onesource.wsscwater.com

- Washington Suburban Sanitary Commission -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:b3:4d:3c:05:b5:c1:2d:43:ca:2b:61:f1:d6:fe:d3 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Washington Suburban Sanitary Commission

Organization: Washington Suburban Sanitary Commission
Organization unit: IT Team
State / Province: Maryland
Locality: Laurel
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b3:4d:3c:05:b5:c1:2d:43:ca:2b:61:f1:d6:fe:d3
Serial Number (int): 4918671626028866672877694402965208787
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 77:35:5e:c2:91:0b:10:74:4a:7e:d3:23:22:eb:7e:c7:41:8f:d1:d1
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): a9:23:d6:5d:fc:e4:30:2f:58:95:f5:6d:12:9d:ec:77:f9:28:10:85
Fingerprint (sha256): 21:47:52:a8:4f:a8:de:35:20:e4:34:36:bc:a5:d0:d1:75:d3:42:36:1c:bc:c2:51:47:68:5a:3c:49:5b:80:c4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate onesource.wsscwater.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for onesource.wsscwater.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

onesource.wsscwater.com

Other certificates including the domain name wsscwater.com

(limited to 100 certificates)
servicedesk.oiplans.com
servicedesk.oiplans.com
webapps.wsscwater.com
stz1.wsscwater.com
fs.wsscwater.com
webapps.wsscwater.com
www01.wsscwater.com
limsweb.wsscwater.com
servicedesk.oiplans.com
webapps.wsscwater.com
helpdesk.brisbanemarkets.com.au
webapps.wsscwater.com
www.wsscwater.com
stz2.wsscwater.com
webmail.wsscwater.com
securewas61etxqa.wsscwater.com
support.first-epdc.com
equip.wsscwater.com
help.ne-ps.net
secure.wsscwater.com
servicedesk.oiplans.com
epermitstg.wsscwater.com
www.wsscwater.com
eremote.wsscwater.com
giswebd.wsscwater.com
servicedesk.oiplans.com
gis.wsscwater.com
secure.wsscwater.com
wwwqa.wsscwater.com
gisportal.wsscwater.com
my.wsscwater.com
fnl.wsscwater.com
rps-dc2k8-01.wsscwater.com
secureftp.wsscwater.com
cob-mrradp-01.wsscwater.com
secureftp.wsscwater.com
wsscwater.com
helpme.dubaidevelopments.com
webmail.wsscwater.com
giswebd.wsscwater.com
www01.wsscwater.com
gisweb.wsscwater.com
secure.wsscwater.com
planreview.wsscwater.com
onesourcedev.wsscwater.com
helpme.dubaidevelopments.com
permitsstg.wsscwater.com
permitsdemo.wsscwater.com
secureftp.wsscwater.com
onesource.wsscwater.com
www.wsscwater.com
epermitstg.wsscwater.com
webapps.wsscwater.com
webmail.wsscwater.com
soporte.grupoxxi.com.co
eremote.wsscwater.com
staging.wsscwater.com
webmail.wsscwater.com
myqa.wsscwater.com
support.first-epdc.com
itsd.acqueon.com
support.first-epdc.com
secure.wsscwater.com
helpme.dubaidevelopments.com
equip.wsscwater.com
vpn.wsscwater.com
permitsconv.wsscwater.com
webapps.wsscwater.com
webmail.wsscwater.com
myqa.wsscwater.com
mtaq.wsscwater.com
planreview.wsscwater.com
www01.wsscwater.com
www.wsscwater.com
limsweb.wsscwater.com
cob-dc2k8-01.wsscwater.com
giswebd.wsscwater.com
my.wsscwater.com
ithelpdesk.holmes-hills.co.uk
gis.wsscwater.com
gcp-us-east1-13.dev.app.carto.com
helpme.dubaidevelopments.com
myqa.wsscwater.com
kajolescort.com
servicedesk.oiplans.com
docview.wsscwater.com
my.wsscwater.com
lms.wsscwater.com
my.wsscwater.com
planreview.wsscwater.com
webapps.wsscwater.com
gis.wsscwater.com
drvpn.wsscwater.com
mta.wsscwater.com
www01.wsscwater.com
www.themangojam.com
mta.wsscwater.com
limsweb.wsscwater.com
planreview.wsscwater.com
stz2.wsscwater.com

Certificate

The complete raw certificate details for onesource.wsscwater.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmDjOeuzWQSgLHuNqSC7
yrHViUcoroiERqukKeHhg0cScdklxmzo77XSTWk717XPNTNVhSemQ91w72J6VseS
rV9qb1vDDqGtsk4fcbNXViQdVH6wx2Fn5fiTwSk/BF+CmwZS2x6Rh7FEHNnqNros
JtIUYHMhCC4s/2I0Pnn3woNu8VhJHc2y93ST8f+5uwRBZqG9KB9rXywSbjy7wTwW
RHrgbOlCqubgolxq9HY+A1RwHcLsMtpIR3MATquLjPxPsI1nzxti/u1zEp5dwwsB
D8HDF+hqFPTMJHCbdxEU8NIAcv232TUro63Pg9HAFarLm6BsqPxVHEjj+HSPoDlp
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4918671626028866672877694402965208787
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Laurel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington Suburban Sanitary Commission'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Team'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'onesource.wsscwater.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24033055001043775651549274636843755405204137108112742564086270630051937798368783798525551895014684165125492247842470361149116168473125719817898542828558006438141000496842725847726480876511557697654136929769278763239900034173436399755920431239198347482297794870485327195594656690864687638233136570065340225014698293234784581074716996690550529844648008201562198511755735626610979424055742283158044378365393129000266158387317936997109544572676334443662088584490734910421401337081378413104464049055488475692392105036055521123821741278204344962824760443347458935653058945303548099130366434760990743304223178905518308157873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77355ec2910b10744a7ed32322eb7ec7418fd1d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onesource.wsscwater.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001636edf9ab00000040300483046022100e0aa99d5e66b8e18932cbd3d1c977f121a83c237258f099cf2ac2967c08d649f02210092c93da47b593fd6cfe8a455dadcfa68ca54bc1cf6d330600c00965c79c4d1ba0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001636edf9c8100000403004630440220624708e318d854bd1c9e31472203f51120d22bac0d31fe30ca28cba29a8fd63d022046400162fb067d556db9d9a87910200a3124fb772301d82b0331f7a38ba843df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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