affiliate.airmason.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:91:59:9f:dd:d7:d1:36:21:24:21:aa:2c:09:d0:f2:cf:b2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=affiliate.airmason.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:91:59:9f:dd:d7:d1:36:21:24:21:aa:2c:09:d0:f2:cf:b2
Serial Number (int): 310796932365153506845479910867900870873010
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:88:6f:9b:a4:c6:6c:50:70:bb:6b:03:07:ab:15:1b:ff:b2:81:99
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f0:e6:f4:68:ea:4e:fc:08:b0:5d:4e:6f:0b:6c:79:34:55:8d:a1:2b
Fingerprint (sha256): 66:e4:4f:31:fa:1f:69:c0:b4:6a:1f:0c:de:bc:a8:e2:96:53:a5:01:5a:5b:87:61:58:49:f9:e2:df:48:ea:f3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate affiliate.airmason.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for affiliate.airmason.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

affiliate.airmason.com

Other certificates including the domain name airmason.com

(limited to 100 certificates)
airmason.com
airmason.com
books-lb8.airmason.com
blog.airmason.com
pages.airmason.com
books-lb8.airmason.com
affiliate.airmason.com
books-lb9.airmason.com
books-lb.airmason.com
airmason.com
support.airmason.com
books-lb4.airmason.com
books-lb9.airmason.com
www.airmason.com
books-lb2.airmason.com
books-lb8.airmason.com
partner.airmason.com
books-lb5.airmason.com
support.airmason.com
books-lb2.airmason.com
affiliate.airmason.com
books-lb2.airmason.com
books-lb6.airmason.com
books-lb9.airmason.com
books-lb9.airmason.com
www.airmason.com
books-lb8.airmason.com
handbook.differential.com
books-lb4.airmason.com
books-lb8.airmason.com
affiliate.airmason.com
books-lb8.airmason.com
books-lb4.airmason.com
books-lb6.airmason.com
airmason.com
beta.airmason.com
books-lb.airmason.com
books-lb8.airmason.com
*.airmason.com
books-lb2.airmason.com
books-lb4.airmason.com
books-lb2.airmason.com
books-lb4.airmason.com
partner.airmason.com
books-lb8.airmason.com
books-lb8.airmason.com
books-lb4.airmason.com
books-lb10.airmason.com
books-lb4.airmason.com
books.airmason.com
books-lb2.airmason.com
affiliate.airmason.com
books-lb4.airmason.com
airmason.com
affiliate.airmason.com
books-lb4.airmason.com
airmason.com
books-lb8.airmason.com
books-lb6.airmason.com
books-lb7.airmason.com
books-lb8.airmason.com
books-lb9.airmason.com
support.airmason.com
books-lb8.airmason.com
airmason.com
books-lb2.airmason.com
books-lb2.airmason.com
affiliate.airmason.com
books-lb4.airmason.com
books-lb4.airmason.com
books-lb.airmason.com
books-lb8.airmason.com
app.airmason.com
airmason.com
affiliate.airmason.com
admin.airmason.com
generator.airmason.com
books-lb2.airmason.com
books-lb6.airmason.com
books-lb8.airmason.com
books-lb4.airmason.com
books-lb8.airmason.com
books-lb4.airmason.com
partner.airmason.com
books-lb9.airmason.com
airmason.com
books-lb8.airmason.com
books-lb.airmason.com
airmason.com
books-lb8.airmason.com
affiliate.airmason.com
affiliate.airmason.com
books-lb8.airmason.com
books-lb4.airmason.com
books-lb7.airmason.com
handbook.differential.com
books-lb2.airmason.com
books-lb2.airmason.com
books-lb8.airmason.com
books-lb4.airmason.com

