curante.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6f:66:e2:c8:89:4e:b6:34:d8:bb:e5:65:d3:4e:1a:2e:90 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=curante.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6f:66:e2:c8:89:4e:b6:34:d8:bb:e5:65:d3:4e:1a:2e:90
Serial Number (int): 299244959305525538774001143131435160972944
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e0:79:fd:9e:b3:ca:f3:29:d8:98:c5:8f:89:64:50:d0:5b:5d:9b:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d8:71:90:b1:45:99:b4:8f:b9:78:cd:b7:14:17:60:57:d1:24:76:73
Fingerprint (sha256): 86:16:47:4c:e7:30:ae:2c:45:91:81:d7:64:e3:37:4b:1e:fe:4e:2c:47:ce:ab:6f:e1:46:22:ab:95:f4:dc:7f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate curante.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for curante.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

curante.net
www.curante.net

Other certificates including the domain name curante.net

(limited to 100 certificates)
personal.lrsocialjustice.life
curante.net
curante.net
blog.curante.net
curante.net
blog.curante.net
curante.net
blog.curante.net
farmacia.curante.net
personal.lrsocialjustice.life
personal.lrsocialjustice.life
rh.curante.net
curante.net
rh.curante.net
curante.net
curante.net
blog.curante.net
blog.curante.net
curante.net
rh.curante.net
curante.net
blog.curante.net
blog.curante.net
blog.curante.net
curante.net
curante.net
loja.curante.net
blog.curante.net
blog.curante.net
www.loja.curante.net
curante.net
blog.curante.net
curante.net
curante.net
curante.net
loja.curante.net
blog.curante.net
blog.curante.net
personal.lrsocialjustice.life
loja.curante.net
curante.net
curante.net
blog.curante.net
farmacia.curante.net
rh.curante.net
farmacia.curante.net
curante.net

