formation.parcmarin.qc.ca

Issued by R3

About this certificate

This digital certificate with serial number 04:a2:a7:e0:23:4c:0b:a5:7f:89:b8:3e:03:b0:28:0f:4b:c3 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=formation.parcmarin.qc.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a2:a7:e0:23:4c:0b:a5:7f:89:b8:3e:03:b0:28:0f:4b:c3
Serial Number (int): 403798032033934691308767860044504402709443
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a0:b0:27:6a:17:e9:92:cb:f4:ac:29:50:50:93:cc:e4:85:cd:36:84
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 88:e9:4b:49:70:4c:e9:43:42:92:ed:31:5d:35:b8:a8:48:71:1c:97
Fingerprint (sha256): 13:ab:b3:60:fc:c5:6f:c9:f1:ad:cb:f8:a2:db:34:42:60:25:98:25:90:34:b2:a6:d3:99:6d:5b:2b:ca:f9:66

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate formation.parcmarin.qc.ca

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for formation.parcmarin.qc.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

employespc.formation.parcmarin.qc.ca
expvisit.formation.parcmarin.qc.ca
formation.parcmarin.qc.ca
formationguides.formation.parcmarin.qc.ca
formationpilotes.formation.parcmarin.qc.ca
guideskayak.formation.parcmarin.qc.ca
pilotes.formation.parcmarin.qc.ca
www.formation.parcmarin.qc.ca

