waiting.paris2024.org

- PARIS 2024 COMITE D'ORGANISATION DES JEUX OLYMPIQUES ET PARALYM. -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 5e:8f:91:4a:e0:5e:80:17:95:c2:8a:d3:a0:a1:b4:3e was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

PARIS 2024 COMITE D'ORGANISATION DES JEUX OLYMPIQUES ET PARALYM.

Organization: PARIS 2024 COMITE D'ORGANISATION DES JEUX OLYMPIQUES ET PARALYM.
State / Province: Île-de-France
Country: FR

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 5e:8f:91:4a:e0:5e:80:17:95:c2:8a:d3:a0:a1:b4:3e
Serial Number (int): 125692876936268014076611510760470852670
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 46:ec:ce:e6:db:7d:dc:71:40:47:e8:ed:58:44:17:94:2a:e8:54:14
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): ac:f3:96:97:e1:ee:e0:b9:b9:0d:d2:8e:2b:08:c0:8a:8a:5f:2d:7b
Fingerprint (sha256): 17:18:9b:a6:49:77:f1:62:1a:ba:ca:c9:42:fd:54:b0:31:04:bf:30:a1:cf:f3:5a:87:e7:77:e3:0f:10:04:a4

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate waiting.paris2024.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for waiting.paris2024.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

waiting.paris2024.org
www.waiting.paris2024.org

Other certificates including the domain name paris2024.org

(limited to 100 certificates)
concertation.paris2024.org
mulesoft-tkt.paris2024.org
*.paris2024.org
medical.paris2024.org
actualites.wiztopic.com
bo-cms-sbp.ew.paris2024.org
paris2024.org
oms.paris2024.org
api.academie.paris2024.org
actualites.wiztopic.com
actualites.wiztopic.com
ensembleonfaitlesjeux.paris2024.org
celebrations-pp.paris2024.org
image.email.novartis.es
www.terredejeux.paris2024.org
spectrum-booking-portal.paris2024.org
cert00033-azurecdn.akamaized.net
alerte.paris2024.org
bo.ew-dev.paris2024.org
concertation.paris2024.org
marathonpourtous.paris2024.org
*.paris2024.org
communautemarathonpourtous.paris2024.org
boutique-heritage.paris2024.org
registrations.marathonpourtous.paris2024.org
vdp.paris2024.org
rejoindre.paris2024.org
iextranet.oodrive.paris2024.org
ctp.paris2024.org
pressoperations.paris2024.org
spectrum-booking-portal-dev.paris2024.org
vdp.paris2024.org
image.email.novartis.es
boutique-terredejeux.paris2024.org
api.centredepreparation.paris2024.org
orah.paris2024.org
questionnaire-volontaire.paris2024.org
delegation-pp.paris2024.org
hospitalityguestregistration.paris2024.org
joly.paris2024.org
actualites.wiztopic.com
concertation.paris2024.org
waiting.paris2024.org
projet93.paris2024.org
ctp.paris2024.org
delegation.paris2024.org
tickets.paris2024.org
gigya.celebrations.paris2024.org
corporatehospitality.paris2024.org
data-accompagnement-impact.paris2024.org
actualites.wiztopic.com
actualites.wiztopic.com
aap-impact.paris2024.org
www.boutique-celebrations.paris2024.org
sslcertificate7.queue-it.net
shop.paris2024.org
bo.spectrum-booking-portal.cms.paris2024.org
san-2-s50.tlsprovisioning.exacttarget.com
shop.paris2024.org
t.tickets.paris2024.org
t.tickets.paris2024.org
api.centredepreparation.paris2024.org
vdp.paris2024.org
actualites.wiztopic.com
vdp.paris2024.org
cominterne.paris2024.org
marathonpourtous.paris2024.org
marathonpourtous.paris2024.org
hrpaccount.paris2024.org
api.academie.paris2024.org
reglementmptc.paris2024.org
actualites.wiztopic.com
revealrelais.paris2024.org
de.newsletter.events.renault.com
marathonpourtous.paris2024.org
waiting.paris2024.org
api.centredepreparation.paris2024.org
marathonpourtous.paris2024.org
hospitalitytravelpackages.paris2024.org
exploreterredejeux.paris2024.org
spectrum-booking-portal.paris2024.org
actualites.wiztopic.com
concertation.paris2024.org
marathonpourtous.paris2024.org
tickets.paris2024.org
cert00033-azurecdn.akamaized.net
shop.paris2024.org
api.spectrum-booking-portal.cms-dev.paris2024.org
medical-back-pp.paris2024.org
centredepreparation.paris2024.org
concertation.paris2024.org
objets.paris2024.org
alerte.paris2024.org
www.terredejeux.paris2024.org
revealrelais.paris2024.org
spectrum-booking-portal.paris2024.org
actualites.wiztopic.com
cost-tool-preprod.paris2024.org
offline-mediatheque.paris2024.org
data-accompagnement-impact.paris2024.org

Certificate

The complete raw certificate details for waiting.paris2024.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDiRhM6y3X3dTuCVxfsA
9A2OKeOPdZdQNslVsPxpQrtxxH1kYcn9Cw4LNPCEDZVtZXwO8nihFJxI5zGEhN7E
u93lc57g/3v3H491YYCgfP6pHyuJ7L3E3KwX8GPZht/6Jkf1XaXUKdkE8Ht3mrQl
YKXkqCa/iU/q/PgKzShJtToAdGl8P3jH5C0std/n5LsVYFmQPrjMnOZS93XQ/ijd
nNa71Erg7yNlbAJs3Q11jvrYdgKSIXTKN5rc6WSayJ3MTeEsJk/ipT2wRD8qO+t+
HhyIsPWIeoKXZSHYwe8wcAu/AN7LQ9rObR9ZmEP6fQCPDcRsFqOCgllSBS8O2b1P
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 125692876936268014076611510760470852670
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS 2024 COMITE D'ORGANISATION DES JEUX OLYMPIQUES ET PARALYM.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'waiting.paris2024.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22750789827728313541935753638807879622785138243807066920914731167633191217046849345711865044201720120258181878309127969115713435821014852268514537497331454572318173829721766862524161859772921729627353373389225501089952158836290785803365412824190894222089423691271116088799298069822826555598106146394268761402151212766389063297002966475194676361794799183771944068772036381583831573196013455093912497921087637631196604202080810920729167850204291144416498814042012071685676215038204716342839411810932658411919838472896121196595355925954433718551364596551767864470691040281616155837159277137067698619959538122042604605243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46eccee6db7ddc714047e8ed584417942ae85414
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiting.paris2024.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiting.paris2024.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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