promo.kasko2go.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:0a:8d:dc:d4:e1:6d:34:1d:a6:f3:1b:86:e8:77:f1:32:28 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=promo.kasko2go.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:0a:8d:dc:d4:e1:6d:34:1d:a6:f3:1b:86:e8:77:f1:32:28Serial Number (int): 352040535166695891431392115260677122241064
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 80:94:b1:4c:65:97:46:b8:92:53:26:b7:e7:8a:b9:93:b6:cb:ab:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a8:7a:b0:90:71:1a:2f:5e:d7:34:08:ec:9e:d8:86:bb:91:ec:1e:12
Fingerprint (sha256): 4e:41:35:2a:ff:1f:3c:c4:fa:bc:58:a7:96:33:f6:9f:09:a4:a3:4d:b1:38:77:05:75:58:21:46:f8:0f:8f:32
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate promo.kasko2go.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for promo.kasko2go.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
promo.kasko2go.com
Other certificates including the domain name kasko2go.com
(limited to 100 certificates)
kasko2go.com
kasko2go.com
kasko2go.com
link.kasko2go.com
kasko2go.com
ico.kasko2go.com
promo.kasko2go.com
ico.kasko2go.com
*.kasko2go.com
promo.kasko2go.com
kasko2go.com
promo.kasko2go.com
promo.kasko2go.com
kasko2go.com
*.kasko2go.com
*.kasko2go.com
ico.kasko2go.com
kasko2go.com
test.kasko2go.com
*.kasko2go.com
ico.kasko2go.com
kasko2go.com
promo.kasko2go.com
sqr.app
kasko2go.com
ico.kasko2go.com
kasko2go.com
kasko2go.com
*.kasko2go.com
ico.kasko2go.com
*.kasko2go.com
link.kasko2go.com
kasko2go.com
*.kasko2go.com
ico.kasko2go.com
kasko2go.com
kasko2go.com
link.kasko2go.com
kasko2go.com
ico.kasko2go.com
promo.kasko2go.com
ico.kasko2go.com
*.kasko2go.com
promo.kasko2go.com
kasko2go.com
promo.kasko2go.com
promo.kasko2go.com
kasko2go.com
*.kasko2go.com
*.kasko2go.com
ico.kasko2go.com
kasko2go.com
test.kasko2go.com
*.kasko2go.com
ico.kasko2go.com
kasko2go.com
promo.kasko2go.com
sqr.app
kasko2go.com
ico.kasko2go.com
kasko2go.com
kasko2go.com
*.kasko2go.com
ico.kasko2go.com
*.kasko2go.com
link.kasko2go.com
kasko2go.com
*.kasko2go.com
ico.kasko2go.com
Certificate
The complete raw certificate details for promo.kasko2go.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgISBAqN3NThbTQdpvMbhuh38TIoMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MTMxMjM5MjFaFw0x OTExMTExMjM5MjFaMB0xGzAZBgNVBAMTEnByb21vLmthc2tvMmdvLmNvbTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMPsM1OK3uMtQmB4wUjgtnr1n6CI REKi7pRy1VaRmRxDLlVuknJVt7OdYC85VAetIydtp+kcHp/GUsKKsOGVPXV00cwR i7ai8lrF9m0Gwh6divT7m8IGwXkNSlcuQEj47HVofXlMZRZoip1NqvnEN8P/TRDU oa3X2GNjvtdiRSbYESYgYIVCjFjGZxJQ8i2oN2AzsoZaMh3Mv3bcAaE0VfH9GoK/ HdyWKYPMnUd3bxqiCHdeb50o/F0i3xfiFZfFAbqd5kqvqxwO0W1CresM/R5c68oT rUebsyQ07Rj/wtUdFsgXokoG3xcShEan4wdyTDLZsebsOqjX9XQXDvgexm0FqnB1 VL+rBLENxNLZN81VvV5oQGPz2CANqFq4SK0Hi44QITG69CJO+vcSjD283y5D4W01 MPrVY3z/oywvxB3PCVo0jnFUBsG6Fb6whNFPqtpn4MCEt9WiZw2kPDC1L+XasWEv hAHuaZrx86aJtaXK1DREPc2Rilo5bSstwjTFEpGLT5/C1OpR0ZTWTgoTjWbG7g6Z Uz1hmqfPpC1MmAYJoyMUQSmDcVO7nYNRD1tagW2EyEAFqDtg7dMRkfyMdf/7f3KL MVbobBpdDqxIQ43/up239QvnGSGgteifbDZc/tq7WvwyKiEzwbqA9M7ha6yPyBOe 9+dxRfoXMtqN1U2bAgMBAAGjggJmMIICYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FICUsUxll0a4klMmt+eKuZO2y6uoMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIIScHJvbW8ua2Fza28y Z28uY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHW eQIEAgSB9ASB8QDvAHUA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4A AAFsizRicwAABAMARjBEAiBaIRDLY49HqyDUzd+nPXS8EkUj/z7QJxeTz7MFt8u/ LgIgAgXvd8riphKR32g7/UH4+Vmb6eD/1t8Wd/U/drjkmW0AdgBj8tvN6DvMLM8L