sli.esquire.com

Issued by R3

About this certificate

This digital certificate with serial number 03:3a:23:88:88:c1:7e:c2:d6:7e:d4:0c:b6:f4:3f:bf:0c:76 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sli.esquire.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3a:23:88:88:c1:7e:c2:d6:7e:d4:0c:b6:f4:3f:bf:0c:76
Serial Number (int): 281120466982658375730509225538537899625590
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: be:1d:e1:6f:cb:d3:70:4a:2b:76:be:d9:c7:14:f4:76:fd:d5:50:a4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ac:48:d7:d6:4c:31:a3:07:d5:8a:69:05:0b:c0:87:a2:8f:d8:40:6d
Fingerprint (sha256): 0f:48:17:57:ec:8b:77:5b:fc:a8:a6:c6:86:d8:9c:3d:3d:21:78:20:56:25:93:12:96:13:27:06:71:14:f3:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sli.esquire.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sli.esquire.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sli.bestproducts.com
sli.bicycling.com
sli.caranddriver.com
sli.cosmopolitan.com
sli.countryliving.com
sli.delish.com
sli.elle.com
sli.elledecor.com
sli.esquire.com
sli.goodhousekeeping.com
sli.harpersbazaar.com
sli.housebeautiful.com
sli.menshealth.com
sli.oprahmag.com
sli.popularmechanics.com
sli.prevention.com
sli.redbookmag.com
sli.roadandtrack.com
sli.runnersworld.com
sli.seventeen.com
sli.townandcountrymag.com
sli.veranda.com
sli.womansday.com
sli.womenshealthmag.com

Other certificates including the domain name esquire.com

(limited to 100 certificates)
*.25ans.jp
dns-vetting1-mims-pawel.map.fastly.net
hearst-prod.actioniq.mr-in.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-prod.actioniq.mr-in.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-prod.actioniq.mr-in.com
mentoring.esquire.com
shop.elle.com
sli.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
cosmopolitan.com
mcstaging-shop.elle.com
mentoring.esquire.com
hearst-prod.actioniq.mr-in.com
mcstaging-shop.elle.com
iscriviti.it.esquire.com
shop.elle.com
*.hearstapps.com
dns-vetting1-mims-pawel.map.fastly.net
link.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
secure.hdmtools.com
mentoring.esquire.com
*.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
shop.elle.com
cosmopolitan.com
shop.elle.com
actieabonnement.live.hearst.aubergine-it.nl
actieabonnement.live.hearst.aubergine-it.nl
dns-vetting1-mims-pawel.map.fastly.net
store.caranddriver.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
sli.esquire.com
sli.esquire.com
mcstaging-shop.elle.com
shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-hdm.map.fastly.net
*.esquire.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
shop.cosmopolitan.com
shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
stage-archive.esquire.com
hearst-hdm.map.fastly.net
actieabonnement.live.hearst.aubergine-it.nl
sli.esquire.com
cosmopolitan.com
subscribe.hearstmags.com
dns-vetting1-mims-pawel.map.fastly.net
magentocloud55.map.fastly.net
subscribe.hearstmags.com
archive.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
cosmopolitan.com
link.esquire.com
shop.elle.com
shop.elle.com
hearst-prod.actioniq.mr-in.com
shop.elledecor.com
mcstaging-shop.elle.com
actieabonnement.live.hearst.aubergine-it.nl
iscriviti.it.esquire.com
iscriviti.it.esquire.com
mcstaging-shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
link.esquire.com
sli.esquire.com
actieabonnement.live.hearst.aubergine-it.nl
shop.elle.com
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
abonnement.bicycling.nl
actieabonnement.live.hearst.aubergine-it.nl
dns-vetting1-mims-pawel.map.fastly.net
actieabonnement.live.hearst.aubergine-it.nl
cosmopolitan.com
store.caranddriver.com
dns-vetting1-mims-pawel.map.fastly.net
mcstaging-shop.elle.com
iscriviti.it.esquire.com
shop.elle.com
mentoring.esquire.com
shop.elle.com
sli.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
cosmopolitan.com
dns-vetting1-mims-pawel.map.fastly.net
mcstaging-shop.elle.com
mcstaging-shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
*.esquire.com

Certificate

The complete raw certificate details for sli.esquire.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1892XQQiYMHjxnTkc/7
U5Q3qwZgIWstxGFFpkLjRzkMsxv3Q47OS51JENlor05MCWJdoa55PWz/LrRfpv4N
aOYF9KvQPtfYFve84lRwInUjTkLKtCtnQwM/YYBibJwLcmTRd4zaGGi4tl2bxInL
Djjz6uHa95wYC67BesPTQxqizXt9+fH0x/gFlBlCV7WzZZF9MAGynvsZq2g2A7S0
aDCX7BQFZpXQFngUt9RTsWU8cnKnaaB3wfU8T8E4l9iunyS+R8h2yv+Q8Y2QQSjV
Rx9F+qeFBHQggLVAW+Sataf2V90rcH/u4qAmp+kpP4uvkbQ17+U6WjL2RcUbiQRE
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281120466982658375730509225538537899625590
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-28 17:26:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-28 17:26:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sli.esquire.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22138668752111320398041822929500032539110957519633119588739738414060109990119858660354698479693888247491246769859024945115003020754197294954436082314722424238260039337336840580476212327145201837382791402041269792132511623819046499970711060564716870135950613900489741022399191177311604973444754385102535883823623198333746324460648950030798758190046977982021804265145641252465369303229972926746239887336442258564201163731717452391052799663236010826498912948120310531943677488093621061977204239812543604636405746511839598349151931211682806013822359299357405286421427748493642717584700592987593024396613652268188185150671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be1de16fcbd3704a2b76bed9c714f476fdd550a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (506 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.bestproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.bicycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.caranddriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.cosmopolitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.countryliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.delish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.elle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.elledecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.esquire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.goodhousekeeping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.harpersbazaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.housebeautiful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.menshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.oprahmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.popularmechanics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.prevention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.redbookmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.roadandtrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.runnersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.seventeen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.townandcountrymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.veranda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.womansday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.womenshealthmag.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017ea1f06d7d00000403004730450221008c2fe7c046a4ba036cac27055f35f6e78a9850493939547566aa69674c7cad760220156f26cb62e7d5c8f8744f4886be6012360b277c92af5f4cdf6df54c251b279700750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017ea1f06dae000004030046304402200f63481f78d12fc39eb6760e034cd52591442579a110333bd0e65f9b7a5f0f9b02207f1cbdfde84ef50b570388cf0eecdf12a744bc27e84e0cfe430cd53b09c73c61
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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