dbdr.globalrateset.com
- DEUTSCHE BANK AG LONDON -
Issued by GeoTrust SSL CA
About this certificate
This digital certificate with serial number 02:5b:d4 was issued on by GeoTrust, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
DEUTSCHE BANK AG LONDON
Company registration number:
gYrwj2y5UeiQAZGvRxNkzcC1l1shUcJd
Organization: DEUTSCHE BANK AG LONDON
Organization: DEUTSCHE BANK AG LONDON
State / Province:
LONDON
Locality: LONDON
Country: GB
Locality: LONDON
Country: GB
GeoTrust, Inc.
Organization:
GeoTrust, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:5b:d4Serial Number (int): 154580
Serial Number lenght: 18 bits, 3 octets
SubjectKeyId: 7c:70:82:a3:28:e0:b4:3c:97:71:40:b7:0f:12:06:f1:54:44:98:c9
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a
Fingerprint (sha1): fa:b6:65:6e:41:17:ba:b2:8d:69:f6:e2:24:c9:17:70:bc:0e:1d:a9
Fingerprint (sha256): 2f:a5:fd:c2:4d:db:d3:75:d3:a1:cf:e3:0f:fe:94:6a:82:c5:00:7f:3b:b6:e1:80:c0:18:ad:62:ba:cd:46:c9
Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt
Revocation information
OCSP Server: http://gtssl-ocsp.geotrust.comCRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl
Check the revocation status for certificate dbdr.globalrateset.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dbdr.globalrateset.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dbdr.globalrateset.com
Other certificates including the domain name globalrateset.com
(limited to 100 certificates)
globalrateset.com
supportdesk.highmarkfcu.com
www.globalrateset.com
supportdesk.highmarkfcu.com
dbdr.globalrateset.com
globalrateset.com
globalrateset.com
www.globalrateset.com
uat-nca.globalrateset.com
www.globalrateset.com
uat-ncs.globalrateset.com
www.globalrateset.com
*.globalrateset.com
www.globalrateset.com
ithelp.mainecc.edu
sd.globalrateset.com
www.globalrateset.com
www.globalrateset.com
globalrateset.com
globalrateset.com
globalrateset.com
*.globalrateset.com
globalrateset.com
www.globalrateset.com
supportdesk.highmarkfcu.com
dblive.globalrateset.com
www.globalrateset.com
supportdesk.highmarkfcu.com
globalrateset.com
supportdesk.highmarkfcu.com
www.globalrateset.com
supportdesk.highmarkfcu.com
dbdr.globalrateset.com
globalrateset.com
globalrateset.com
www.globalrateset.com
uat-nca.globalrateset.com
www.globalrateset.com
uat-ncs.globalrateset.com
www.globalrateset.com
*.globalrateset.com
www.globalrateset.com
ithelp.mainecc.edu
sd.globalrateset.com
www.globalrateset.com
www.globalrateset.com
globalrateset.com
globalrateset.com
globalrateset.com
*.globalrateset.com
globalrateset.com
www.globalrateset.com
supportdesk.highmarkfcu.com
dblive.globalrateset.com
www.globalrateset.com
supportdesk.highmarkfcu.com
globalrateset.com
Certificate
The complete raw certificate details for dbdr.globalrateset.