ecflow.app
Issued by R3
About this certificate
This digital certificate with serial number 03:57:6f:2c:f0:47:85:fd:bf:49:55:7b:92:7a:10:84:46:9e was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ecflow.app
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:57:6f:2c:f0:47:85:fd:bf:49:55:7b:92:7a:10:84:46:9eSerial Number (int): 291089201359441260138270308614946303526558
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e7:da:ef:c1:24:e2:3f:00:67:e8:fb:d1:6c:36:39:89:8f:9b:c2:0d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): dd:a4:7c:4f:bb:9f:04:69:3e:92:2c:54:3a:08:8f:90:79:e7:30:1f
Fingerprint (sha256): 60:b6:fc:a1:e1:06:9a:8c:5d:da:a7:5b:5b:b4:87:a2:ce:a3:a5:80:e9:43:66:8f:82:07:97:7d:58:74:43:de
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ecflow.app
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ecflow.app
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ecflow.app
Other certificates including the domain name ecflow.app
(limited to 100 certificates)
life.ecflow.app
docs.hipspec.com
gjorchestra.it
www.sigmastac.com
ecflow.app
entelechia.net
dev.lct-prime.de
ecflow.app
www.cityphil.com
www.buffalowater-dev.promise-pay.com
www.amaisbelezaesaude.com.br
giftpointscalculator.com
mediclinic.ecflow.app
www.kubalatransport.pl
weareforms.xyz
jamesstuddart.co.uk
www.orthodoxicons.co.uk
eventovirtual.co
saiasqueamo.com.br
www.splashweave.com
sriharsha.dev
tapzisolutions.com
ecflow.app
funkandschuster.art
evelynogvegard.no
www.splinters19.be
link.woov.to
api.blackwolffitnessonline.com.au
www.amaisbelezaesaude.com.br
app-link.nexquare.io
superscanpt.zed.link
www.ticaba.app
staging-student.rlabsu.org
eightplus.com
filler.opti-q.com
www.sharedmystic.com
app.escobadges.eu
www.sketchthat.com.au
ecflow.app
cuanto.com
personalityfrictionpointquiz.com
focus.fulcher.io
www.haoandxiaoye.com
pomgi.com
www.softwarelc.com
www.jelinekpetr.com
gater.livneh-iot.xyz
www.12mamis.com
login.riapay.co.in
js-adt.cafetextual.com
ena.marksteve.com
nasraldin.com
phyideas.com
todo.solarsail.work
staging.investhumber-netzero.com
www.larico.net
www.agamemedia.us
www.ecflow.app
evelynogvegard.no
pomgi.com
www.getcryptograph.app
app.infinityswap.one
staging.loogarify.com
ecflow.app
app-link.nexquare.io
ptmate.net
dystopiagame.com
mascontigo.com
links.almanabir.app
www.dimpdigital.com
www.vennsmith.com
triangledrycleaners.com
chefericardo.com.br
farmwatch.jp
staging.maslo.ai
ptmate.net
jamesstuddart.co.uk
oriyahrs.com
www.safike.com
puntounolab.lernit.app
webveer.com
dancehonolulu.com
www.garricklam.com
www.splashweave.com
grapher.life
webdotsupport.com
api.blackwolffitnessonline.com.au
www.12mamis.com
weareforms.xyz
www.kubalatransport.pl
staging.loogarify.com
www.alexistoledo.dev
dev.woo.network
www.placetell.com
beta.yopen.pro
www.drivedy.com
www.greenmenu.app
bchealthstaffingcentre.ca
www.rewards-dev.pocketpoints.com
dev.woo.network
docs.hipspec.com
gjorchestra.it
www.sigmastac.com
ecflow.app
entelechia.net
dev.lct-prime.de
ecflow.app
www.cityphil.com
www.buffalowater-dev.promise-pay.com
www.amaisbelezaesaude.com.br
giftpointscalculator.com
mediclinic.ecflow.app
www.kubalatransport.pl
weareforms.xyz
jamesstuddart.co.uk
www.orthodoxicons.co.uk
eventovirtual.co
saiasqueamo.com.br
www.splashweave.com
sriharsha.dev
tapzisolutions.com
ecflow.app
funkandschuster.art
evelynogvegard.no
www.splinters19.be
link.woov.to
api.blackwolffitnessonline.com.au
www.amaisbelezaesaude.com.br
app-link.nexquare.io
superscanpt.zed.link
www.ticaba.app
staging-student.rlabsu.org
eightplus.com
filler.opti-q.com
www.sharedmystic.com
app.escobadges.eu
www.sketchthat.com.au
ecflow.app
cuanto.com
personalityfrictionpointquiz.com
focus.fulcher.io
www.haoandxiaoye.com
pomgi.com
www.softwarelc.com
www.jelinekpetr.com
gater.livneh-iot.xyz
www.12mamis.com
login.riapay.co.in
js-adt.cafetextual.com
ena.marksteve.com
nasraldin.com
phyideas.com
todo.solarsail.work
staging.investhumber-netzero.com
www.larico.net
www.agamemedia.us
www.ecflow.app
evelynogvegard.no
pomgi.com
www.getcryptograph.app
app.infinityswap.one
staging.loogarify.com
ecflow.app
app-link.nexquare.io
ptmate.net
dystopiagame.com
mascontigo.com
links.almanabir.app
www.dimpdigital.com
www.vennsmith.com
triangledrycleaners.com
