www.knowledgemarketing.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:04:38:e7:2d:34:54:1a:80:43:ed:bd:0e:bd:14:a3:6a:23 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.knowledgemarketing.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:04:38:e7:2d:34:54:1a:80:43:ed:bd:0e:bd:14:a3:6a:23
Serial Number (int): 349885910299917342668093090303523460180515
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cb:4b:0a:f4:80:e9:60:c4:61:d4:8a:67:c4:07:5b:b1:80:2e:f0:db
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cf:42:38:0d:8d:98:b7:46:b0:0d:69:cc:57:f6:72:06:d1:02:96:d0
Fingerprint (sha256): 30:b5:ab:43:9e:39:95:bf:b3:35:07:5a:fb:76:81:c1:b0:58:e8:9b:6d:af:81:62:58:15:6e:7e:3b:0e:43:a7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.knowledgemarketing.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.knowledgemarketing.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

knowledgemarketing.com
www.knowledgemarketing.com

Other certificates including the domain name knowledgemarketing.com

(limited to 100 certificates)
status.accept360.com
support.crossover.com
www.knowledgemarketing.com
*.knowledgemarketing.com
supportsurvey.cardinal-mark.com
knowledgemarketing.com
www.knowledgemarketing.com
supportsurvey.cardinal-mark.com
supportsurvey.cardinal-mark.com
supportsurvey.knowledgemarketing.com
*.knowledgemarketing.com
www.knowledgemarketing.com
supportsurvey.cardinal-mark.com
supportsurvey.cardinal-mark.com
supportsurvey.cardinal-mark.com
*.knowledgemarketing.com
supportsurvey.cardinal-mark.com
mail.knowledgemarketing.com
support.cardinal-mark.com
*.knowledgemarketing.com
support.cardinal-mark.com
support.crossover.com
www.knowledgemarketing.com
supportsurvey.cardinal-mark.com
ecn.knowledgemarketing.com
status.accept360.com
supportsurvey.cardinal-mark.com
*.knowledgemarketing.com
*.knowledgemarketing.com
*.knowledgemarketing.com
knowledgemarketing.com
mail2010.knowledgemarketing.com
mail.knowledgemarketing.com
www.knowledgemarketing.com
supportsurvey.cardinal-mark.com
supportsurvey.knowledgemarketing.com
mail.knowledgemarketing.com
supportsurvey.cardinal-mark.com

Certificate

The complete raw certificate details for www.knowledgemarketing.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgISBAQ45y00VBqAQ+29Dr0Uo2ojMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA0MTEyMjM1MDZaFw0x
ODA3MTAyMjM1MDZaMCUxIzAhBgNVBAMTGnd3dy5rbm93bGVkZ2VtYXJrZXRpbmcu
Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KVwC34m6ck+LNPP
2GeznhDPLFkI+WM8JIExhQtLBCu7kl68k2tDuP7D0oKWboBd3rgY9Yy0Deh8GlbU
IgrnIGl/IGSWN/ddKab8crqORugewN8Otd7g+jCDxSq7A69Vc6dJA5Uwzp+ClKA8
jNklY5xMMLR4yIdKeo723g2kF9Gw7/3AE9zmhhA0vBByZUsdpANSMXXGBEbhdFZ/
udKj++8O9HPxIAofjFiprOz9IWyhEiShdv/xq9LxUPm7DNMm2+ICX3I9PWTxM8fY
eP3tTnND8pmYe3YaE9WIxA2bBuCv8/i8uLcMBLs6DIPwArSvIpQfElCwDr3BicnT
P8vclQIDAQABo4IDOTCCAzUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTLSwr0gOlg
xGHUimfEB1uxgC7w2zAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMD0GA1UdEQQ2MDSCFmtub3dsZWRnZW1hcmtldGluZy5j
b22CGnd3dy5rbm93bGVkZ2VtYXJrZXRpbmcuY29tMIH+BgNVHSAEgfYwgfMwCAYG
Z4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nw
cy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZp
Y2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMg
YW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xp
Y3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8w
ggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAl
CBcvo6odBxPTDAAAAWK3EBHpAAAEAwBHMEUCIF9IEJA284XyYirQJMcfkbKVW4F8
+EiHpRUb+DK1NHT9AiEAp2OJziKQ6fBByD2oIPxrnSkJhk5RKYc+YAEjRuM7jP4A
dQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWK3EBHTAAAEAwBG
MEQCIDDpIWqTABg65l+b5j6Up+FWkuZB1IC7gYVPRf98imnPAiAHHEMnOLeUoIpk
fd/2j5f9zreNo+VIPK87vkWWAJBYCTANBgkqhkiG9w0BAQsFAAOCAQEAIN8QYmlE
f+nxIOqwhLk523p+xss2hijF7oZ//LAJts7VkPnxRSF56r6TcLgwjq0kvbb8d9Zk
88NOK3dJLh6w8WJon/3REIdtD7eLsGAT4AfbeqFmZkrMLI75Y3DQROGZPHd+giFN
oh51g46xLDXGNzNF8nQwGsGG7ZXHn7WwlmEPaoME4hJWGEU50KMrz49OuyIBMzzZ
1IoYM969hdOo4siREu9WDQjjl81zB36cYi+tEKszY79gvNrcbKbNfdv2AoGVm1rE
Bu2nslwkJf3WEmsKmZkkp0Ko32rUqsgEfCgTE1oXDnR1GbDWeRNV/GZtej3gF+0J
u3qAwwEULA5v/A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KVwC34m6ck+LNPP2Gez
nhDPLFkI+WM8JIExhQtLBCu7kl68k2tDuP7D0oKWboBd3rgY9Yy0Deh8GlbUIgrn
IGl/IGSWN/ddKab8crqORugewN8Otd7g+jCDxSq7A69Vc6dJA5Uwzp+ClKA8jNkl
Y5xMMLR4yIdKeo723g2kF9Gw7/3AE9zmhhA0vBByZUsdpANSMXXGBEbhdFZ/udKj
++8O9HPxIAofjFiprOz9IWyhEiShdv/xq9LxUPm7DNMm2+ICX3I9PWTxM8fYeP3t
TnND8pmYe3YaE9WIxA2bBuCv8/i8uLcMBLs6DIPwArSvIpQfElCwDr3BicnTP8vc
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349885910299917342668093090303523460180515
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-11 22:35:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-10 22:35:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.knowledgemarketing.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30883726769982832971722066097137432632656480386707721149257436305235816802923353966930887324538186145728143222471943263556941108807636828625910769507114460958302147736604048220449250855109960920686779985487548625890975380910933309739917262478380385498085719305418102917713565689448495832599298703968475876121899949411764901204410294494448845675665961646077953163618340716955611654227213772416137612087243126656918657956409465478178823260132807200395598387824072644597700291059727767961961123487325903654616153884976458607727120933811058560064833052126609854823346801482688514542477260582362305060565872769447643307157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb4b0af480e960c461d48a67c4075bb1802ef0db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledgemarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knowledgemarketing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000162b71011e9000004030047304502205f48109036f385f2622ad024c71f91b2955b817cf84887a5151bf832b53474fd022100a76389ce2290e9f041c83da820fc6b9d2909864e5129873e60012346e33b8cfe007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162b71011d30000040300463044022030e9216a9300183ae65f9be63e94a7e15692e641d480bb81854f45ff7c8a69cf0220071c432738b794a08a647ddff68f97fdceb78da3e5483caf3bbe459600905809
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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