Certificate

The complete raw certificate details for curante.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgISA29m4siJTrY02LvlZdNOGi6QMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDYxMTQ1MzBaFw0y
MDA1MDYxMTQ1MzBaMBYxFDASBgNVBAMTC2N1cmFudGUubmV0MIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAzFaNXR2TUVYPO/ecXxCpAH7WPDNPin+5zChw
48yYP2ETMlVBXLAtW/KZrXnralSLMSbTT/uuLs8mH9PDGqV4ZQRzo1doRKQY7O7A
WEjWqzr5pMStJl3uA773YvObF5jty5qaBy8bvGxcfuJQp2n1RBSVH4sMTW7s9QM3
8hOIn4XZO/rpsLJiHG/LWxSqGyqPOR0Eqtf/LhGXsMVTrOw6i2qG+U2C0sG/bfv1
RAurJuVj/yO30GESAzIqecIBUzxo8BRQxvNFNf3NJ6+ivgY3eUnq4551+KW6lQnU
q13fjOp0Qs5vPhSGL1mHj4fsdtZXNYH+6W3Wge1btuPuPtgnx1zyOotb0leLNEgN
XH0oYqWGLfl8PhFhMjMmnpnXs0b74DROKE0iZc3sO8aHQlbbEPvr85BRUmx7o6db
OibUxKArPYpYXMPdPRmsS0iIxN7mTTJxOAG7d+b1oK+ZPT3gpjdNahlTVNBDHfDk
ultWl74KqdxNd2bUshj7LXoSIkA63UUnmVAu2n+ruNKs/VDtUTSkTX7KalOFllIR
l4SYz0kPwWxcPgIKbcH3H1frkYTS3gog5z01r9Hu3PLt7ieUEaLQTygEOGhOEuPa
Ui2pgiuE2qao8PlWCLD+uaKM/p2BGcygjnJ+GRsgGx/+PoHprBaTt3Ttz7aIyrD8
wycwyr8CAwEAAaOCAnIwggJuMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU4Hn9nrPK
8ynYmMWPiWRQ0Ftdm3EwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAnBgNVHREEIDAeggtjdXJhbnRlLm5ldIIPd3d3LmN1
cmFudGUubmV0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw
JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYB
BAHWeQIEAgSB9gSB8wDxAHcAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo3
2RMAAAFwGoiwYwAABAMASDBGAiEApDnyBUkj22oozU/9BPOTPOTnH4aueDL11PuQ
5SAP3TQCIQDdW9D4T0jmHWlCyTC2YneeXbi3nZMnD1HULm5PU0gH7QB2AAe3XBvl
fWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABcBqIsGAAAAQDAEcwRQIhAL18
exPR/c9vFc6G6hWUFledPbOfZmdSAZT5/3fXTbdOAiBWmUUo1Pts9nlNqEd9IjYX
i42+o3VIJLuJKSEBS6Zm8DANBgkqhkiG9w0BAQsFAAOCAQEALz7/+6eqpEcaSCMt
tiXUvwx9Dgv7GCEZ3OMhHEocdnnOnGZgMFQKgA827Fx1YXN1LoOAg0DFG7SONXZM
zp3yOBqEV4yWLuSSsGrUoXyat4b6F5X8143pLCoxmIvkk4QPbmTC9fdz16IxUO6W
HhOJ/zDzGQ3XEnTgcbMQy6ECEv/71wISJikkdZ/0vvIwO2c/yd6HvIdGzndoeNfm
ih81pRdYc0RR++AXxH8b85Le4nTo2ofE0cRC68NazTPjczmtZBHUz6+meQf4kWwS
ZwqLBHSuGbuR1U1qcpIgWFd42x/Ahw845p4+zy24dHoOLtQHjxcuKbPynVgh5VFw
kmTJwQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzFaNXR2TUVYPO/ecXxCp
AH7WPDNPin+5zChw48yYP2ETMlVBXLAtW/KZrXnralSLMSbTT/uuLs8mH9PDGqV4
ZQRzo1doRKQY7O7AWEjWqzr5pMStJl3uA773YvObF5jty5qaBy8bvGxcfuJQp2n1
RBSVH4sMTW7s9QM38hOIn4XZO/rpsLJiHG/LWxSqGyqPOR0Eqtf/LhGXsMVTrOw6
i2qG+U2C0sG/bfv1RAurJuVj/yO30GESAzIqecIBUzxo8BRQxvNFNf3NJ6+ivgY3
eUnq4551+KW6lQnUq13fjOp0Qs5vPhSGL1mHj4fsdtZXNYH+6W3Wge1btuPuPtgn
x1zyOotb0leLNEgNXH0oYqWGLfl8PhFhMjMmnpnXs0b74DROKE0iZc3sO8aHQlbb
EPvr85BRUmx7o6dbOibUxKArPYpYXMPdPRmsS0iIxN7mTTJxOAG7d+b1oK+ZPT3g
pjdNahlTVNBDHfDkultWl74KqdxNd2bUshj7LXoSIkA63UUnmVAu2n+ruNKs/VDt
UTSkTX7KalOFllIRl4SYz0kPwWxcPgIKbcH3H1frkYTS3gog5z01r9Hu3PLt7ieU
EaLQTygEOGhOEuPaUi2pgiuE2qao8PlWCLD+uaKM/p2BGcygjnJ+GRsgGx/+PoHp
rBaTt3Ttz7aIyrD8wycwyr8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299244959305525538774001143131435160972944
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 11:45:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-06 11:45:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'curante.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 833626695258100587314049235123962245509230081798136708137961716253149703376159857975933882114379935567995679477869508965303088435911663603089775711723446308852083383904811458483194378505715913796395688929233439479401027286280853308178060084815095835645943476464282722701070342715964836140835359316896631599413391218916089575569082357571420353503368925337308159717544252054504905107814374929619158898696742779926467577142367912774000713243084028741738517925364846432634781891777003998776937190355919579551569491390834247599119048096327723333292834713224584358137400485320685650457363422362404284157660527100509984142586973777222230125506753351527014463907517659789739865901548363629746826039172675074872596563834858290894473509167870184778874239980833366823240172092657609653219674037854988928941999610843528144561233796671073285902405306490908857205547453494712692488298803521035984938392532691282833588055727762334637084113932303293179969329318324485692217412968049315057160598880140560400454404030511235876212278220456843402098248804580206993891085205598353161540433592269845783090817515658430999911373211085406481458981624786007095562038600415228551441872888142094020924764343239964966265377501405898958330031225960753616177384127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e079fd9eb3caf329d898c58f896450d05b5d9b71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curante.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curante.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001701a88b0630000040300483046022100a439f2054923db6a28cd4ffd04f3933ce4e71f86ae7832f5d4fb90e5200fdd34022100dd5bd0f84f48e61d6942c930b662779e5db8b79d93270f51d42e6e4f534807ed00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001701a88b0600000040300473045022100bd7c7b13d1fdcf6f15ce86ea159416579d3db39f6667520194f9ff77d74db74e022056994528d4fb6cf6794da8477d2236178b8dbea3754824bb892921014ba666f0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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