chefericardo.com.br
farmwatch.jp
staging.maslo.ai
ptmate.net
jamesstuddart.co.uk
oriyahrs.com
www.safike.com
puntounolab.lernit.app
webveer.com
dancehonolulu.com
www.garricklam.com
www.splashweave.com
grapher.life
webdotsupport.com
api.blackwolffitnessonline.com.au
www.12mamis.com
weareforms.xyz
www.kubalatransport.pl
staging.loogarify.com
www.alexistoledo.dev
dev.woo.network
www.placetell.com
beta.yopen.pro
www.drivedy.com
www.greenmenu.app
bchealthstaffingcentre.ca
www.rewards-dev.pocketpoints.com
dev.woo.network
Certificate
The complete raw certificate details for ecflow.app in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgISA1dvLPBHhf2/SVV7knoQhEaeMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMTMwNjA2MDRaFw0yNDA2MTEwNjA2MDNaMBUxEzARBgNVBAMT CmVjZmxvdy5hcHAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgjm4f CXoeytXOZ7JgMTOvRzbIqCw+DSN1yc9I+RVn28BLNaRyDJnaZODSmxwcXMCYaaYe HgnEXwgmsTfX+eNyyTYjg+uewyCmG2njDvVt00ndjb9M7Gb+j+r1/kmB2w3tW7dO 2kiFjaeX+aPa6XMyV6VnvwVsMyHQ4FDw+3/ReGyydIyXDkTC76Xz9sHzgQrwx1V3 3QSpsa4UEDuKZzFCmZb5Dozeo5+tJc1hMv5UiLXjfuqFPnAiG9oX3ztgLUItRpBG 4PTN4BDQ8mmFPLBZjv0DBezIhkFqrwzXTtKiOgT20q02dt5D9TkiftdOOfFGT5Le ktXG4KvRw7eDteuPAgMBAAGjggILMIICBzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FOfa78Ek4j8AZ+j70Ww2OYmPm8INMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMBUG A1UdEQQOMAyCCmVjZmxvdy5hcHAwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgor BgEEAdZ5AgQCBIH0BIHxAO8AdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+r OdiEcwAAAY42oepxAAAEAwBHMEUCIQDGNO7ZyaKcoAaMdN0c/Aqg7tvjWk5OetHL 1Dwi6jZAhgIgV9PJxGKUCJApDplJ6bF4tJb9fjpFo32JlFZ4c4VTxVgAdQDuzdBk 1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY42oep4AAAEAwBGMEQCIFRS zQ7uSOHddPx1mfSQKBS/jVJE/yewxOsUG+lv52mFAiAmcbwcv392r2L+CTibV4g4 UYYZ0Ft/d/9VNCWFpsp4mjANBgkqhkiG9w0BAQsFAAOCAQEAivSZCRFgRH92YpSu HxL23lNV4ms9f3NBdFDRaz1rk21GrICd97zgwBbhkWjpExXwEb6FyD8I6/oStba5 ZudozvdJ6rR1uTyNblgiRr9i3U39Aqrve/nq0KLzlEUixaLKTRi9j/LgzW0KibGI WuCr+dxT85yMndyJyHX/QNlv0xgVUIvmdIxMBngo2iF69VK0SPrJfE+vSy2jud9k SNe7JhHnyiUJG5OggYL24truzwJFwYB2Q4dl9EPNQh0FmcZYjAVEW+cBBTB6Qc8E xNWZI1bd2jXjmtN6oPZguDnTHxIlPa9bl9nYDijGt1fbwE0YmZT64HvI28oshvSO ByzSzg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI5uHwl6HsrVzmeyYDEz r0c2yKgsPg0jdcnPSPkVZ9vASzWkcgyZ2mTg0pscHFzAmGmmHh4JxF8IJrE31/nj csk2I4PrnsMgphtp4w71bdNJ3Y2/TOxm/o/q9f5JgdsN7Vu3TtpIhY2nl/mj2ulz MlelZ78FbDMh0OBQ8Pt/0XhssnSMlw5Ewu+l8/bB84EK8MdVd90EqbGuFBA7imcx QpmW+Q6M3qOfrSXNYTL+VIi1437qhT5wIhvaF987YC1CLUaQRuD0zeAQ0PJphTyw WY79AwXsyIZBaq8M107SojoE9tKtNnbeQ/U5In7XTjnxRk+S3pLVxuCr0cO3g7Xr jwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 291089201359441260138270308614946303526558 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 06:06:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 06:06:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ecflow.app' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20268363724693238892516389335418100974530424037616558193759325222356688066762524864510690730952630734952745333887601673083213327363172417079710509100031477254352616240981295408728270981486167971572135091806513086752442178709945208700611043629324004720958907717198075269197704023322197462971466986138355301914163014398877042615455629936254336882538558824990969143164045616440235483394295877060411793524011657315450367271600002966866319362601062223682302271968491252959731473393609079965660793651729933841300150645280652404664119148452359056020856909884313699962155675949787774377098068806128715219647877960532325952399 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e7daefc124e23f0067e8fbd16c3639898f9bc20d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecflow.app' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e36a1ea710000040300473045022100c634eed9c9a29ca0068c74dd1cfc0aa0eedbe35a4e4e7ad1cbd43c22ea364086022057d3c9c462940890290e9949e9b178b496fd7e3a45a37d89945678738553c558007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e36a1ea78000004030046304402205452cd0eee48e1dd74fc7599f4902814bf8d5244ff27b0c4eb141be96fe7698502202671bc1cbf7f76af62fe09389b578838518619d05b7f77ff55342585a6ca789a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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