romeolab.univ-reims.fr

- Université Reims Champagne-Ardenne -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 09:be:06:db:d2:e0:a6:f3:f2:57:65:56:b3:84:7b:b8 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Université Reims Champagne-Ardenne

Organization: Université Reims Champagne-Ardenne
Locality: REIMS
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 09:be:06:db:d2:e0:a6:f3:f2:57:65:56:b3:84:7b:b8
Serial Number (int): 12949727475874512498401179657778265016
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7e:00:94:01:b1:69:d0:d5:f2:73:37:7e:ef:22:2a:07:eb:7b:bb:54
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 43:cc:0b:c1:0b:79:1b:66:ac:11:7f:b0:39:70:9f:5d:60:97:94:c8
Fingerprint (sha256): 1f:ee:f3:ed:6b:12:20:10:63:db:71:88:04:d9:0e:23:81:63:48:0f:f5:6b:c4:09:6e:cb:3a:4d:1f:15:77:72

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate romeolab.univ-reims.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for romeolab.univ-reims.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

romeolab.univ-reims.fr

Other certificates including the domain name univ-reims.fr

(limited to 100 certificates)
shib.univ-reims.fr
lamesvirtuelles.univ-reims.fr
logiciels.univ-reims.fr
visio-mra-expressway-e.univ-reims.fr
extractions.univ-reims.fr
omega.univ-reims.fr
visio-mra-expressway-e.univ-reims.fr
mint.univ-reims.fr
visio-expressway-e.univ-reims.fr
scolarite-iutrcc.univ-reims.fr
visio-expressway-c.univ-reims.fr
eboutique.univ-reims.fr
heberge.univ-reims.fr
inventaire.univ-reims.fr
romeogit.univ-reims.fr
wme1.univ-reims.fr
ccr-meso.univ-reims.fr
gestion-projet.univ-reims.fr
demat.univ-reims.fr
nas-histologie.univ-reims.fr
imaps.univ-reims.fr
netacad.univ-reims.fr
conges.univ-reims.fr
recrutement.univ-reims.fr
netacad.univ-reims.fr
agenda.univ-reims.fr
intranet.iut-troyes.univ-reims.fr
rvm.univ-reims.fr
toip-outils.univ-reims.fr
mobile-dev.univ-reims.fr
dokuwicri.univ-reims.fr
demat.univ-reims.fr
simseo.univ-reims.fr
esup-5.univ-reims.fr
idrac-ftp3.actif.univ-reims.fr
ebureau.univ-reims.fr
visio-expressway-e.univ-reims.fr
romeologin2.univ-reims.fr
micollab.univ-reims.fr
visio-cucm.univ-reims.fr
romeolab.univ-reims.fr
esup-2.univ-reims.fr
devapps.univ-reims.fr
julie.univ-reims.fr
imaps.univ-reims.fr
siham2-rp.univ-reims.fr
jeparticipe.univ-reims.fr
atm-gsma.univ-reims.fr
prime-cimc.interne.univ-reims.fr
visio-expressway-e.univ-reims.fr
icos.univ-reims.fr
hip.univ-reims.fr
vm-0999999999.univ-reims.fr
syslog.interne.univ-reims.fr
jeparticipe.univ-reims.fr
admin-vpn.interne.univ-reims.fr
eop.univ-reims.fr
caldav.univ-reims.fr
romeogit.univ-reims.fr
dataverse.univ-reims.fr
devapps.univ-reims.fr
apotest-fmw.univ-reims.fr
mx2.univ-reims.fr
impcpsv001.univ-reims.fr
www.univ-reims.fr
intranetv3.iut-troyes.univ-reims.fr
listes.univ-reims.fr
horoquartz.univ-reims.fr
romeo.univ-reims.fr
romeolab.univ-reims.fr
gestion-materiel.univ-reims.fr
simseo.univ-reims.fr
iut-info.univ-reims.fr
parapheur.univ-reims.fr
ssds-cloud.univ-reims.fr
vm-10.univ-reims.fr
eportfolio-test.univ-reims.fr
geranimaux.univ-reims.fr
webmail3.univ-reims.fr
crestic.univ-reims.fr
ccr.univ-reims.fr
syslog.interne.univ-reims.fr
frt.univ-reims.fr
mobile-dev.univ-reims.fr
actifbackup.univ-reims.fr
visio-outils.univ-reims.fr
visio-cucm-ms.univ-reims.fr
eboutique.univ-reims.fr
gsma-ausea.univ-reims.fr
romeolab.univ-reims.fr
parapheur.univ-reims.fr
secure-parapheur-test.univ-reims.fr
crdt.univ-reims.fr
visio-reservation.univ-reims.fr
frt.univ-reims.fr
pass.univ-reims.fr
rbu.univ-reims.fr
devapps.univ-reims.fr
rad2.univ-reims.fr
candidatures-mobilites.univ-reims.fr

Certificate

The complete raw certificate details for romeolab.univ-reims.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWFKLZ0MFw6juACVhDxh
uZioOqBf52okdXleDoynA21dIsbKH/WYRG1jBIHZBr6X6IGUIqu7bFwy31Oq4EKk
VYMWd6a1aS6VQg48RsZXXCu82/3iTO3J1vDgQVl+z4NBrezSqJrQ2V/7HPdN9vWJ
EypC49kbSnptcg144NqBPNGRxMmWbhC5NIr8dofln7+v2YYEmKFquQBhDJtGXk3I
FEQY7jQ+BwuKbo6xDtV8aeD1e1dbCcv1PVmFmTDAXh2u+rlZLDODfwq1wSBmhasU
vnpAC4E09ffpFq5iJuK9+96RIlmmC6xC2ii/9mc2Q7feM4Q46YbAHnI6m/swFfkj
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12949727475874512498401179657778265016
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-23 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'REIMS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université Reims Champagne-Ardenne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'romeolab.univ-reims.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21887202127114026158136206768365955767119849696734198420965269244243414488232946232859691641267875250675035102711321720887823347277890172099598299523916859832711496668495984263737032251115648342696123143779088774893428463181519653744075181035666610032047637741998147431856804288896893631790843708548764977962931607357362981559848461070118663043826562569938654801204696102692666844167948390622015409346622190464001985544115422439383399530805962525800971718927759937793670074917402127112094127615033825035316801408642493457158104363682218763165523985825556105744868283572492246079429584440665757590562984842605738140603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e009401b169d0d5f273377eef222a07eb7bbb54
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romeolab.univ-reims.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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