cannabis-cbd.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:11:46:a5:fa:1e:54:3b:6c:89:70:65:ff:18:fe:36:2b:3e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cannabis-cbd.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:11:46:a5:fa:1e:54:3b:6c:89:70:65:ff:18:fe:36:2b:3e
Serial Number (int): 354327851726388857191379709974105579465534
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 73:78:bd:61:88:25:f3:b0:6b:0e:5b:bd:da:6a:0a:0e:cb:18:4a:4d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7c:99:1b:4c:fc:fe:de:7f:45:df:d3:76:87:fe:f2:3f:c2:05:b8:35
Fingerprint (sha256): 6c:9d:f8:d5:5d:cd:0b:59:ef:9e:3e:6e:85:9c:71:c7:e2:93:4d:f5:48:23:0a:2e:40:8e:22:62:7d:21:b3:6d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cannabis-cbd.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cannabis-cbd.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cannabis-cbd.ch
www.cannabis-cbd.ch

Other certificates including the domain name cannabis-cbd.ch

(limited to 100 certificates)
cbd8.ch
www.cannabis-cbd.ch
cannabis-cbd.ch
www.cannabis-cbd.ch
cannabis-cbd.ch
www.cannabis-cbd.ch
www.cannabis-cbd.ch
cannabis-cbd.ch
www.cannabis-cbd.ch
securetest.cannabis-cbd.ch
cannabis-cbd.ch
cannabis-cbd.ch
cannabis-cbd.ch
www.cannabis-cbd.ch
cannabis-cbd.ch
cannabis-cbd.ch
www.cannabis-cbd.ch
www.cannabis-cbd.ch
www.cannabis-cbd.ch
www.cannabis-cbd.ch
cannabis-cbd.ch
cannabis-cbd.ch
www.cannabis-cbd.ch
www.cannabis-cbd.ch
www.cannabis-cbd.ch
www.cannabis-cbd.ch
cannabis-cbd.ch
cannabis-cbd.ch
cannabis-cbd.ch
cannabis-cbd.ch

