library.greenhead.ac.uk

- Greenhead College -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 6d:74:1f:5e:42:55:0f:60:7a:42:45:89:7c:54:0e:0b:00:e1:01:ed was issued on by QuoVadis Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Greenhead College

Organization: Greenhead College
Organization unit: Network Management
State / Province: West Yorkshire
Locality: HUDDERSFIELD
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:74:1f:5e:42:55:0f:60:7a:42:45:89:7c:54:0e:0b:00:e1:01:ed
Serial Number (int): 624869613018405140396357289683962613864635367917
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: de:7f:fe:2e:f7:95:39:c8:6b:b2:df:8c:f6:98:b6:21:ca:c9:00:51
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): a9:d3:28:17:d9:12:43:31:e5:6a:46:8e:d2:cd:74:a4:55:05:cc:49
Fingerprint (sha256): 47:8a:3c:3e:3d:3a:38:de:9c:26:77:27:84:95:27:b5:fa:43:43:8b:78:a2:85:1c:3f:26:8f:3e:2b:95:10:08

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate library.greenhead.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for library.greenhead.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

library.greenhead.ac.uk
heritage.greenhead.ac.uk

Other certificates including the domain name greenhead.ac.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for library.greenhead.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGNjCCBB6gAwIBAgIUbXQfXkJVD2B6QkWJfFQOCwDhAe0wDQYJKoZIhvcNAQEL
BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTE3MTIxNTExMzMy
N1oXDTIwMTIxNTExNDMwMFowgZgxCzAJBgNVBAYTAkdCMRcwFQYDVQQIDA5XZXN0
IFlvcmtzaGlyZTEVMBMGA1UEBwwMSFVEREVSU0ZJRUxEMRowGAYDVQQKDBFHcmVl
bmhlYWQgQ29sbGVnZTEbMBkGA1UECwwSTmV0d29yayBNYW5hZ2VtZW50MSAwHgYD
VQQDDBdsaWJyYXJ5LmdyZWVuaGVhZC5hYy51azCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALinOL9fL+PVABcPHgryh65WacKSlx/3/ljlJt61fMF7c7e0
rDi0NUrs6lxmnxGL8JAjjNM4AWPBkxYE7gf4bSthAakBWiVPo1lRQs1tKcZ0CvV/
21cKUDyG90vRT2ea+jh8rmZL7rpOvXLKKm+XnQ6UZKhnBTOslz06Uz1MT7Fz8Sby
1qJ6UXgysU6KWFVJe4i/S05Y8ISowQN/8a1VnSjR88iDVQ5zLzZm8zNHCWmCjB30
EMIEeDtsMqIliS7vQx9D1JbTxNmZBaeQ4fCtz0yJcWtGzgrEOi5IBRSQ1DautKYy
fuwGooaw4PsJWX1KTCkFYwiqpEkYvJYlybH/eRECAwEAAaOCAcAwggG8MAkGA1Ud
EwQCMAAwHwYDVR0jBBgwFoAUsxKJtalLNbwVAPCA6dh4h/ETfHYwcwYIKwYBBQUH
AQEEZzBlMDcGCCsGAQUFBzAChitodHRwOi8vdHJ1c3QucXVvdmFkaXNnbG9iYWwu
Y29tL3F2c3NsZzMuY3J0MCoGCCsGAQUFBzABhh5odHRwOi8vb2NzcC5xdW92YWRp
c2dsb2JhbC5jb20wPAYDVR0RBDUwM4IXbGlicmFyeS5ncmVlbmhlYWQuYWMudWuC
GGhlcml0YWdlLmdyZWVuaGVhZC5hYy51azBRBgNVHSAESjBIMEYGDCsGAQQBvlgA
AmQBATA2MDQGCCsGAQUFBwIBFihodHRwOi8vd3d3LnF1b3ZhZGlzZ2xvYmFsLmNv
bS9yZXBvc2l0b3J5MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATA6BgNV
HR8EMzAxMC+gLaArhilodHRwOi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnNz
bGczLmNybDAdBgNVHQ4EFgQU3n/+LveVOchrst+M9pi2IcrJAFEwDgYDVR0PAQH/
BAQDAgWgMA0GCSqGSIb3DQEBCwUAA4ICAQDR+kLGfzUeII/J5nbd3vknI2FB7gcm
Zbvm6OzC3CjaoTPAaBDQk+aLsUEFCcA2JWUHAvk9E/Tpb508uHG+KzdN2P7n2kY6
uzEb2+tcmy/xxZscDFDr8rrZlYccTvN8DkGhp1JGbeXqjBWWUSNNClLEXwldeaRZ
l3Z+jF+ozFO71FsW0IT6239HgNA1LXcamrtPQguw5ZF5J2RkcIRd6vRcKAKnT24B
H06x7At8hajP8TSKcQao8Bf2i/OmtIYhs/FTW4riIipEmcJPqqUkwlvDkDzRS+tb
9mPhIQuZuD+2CYlHENfRBHEpxs4JtexkJIG3eSwT+MiRZSQRz/+65+fgRlRVjKja
FgH6z3PKRJ4MEDDfxUBRGpn/g9tbT9mgb4KMlb9oa7bTAJ3WWRVphOHLNKy8bx/I
AjRz+35sNPT1ZJDNuk+KbvIiBeOXtmGGpoFFzKiGLGl7Gq3tF1Yf6yamWgPEXKLh
h0LzC67z7wFyi1nuyvwcPTWt91E4NkY16S4pAKEiC6sWXY5C2ma7PvPje7HCMpSe
8gdc9VVCScG7se+o48zGD54hfCYK43SgQv2H7bNUdFMIiB2u6GOOqJxRTYKOOFWx
jRnon+3hYsa4Qrt+YWF2NjdR/AEvfwUNxMujwchLWagMI2P42vyHAnNxEGrAS0PN
nOx3My3yXCcQfg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKc4v18v49UAFw8eCvKH
rlZpwpKXH/f+WOUm3rV8wXtzt7SsOLQ1SuzqXGafEYvwkCOM0zgBY8GTFgTuB/ht
K2EBqQFaJU+jWVFCzW0pxnQK9X/bVwpQPIb3S9FPZ5r6OHyuZkvuuk69csoqb5ed
DpRkqGcFM6yXPTpTPUxPsXPxJvLWonpReDKxTopYVUl7iL9LTljwhKjBA3/xrVWd
KNHzyINVDnMvNmbzM0cJaYKMHfQQwgR4O2wyoiWJLu9DH0PUltPE2ZkFp5Dh8K3P
TIlxa0bOCsQ6LkgFFJDUNq60pjJ+7AaihrDg+wlZfUpMKQVjCKqkSRi8liXJsf95
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 624869613018405140396357289683962613864635367917
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-15 11:33:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-15 11:43:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'West Yorkshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HUDDERSFIELD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Greenhead College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Network Management'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'library.greenhead.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23310308192611458775464704585676125032743122391779009306035556954833311603779146203519319989668174824169492019617648606087757949002659754458768877510013256492220049592489482660068103033792337129596199102028842407755644013575580898107909470240153725956873583570021422756501069138633516402740508834674604444525125676497401303797101967653450185503908288979768409926451265130187302169047362398739584661809200950747102162759937844921410596828678522552190985313707746967921270644598763641011139731589368812865744125546113322341761371448396574827693548430977453665614099853032948906529057788177613271166685492102445894957329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.greenhead.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritage.greenhead.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de7ffe2ef79539c86bb2df8cf698b621cac90051
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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