roche.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d4:25:0e:14:5a:05:49:54:a9:9e:b9:ff:d7:51:54:e6:ec was issued on by Let's Encrypt.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=roche.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:25:0e:14:5a:05:49:54:a9:9e:b9:ff:d7:51:54:e6:ec
Serial Number (int): 333525974123300118344750214790485231593196
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 76:5e:47:c8:91:f1:7c:33:ad:ac:03:db:6f:32:fa:0a:2c:63:bd:b9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:3b:c1:df:55:c1:00:7d:09:7a:ca:11:f7:bc:5a:69:94:85:ed:bf
Fingerprint (sha256): 5d:31:ca:a6:72:f2:b5:7a:ef:5b:ed:7a:75:1e:a8:fd:c3:be:13:4a:97:a4:97:18:63:c0:a9:cd:bc:5c:bf:b9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate roche.no

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roche.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forpatients.roche.co.za
foundationmedicine-cac.com
foundationmedicine.bg
foundationmedicine.com.au
foundationmedicine.dk
foundationmedicine.lv
latamrochepressday.com
nimblegen.com
roche-cac.com
roche-diagnostics.fr
roche.at
roche.ba
roche.bg
roche.by
roche.co.id
roche.co.il
roche.co.uk
roche.co.za
roche.com.bd
roche.com.mx
roche.com.pe
roche.com.uy
roche.ee
roche.es
roche.ge
roche.ie
roche.it
roche.lt
roche.mk
roche.no
roche.pl
roche.ro
roche.si
roche.ua
rocheinteract.com.au
rochepharmaprocurement.com
tiempodevivir.com.co

Other certificates including the domain name roche.no

(limited to 100 certificates)
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
roche.no
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
roche.no
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
gazyva.com.au
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
roche.no
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
gazyva.com.au

Certificate

The complete raw certificate details for roche.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333525974123300118344750214790485231593196
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-02 07:37:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-01 07:37:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roche.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 847836375524209459435369106598806228123073364182966584278393979879955765449733399504299541395961534736083701974254451517903992521476117251423165703831231604758077782740813276768735663548166517980889314045211287553576188112885742434716871815937356587546527589799897282483496001463631123299136276596573502444448945055050826104022180115698168857527365315744351370995976000543493660551086957075562368182283037404706822559985777085327834758073795813825063568977167852655752465274378561037090204067938836376645164632820410874171157318810921465451578935198040489170859487605139277796774488890304782838012260467208805777143918646938249781729417051973678943192871895499307193966930997563648836363042529369667537395689601474526692885681139405814831013954449421914147851370184539254736524261761827344820463747973253632516016891396803199194957608781698046625169866772952520299542368044741571944068979321556546171857377155388250301053396873396400594580227986642423295183455159269238799234354255440996435845530419343916215691825487419458755469125092266486198297360638202944057872191059099753038433558649772507493384907012987391333440791932995457679255563719803571194307793206598980847678422534183558826209865840684496708905528553990064067401528421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							765e47c891f17c33adac03db6f32fa0a2c63bdb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (569 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forpatients.roche.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine-cac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimblegen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-cac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-diagnostics.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochepharmaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiempodevivir.com.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cf11f0c6e000004030047304502206abb3872dbe7e47d3696a411adc0c967b814b90f2257e092d530b0c5f254bcc7022100852a3c7dff9bdba0c51954924c31d7aedf51860f4600c7f1ab654abe08ed777b00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cf11f0a9b0000040300483046022100dbebbc0feadf7d562f4e869892b6680c0ebc67d2473e5d278b32f0ed6af6c2ed022100d926a7783c202df3b90ca8429bb8c2a41d0ca9329387a8017921d6c5d536a59e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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