cpcontacts.aggroup.co.uk
Issued by R3
About this certificate
This digital certificate with serial number 03:42:dd:7c:c2:b0:e6:39:8e:fb:c0:56:8d:03:10:da:ca:e2 was issued on by Let's Encrypt.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cpcontacts.aggroup.co.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:42:dd:7c:c2:b0:e6:39:8e:fb:c0:56:8d:03:10:da:ca:e2Serial Number (int): 284089901192744474102177347551799914711778
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: fb:8f:1c:1b:55:e5:9c:b2:f9:05:98:b3:a7:2c:dc:eb:f2:1f:c3:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 6c:1c:76:fc:45:21:8c:4c:13:c7:5f:ef:83:5f:35:ce:60:7c:82:42
Fingerprint (sha256): 79:9f:fa:e8:18:3d:93:53:7b:5f:8e:b5:8d:06:f3:9d:33:2d:2f:7d:50:e7:76:0b:31:6b:1c:17:fe:88:f0:7e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate cpcontacts.aggroup.co.uk
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cpcontacts.aggroup.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ag.aggroup.co.uk
aggroup.co.uk
cpanel.aggroup.co.uk
cpcalendars.aggroup.co.uk
cpcontacts.aggroup.co.uk
mail.aggroup.co.uk
webdisk.aggroup.co.uk
webmail.aggroup.co.uk
www.ag.aggroup.co.uk
www.aggroup.co.uk
aggroup.co.uk
cpanel.aggroup.co.uk
cpcalendars.aggroup.co.uk
cpcontacts.aggroup.co.uk
mail.aggroup.co.uk
webdisk.aggroup.co.uk
webmail.aggroup.co.uk
www.ag.aggroup.co.uk
www.aggroup.co.uk
Other certificates including the domain name aggroup.co.uk
(limited to 100 certificates)
www.aggroup.co.uk
www.aggroup.co.uk
www.aggroup.co.uk
aggroup.co.uk
www.aggroup.co.uk
aggroup.co.uk
aggroup.co.uk
aggroup.co.uk
aggroup.co.uk
aggroup.co.uk
cpcontacts.aggroup.co.uk
aggroup.co.uk
aggroup.co.uk
www.aggroup.co.uk
aggroup.co.uk
aggroup.co.uk
ag.aggroup.co.uk
aggroup.co.uk
ag.aggroup.co.uk
www.aggroup.co.uk
www.aggroup.co.uk
aggroup.co.uk
aggroup.co.uk
www.aggroup.co.uk
www.aggroup.co.uk
aggroup.co.uk
www.aggroup.co.uk
aggroup.co.uk
aggroup.co.uk
aggroup.co.uk
aggroup.co.uk
aggroup.co.uk
cpcontacts.aggroup.co.uk
aggroup.co.uk
aggroup.co.uk
www.aggroup.co.uk
aggroup.co.uk
aggroup.co.uk
ag.aggroup.co.uk
aggroup.co.uk
ag.aggroup.co.uk
www.aggroup.co.uk
www.aggroup.co.uk
aggroup.co.uk
aggroup.co.uk
Certificate
The complete raw certificate details for cpcontacts.aggroup.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAgISA0LdfMKw5jmO+8BWjQMQ2sriMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjEwMTYwNjU1MzRaFw0yMzAxMTQwNjU1MzNaMCMxITAfBgNVBAMT GGNwY29udGFjdHMuYWdncm91cC5jby51azCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPzYxGsUwsWY2ilJHBO86JMT+qb/PR4SslJ2m1V4bR0jvQX5/KX9 kdfPGGvixRuDpMz2sBbbQ0HLFu0GyJg9ViCixqXSbRdla6H4a7yw5BxoWgtdsfrn 5IjcKRHTImA2h9fl/q7KcPCkoHylljw16qnceTYYvIyTSkJ7QLs1aBFL4vMHeLh9 b4VLFGFpO/YmM34ZrjhFRFQR+XPjrxBOQKtdbexg0YsNuMXq3bpbAmBURjJVSHJc 0k56iYn4U8cv+MO+1ak+4o6rxOlKDcvgTvjAL1RnHAXIeHMnFjvHELn/wFM1LPsq dHqt/pcD9FmqRLgu9ljEhiotwWIjkKtQkNcCAwEAAaOCAxIwggMOMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/ BAIwADAdBgNVHQ4EFgQU+48cG1XlnLL5BZizpyzc6/Ifw9QwHwYDVR0jBBgwFoAU FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p LmxlbmNyLm9yZy8wgeIGA1UdEQSB2jCB14IQYWcuYWdncm91cC5jby51a4INYWdn cm91cC5jby51a4IUY3BhbmVsLmFnZ3JvdXAuY28udWuCGWNwY2FsZW5kYXJzLmFn Z3JvdXAuY28udWuCGGNwY29udGFjdHMuYWdncm91cC5jby51a4ISbWFpbC5hZ2dy b3VwLmNvLnVrghV3ZWJkaXNrLmFnZ3JvdXAuY28udWuCFXdlYm1haWwuYWdncm91 cC5jby51a4IUd3d3LmFnLmFnZ3JvdXAuY28udWuCEXd3dy5hZ2dyb3VwLmNvLnVr MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB 