www.adamgibbard.co.uk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:52:d0:00:eb:42:19:39:c9:67:63:c6:d8:96:49:22:51:e4 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.adamgibbard.co.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:52:d0:00:eb:42:19:39:c9:67:63:c6:d8:96:49:22:51:e4Serial Number (int): 289516496077524079014636523123286221148644
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e7:9b:49:05:7a:8e:cc:3d:08:eb:01:69:e6:37:f0:6e:fe:12:73:70
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): aa:05:73:b2:34:74:7c:9e:a2:03:9e:64:7f:4c:e9:53:b3:3b:63:5e
Fingerprint (sha256): 3f:7a:d6:af:5e:45:1e:0b:79:dd:6f:26:a6:96:39:57:e3:1b:c9:88:48:d8:b8:a7:2c:82:c9:88:ee:bf:71:2b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate www.adamgibbard.co.uk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.adamgibbard.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.adamgibbard.co.uk
Other certificates including the domain name adamgibbard.co.uk
(limited to 100 certificates)
adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
adamgibbard.co.uk
www.adamgibbard.co.uk
Certificate
The complete raw certificate details for www.adamgibbard.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISA1LQAOtCGTnJZ2PG2JZJIlHkMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA0MTcwNzMxMDBaFw0x NzA3MTYwNzMxMDBaMCAxHjAcBgNVBAMTFXd3dy5hZGFtZ2liYmFyZC5jby51azCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMJ2wSXY1nHLactuV3HKfVKq OtWQ0dv1tvKVnEr5/m6EPE9tnkGRQSJ1pWMHGcI4Aky35/LoQA56SWteLrJbUB7Y Ud4fqzm/E9M2mmpiy/to73TUuI8mJsVGwSAsY/DKWH33RnPX2qmogMAYk834sNYc Caf+/GOvgoJdzixQsddr/ib2ZEQNyATN6ecfIiAHQRjmacPhbeP+DiXSm4qc1M5q hs4/y7QUZGcMaoirHlGMafRy/EZvYDV9zV13NAJv0tHE03W3e9jlZBM+JpXa4Gkw 2Nv1Zf+XgY0W1ZsXS+hkDuV1U2ZVhwtThfevjfTDxT4sQ+armPTNF1nKMcQJLH0C AwEAAaOCAhYwggISMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU55tJBXqOzD0I6wFp 5jfwbv4Sc3AwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYB BQUHAQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wIAYDVR0RBBkwF4IVd3d3LmFkYW1naWJiYXJkLmNvLnVrMIH+ BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGe DIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBS ZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBD ZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5v cmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAAov/Yii+3DbgF/6McsS 0sL3z8wcxQLbn2n5iJj3wZ4FRibr2XqECTNJvvG5vpU8e08YYzA6j+SL94HTMq6h NkEi87a70gXHKjgjg00T52Qyfeoz4Pf2SzJFaWOo/9WqdA3IunJOciBNry0dth2v KFM39V+Rs/Y4qrhR4v1JDpohu7c5I70kf3h4szO67mWeu13AB2weT4bQhVatm1f6 stQQOVI+i9Bt6FXDWMHSNiY03GOHoGZ2hNHfvfbbFfJ0+y0I8atPhc67f6zRVi0L 428gdT+A2HEPbWaA6jNV8zC0aV02jVms9erW2VVE3A+ExKpe/TwkMcwLsQdgALO3 hcs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnbBJdjWcctpy25Xccp9 Uqo61ZDR2/W28pWcSvn+boQ8T22eQZFBInWlYwcZwjgCTLfn8uhADnpJa14usltQ HthR3h+rOb8T0zaaamLL+2jvdNS4jyYmxUbBICxj8MpYffdGc9faqaiAwBiTzfiw 1hwJp/78Y6+Cgl3OLFCx12v+JvZkRA3IBM3p5x8iIAdBGOZpw+Ft4/4OJdKbipzU zmqGzj/LtBRkZwxqiKseUYxp9HL8Rm9gNX3NXXc0Am/S0cTTdbd72OVkEz4mldrg aTDY2/Vl/5eBjRbVmxdL6GQO5XVTZlWHC1OF96+N9MPFPixD5quY9M0XWcoxxAks fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 289516496077524079014636523123286221148644 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-17 07:31:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-16 07:31:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.adamgibbard.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24548791181914142234140881426083806133046323602302562046547054439210456631594433599569607444533508618543087912394190367000797193704660732245167766734628394530932409510726727258682653445059266319944284155988175574584964209576386879644941778585118953272361835799439978235763830579718408881693873873020846985416193144981415623291119530663441304574295400440788688489706621801019898335966220777702326145779387991712755514492750960734898016655610122273061991749188704076181356048369030834516238740802111054757986901045110508543381818776218612610642450547250285686895246273412031631934217955968381124791800824379753093475453 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e79b49057a8ecc3d08eb0169e637f06efe127370 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adamgibbard.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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