rec-gedapi.app.solocalgroup.com
Issued by R3
About this certificate
This digital certificate with serial number 04:73:d5:cf:98:a4:92:e3:2d:98:52:68:2c:45:55:b5:3a:9b was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=rec-gedapi.app.solocalgroup.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:73:d5:cf:98:a4:92:e3:2d:98:52:68:2c:45:55:b5:3a:9bSerial Number (int): 387865819387465951535335854160666611235483
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 9c:42:50:4d:cc:18:44:58:ab:79:38:0b:94:6a:b5:2b:f8:f7:95:a9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 83:f0:12:57:8d:29:e5:10:ce:96:97:50:92:4d:cb:82:e8:03:d5:40
Fingerprint (sha256): 5c:8a:fa:ad:67:5b:78:f8:3f:d6:f1:6e:0f:70:57:d1:fb:17:e4:78:39:f5:46:da:5b:c1:68:c0:e0:db:29:86
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate rec-gedapi.app.solocalgroup.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rec-gedapi.app.solocalgroup.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rec-gedapi.app.solocalgroup.com
Other certificates including the domain name solocalgroup.com
(limited to 100 certificates)
uk.solocalgroup.com
uk.solocalgroup.com
www.solocal.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
solocal.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
solocal.com
uk.solocalgroup.com
*.sanmarco.solocalgroup.com
*.apps.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
basedeco.solocalgroup.com
uk.solocalgroup.com
effectifs.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
dialogue-parties-prenantes.solocalgroup.com
www.solocal.com
solocal-services.solocalgroup.com
uk.solocalgroup.com
gedapi.app.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
intranet.solocalgroup.com
solocal.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
intranet.solocalgroup.com
uk.solocalgroup.com
solocal.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
ppdapi.app.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
www.solocalgroup.com
www.solocal.com
uk.solocalgroup.com
uk.solocalgroup.com
*.apps.solocalgroup.com
uk.solocalgroup.com
refs-business.solocalgroup.com
effectifs.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
*.sanmarco.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
tuleap.solocalgroup.com
*.sanmarco.solocalgroup.com
www.solocalgroup.com
www.solocalgroup.com
content-api.solocalgroup.com
uk.solocalgroup.com
*.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
effectifs.solocalgroup.com
eureka.solocalgroup.com
uk.solocalgroup.com
ppdapi-portal.app.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
www.solocalgroup.com
*.apps.solocalgroup.com
uk.solocal.com
rec-gedapi.app.solocalgroup.com
campusdigital.solocalgroup.com
eureka.solocalgroup.com
*.apps.solocalgroup.com
*.solocalgroup.com
webhook.sup.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
*.apps.solocalgroup.com
effectifs.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
*.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
solocal.com
uk.solocalgroup.com
uk.solocalgroup.com
www.solocal.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
solocal.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
solocal.com
uk.solocalgroup.com
*.sanmarco.solocalgroup.com
*.apps.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
basedeco.solocalgroup.com
uk.solocalgroup.com
effectifs.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
dialogue-parties-prenantes.solocalgroup.com
www.solocal.com
solocal-services.solocalgroup.com
uk.solocalgroup.com
gedapi.app.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
intranet.solocalgroup.com
solocal.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
intranet.solocalgroup.com
uk.solocalgroup.com
solocal.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
ppdapi.app.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
www.solocalgroup.com
www.solocal.com
uk.solocalgroup.com
uk.solocalgroup.com
*.apps.solocalgroup.com
uk.solocalgroup.com
refs-business.solocalgroup.com