9ASB8QDvAHUAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGD38qD QQAABAMARjBEAiBKDF3GF6FZcqOHVj5EatJ1LcjVjAgXMQtOMnDsHqzViQIgJ1aH llhVbFLsyN6psQgKRCz65CLzCCz+yMOonrhVE/wAdgDoPtDaPvUGNTLnVyi8iWvJ A9PL0RFr7Otp4Xd9bQa9bgAAAYPfyoUdAAAEAwBHMEUCIB/svX8kcO3MM0bacZoq HHP0JeDtcfW4x6eER6NyWcAgAiEAy/EIUm/2N2sQmeQqxFcKwyPOpQIy1jeDhDEH UL05ErEwDQYJKoZIhvcNAQELBQADggEBAHL2i+NhEjvSfjOqrBBGiqKLPjLxG/9w vwZmHWUCv7/t1LRlGnIxIAP/oUi/Z9RxUGXt4bsNYhSBUnW20Qwda6JBI1umWjUa 8VSiTzu+YPJrAtfjGYdYKDkmKtfSuApCLpldx5hsl4DgoRpKgACJGKBmdZ8OWIwC +sesQi2t+hexi95Knx/ikWVM7mU6dkJi33+0bwR5vPjTn0U91GnoYqhaP08+EuF2 LyPJy/kAZfCRWtt/RT1CwfeMJMqBvRJMVyIPNpiMMMMc5vW8YIzfKd0blQ7BLnzF LWik0KIM7Q3o/ve8x5Izt3zpGP2Lm15hsxMFMJ/FQcye+qsMBGH3FAY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/NjEaxTCxZjaKUkcE7zo kxP6pv89HhKyUnabVXhtHSO9Bfn8pf2R188Ya+LFG4OkzPawFttDQcsW7QbImD1W IKLGpdJtF2VrofhrvLDkHGhaC12x+ufkiNwpEdMiYDaH1+X+rspw8KSgfKWWPDXq qdx5Nhi8jJNKQntAuzVoEUvi8wd4uH1vhUsUYWk79iYzfhmuOEVEVBH5c+OvEE5A q11t7GDRiw24xerdulsCYFRGMlVIclzSTnqJifhTxy/4w77VqT7ijqvE6UoNy+BO +MAvVGccBch4cycWO8cQuf/AUzUs+yp0eq3+lwP0WapEuC72WMSGKi3BYiOQq1CQ 1wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 284089901192744474102177347551799914711778 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-16 06:55:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-14 06:55:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpcontacts.aggroup.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31918944770740496360866683995104895640142375773225453882007846806728525786279976225018944131904846510665027945524185851664747995455819690613489522931841709209026950716514638671319077565895881142813606017626657293762950026189967279858040412586134459896924625067712249925581700922454877091108519697537598995380591978319419930266976427813696319465353443126234069783486312081640926031785054958686982153633163531332359575573091310552194199704345530367733520332740313310249641300471059556256401227887769438982939679545221857227541405626658427830133066777211198470909065095127753838816546952303711654880302447120425795227863 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fb8f1c1b55e59cb2f90598b3a72cdcebf21fc3d4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (218 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ag.aggroup.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggroup.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.aggroup.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.aggroup.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.aggroup.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.aggroup.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.aggroup.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.aggroup.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ag.aggroup.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aggroup.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000183dfca8341000004030046304402204a0c5dc617a15972a387563e446ad2752dc8d58c0817310b4e3270ec1eacd58902202756879658556c52ecc8dea9b1080a442cfae422f3082cfec8c3a89eb85513fc007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000183dfca851d000004030047304502201fecbd7f2470edcc3346da719a2a1c73f425e0ed71f5b8c7a78447a37259c020022100cbf108526ff6376b1099e42ac4570ac323cea50232d6378384310750bd3912b1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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