shiatsu-bordeaux.fr
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:b9:d5:28:80:88:d0:c4:57:6b:43:a4:52:3b:75:6e:7b:f5 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=shiatsu-bordeaux.fr
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b9:d5:28:80:88:d0:c4:57:6b:43:a4:52:3b:75:6e:7b:f5Serial Number (int): 324572431537618953768311461162409230498805
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 38:ee:c4:88:dc:d0:42:a9:c4:35:76:30:dd:44:e1:66:91:d7:57:cc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): dd:21:1e:bb:c5:0c:02:de:0c:f0:fe:ca:a5:7d:dc:ec:70:5e:19:ff
Fingerprint (sha256): 4c:19:a5:6b:35:36:75:ed:57:9b:95:a6:3e:80:c7:50:22:c4:fa:c3:25:5f:38:bd:1b:4b:f5:b4:1d:77:6b:b4
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate shiatsu-bordeaux.fr
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for shiatsu-bordeaux.fr
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
shiatsu-bordeaux.fr
www.shiatsu-bordeaux.fr
www.shiatsu-bordeaux.fr
Other certificates including the domain name shiatsu-bordeaux.fr
(limited to 100 certificates)
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
shiatsu-bordeaux.fr
Certificate
The complete raw certificate details for shiatsu-bordeaux.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGeTCCBWGgAwIBAgISA7nVKICI0MRXa0OkUjt1bnv1MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjYyMTEzMzNaFw0x OTExMjQyMTEzMzNaMB4xHDAaBgNVBAMTE3NoaWF0c3UtYm9yZGVhdXguZnIwggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDX748FeDzYpQl+vB2B2QEv6Kz1 c8nZGgAPUFkScy/wf14cqGzS50uvYieIATSthMjm4F78s0xlLr/nFMaTUlsuGlSW QKa9SNv3EY/Foq53u6Tg9EvSxCGOStYOyQ2P1W8hXKkBcaEjHrDJDX6HmO72bkV2 GF1Ce1b+S6yEfJXKTrWTBKvJOdItG9Rm1QJf5ElabOiCIjmYV+FKmQ1itLh5abzF h5Znpgu02NgtyosjwSK0/sNMF6IqD6JR9FiqUrZu7NsaO4gcShvdV8soEXhJ4wkr cPmTkdSbC+/2eiIGRMLDa3jM/hdU5p0N7t9TiDhEGlE9CWgl5TX5QPSpOdSDr8/1 CYUL2pslzjbfkEaspuV+IhOq3qvlcPa19y5iIds0ykYGZ5y1RPids4UIdbrAyoev R7WOmcRvHEWKRL9eAtTKuSpx19B9brCtYM+SrJJxsZXd2kuvE/CfR3SQOE4sxVs+ YHb3PdINTAZTvECs3HjggWzXP5wQYejym9SWzIzIt6h0DoOzmKOepVJEd1BhV6JQ fM6Q7h40Mjec9zHFulnXPK4adIYChCu1EUK7GA9LvfIPlt8736OR34LigL3vdYfO J/GA59i7rU9M8qK7HsyWC43GoaTt1w+jpBedvAwmJw2BX5jnYqccZBKrf5f49jR0 VjcCS6nCrgOWecdtdQIDAQABo4ICgzCCAn8wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBQ47sSI3NBCqcQ1djDdROFmkddXzDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMDcGA1UdEQQwMC6CE3NoaWF0c3UtYm9y ZGVhdXguZnKCF3d3dy5zaGlhdHN1LWJvcmRlYXV4LmZyMEwGA1UdIARFMEMwCAYG Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu bGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcAKTxRllTI OWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFsz/3QoQAABAMASDBGAiEA4hFo Va0YsPU6iMonchWw5ndUuvVR7fHWGmZgAWs8qNoCIQC1XFITcKK4oyd+Ly3WceYq Chgr/9mXo/3RvjKM4UejtwB3AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQ e8xWAAABbM/90qcAAAQDAEgwRgIhAIYoLu1+Vr97NuAz8LiHJUV+ROCc2vDCThGU WQuZd4d1AiEAoUYRDGvxswO0QqfdJ8oybqFYC1tIbg1RTB/XNBRFK1MwDQYJKoZI hvcNAQELBQADggEBAIlTNCBCi5mmcHQWcV0bjFBYelU1BkUM6rfOhsmJEARnn7n1 QGFClHa8zSJIWKnRs5/Ih4KB6oDSmLTpiXs8nXRkae8bQ/mBlnrEIcS+vp6Tz4Gq zz89RLaVsFq6m501TSoZyZgPYTVD8j9tZXfGaXPH4KyE4oi4yIA6gC2TTrX1Vo0D /DmngzyOwi2nT6PmeslRDEjtlty8T6RaAvxFqsmBaCNCb9dNpplWqVdNW4+P0tsc