razr-pub.egon.gov.cz

- Správa základních registrů -

Issued by PostSignum Public CA 5

About this certificate

This digital certificate with serial number a7:f4:bc was issued on by Česká pošta, s.p..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Správa základních registrů

Company registration number: D275730
Organization: Správa základních registrů
Locality: Praha
Country: CZ

Česká pošta, s.p.

Organization: Česká pošta, s.p.
Country: CZ

This certificate has expire since

Certificate Details

Serial Number (hex): a7:f4:bc
Serial Number (int): 11007164
Serial Number lenght: 24 bits, 3 octets

SubjectKeyId: bb:6a:3d:bb:38:30:e4:aa:0d:16:c9:e8:f7:d5:b3:11:a3:37:f4:81
AuthorityKeyId: e3:ce:31:51:f3:4c:91:f5:7d:b7:05:89:b1:78:d0:a3:0a:c6:43:99

Fingerprint (sha1): 92:34:a3:a6:71:b6:7c:18:84:77:0f:e3:d4:dc:49:88:58:a1:47:3f
Fingerprint (sha256): 25:17:b2:13:61:b2:40:78:b1:53:d6:4b:a1:0d:a9:06:e6:fa:36:9e:d4:28:7f:ec:75:4e:67:b7:f9:07:b2:4b

Issuing Certificate URL: http://crt.postsignum.cz/crt/pspublicca5.crt

Revocation information

OCSP Server: http://ocsp.postsignum.cz/OCSP/VCA5/
CRL Distribution Point: http://crl.postsignum.cz/crl/pspublicca5.crl
CRL Distribution Point: http://crl2.postsignum.cz/crl/pspublicca5.crl
CRL Distribution Point: http://crl.postsignum.eu/crl/pspublicca5.crl

Check the revocation status for certificate razr-pub.egon.gov.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for razr-pub.egon.gov.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

razr-pub.egon.gov.cz

Other certificates including the domain name gov.cz

(limited to 100 certificates)
copernicus.gov.cz
zony-idsjk.kraj-jihocesky.gov.cz
ctu.gov.cz
rpp-ais.egon.gov.cz
odok.cz
eru.gov.cz
ov.gov.cz
data.gov.cz
pruvodce.udh.gov.cz
cms.gov.cz
ov.gov.cz
data.mvcr.gov.cz
portal.gov.cz
smlouvy.gov.cz
rpp-aism-pub-test.egon.gov.cz
cert-externalauthapi.caais-test-int.gov.cz
irop.gov.cz
data.gov.cz
upv.gov.cz
frs.gov.cz
digitalnicesko.gov.cz
zakony.gov.cz
vzdelavani.gov.cz
data.mvcr.gov.cz
slovnik.gov.cz
voda.gov.cz
*.gov.cz
geoportal.gov.cz
xn--slovnk-7va.gov.cz
data.kraj-jihocesky.gov.cz
testrs.gov.cz
rpp-ais-test.egon.gov.cz
twist-gp.kraj-jihocesky.gov.cz
mids.gov.cz
zony.kraj-jihocesky.gov.cz
www.gov.cz
code.gov.cz
viap1p.ros-iais.egon.gov.cz
vea801.gov.cz
desu.gov.cz
viap1t.ros-iais.egon.gov.cz
biap1t.ros-iais.egon.gov.cz
opendata.gov.cz
ext-mattermost.nic.cz
ria.gov.cz
admin.gov.cz
rrtv.gov.cz
*.szpi.gov.cz
covid.gov.cz
www.gov.cz
vea801.gov.cz
zony.kraj-jihocesky.gov.cz
*.kraj-jihocesky.gov.cz
spektrum.ctu.gov.cz
vyzkum.gov.cz
razr-pub.egon.gov.cz
testrs.gov.cz
ra.gov.cz
mids.gov.cz
archi.gov.cz
zds.kraj-jihocesky.gov.cz
nap.gov.cz
rpp-opendata-test.egon.gov.cz
cms.gov.cz
opendata.gov.cz
rpp-aism.egon.gov.cz
museion.kraj-jihocesky.gov.cz
prod.frs.gov.cz
tsl.gov.cz
isnipi.gov.cz
testrs.gov.cz
vea801.gov.cz
rpp-ais.egon.gov.cz
www.snsu.cz
tsl.gov.cz
uohs.cz
registrace.udh.gov.cz
gov.cz
admin.pruvodcepripojenim.gov.cz
vyzkum.gov.cz
smlouvy.gov.cz
rpp-aism-pub.egon.gov.cz
brvpn.ros.egon.gov.cz
uzsvm.cz
scitani.gov.cz
eru.gov.cz
mids.gov.cz
obcan.portal.gov.cz
upv.gov.cz
voda.gov.cz
code.gov.cz
ares.gov.cz
chciidentitu.gov.cz
biap1t.ros-iais.egon.gov.cz
viap1p.ros-iais.egon.gov.cz
czechtourism.gov.cz
anonymizace.gov.cz
*.kraj-jihocesky.gov.cz
mk.gov.cz
isdv.upv.gov.cz

Certificate

The complete raw certificate details for razr-pub.egon.gov.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JKL/n1jUfLE1wiYVbAT
g2sbQghl5Dknm0praF3Yszwuu8CYrXk6YJf5I8xKoZTeD98Ou/DunU25cKESS9x7
MtqQmaj5o8FRxMcmyaYQZpn0k1ozJrYNRA5T4uUt6447jEoqo+XHIarCnaTINScl
RIuzSwFKD222CwCe3fNNFBFs3t6T9aDE/24ZoTNBrCyIvskd3c8w+bLvHX8mZWhx
UIaHIEV/cD7j7bldc0ph4gugWz4PQnhhQM55+2FHR+mcc3/aCpxBECxh182HPk8g
J0wYBvhtczoZkN+9mCE9MM49KJIlkzmhKBtPXTWKcpcz+v7AEqvtnA7E+yaHhYCM
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11007164
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NTRCZ-47114983'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Česká pošta, s.p.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostSignum Public CA 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-15 14:43:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 14:43:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Praha'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NTRCZ-72054506'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Správa základních registrů'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'razr-pub.egon.gov.cz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'D275730'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26834785598855417900324241667581783543430996545723865915676475054835585430338402167968785449527620475317220691640838346817922039248656885576683142797927399117574496799220141934845403511063653750881871207456125441523798448872177779818250433204559506449587477251809675076989825066925609017263019821435371273435998606136997225683448384221971712841812250116766657124910997109488442680247785571586770850964656691636040658138310964729944371026715871181924843212610967486951993112946637929435246827901888056929164248245000453044892282951184036331282156900292632998531012067731506551175617937906249926564227126836161406864397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'razr-pub.egon.gov.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.134.1.2.1.9.500
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.postsignum.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.postsignum.cz/crt/pspublicca5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.postsignum.cz/OCSP/VCA5/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e3ce3151f34c91f57db70589b178d0a30ac64399
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.postsignum.cz/crl/pspublicca5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.postsignum.cz/crl/pspublicca5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.postsignum.eu/crl/pspublicca5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb6a3dbb3830e4aa0d16c9e8f7d5b311a337f481
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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