*.g-mms.com
- Google Inc -
Issued by Google Internet Authority G3
About this certificate
This digital certificate with serial number 3c:7b:2c:65:51:75:89:c3 was issued on by Google Trust Services.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Google Inc
Organization:
Google Inc
State / Province:
California
Locality: Mountain View
Country: US
Locality: Mountain View
Country: US
Google Trust Services
Organization:
Google Trust Services
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 3c:7b:2c:65:51:75:89:c3Serial Number (int): 4358125878081063363
Serial Number lenght: 62 bits, 8 octets
SubjectKeyId: 25:06:26:bc:ab:7e:a3:c4:c8:56:e3:d9:23:aa:52:dd:83:7e:8b:e0
AuthorityKeyId: 77:c2:b8:50:9a:67:76:76:b1:2d:c2:86:d0:83:a0:7e:a6:7e:ba:4b
Fingerprint (sha1): d8:34:16:49:9b:29:37:54:fe:c6:84:03:57:ed:54:f6:d2:c0:17:aa
Fingerprint (sha256): 31:e9:20:15:43:a5:92:97:f1:7a:14:ad:1e:b4:7e:53:b0:de:a8:f3:f4:0e:49:28:4f:50:84:7e:19:eb:b2:84
Issuing Certificate URL: http://pki.goog/gsr2/GTSGIAG3.crt
Revocation information
OCSP Server: http://ocsp.pki.goog/GTSGIAG3CRL Distribution Point: http://crl.pki.goog/GTSGIAG3.crl
Check the revocation status for certificate *.g-mms.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.g-mms.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Extended Key Usages
Server Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.g-mms.com
Other certificates including the domain name g-mms.com
(limited to 100 certificates)
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
Certificate
The complete raw certificate details for *.g-mms.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfDCCA2SgAwIBAgIIPHssZVF1icMwDQYJKoZIhvcNAQELBQAwVDELMAkGA1UE BhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczElMCMGA1UEAxMc R29vZ2xlIEludGVybmV0IEF1dGhvcml0eSBHMzAeFw0xNzExMTYwMjI5MjJaFw0x ODAyMDgwMTU2MDBaMGUxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlh MRYwFAYDVQQHDA1Nb3VudGFpbiBWaWV3MRMwEQYDVQQKDApHb29nbGUgSW5jMRQw EgYDVQQDDAsqLmctbW1zLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ72MmO2KXPmAAMGzp4Wobp3GP9Q1YM0jHB/LBig2vNXsJGuUnAW6VVX/SiW M4Cednux7zyUk8Fh+3t7GRcJ6Ulc6rq6mDPghRfB3DXjGhJYlLFk8txFitXUmT5J puo3AQX7fR8oHux9jk30NvEH+AloCKMwrRgp68sznT/UeduXGc7zy3I6Bxg4JLJ9 xcUIyGS1+ZiXaxfF4e+1a3GYbpOpg772FIg5bl6YGYnWKvKYSKRIisIvTsAZhVus i2XB28llQ315ClEAnM2yY0ARxuQJutQ+yt7l3ZX5/jpCvZIRoMdUfgwCMvlzM3S7 f86zrxaKdMNG+okM8XuWdCcTogkCAwEAAaOCAT8wggE7MBMGA1UdJQQMMAoGCCsG AQUFBwMBMBYGA1UdEQQPMA2CCyouZy1tbXMuY29tMGgGCCsGAQUFBwEBBFwwWjAt BggrBgEFBQcwAoYhaHR0cDovL3BraS5nb29nL2dzcjIvR1RTR0lBRzMuY3J0MCkG CCsGAQUFBzABhh1odHRwOi8vb2NzcC5wa2kuZ29vZy9HVFNHSUFHMzAdBgNVHQ4E FgQUJQYmvKt+o8TIVuPZI6pS3YN+i+AwDAYDVR0TAQH/BAIwADAfBgNVHSMEGDAW gBR3wrhQmmd2drEtwobQg6B+pn66SzAhBgNVHSAEGjAYMAwGCisGAQQB1nkCBQMw CAYGZ4EMAQICMDEGA1UdHwQqMCgwJqAkoCKGIGh0dHA6Ly9jcmwucGtpLmdvb2cv R1RTR0lBRzMuY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQDBWclF+feJn1o8If56LRD2 MgAmGJ+bh8UZvuL2trf4k3I8+8lc3+DUiOq15CCByJ+SiP88gohXOWKHL4R4c1u9 Argwe+wiKpV5dqc4ayrQit8J6f32MDtPGz1/vbIOfs20Sc2yyx+hnWEsbjKBJTE/ wnt10W49+O9V1MbPL3P1sd93OWnWnYhV8KVybCgoXu+D+q3xF1pfBcTxCRueId1p Rq9XtYQmhMNyG0pXA1aKiJq75a9D+fAB2K/gwusBoVYYdndK3/eFfej+dOT95baz Se+Jn+5Hr5+N2B2vZuX+VWBZ8nzu11XblSf/vmhMuzrlkb8c00naFboav2hyYprP -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvYyY7Ypc+YAAwbOnhah uncY/1DVgzSMcH8sGKDa81ewka5ScBbpVVf9KJYzgJ52e7HvPJSTwWH7e3sZFwnp SVzqurqYM+CFF8HcNeMaEliUsWTy3EWK1dSZPkmm6jcBBft9Hyge7H2OTfQ28Qf4 CWgIozCtGCnryzOdP9R525cZzvPLcjoHGDgksn3FxQjIZLX5mJdrF8Xh77VrcZhu k6mDvvYUiDluXpgZidYq8phIpEiKwi9OwBmFW6yLZcHbyWVDfXkKUQCczbJjQBHG 5Am61D7K3uXdlfn+OkK9khGgx1R+DAIy+XMzdLt/zrOvFop0w0b6iQzxe5Z0JxOi CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4358125878081063363 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Internet Authority G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-16 02:29:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-08 01:56:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mountain View' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Google Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.g-mms.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20067056368267611488264094090227389046834143958545182934590725085172580897694304054026473080873306007887169814040595611465020803712319823755005265803612702797635639574682912471657044214242023019909571869624882261204468197852424970218115585290123573195350929281271121616778235655092300442772880369136296981166145113954177001883917428506402431295396196513732752793794049661146143877110708874304786685676631100809516836720357090721749976428560154866837070488446844049977130054664996465502547614678521526561411567967001255120515337996910968727643698875225127086805877352424976558238389931274377975178890292011781644853769 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.g-mms.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTSGIAG3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/GTSGIAG3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 250626bcab7ea3c4c856e3d923aa52dd837e8be0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 77c2b8509a677676b12dc286d083a07ea67eba4b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTSGIAG3.crl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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