effectifs.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
*.sanmarco.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
tuleap.solocalgroup.com
*.sanmarco.solocalgroup.com
www.solocalgroup.com
www.solocalgroup.com
content-api.solocalgroup.com
uk.solocalgroup.com
*.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
effectifs.solocalgroup.com
eureka.solocalgroup.com
uk.solocalgroup.com
ppdapi-portal.app.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
www.solocalgroup.com
*.apps.solocalgroup.com
uk.solocal.com
rec-gedapi.app.solocalgroup.com
campusdigital.solocalgroup.com
eureka.solocalgroup.com
*.apps.solocalgroup.com
*.solocalgroup.com
webhook.sup.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
*.apps.solocalgroup.com
effectifs.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
*.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
solocal.com
uk.solocalgroup.com
Certificate
The complete raw certificate details for rec-gedapi.app.solocalgroup.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEGDCCAwCgAwIBAgISBHPVz5ikkuMtmFJoLEVVtTqbMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDIyMzQzMjFaFw0yNDA3MDEyMzQzMjBaMCoxKDAmBgNVBAMT H3JlYy1nZWRhcGkuYXBwLnNvbG9jYWxncm91cC5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQChYW+2IytQfnKnzmJh1xAG6az1wa60+8qzTjIM3RBX aXKtSbYP/d8bZcpeTsrJzSMNJDjNvI4zLzpRnQD6l6y6SFPhC7c4kU5uDW1bTZRL lU7LFhvcbbyy8zL8OvE/flXOQudmqMaJbtwtuvuPe5xVEYjXI1HCQoQ8aTGO8uyt sdfic6hx7Thh3geRe+vym1E0zrkBveT0WaIASAiXG//0ZcgjoQBJ9P2aRcX8dq1K YDOwrz/cb3NAukDk1C7QaheaE44uVGJlduWTELBg2WgUjQpuuS5rtKFXatXG3iAg Ym1jsDUtBORA5mJHJBQQK4vmDaTP/FXzQJdbXC1AV+IHAgMBAAGjggEuMIIBKjAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFJxCUE3MGERYq3k4C5RqtSv495WpMB8GA1Ud IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw Oi8vcjMuaS5sZW5jci5vcmcvMCoGA1UdEQQjMCGCH3JlYy1nZWRhcGkuYXBwLnNv bG9jYWxncm91cC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwEwYKKwYBBAHWeQIE AwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAIrZkWgKezaUattbaDDtNEUnrRiW qInDOIckU3BFUHl+thbhlS1rWULSPfOIjofwjfIpFPPRLCe6wmI2v3qrZ9UpdZsu sQCA6qHV211D/5KLR+KcJHtt/FJbLpqBmRozv9LOIgmvGFdR+Iu0my9bAe1CHtS9 JMP/37QjUcSmFddiz48Jg7OfaQ3L5DI6OqYLq43l+mva1bxcCekaYicOUnTBqhAG H4bWLY76OLTWQAWdS3KehCyEcZxV0QlffOKN3jQ7etTR5NpDZficnR0nYET4JSHa 9p0m8IJjyjyL6yxlAj1sItnPcuqq2QYSe2ulfEoBFc1b2afcTptmjHCqhFE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWFvtiMrUH5yp85iYdcQ Bums9cGutPvKs04yDN0QV2lyrUm2D/3fG2XKXk7Kyc0jDSQ4zbyOMy86UZ0A+pes ukhT4Qu3OJFObg1tW02US5VOyxYb3G28svMy/DrxP35VzkLnZqjGiW7cLbr7j3uc VRGI1yNRwkKEPGkxjvLsrbHX4nOoce04Yd4HkXvr8ptRNM65Ab3k9FmiAEgIlxv/ 9GXII6EASfT9mkXF/HatSmAzsK8/3G9zQLpA5NQu0GoXmhOOLlRiZXblkxCwYNlo FI0Kbrkua7ShV2rVxt4gIGJtY7A1LQTkQOZiRyQUECuL5g2kz/xV80CXW1wtQFfi BwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 387865819387465951535335854160666611235483 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 23:43:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 23:43:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rec-gedapi.app.solocalgroup.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20372414765796085463062400211678342815524751701779354796665296507579279251320588924050241816926318583813314227092495539922882679628107357373114009284595832562239018343356036361954761424453549035512960965232107122710487229140437477470726889043409914269968356319126617396562506208930818160290784941423808739471282633922320219581433042516687310918509449021293603072383064452697925520414187950711962384860187785372113381585853020819627170839581325970099974778543569694739236871067862380679145637585875805971861427041354832726915419802132082203434607009030315035940864074623850035549422434386180984916256319422725654831623 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9c42504dcc184458ab79380b946ab52bf8f795a9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rec-gedapi.app.solocalgroup.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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