Certificate

The complete raw certificate details for affiliate.airmason.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgISA5FZn93X0TYhJCGqLAnQ8s+yMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMzExNDExMTFaFw0y
MDA2MjkxNDExMTFaMCExHzAdBgNVBAMTFmFmZmlsaWF0ZS5haXJtYXNvbi5jb20w
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCurVPgEilEURV0tSQFCSmO
XJgTU1jXw2AuAi4w1whb/jo4Xq9XBn9bx+acsokYAp5S/oLD1ox8C2VymyKjAeK6
v1Y03HUe8MqDunpLw3blGu46WyLkFniQbjRGZhDFixr8WumC3tnMQ0r6qzwEWefu
URwnFoal4id7iuow4tuIPACFqSyqHDA4xvl04f44KR8jyczvIcSL/UCM0baLvIrD
8Cb3vWEa0+mJAloZJAzgei1Ymhve7/LVnqYguoVDqT5IkMe2v6IF1Ww0rKOGPinG
OVSqDwDcqol35+Ls1iFgl9ZKVI7Mhxlums2nJeRgzIwCNA0tBnkKEzS1WVXxhGUp
KHru1okkoNduuDAP7WoC/D1JrCCosx4WaaF/y5TC5Xi2m1cENSNcJxaTa/GLB/66
9Mk0y8IkeRKWmuiev0Ol6OV/aoBcdlGRkxyGegqWwJqvskb1K0gd3aH6NW0Kavyy
1gQTcNkhZde6bKL3xNE6Mjp+7YI2odlz1+PRmjA9nSG6dj1cItJgCKyetDzn9w2L
tVuk7/uJWk/V4cslWTDeRKe/hQVshyQ/iJwP6R9Rng7yR5IRW4lfPS0xb+grKREc
2jfo14UhO0Mj9n77eHMOTkaNm+Hc3NhNkjZ3j6jHnspNnRF0Bg+63lUijxgniITK
Q8WtYW0JpaKQU1hmwbJPaQIDAQABo4ICajCCAmYwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBQViG+bpMZsUHC7awMHqxUb/7KBmTAfBgNVHSMEGDAWgBSoSmpjBH3duubR
ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v
Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j
ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFmFmZmlsaWF0
ZS5haXJtYXNvbi5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggED
BgorBgEEAdZ5AgQCBIH0BIHxAO8AdQCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOey
SVMt74uQXgAAAXExJXpMAAAEAwBGMEQCIDj/b3PFvoDUNw8NVmVEkXNW733EM1u2
HdJQTqQZw9nSAiBLuFuxGhltL3YKtUnJ1b9sJ07vBo30v+L8DSfiGogRGAB2AG9T
dqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABcTEleuQAAAQDAEcwRQIh
APfbOeQ2BCRmbXRWGl8gd/gWq9W1LKA6IYkOHccnotfhAiB9MQ3x7p3RbIfhFppi
m+JfPdfk3quW7tKswF15QchVozANBgkqhkiG9w0BAQsFAAOCAQEAbNExH6iuzbL8
oUXUzOJZYKMlQa6yqS45UJTagJEngioAdC+GdCZPEG9nxSgRxf2pvmkW7QI2hyiB
YGiBXiE0FIv8yqN1NMKrDljM0aPdmzsSD5HnqEhhOnvNx7WttA+dqwIIGMUc7ZMJ
P1Tn5r6HnAD58Gw9iDGBmDHQPJTUW5cncb4G4FUmcuEdj6JMGPrL+CkdfcXlbnvc
zdn16HY9MYrxy5mjCQ+ATYQ+TR891nVAkIqq7XGQQsuYf5PSgjt48BGxWyGW8bi9
mGaHouBQbp4RerOj1P7ivPCCZZWH9AOmoILap6x+wCdnkz5nznMkllX/WF5YiMgZ
oWNZOkFm6w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310796932365153506845479910867900870873010
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 14:11:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-29 14:11:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'affiliate.airmason.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712620236075266849150167506380015834603492260149893105119002433969050127031973904481276368140478231297716657802511386485434874866177660308904503847809663365039741350409506215077719681095347540552354984124845612741595839090733351492529489733668538332188277332178696009772342488973671579324749303897450729899012949859328708843204152997960753045489622825032752219083163528445650732495189907343367300337689862619905771559941463515163486839531842707342966192527412810684525965066472034840473125127733197822349640221908954834821056124983558606572700323338880650364913833895707410853749313200776660156354164350333554078293055340124803907864806409350752562782063008759809534717342334969318146386115206519077774609679540446757934439931160243749992522314323035189110701715025443653951462885083177198253751748478761758474367920425745516865367784357217964458778609242739358737110168554587233049612971708471410262689143761047218709199330980560103075128413300181628496413812205379652141791500951224709361563632817991537161877184761184892583438949424835013347494896479304769772284202921446963725791274790987444440061073802638149784262747342374920235864175091843205571577408160049062060976074195114445550878365254983373845475368442823168892003831657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15886f9ba4c66c5070bb6b0307ab151bffb28199
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliate.airmason.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017131257a4c0000040300463044022038ff6f73c5be80d4370f0d566544917356ef7dc4335bb61dd2504ea419c3d9d202204bb85bb11a196d2f760ab549c9d5bf6c274eef068df4bfe2fc0d27e21a8811180076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017131257ae40000040300473045022100f7db39e4360424666d74561a5f2077f816abd5b52ca03a21890e1dc727a2d7e102207d310df1ee9dd16c87e1169a629be25f3dd7e4deab96eed2acc05d7941c855a3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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