Certificate

The complete raw certificate details for cannabis-cbd.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGODCCBSCgAwIBAgISBBFGpfoeVDtsiXBl/xj+Nis+MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAzMTQxMDM5MzdaFw0yMzA2MTIxMDM5MzZaMBoxGDAWBgNVBAMT
D2Nhbm5hYmlzLWNiZC5jaDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
APChSIW0v3ACu5BKU/zZIoVU0xARN4b21LkGLdV9VC5vsjOIcE2T1K21u0jx3c5O
Wgq4grClz0pCmKeShuI52YTdsLArZ0T7qmW9oiyVmARS/oI5v55q8CK120UslrMg
jO+cx/3yUebOCsECNcXZMFhmAxdXqK4UrB5kDNjD9bDhS2dDKeIDJA1H4WWKl6/W
WsrbnGknnD+35e55TPwBjJ8w3wa+k6DVlmnXcBCPzOUSYYtEvegXO7YRTg6enJNR
Or/JypCuDn2s+j9s8f39pSUx7a8yiLpWpgt5Hnf4vMI4rThHVy2k2AjiAdZwB8nA
wJxYGufSnXTeKFHoktM8KUzIFiiBavycla3bsrqSw/R2kpj5+iCVQX5UxBsNQJra
Za4lQ7qeElsne8QevG+48aQZoKhmy0Wywki1zq+iyuZ1XzDPtKKmsI4bBKpo0BGm
a3fqOeeE+De6Wul+lHKJWSKmnXsycc0YLyj7SG+5LBxM8f/eJuXnzBIsQMO4NbhY
wlj+FFdgHyOzWtCe6/bAha00qKP/eNjjBMkN8xOxL3z4W5CR509lDo5zLFGmR2kS
G3JPU00jxTt4YZsOccsGkviIR7wcZsiS6ZNbjCn8QEgcZYHbmMtcDAgJiSihkkOo
bZSVfM2eVioN7PugeIbXnp+3h87nEfX18eCOt0npZeadAgMBAAGjggJeMIICWjAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFHN4vWGIJfOwaw5bvdpqCg7LGEpNMB8GA1Ud
IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr
BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw
Oi8vcjMuaS5sZW5jci5vcmcvMC8GA1UdEQQoMCaCD2Nhbm5hYmlzLWNiZC5jaIIT
d3d3LmNhbm5hYmlzLWNiZC5jaDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEE
AYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y
ZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ALc++yTfnE26dfI5xbpY9Gxd/ELP
ep81xJ4dCYEl7bSZAAABht/rLp0AAAQDAEcwRQIgcYt+FzNJi6ePJvEXsVZgqhCO
b99dLNZHNqd9IjR3tE8CIQDV+LGhl+Y4aphIxtof2WmqNzMt1hcIvk0Ckyy7TkZB
agB1AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABht/rLqUAAAQD
AEYwRAIgQsf0AMhlxQfAR8c0AxnGqeYmq59zo4u9swMSSFSH5RQCIGYPE2ya8qYD
7UiGLd4xwj7FRe2Q6NTBN94mMCfQYKdmMA0GCSqGSIb3DQEBCwUAA4IBAQAv8oVI
BIoVkLx7A7V4g9O3kbWenu5nNLTwBBtQVJ1qthsd3QYvElRC8SgkvKy8SHtGlaQj
XYueaMcCtjipiK7FehjMfaCuPBRFHuKZXr2BeOrRwHtJmietdQZqtgng6ORv4n+B
MR4UhPFfIoYrsqyNzaA5o5vODJa+Cc11z7PpuYw9IyLcQd7Uqez2UYCoSmLP0kMG
YqSKGbGAySjjfAi7X6is2m8lWvhp+R7i7sxb2TsoHWyS+b+hdBr5ofmkFvQtfq8L
LQbc5YwuftzQELbWUmGzpP+BRswz5xvJJUGt6vvxNnZ1DicOtojKsnrVDms1Redc
RAEIW2C5oPteK856
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8KFIhbS/cAK7kEpT/Nki
hVTTEBE3hvbUuQYt1X1ULm+yM4hwTZPUrbW7SPHdzk5aCriCsKXPSkKYp5KG4jnZ
hN2wsCtnRPuqZb2iLJWYBFL+gjm/nmrwIrXbRSyWsyCM75zH/fJR5s4KwQI1xdkw
WGYDF1eorhSsHmQM2MP1sOFLZ0Mp4gMkDUfhZYqXr9ZaytucaSecP7fl7nlM/AGM
nzDfBr6ToNWWaddwEI/M5RJhi0S96Bc7thFODp6ck1E6v8nKkK4Ofaz6P2zx/f2l
JTHtrzKIulamC3ked/i8wjitOEdXLaTYCOIB1nAHycDAnFga59KddN4oUeiS0zwp
TMgWKIFq/JyVrduyupLD9HaSmPn6IJVBflTEGw1AmtplriVDup4SWyd7xB68b7jx
pBmgqGbLRbLCSLXOr6LK5nVfMM+0oqawjhsEqmjQEaZrd+o554T4N7pa6X6UcolZ
IqadezJxzRgvKPtIb7ksHEzx/94m5efMEixAw7g1uFjCWP4UV2AfI7Na0J7r9sCF
rTSoo/942OMEyQ3zE7EvfPhbkJHnT2UOjnMsUaZHaRIbck9TTSPFO3hhmw5xywaS
+IhHvBxmyJLpk1uMKfxASBxlgduYy1wMCAmJKKGSQ6htlJV8zZ5WKg3s+6B4htee
n7eHzucR9fXx4I63Sell5p0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354327851726388857191379709974105579465534
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-14 10:39:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-12 10:39:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cannabis-cbd.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 981684804520549245745676016816899445940769849587139127720530651877788575169056396071300205387147537962157943103300011748117273840955676199308408933304923371874207301326024551310112695334943267561507912440584704023426074209624309296047132771797594026332295786854758779926812229636998161742889751239822998121261363048011412033967578503149636204075367989758746324236912747656054659906185119357981437772316497836885311683466250608511113178333466854211581248285746653255606829017326368404884837914929816873049019660852256113819780729683864932797632298784671157971440526136983594128873050197976403311119530755423285519329685734770609351294211629511642852063911770156819308246589443672552759629173394447695416013594540924910121798612024517602553956843720098803505444870977714391922144621265459836785789647977318413127152173783671730143856069765726544932916013256170128310096248557031382533257811835310999096795102218636223116592689234046107919917025813735578713740859017590341197749064749899309511156163554322557427779228222670044748335476837279357922291240502515905133614948322459745924391347763605688453547091895314539589723621742568351659163788068156253363662842539392438978310608622762212055484598902967092791263105884313127843438913181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7378bd618825f3b06b0e5bbdda6a0a0ecb184a4d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabis-cbd.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannabis-cbd.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186dfeb2e9d00000403004730450220718b7e1733498ba78f26f117b15660aa108e6fdf5d2cd64736a77d223477b44f022100d5f8b1a197e6386a9848c6da1fd969aa37332dd61708be4d02932cbb4e46416a0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186dfeb2ea50000040300463044022042c7f400c865c507c047c7340319c6a9e626ab9f73a38bbdb30312485487e5140220660f136c9af2a603ed48862dde31c23ec545ed90e8d4c137de263027d060a766
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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