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIDAlvUMA0GCSqGSIb3DQEBBQUAMEAxCzAJBgNVBAYTAlVT MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEYMBYGA1UEAxMPR2VvVHJ1c3QgU1NM IENBMB4XDTEzMDcwNzAzMTc0MVoXDTE0MDcwOTIwMzM0NFowgZ0xKTAnBgNVBAUT IGdZcndqMnk1VWVpUUFaR3ZSeE5remNDMWwxc2hVY0pkMQswCQYDVQQGEwJHQjEP MA0GA1UECBMGTE9ORE9OMQ8wDQYDVQQHEwZMT05ET04xIDAeBgNVBAoTF0RFVVRT Q0hFIEJBTksgQUcgTE9ORE9OMR8wHQYDVQQDExZkYmRyLmdsb2JhbHJhdGVzZXQu Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMsRlqQRulpwkoLg NnWkJ8ufLu9OvG5SeTAagp0/416RFfbtuDRAkVmwgVQBERO96jJqs6KeYs3MCnGv G3EuWlxblzUNcyiAMxF8F8Oc5brBfGe3JbJUAl0QxbfEGcWyXurZ0FqLyWH+G5iD Ccq8n7PDayyUrm2FsdQ9ytxCfPC0CRA1eMxzBHmbT5Xqc6O8ApaQuz3aiPnzMUnL zbNWZmX8ueOzQd13IHXEZ5Kd5MlYdTdXFDa8ZEQMZDIIaz8PJSZPSkWQLhJIdtJ2 cNSkY/g2GFoZ6kpKkGu9hdp3Dxt/CEQWEv0n+diOvXqVHU/JBgvTZsmKvesLgtL9 MYl5gwIDAQABo4IBojCCAZ4wHwYDVR0jBBgwFoAUQnlUG2HNVSs+Y9U8SFf1n/tF zkowDgYDVR0PAQH/BAQDAgSwMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAhBgNVHREEGjAYghZkYmRyLmdsb2JhbHJhdGVzZXQuY29tMD0GA1UdHwQ2MDQw MqAwoC6GLGh0dHA6Ly9ndHNzbC1jcmwuZ2VvdHJ1c3QuY29tL2NybHMvZ3Rzc2wu Y3JsMB0GA1UdDgQWBBR8cIKjKOC0PJdxQLcPEgbxVESYyTAMBgNVHRMBAf8EAjAA MG8GCCsGAQUFBwEBBGMwYTAqBggrBgEFBQcwAYYeaHR0cDovL2d0c3NsLW9jc3Au Z2VvdHJ1c3QuY29tMDMGCCsGAQUFBzAChidodHRwOi8vZ3Rzc2wtYWlhLmdlb3Ry dXN0LmNvbS9ndHNzbC5jcnQwTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMwMQYI KwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMw DQYJKoZIhvcNAQEFBQADggEBAAkbkTmrIIaHcTdO3Pit04AXd3l/LHgcH54wZdzA i2fetahCGja6Dypu1XQUVPDh1WBf72j2tXwg0BW3bxjzeDCK5qJR9dNGhG5iyx7u qP5yZWTiuqbkTUQnmfxF3WL395JgBdpWvSufa62LgxygKJnYAbXzjib2mIN2xj0B y6kAjmrEi+PDS0ddgdYbw5zframaILfb6k1chsV1lnrQiFrGacKNPqhL6tinLlV4 EE1E+lEgOvA7SZE+m8KSiYqH7YBAZq3rIu7j9/oEqfHlvXKd4exVp1Yw0yimclRp VIevC9kPLb2codHEAODNU4TQG6c0NiBk0BkgqasuEQlqv5s= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMsRlqQRulpwkoLgNnWk J8ufLu9OvG5SeTAagp0/416RFfbtuDRAkVmwgVQBERO96jJqs6KeYs3MCnGvG3Eu WlxblzUNcyiAMxF8F8Oc5brBfGe3JbJUAl0QxbfEGcWyXurZ0FqLyWH+G5iDCcq8 n7PDayyUrm2FsdQ9ytxCfPC0CRA1eMxzBHmbT5Xqc6O8ApaQuz3aiPnzMUnLzbNW ZmX8ueOzQd13IHXEZ5Kd5MlYdTdXFDa8ZEQMZDIIaz8PJSZPSkWQLhJIdtJ2cNSk Y/g2GFoZ6kpKkGu9hdp3Dxt/CEQWEv0n+diOvXqVHU/JBgvTZsmKvesLgtL9MYl5 gwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 154580 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-07 03:17:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-09 20:33:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gYrwj2y5UeiQAZGvRxNkzcC1l1shUcJd' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LONDON' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LONDON' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DEUTSCHE BANK AG LONDON' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dbdr.globalrateset.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23327985024268927227243819027761014183058756390588017117780328405877053888911987072326455621002908452915566302251466120392934593599356586082152903246565725002751953443031501039939753251424257999125047835130864290097078938148059342413070787243974373257697400783576449708920331482222474165153956801432564356641064559220123554308864795443620446427021136819917667768936862826494807738351354406743898920181735958976684855292727399155774022947758282676248748078063363099165826779307090825342544903660661472197197371089212131013900101354700054677567444917321805996071147966359805294487496261368111258519684680525682836076931 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbdr.globalrateset.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7c7082a328e0b43c977140b70f1206f1544498c9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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