coQnV2szpI1hd4+9daY4scdoVEvYjQAAAWyLNGJ1AAAEAwBHMEUCIHuWlDmbZcqZ 18pt8AiFY7T+JJe0jEm4unuq2rtDfOboAiEAuGSeOUrf/wkOK67QEk1uYDop0pUw rHtrwW2CH+gjt9kwDQYJKoZIhvcNAQELBQADggEBACINXAw/DHkPolg7bFIftN04 6BJ8WQX62KCwy8KswUPw7OaD435BUIek0Qdv3WoUez1CmpNkm2609G4U0CzfSlVV llmJlTTZ4gM2RCqbXyqagtLxuKwg4y3QOAcBBc/NWfIXrn1DbCTjX6L3yuZ329lC JKp9CIGOxCi1vPX9J02kU3qcgC2bvGOrLwHmi6/3uAWRka7S5dikG6AJoeBGgugw s4qjnF+QFUbWHX/UmKJrNq+/eRBj9C3ss/OfMkrvbLDmvJP1g8t4CgNdtI+M8HJI S/+W0Vog7386y0jhM46yUeZMK68YOxZp5qpc9UvPMoRXeSKrZ+ZJqTF1yxGvK9Y= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw+wzU4re4y1CYHjBSOC2 evWfoIhEQqLulHLVVpGZHEMuVW6SclW3s51gLzlUB60jJ22n6Rwen8ZSwoqw4ZU9 dXTRzBGLtqLyWsX2bQbCHp2K9PubwgbBeQ1KVy5ASPjsdWh9eUxlFmiKnU2q+cQ3 w/9NENShrdfYY2O+12JFJtgRJiBghUKMWMZnElDyLag3YDOyhloyHcy/dtwBoTRV 8f0agr8d3JYpg8ydR3dvGqIId15vnSj8XSLfF+IVl8UBup3mSq+rHA7RbUKt6wz9 HlzryhOtR5uzJDTtGP/C1R0WyBeiSgbfFxKERqfjB3JMMtmx5uw6qNf1dBcO+B7G bQWqcHVUv6sEsQ3E0tk3zVW9XmhAY/PYIA2oWrhIrQeLjhAhMbr0Ik769xKMPbzf LkPhbTUw+tVjfP+jLC/EHc8JWjSOcVQGwboVvrCE0U+q2mfgwIS31aJnDaQ8MLUv 5dqxYS+EAe5pmvHzpom1pcrUNEQ9zZGKWjltKy3CNMUSkYtPn8LU6lHRlNZOChON ZsbuDplTPWGap8+kLUyYBgmjIxRBKYNxU7udg1EPW1qBbYTIQAWoO2Dt0xGR/Ix1 //t/cosxVuhsGl0OrEhDjf+6nbf1C+cZIaC16J9sNlz+2rta/DIqITPBuoD0zuFr rI/IE57353FF+hcy2o3VTZsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 352040535166695891431392115260677122241064 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 12:39:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 12:39:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'promo.kasko2go.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799294710225637878639603970373912343088347963100311981861286646386639731007102533746415398632278178178956572293273994105161507407117078303791520153428496116764276677956274021721389815071023341019942566468400519015782266933520544170427407962031996312154372779263269878618479902567224815103283619631074803806861284097323581886167088677889555531060422237363665670140604723758428663241463029913653475696293726215563115360254712978400957530215449486337734400151524470614799060667763161689315393572272106624718079779466192145337474571528945665258483288330028366251961063296709058894394758504672765546711943830177104832122636837830330598558423856354340781546649085299965309220388727928526720679996213919375297101970872325163028731339261489734459624605191831944634867206527867406348260565043591231685776692652822844488737313820228737423167651655999228298251359601740973785251710258566392812617498251530209721275300133380971342271075265099273574764780714337054996634893062179865007928087772443167056685904348904477389846080891432421165359608781652971048897198685765289977707800036725048242739221168390688310851960923777443249278065268056857367874842206445332824893990523261564876600779729603886033257776606906188205880599484523229322579103131 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8094b14c659746b8925326b7e78ab993b6cbaba8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promo.kasko2go.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c8b346273000004030046304402205a2110cb638f47ab20d4cddfa73d74bc124523ff3ed0271793cfb305b7cbbf2e02200205ef77cae2a61291df683bfd41f8f9599be9e0ffd6df1677f53f76b8e4996d00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c8b346275000004030047304502207b9694399b65ca99d7ca6df0088563b4fe2497b48c49b8ba7baadabb437ce6e8022100b8649e394adfff090e2baed0124d6e603a29d29530ac7b6bc16d821fe823b7d9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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