apsu.edu

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0f:90:46:38:f4:ac:b0:6f:b8:c9:e0:c5:67:67:61:ca was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apsu.edu

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:90:46:38:f4:ac:b0:6f:b8:c9:e0:c5:67:67:61:ca
Serial Number (int): 20687534965575220522584990059623571914
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 32:89:0a:0d:bb:40:42:4e:12:4d:8b:fd:13:6a:7f:98:6f:41:34:6d
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 42:db:fb:b6:d2:f3:9a:f0:5a:4e:9a:74:52:1d:8d:f5:3c:02:41:4c
Fingerprint (sha256): 70:8c:0c:1e:19:59:90:ba:4e:0b:36:67:0d:15:f5:54:5a:2f:d8:ae:6b:4f:9d:cf:3a:2e:e4:f1:0d:f1:c7:d5

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate apsu.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apsu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apsu.edu
www.apsu.edu
*.apsu.edu

Other certificates including the domain name apsu.edu

(limited to 100 certificates)
iiiserver.lib.apsu.edu
online.apsu.edu
apbrtn3.apsu.edu
*.ezproxy.lib.apsu.edu
library.apsu.edu
govstech.apsu.edu
library.apsu.edu
*.ezproxy.lib.apsu.edu
online.apsu.edu
apnsgis1.apsu.edu
apnsgis1.apsu.edu
apmyise2.apsu.edu
govstech.apsu.edu
fed.apsu.edu
*.apsu.edu
mail.apsu.edu
online.apsu.edu
www.apsu.edu
library.apsu.edu
libguides.apsu.edu
signmeup.apsu.edu
*.apsu.edu
aspire.apsu.edu
apdwasp.apsu.edu
pwmanage.apsu.edu
elearn.apsu.edu
epay.apsu.edu
*.ezproxy.lib.apsu.edu
apsu.edu
apnsgis1.apsu.edu
apmybeis5.apsu.edu
catalog.apsu.edu
apbrss4.apsu.edu
online.apsu.edu
online.apsu.edu
aspire.apsu.edu
apmybmgr1.apsu.edu
apnsgis1.apsu.edu
illiad.apsu.edu
apsugis.com
apmybbapp.apsu.edu
libguides.apsu.edu
online.apsu.edu
elearn.apsu.edu
online.apsu.edu
epay.apsu.edu
appercsp.apsu.edu
recreation.apsu.edu
apnsgis1.apsu.edu
aspire.apsu.edu
apbrss4.apsu.edu
gis.apsu.edu
apnsgis1.apsu.edu
apmraceweb.apsu.edu
mail.apsu.edu
apmyise.apsu.edu
apbrvacs1.apsu.edu
recreation.apsu.edu
elearn.apsu.edu
apbrarg2.apsu.edu
www.apsu.edu
apnsgis1.apsu.edu
apmyk1000.apsu.edu
appercst.apsu.edu
myprintcenter.apsu.edu
*.apsu.edu
apsu.edu
online.apsu.edu
apnsgis1.apsu.edu
fed.apsu.edu
apnsgis1.apsu.edu
apbrimv2.apsu.edu
gp.apsu.edu
apnsgis1.apsu.edu
www.apsu.edu
*.ezproxy.lib.apsu.edu
apbrarg2.apsu.edu
apmrde1.apsu.edu
*.apsu.edu
myprintcenter.apsu.edu
apmyise.apsu.edu
illiad.lib.apsu.edu
apnsgis1.apsu.edu
elearn.apsu.edu
apmypsg1.apsu.edu
apnsgis2.apsu.edu
*.apsu.edu
illiad.apsu.edu
gp.apsu.edu
online.apsu.edu
myprintcenter.apsu.edu
apbrss5.apsu.edu
mail.apsu.edu
iiiserver.lib.apsu.edu
apbrwf5.apsu.edu
gp.apsu.edu
apmybmgr1.apsu.edu
apmyk1000.apsu.edu
govstech.apsu.edu
gp.apsu.edu

