qa2.ugc.marthastewart.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 02:d7:2b:be:1b:1f:4d:23:0e:5e:e0:d0:33:42:1d:22 was issued on by Amazon.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qa2.ugc.marthastewart.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:d7:2b:be:1b:1f:4d:23:0e:5e:e0:d0:33:42:1d:22
Serial Number (int): 3775687021512590652469149388159196450
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 24:75:40:b8:9a:5f:20:1d:0e:f2:19:f3:24:9d:b1:20:4d:cf:7d:20
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 3a:46:9c:07:ca:fb:98:37:e3:2b:bc:5a:cd:77:07:22:a4:bc:58:11
Fingerprint (sha256): 55:b8:1a:da:59:9e:6c:15:f7:d9:1f:f4:bb:56:25:c1:65:63:66:3d:99:8d:ad:de:85:02:0b:02:2b:bf:2e:28

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate qa2.ugc.marthastewart.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa2.ugc.marthastewart.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa2.ugc.marthastewart.com
qa2.ugc.parents.com
qa2.ugc.parenting.com
qa2.ugc.shape.com
qa2.ugc.bhg.com
qa2.ugc.fitpregnancy.com
qa2.ugc.familycircle.com
qa2.ugc.traditionalhome.com
qa2.ugc.allpeoplequilt.com
qa2.ugc.woodmagazine.com
qa2.my.marthastewartweddings.com
qa2.ugc.diabeticlivingonline.com
qa2.ugc.ew.com
qa2.ugc.fitnessmagazine.com
qa2.ugc.allrecipes.com
qa2.ugc.marthastewartweddings.com
qa2.ugc.livingthecountrylife.com
qa2.ugc.midwestliving.com
qa2.ugc.agriculture.com
qa2.ugc.more.com
qa2.my.marthastewart.com

Other certificates including the domain name marthastewart.com

(limited to 100 certificates)
payments.meredith.com
qa4.ugc.marthastewart.com
ssl.1.damoh.marthastewart.com
securemetrics.marthastewart.com
accounts.bhg.com
*.secure.meredith.com
secure.meredith.com
ssl.1.damoh.marthastewart.com
my.meredith.com
sli.dailypaws.com
sli.dailypaws.com
a-ue1.mydomaine.com
payments.meredith.com
gigya.marthastewart.com
www.meredith.com
images.marthastewart.com
qa4.ugc.marthastewart.com
specialoffers.meredith.com
qa3.my.marthastewart.com
resolute.digital
globalrunningday.org
images.marthastewart.com
sli.dailypaws.com
*.agriculture.com
dev.secure.meredith.com
ssl.1.damoh.marthastewart.com
sli.dailypaws.com
ssl.1.damoh.marthastewart.com
sli.dailypaws.com
secure.meredith.com
accounts.bhg.com
accounts.bhg.com
www.timeinclistrental.com
mywedding.com
secure.meredith.com
mywedding.com
qa2.ugc.marthastewart.com
www.meredith.com
a-uw2.mydomaine.com
mdp.api.meredith.com
secure.meredith.com
accounts.bhg.com
www.timeinclistrental.com
marthastewart.com
a-ue1.mydomaine.com
qa4.ugc.marthastewart.com
ugc.marthastewart.com
secure.meredith.com
marthastewart.com
globalrunningday.org
test.payments.meredith.com
secure.meredith.com
sli.dailypaws.com
a-ue1.mydomaine.com
resolute.digital
qa3.ugc.marthastewart.com
ugc.marthastewart.com
sli.dailypaws.com
test.secure.meredith.com
ssl.1.damoh.marthastewart.com
qa3.ugc.marthastewart.com
marthastewart.com
ugc.marthastewart.com
images.marthastewart.com
www.timeinclistrental.com
links.allrecipes.com
sli.dailypaws.com
win.bhg.com
cr-iframe.magazine.store
secure.meredith.com
payments.meredith.com
*.marthastewart.com
*.secure.meredith.com
accounts.marthastewart.com
win.bhg.com
gigya.marthastewart.com
www.timeinclistrental.com
secure.meredith.com
ssl.1.damoh.marthastewart.com
marthastewart.com
www.meredith.com
qa3.ugc.marthastewart.com
ssl.1.damoh.marthastewart.com
cr-iframe.magazine.store
api.meredith.com
ssl.1.damoh.marthastewart.com
payments.meredith.com
qa.my.marthastewart.com
ugc.marthastewart.com
qa2.ugc.marthastewart.com
*.secure.meredith.com
ssl.1.damoh.marthastewart.com
metrics.marthastewart.com
secure.meredith.com
ugc.marthastewart.com
ssl.1.damoh.marthastewart.com
accounts.bhg.com
www.marthastewart.com
my.meredith.com
test.payments.meredith.com

Certificate

The complete raw certificate details for qa2.ugc.marthastewart.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyFF8TcXGyF1OvUg5IbY
IOyWZS0eiMzuESNxmeGHmKdRYq6gn3YMhHrG2Vx2ZYbHsQ9N9cXS+SWjRNiU/Vuf
0vxj+ZKCjNQD75M8R2PK45DxLbesM99XVvTKnEO+FvR1qChQugY7jRIFzw4vF13T
0OjpkblSlEZiHxX+amd8al3X7U9TK7zrokKdEsWnbosNOOGfvMvpNlz1wPwgsxJl
eNQwwF6dXpkWvkb2SBOmQsXI2/0ffRs4uIHp5JOExOz/bJb/7z6TuyvRiyo82Z9P
/2l/+/3fVqroBWD6DfUHItswBW2HXsAjcDOfS/rIsBoKAoEzrbp6YmR1KsVPML0L
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3775687021512590652469149388159196450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa2.ugc.marthastewart.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24127923880826804791087394025311608761223165405227656604210780199718195329981831820624657763279092047876882824107616862219604984680669160048112408221575207346286243788472590323070509477137012678837423632796811273539380909306176679173164742026055556021872579362007728576089631969765635529042385384246751003151292681133598134983580251310142854582673841793653574736120719557351481802372511918913663628470063411441549606617728966058343573580393926929568533416259160533927772557037611558144584483888063465117477331641381036828189955164297932479258320053320470536400998262634633562881526120144416653611211063939939224587091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							247540b89a5f201d0ef219f3249db1204dcf7d20
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (548 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.parents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.parenting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.fitpregnancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.familycircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.traditionalhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.allpeoplequilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.my.marthastewartweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.diabeticlivingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.fitnessmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.allrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.marthastewartweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.livingthecountrylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ugc.more.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.my.marthastewart.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186791f914f0000040300473045022100e833629c50cc50d0a7c783733df7ca9d1a9d01833097ab656dd748bd5cd34688022001d1b56a82e2e7b5042d7061ceee9ca557f53ec8d55d43f7bac43b50a021c1f1007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000186791f914a000004030046304402207d9f4e15730d8ca3d71758c7c7d821534fe0455cef31d278380d3789d92e452702202ee1809bf95aeeef58c278e7571c76345a5e090dc2a0bf475fe11e0e179db0ea007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186791f9119000004030048304602210095053509ef375a2939e117ef6d3510a935047fa751225ef710d3c98c549a5cb102210082540f49e2b156da630169489ee570536cbf7cccf116daa5fb1539fce21f0c3c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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