O34MoqHBJYxRI/6/yGhK9Ztl0KNP8Vno2b/sA779nKuIQqiBSVe3pu3Cys9Fepr2 pHiBll0vkGJ6iRXN65fLPdRpTORJhDMJ5ukuVzE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1++PBXg82KUJfrwdgdkB L+is9XPJ2RoAD1BZEnMv8H9eHKhs0udLr2IniAE0rYTI5uBe/LNMZS6/5xTGk1Jb LhpUlkCmvUjb9xGPxaKud7uk4PRL0sQhjkrWDskNj9VvIVypAXGhIx6wyQ1+h5ju 9m5FdhhdQntW/kushHyVyk61kwSryTnSLRvUZtUCX+RJWmzogiI5mFfhSpkNYrS4 eWm8xYeWZ6YLtNjYLcqLI8EitP7DTBeiKg+iUfRYqlK2buzbGjuIHEob3VfLKBF4 SeMJK3D5k5HUmwvv9noiBkTCw2t4zP4XVOadDe7fU4g4RBpRPQloJeU1+UD0qTnU g6/P9QmFC9qbJc4235BGrKblfiITqt6r5XD2tfcuYiHbNMpGBmectUT4nbOFCHW6 wMqHr0e1jpnEbxxFikS/XgLUyrkqcdfQfW6wrWDPkqyScbGV3dpLrxPwn0d0kDhO LMVbPmB29z3SDUwGU7xArNx44IFs1z+cEGHo8pvUlsyMyLeodA6Ds5ijnqVSRHdQ YVeiUHzOkO4eNDI3nPcxxbpZ1zyuGnSGAoQrtRFCuxgPS73yD5bfO9+jkd+C4oC9 73WHzifxgOfYu61PTPKiux7MlguNxqGk7dcPo6QXnbwMJicNgV+Y52KnHGQSq3+X +PY0dFY3Akupwq4DlnnHbXUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 324572431537618953768311461162409230498805 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 21:13:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-24 21:13:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shiatsu-bordeaux.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 880941107969738458568478038128935971618608381806812134959948621669903088242158620283052651488064557035310569730664610064394744213439289368674279181805108488131786303903544171410191495630500076737364896912251433931321650482479469030339370998576160966201438459115618929963325550923390336897665013863693927851744669221798422209936566409701992060736798756551191933188370392754316309619823754458162231525101062784032849383822489944185246701811012486990735382640713967174649884646129196013348591690689311420036750480022750731946489687933841749426835329984585653192671654044722872937119523746933012802920283662791835435612445019432286386045446965228963225347587504305969617019948433059063676410165661353696694361568966800997378742545097475659016593207873497062273801598572361270027458789978270803444330541337483700045680955908825399369064474992345944922628453058039601685167549983178062628543843411940536594945649917233082976283903459958666855756237973732340851970700249817818779957365674768745541625149516291987834774497003441711090634001072983841697394557706339575255814763756768102459586903100116573977137628517030461458804545290369588852319240784644124046861186021138161493704445701876418016949935054941280252013714141059542844518657397 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 38eec488dcd042a9c4357630dd44e16691d757cc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiatsu-bordeaux.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shiatsu-bordeaux.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ccffdd0a10000040300483046022100e2116855ad18b0f53a88ca277215b0e67754baf551edf1d61a6660016b3ca8da022100b55c521370a2b8a3277e2f2dd671e62a0a182bffd997a3fdd1be328ce147a3b7007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ccffdd2a7000004030048304602210086282eed7e56bf7b36e033f0b88725457e44e09cdaf0c24e1194590b99778775022100a146110c6bf1b303b442a7dd27ca326ea1580b5b486e0d514c1fd73414452b53 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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