imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:26:3b:24:4f:2c:01:20:bb:2b:6a:ab:a0:bb:2d:8c was issued on by GlobalSign nv-sa.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:26:3b:24:4f:2c:01:20:bb:2b:6a:ab:a0:bb:2d:8c
Serial Number (int): 1527734815292219122957720311954091404
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 06:93:a5:41:8b:0b:61:fb:25:69:45:1c:f8:c6:46:5a:eb:3c:c3:4c
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): ba:dc:ef:d7:0a:cd:8f:84:66:73:f3:f7:a9:dc:52:35:8a:7e:47:2e
Fingerprint (sha256): 67:e0:cc:81:40:94:4e:1b:a1:8f:3d:68:5e:cc:0e:17:cb:4c:3e:f4:f4:b7:6e:c6:64:12:67:aa:cf:58:ee:b5

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

city.matsudo.chiba.jp
*.pref.chiba.lg.jp
*.city.kimitsu.lg.jp
*.town.mutsuzawa.chiba.jp
*.city.oamishirasato.lg.jp
*.city.urayasu.lg.jp
*.city.asahi.lg.jp
*.city.kisarazu.lg.jp
*.e-chiba.lg.jp
*.tosyokan.town.shisui.chiba.jp
*.city.matsudo.chiba.jp
*.city.sammu.lg.jp
city.minamiboso.chiba.jp
*.city.yotsukaido.chiba.jp
imperva.com
*.vill.chosei.lg.jp
*.city.yachiyo.chiba.jp
town.shisui.chiba.jp
*.city.nagareyama.chiba.jp
*.city.narashino.lg.jp
city.yachiyo.chiba.jp
*.town.shisui.chiba.jp
town.mutsuzawa.chiba.jp
*.city.sosa.lg.jp
city.yotsukaido.chiba.jp
*.library.ichihara.chiba.jp
*.city.kashiwa.lg.jp
*.city.minamiboso.chiba.jp

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgch5aPBTa/fpe709MJG2
LUfAbnrgEv9eiWvJ0pr02rFuctiSAS40QzJyEdbO1C9jfjzkqCp/xn5kS91fv3T5
OYDF01Av5I6GTiB1OHvUF1lfHZ4CtjSkv3Qb8+I76snif7ZleKkufDmddqRYXTds
Wc02TwgskObR6ZlsvOqrEF9DrthUNHsqcVxDMHLaeWZeoB9RRikuXkyLLNhDhdf8
95eJTf7TSEx+2HLH1m3jkzB4mgRsTX1Vyox7E39KSYL8Wbfbrm/fNmjPaRFOWmtH
ifDQ3ojLDle0Cw7RUuL0nCYzxevH+tmgGLdt4bsdaqx3G1vYreHlOpPESumwqQHL
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1527734815292219122957720311954091404
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 07:34:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-14 07:34:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16383598881460195464339508866705224359894879569729334470559239506634326906893231276417774140057606935199016924161114621338181970117326514862489193299432258769454066043301927780544128140448992807361901524295351924746766270660943160559381734890163670737198453932574396324606981685002948964165891259244890797583788192425662576321789700126773404421935391431079531496631613721730309845158687781448751155739733327767277289043234480028216311464228599661058905459164403271440033541307752980199954551000525638776053968053497055309165543908512439140395507100313928766131323504917031591650191826320419896994774752237283660909421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (667 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'city.matsudo.chiba.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pref.chiba.lg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.city.kimitsu.lg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.town.mutsuzawa.chiba.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.city.oamishirasato.lg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.city.urayasu.lg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.city.asahi.lg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.city.kisarazu.lg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-chiba.lg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tosyokan.town.shisui.chiba.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.city.matsudo.chiba.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.city.sammu.lg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'city.minamiboso.chiba.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.city.yotsukaido.chiba.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vill.chosei.lg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.city.yachiyo.chiba.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'town.shisui.chiba.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.city.nagareyama.chiba.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.city.narashino.lg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'city.yachiyo.chiba.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.town.shisui.chiba.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'town.mutsuzawa.chiba.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.city.sosa.lg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'city.yotsukaido.chiba.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.library.ichihara.chiba.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.city.kashiwa.lg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.city.minamiboso.chiba.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0693a5418b0b61fb2569451cf8c6465aeb3cc34c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018db0d693e30000040300473045022100ab343a22da3e5b1bceb6d1d920d14adffce2cf5b25cadffa088017ad6b85a1f8022016f712ca269c6d73dd92f4da273cb9ae0d6aa01051b6ee04a6b1602a6b238d940076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018db0d6973100000403004730450221008451e09af6950cc6387d103ea7d0512e286a90adc3a1178dd2327800710fa983022008165adb8c667273219cd550637a9aade26cc2bac9707c7133dbd8385fd1072900750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018db0d69810000004030046304402204730a40bd5cd2afa0f2f8a13735b69149fe8d73f90114dafe798a3f8effd29c702203d10c7edba358f4f897fb15074e555f3634071d4a61c1aa57a8d28085b3f7914
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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