Certificate

The complete raw certificate details for apsu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIQD5BGOPSssG+4yeDFZ2dhyjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDkxMzAwMDAwMFoXDTI0MTAxMDIzNTk1OVowEzER
MA8GA1UEAxMIYXBzdS5lZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCPLE7uGCHrClEVOHblsl/9tNnPXBqp+uAZshLPGOC/q65ga/1iH6i56pbN0FDi
VWQQdz4D/0juIb0ejaOMELpWa1JuFSTgFLuPHkGZ4TDG6mZ4J5ptNIWz0dmxmd+9
YFoAZyZRW1grxScNc3AxyBowLUfTUVopIixrYkYl+CkKBL8Qfe0dlNSMm4d3AakY
0KsyondTttmKDV/TYdg5RMXBxye0u7YQnxhjdt7u5mkhbJwA10WGYD4jMWzv2dGH
nR6t6XFPO8Iy3g0an7M/x0Xxmep69CTB+FkrYeF58+cxzyZW//dD+ejNi3UzebT8
4tOUJyVIuj5u5nVk9tMq+Hh/AgMBAAGjggL7MIIC9zAfBgNVHSMEGDAWgBSBuA5j
iokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQUMokKDbtAQk4STYv9E2p/mG9BNG0w
LQYDVR0RBCYwJIIIYXBzdS5lZHWCDHd3dy5hcHN1LmVkdYIKKi5hcHN1LmVkdTAT
BgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwIGCCsGAQUFBwMBMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwu
cjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNybDB1BggrBgEFBQcBAQRpMGcw
LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAxLmFtYXpvbnRydXN0LmNvbTA2
BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJt
MDEuY2VyMAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2
AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABipACydsAAAQDAEcw
RQIgGZbOucup3VQgBSQ/jLD7z/dAgnaI7HqTRwUpuzA/jFkCIQCnKYBbkq25FJlu
SA3I5/lWJqcizJqvyGXRsRik0lDgUAB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0s
gdm7v6s52IRzAAABipACyi0AAAQDAEcwRQIhALjaSk2lhNtW8E/09dd7XBnOwr3H
LgqO7wKNt5mSgae2AiB9ulbme/m7enojnskCcAVVP93Py5Oa4S47Yla6u+C0/gB2
ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABipACyeIAAAQDAEcw
RQIhALmBjaEn1ee6pGBTjLiEdnJu+Ln+Wb2cbpzzjp+rCTxTAiB2EP5totH6n5ZS
N98gTWB11/J5Hy803qUrAM0tIxij3DANBgkqhkiG9w0BAQsFAAOCAQEALBurHTAN
V/8agKYUDW53/od9Hg79KbxIcrkPqok/KnUc0ZkuB4PO1W2ipC+xzYmYyQiymsAT
bmrrzGxkxYPhzQjRAZhSSVPNTD/8nYl2mno/PtT6NUFgydOG5nMB8FM2JN91ANB0
x91PsS04hp1s8yNY1ob2SGcrpiUKcvreNewnwX9pA+bHLYLvO5y+2FKHBzKaQ7p7
UxcQyfu7A9upLN7B1gTh3eQLBxydhyw1l61FmLlIs1EWxQfKjCwC+BnJUYBffihY
2I4mrcPBZtDHovb4TiNfvmLiP42xcCjTcpghGLKELYOlIV7fVVW59k6TYeuPl4fo
leQ/Q9suGXr3sQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyxO7hgh6wpRFTh25bJf
/bTZz1waqfrgGbISzxjgv6uuYGv9Yh+oueqWzdBQ4lVkEHc+A/9I7iG9Ho2jjBC6
VmtSbhUk4BS7jx5BmeEwxupmeCeabTSFs9HZsZnfvWBaAGcmUVtYK8UnDXNwMcga
MC1H01FaKSIsa2JGJfgpCgS/EH3tHZTUjJuHdwGpGNCrMqJ3U7bZig1f02HYOUTF
wccntLu2EJ8YY3be7uZpIWycANdFhmA+IzFs79nRh50erelxTzvCMt4NGp+zP8dF
8ZnqevQkwfhZK2HhefPnMc8mVv/3Q/nozYt1M3m0/OLTlCclSLo+buZ1ZPbTKvh4
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20687534965575220522584990059623571914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apsu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18073926857332421897696892761517200037133097437631526877037631151110164712904479726231551897838336444534567902572316482830111267073103299098227008777369118272477178224236789021165876544978317955634583871950669255389435413800314384747437557465082319232806615311602817077170592949935824972052895951439288296281918136142481390645323726171572972136131606284971154770450137888205824015899700291752453132284842488055248362888816611784110548641469307488275784809439458601720808377537040299693919734224912907594443654417636873836512363441360966444405904444693304427549811726394932489121787889789549089497441253414988362053759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32890a0dbb40424e124d8bfd136a7f986f41346d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apsu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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