captive.googleapis.com

- Google LLC -

Issued by GTS CA 1O1

About this certificate

This digital certificate with serial number 06:52:53:24:b6:6c:32:1f:03:00:00:00:00:cb:ff:ad was issued on by Google Trust Services.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Google LLC

Organization: Google LLC
State / Province: California
Locality: Mountain View
Country: US

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:52:53:24:b6:6c:32:1f:03:00:00:00:00:cb:ff:ad
Serial Number (int): 8402822665777377171516249058279423917
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 19:a1:05:0a:35:7c:b3:05:66:7e:9f:e1:b5:9e:ca:8a:40:a1:d4:39
AuthorityKeyId: 98:d1:f8:6e:10:eb:cf:9b:ec:60:9f:18:90:1b:a0:eb:7d:09:fd:2b

Fingerprint (sha1): a5:1b:d8:7b:97:45:54:d3:2f:3a:28:1a:04:dd:d7:8f:4f:88:a9:67
Fingerprint (sha256): 80:1e:1d:98:30:1d:aa:00:23:d5:cb:7f:8d:bc:a2:a3:f2:b2:31:82:62:d6:1f:19:01:93:ab:84:a5:38:bc:d6

Issuing Certificate URL: http://pki.goog/gsr2/GTS1O1.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1o1core
CRL Distribution Point: http://crl.pki.goog/GTS1O1core.crl

Check the revocation status for certificate captive.googleapis.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for captive.googleapis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

captive.googleapis.com
captive.adservice.google.co.id
captive.adservice.google.co.in
captive.adservice.google.co.jp
captive.adservice.google.co.th
captive.adservice.google.co.za
captive.adservice.google.com
captive.adservice.google.com.br
captive.adservice.google.com.mx
captive.adservice.google.com.ng
captive.adservice.google.com.ph
captive.adservice.google.com.vn
captive.csi.gstatic.com
captive.googleads.g.doubleclick.net
captive.pagead2.googlesyndication.com
captive.pubads.g.doubleclick.net
captive.redirector.gvt1.com
captive.securepubads.g.doubleclick.net
captive.tpc.googlesyndication.com

Other certificates including the domain name captive.googleapis.com

(limited to 100 certificates)
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com

Certificate

The complete raw certificate details for captive.googleapis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzj9UoV8SDn5mNzbF2nn
xbUyAYHPKpsgiv4Ml9EerBLVmgJlf39XtT4qs7jDm3AIYYZrtnewc2YO3QgmVCFH
gGOWYxkWp7A6LTZmMn4NpkEmcP6s2AsHelfFW7JgXd/r+sKAQT6P4nkP+k/eQhmQ
MVH9lKkr/10bU3T469rKFqLKB8MQKO7C+/PQPy7qcMSGfwVKYCTnV+Xr2QhQFdnr
W/BPdZ0tY6/f30mIqZs5/u38ja42AnNDM0ySHamyCrf8OYNmNheTkdSk4H6xWq4V
ajV37nZjT2AqFHdom1zpYlgSYm+cVC9qoZSckNFYB1o5aweRVDTPSoZhl7uBUpIu
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8402822665777377171516249058279423917
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1O1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-20 19:35:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-13 19:35:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'captive.googleapis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23129712398571174829011557238096868061138806115524336513489970366223491650385879158295300590927692480676040728122674534769735386943308754410569616410628666223309342620816460245957749598076227728832546682057826962321588223742209619350459556980596371396202978202563321196795919865222196258812950604078152490925772078706481533312574066977024150375119603303981752555236089253110039863302350663703674873984386889112252184235511759661116337109128028693171501858399499549334801838904680405271136575140850125367306810267212651691321369435947527697455632768851368487952820338643420484671199391185623021700708413060562314997357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19a1050a357cb305667e9fe1b59eca8a40a1d439
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 98d1f86e10ebcf9bec609f18901ba0eb7d09fd2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1o1core'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1O1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (622 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.googleapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.com.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.csi.gstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.googleads.g.doubleclick.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.pagead2.googlesyndication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.pubads.g.doubleclick.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.redirector.gvt1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.securepubads.g.doubleclick.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.tpc.googlesyndication.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1O1core.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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