Other certificates including the domain name parcmarin.qc.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for formation.parcmarin.qc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHDjCCBfagAwIBAgISBKKn4CNMC6V/ibg+A7AoD0vDMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MjAyMzU5MjVaFw0yMzEwMTgyMzU5MjRaMCQxIjAgBgNVBAMT
GWZvcm1hdGlvbi5wYXJjbWFyaW4ucWMuY2EwggIiMA0GCSqGSIb3DQEBAQUAA4IC
DwAwggIKAoICAQDaMGvIep3ttp5acEBdustwiaAlJvZUTuSHh1RAxMFYMWPWIDwa
8TYmQcdFZP2Py1JkTo5vUizHAiLsLueIg5wDWlGNYTWK4TN7r8TEQ6z+gRFHWqMH
lC7PACTfWGgWVBFfDP/+kjCNX2XSPFHkU7msGPubCO7mMOSd1YcUk9NiV55/hkEE
H++/wPUYjCj2rumh2gvrIaBJWsHBatu9ec2XClpE0ONcyLJqB2wPCM3dKomAKHWw
3hhhiulsKhKE0zqXL4f0NdOUaSQrR3VkQly1qgvj1phmTbZpnASMjg0enrhqrPLO
9jc2zxQNAh30exmTwaKwegB2xEWPOiEZMbwjlHpCOtz1ocdX12OPAJ0q9yAXiwkk
LhVuYg5oce/cVkzij6KDCpDLlbFpVPzt6kYmHnV1HpNAI1xr3V4o0ozGagjmdSW5
1VSp/Xvw4T3z9r5E09MOkqjkuQb+cOiVaB3DRWIEnJwplPXtQo4XfdEXypW1IyzM
wZLjFO1xYm2z8VBQBT1lLGTvwoIj0JmQbMcrDm+PVO2ydLECsCqY9H6iOCYxhMRI
4hN0QTJuFUSpemSf/l4btQ8vpBquRtgQKtsodFnfbFrwE7e7gkOCeuWNmBtOdTBx
+0VSxMC4IsitNaDdczS+Fvc0EUFErytuhlb7ZUGrpOve2mXPfNAFr6uT9QIDAQAB
o4IDKjCCAyYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSgsCdqF+mSy/SsKVBQk8zk
hc02hDAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcB
AQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEF
BQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCATIGA1UdEQSCASkwggElgiRl
bXBsb3llc3BjLmZvcm1hdGlvbi5wYXJjbWFyaW4ucWMuY2GCImV4cHZpc2l0LmZv
cm1hdGlvbi5wYXJjbWFyaW4ucWMuY2GCGWZvcm1hdGlvbi5wYXJjbWFyaW4ucWMu
Y2GCKWZvcm1hdGlvbmd1aWRlcy5mb3JtYXRpb24ucGFyY21hcmluLnFjLmNhgipm
b3JtYXRpb25waWxvdGVzLmZvcm1hdGlvbi5wYXJjbWFyaW4ucWMuY2GCJWd1aWRl
c2theWFrLmZvcm1hdGlvbi5wYXJjbWFyaW4ucWMuY2GCIXBpbG90ZXMuZm9ybWF0
aW9uLnBhcmNtYXJpbi5xYy5jYYIdd3d3LmZvcm1hdGlvbi5wYXJjbWFyaW4ucWMu
Y2EwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8A
dQC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYl19W5BAAAEAwBG
MEQCIAejfTyc1F30c96JQfd1kWD0XIrSLkR/loJQ7ldEUV3hAiBRyBAxJ9RkNoG5
NiepuNZH3RcJeiUSQqAR2GeuElUFKAB2AHoyjFTYty22IOo44FIe6YQWcDIThU07
0ivBOlejUutSAAABiXX1blAAAAQDAEcwRQIhALYthtahIQ3wgqnQzdfOvsBHgKk8
17K36kYMm8ht0JqkAiBY3Adz+NvvVMZseXAP0zMZrw2hpB9plk2+UXUa+agwWzAN
BgkqhkiG9w0BAQsFAAOCAQEAupalpmaPbSGAwr8CTbghifsB3vgzlCLEmwVAvu7D
icpfcih0Fs4xMKgz4nNWtbGOVbDByS34xSe3QoUnw3XS6qT5hib7oW8mDPMF1JZc
bhz/6leECoib6WlzhnY1TyhDKKj4KrVdae8hK0ca6JR49L0EErpbm0dWdNtEnGIG
TClT+vUrrb/fNMoM3NCUrnv/kiobJ5A3+lJZBSUUgJUDuk28t7Oje9/UHwB1W+Co
Z1n8QzibFnpJWgdLC91e6HsfOzqqpuE5q+KJ3tw80QCoOL67yhCcuiHFrO0UIf7l
7VWC1XHWLgBx7eHUVlERXkuUpDzaBDb9jZjgoJd6slh46Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2jBryHqd7baeWnBAXbrL
cImgJSb2VE7kh4dUQMTBWDFj1iA8GvE2JkHHRWT9j8tSZE6Ob1IsxwIi7C7niIOc
A1pRjWE1iuEze6/ExEOs/oERR1qjB5QuzwAk31hoFlQRXwz//pIwjV9l0jxR5FO5
rBj7mwju5jDkndWHFJPTYleef4ZBBB/vv8D1GIwo9q7podoL6yGgSVrBwWrbvXnN
lwpaRNDjXMiyagdsDwjN3SqJgCh1sN4YYYrpbCoShNM6ly+H9DXTlGkkK0d1ZEJc
taoL49aYZk22aZwEjI4NHp64aqzyzvY3Ns8UDQId9HsZk8GisHoAdsRFjzohGTG8
I5R6Qjrc9aHHV9djjwCdKvcgF4sJJC4VbmIOaHHv3FZM4o+igwqQy5WxaVT87epG
Jh51dR6TQCNca91eKNKMxmoI5nUludVUqf178OE98/a+RNPTDpKo5LkG/nDolWgd
w0ViBJycKZT17UKOF33RF8qVtSMszMGS4xTtcWJts/FQUAU9ZSxk78KCI9CZkGzH
Kw5vj1TtsnSxArAqmPR+ojgmMYTESOITdEEybhVEqXpkn/5eG7UPL6QarkbYECrb
KHRZ32xa8BO3u4JDgnrljZgbTnUwcftFUsTAuCLIrTWg3XM0vhb3NBFBRK8rboZW
+2VBq6Tr3tplz3zQBa+rk/UCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403798032033934691308767860044504402709443
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-20 23:59:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 23:59:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'formation.parcmarin.qc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 890134049636584591294457296844101216984929439798576252698394590810142958057169372121672245952946899697154097961439692566989323127789466956318501063077661749547627086509266858240459732260972416253885132428064792146228903666596129466568989030352528390196974501329857011642396253994962269641950394517694980251347959804274164412737592470701637156713819057474588397811602755063239840674449210317801243600066947374790855340635113627688599455175468685878159028880303799388320075984803856560960486430258525443939894535174622245658759850979092649983322431835558364554183129809000322888035871964294491263608530147395238831436758919592587192256952230892016688786560277885647058932324649509086434182032240788912445664893722430626689660857042830818853799404521092404999231467526060480394674903210631052771287047884172074602433078627794248035513646161995341412760754975336976960727509625522227485515385093570147851580612117486552478022275092817507365435541536045588501084857280758806728583203963715967640047120798077326056668584208422056477714833272048318420865095773892652453690699573872234977064250090619785221508963055276191395020465404082512584208921214476103681256570233918582660504156501164412656541069612352570641168050741568619961475896309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0b0276a17e992cbf4ac29505093cce485cd3684
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (297 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employespc.formation.parcmarin.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expvisit.formation.parcmarin.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formation.parcmarin.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formationguides.formation.parcmarin.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formationpilotes.formation.parcmarin.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guideskayak.formation.parcmarin.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilotes.formation.parcmarin.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.formation.parcmarin.qc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018975f56e410000040300463044022007a37d3c9cd45df473de8941f7759160f45c8ad22e447f968250ee5744515de1022051c8103127d4643681b93627a9b8d647dd17097a251242a011d867ae125505280076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018975f56e500000040300473045022100b62d86d6a1210df082a9d0cdd7cebec04780a93cd7b2b7ea460c9bc86dd09aa4022058dc0773f8dbef54c66c79700fd33319af0da1a41f69964dbe51751af9a8305b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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