choisirsonsport.univ-lyon3.fr

- Université Lyon 3 Jean Moulin -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 0b:68:3e:e3:92:34:65:21:5f:a2:55:2e:20:dc:0e:6b was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Université Lyon 3 Jean Moulin

Organization: Université Lyon 3 Jean Moulin
State / Province: Auvergne-Rhône-Alpes
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:68:3e:e3:92:34:65:21:5f:a2:55:2e:20:dc:0e:6b
Serial Number (int): 15162782366358166968064796799302110827
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e5:eb:19:dc:10:ac:72:66:22:ee:99:b9:f7:ff:e5:e3:87:6a:89:45
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): d1:d7:87:ce:84:14:90:d1:17:e3:ef:a5:f6:70:95:42:23:e6:23:6d
Fingerprint (sha256): 1c:9f:be:c2:d5:ee:ff:3c:e2:13:23:dc:b7:0f:d4:ec:c5:c7:d9:9f:2a:58:10:9f:10:02:fc:2c:b3:48:e0:58

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate choisirsonsport.univ-lyon3.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for choisirsonsport.univ-lyon3.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

choisirsonsport.univ-lyon3.fr
moodle-sport-inscriptions.univ-lyon3.fr

Other certificates including the domain name univ-lyon3.fr

(limited to 100 certificates)
sfbconf.univ-lyon3.fr
portail-vacataires-ens-consult.univ-lyon3.fr
vsp-quai-chev.univ-lyon3.fr
nextcloud-preprod.univ-lyon3.fr
parefeu-master-ipmi.univ-lyon3.fr
sondage.univ-lyon3.fr
evenements.univ-lyon3.fr
webtv.univ-lyon3.fr
web2.univ-lyon3.fr
webmail.univ-lyon3.fr
mail.univ-lyon3.fr
haproxy-pp.univ-lyon3.fr
webinscription.univ-lyon3.fr
ged.univ-lyon3.fr
psc.univ-lyon3.fr
superview.univ-lyon3.fr
pop.univ-lyon3.fr
vsp-manu-b4-haut.univ-lyon3.fr
webscolarite.univ-lyon3.fr
vsp-manu-b4-haut.univ-lyon3.fr
impression.univ-lyon3.fr
mahara.univ-lyon3.fr
webmail.univ-lyon3.fr
vdi.univ-lyon3.fr
fdv-srv.univ-lyon3.fr
llm.univ-lyon3.fr
netmanager.univ-lyon3.fr
esrs.univ-lyon3.fr
iaedt.univ-lyon3.fr
applications.univ-lyon3.fr
vsp-quai-chev.univ-lyon3.fr
adfs.ad.univ-lyon3.fr
ecandidat.univ-lyon3.fr
adfs.ad.univ-lyon3.fr
web2.univ-lyon3.fr
revues.univ-lyon3.fr
kanboard.univ-lyon3.fr
hra-for.univ-lyon3.fr
mahara.univ-lyon3.fr
applications.univ-lyon3.fr
boutique.univ-lyon3.fr
catalogue.univ-lyon3.fr
vsp-manu-b6-bas.univ-lyon3.fr
www.univ-lyon3.fr
idptest.univ-lyon3.fr
css03.univ-lyon3.fr
eduspot2.univ-lyon3.fr
autodiscover.univ-lyon3.fr
impression-pers.univ-lyon3.fr
choisirsonsport.univ-lyon3.fr
idp.univ-lyon3.fr
vsp-manu-b6-haut.univ-lyon3.fr
ligeo-gestion.univ-lyon3.fr
webelection.univ-lyon3.fr
esrs.univ-lyon3.fr
candidat-ens-chercheur.univ-lyon3.fr
oa.univ-lyon3.fr
webmail.univ-lyon3.fr
cervoprint2.univ-lyon3.fr
questionrep.univ-lyon3.fr
veeam.ad.univ-lyon3.fr
webtv.univ-lyon3.fr
cas.univ-lyon3.fr
moodle.univ-lyon3.fr
prel.univ-lyon3.fr
applications.univ-lyon3.fr
glpi.univ-lyon3.fr
impression.univ-lyon3.fr
imptest-pers.univ-lyon3.fr
owncloud.univ-lyon3.fr
survey.univ-lyon3.fr
piwik.univ-lyon3.fr
piwik.univ-lyon3.fr
vsp-quai-huvelin.univ-lyon3.fr
boutique.univ-lyon3.fr
atelier-artistique.univ-lyon3.fr
indicateurs-preprod.univ-lyon3.fr
cervoprint.univ-lyon3.fr
docker-registry.univ-lyon3.fr
acces-distant.univ-lyon3.fr
eas.univ-lyon3.fr
cadeaunoel.univ-lyon3.fr
idp.univ-lyon3.fr
moodle.univ-lyon3.fr
moodle.univ-lyon3.fr
imap.univ-lyon3.fr
bo.univ-lyon3.fr
impression-adm-ens.univ-lyon3.fr
edseg.univ-lyon3.fr
ezscd.univ-lyon3.fr
webmail.univ-lyon3.fr
scd-resnum.univ-lyon3.fr
clic.univ-lyon3.fr
imap.univ-lyon3.fr
mediatheque.univ-lyon3.fr
cervoprint2.univ-lyon3.fr
pop.univ-lyon3.fr
parefeu.univ-lyon3.fr
cerebro.univ-lyon3.fr
gitlab.univ-lyon3.fr

Certificate

The complete raw certificate details for choisirsonsport.univ-lyon3.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15162782366358166968064796799302110827
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université Lyon 3 Jean Moulin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'choisirsonsport.univ-lyon3.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 867916203821720992523690303462677082263716092106214501643906914527435440272906659699729455757210750589256208738335438574839404790586691547530530375297624110127266376058359758335143783196710521219033141695316801236414762495570591055990039482006374827778511302503100394331072404364588118456066105918431026863222632631417628492535233779658823998360175725242903547916342093991895573156241786937654836863574561549047187884895971418823531115577418597187490816982940805021033708074491735995228189486031870425568305332461200058390327909373587696610700978550382180529485581673808133992042808015740335932205237826220067379109240053686508487452200654467612918898469431434285959067857109513628389451103018370816292980378721245980113832054022533937987205497872234612513320905898498607984130814783475711534028181438577714928309430506177258822485572860782898980862126214461745053807974872438083968431088071731436205409947718595193670948422317683690737776130449777096259144295439575153722255988777552701576825652060037534912224193969454721330487045666610207393972173731590815263864266700027037464255613847296757176275839269691566999487815684689216832099138870240504633421989946579897224629034643671005691320952827936271587134518604107628911429792709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5eb19dc10ac726622ee99b9f7ffe5e3876a8945
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean
false
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:25|false] GraphicString [127 240 84 37 82 119 152 66 125 109 45 191 16 120 0 118 0 218 182 191 107 63 181 182 34 159 155 194 187 92 107 232 112 145 113 108 187 81 132 133 52 189 164 61 48 72 215 251 171 0 0 1 135 255 164 8 252 0 0 4 3 0 71 48 69]
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 82171783102293032546427902029238623279790068348581776479263642389404291629853
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 44201767091778589034462094228651512757931588045998586744727980783725077512685
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choisirsonsport.univ-lyon3.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moodle-sport-inscriptions.univ-lyon3.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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