AwcC3h173Rb
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspOKWOCu7muFhnn8PdvO
gAaVSORYznvdHSeyETHEbmPaTTY/dIXozQuO6BGKl7f2ehVROiBoj0qR4E9vElpx
9hvQU6Q5A8LGn8CIRyW0xVMbpA0U/EqbRltD1jvIB2dRQj7Zl6Ulbx2v6bkpF1Ky
aHRK5cboK0lc/Lf8EaAuM12JUfVmKzmPlfy8IYS0Xb9CwqxKKycWd8qRgc5ER4Oi
bsR+7pidNMeEe4pp/eRW0eR9cq+kUah9wj939ODL/tIR6/GhzJo2OJm4CmUkRqy2
g0AAddYiaoWLxYGmeVUbb9icOR1USiMwG4yK+uT6n/J59F5smAWqX2/9F1hVbo8w
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 136239654711163252854281168912352458977
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-29 10:08:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-27 10:08:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eng.g2.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22543173176014407039943206450206755614246549713441054392908121050042891509177754393886959662248603736732279230191555186713702064327297396583659013435065508883132863422218600969228109085354479832707964331025893817626983997072381974255494310352876109006825285068979162176867415007917131654303822229226932780881194577298779493009066501674756979953710524781938045028107214881694939977997648685038974985888290785187466020278275613479618827832232398330900844077875808687820473777082696860533213420978195394812231157996073175263726598214550661271513114481545971379481164960970687403001015348295960804208541746102461810028673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2933007ad0313bd9fe4212cd41f3a250e68cc291
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/cLWU28y6MXM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng.g2.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/kmvh2zciQAI.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001872d0e6851000004030047304502206572317a9ce49dacf87ff0af0dcca3159f5b3072da0b03b1735925b1dd6753b0022100cdceafbab33b500dc8bc5903be8bfd4eb3b5bcd2f674217c9c9a78dc76de983a007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001872d0e680b0000040300463044022027c2ebd142a1c35be95d411382e0b4cd59118d1ac8d635b7efe11b008165864d02203e999d6bd8543951f9854174de0f1f4b3cba3c3558ee96e5a0bfc20fba48a8bf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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