ajonp.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number e9:28:d5:c6:b7:0a:e9:10:0a:2c:b5:6e:da:9e:0c:d7 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ajonp.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e9:28:d5:c6:b7:0a:e9:10:0a:2c:b5:6e:da:9e:0c:d7
Serial Number (int): 309922150789297493784641277186858159319
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 82:01:0e:0a:70:ca:ba:d8:8a:0d:e5:19:57:51:ba:3b:0e:a5:e5:ca
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 61:a4:db:03:d4:b7:93:a1:c2:58:33:fa:ae:ab:e9:97:fb:33:51:7d
Fingerprint (sha256): 86:47:d6:7c:9b:43:90:fc:29:3d:1a:c4:0b:dc:e1:f0:18:2c:f5:5a:c1:bb:7e:27:66:6d:42:77:9f:17:cb:cd

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/-C8NuVPsNTE
CRL Distribution Point: http://crls.pki.goog/gts1d4/1ULi3EjEd-w.crl

Check the revocation status for certificate ajonp.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ajonp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ajonp.com

Other certificates including the domain name ajonp.com

(limited to 100 certificates)
fakturo.fi
centrodeeventos.appsiste.co
dealdata.app
lessons.ajonp.com
paycardclearing.app
josefklimes.cz
www.hugoguilherme.com
brian-poole.com
ajonp.com
ajonp.com
omrayala.com
smatchapp.com
moke.tw
fantastechit.com
www.byte.builders
algotree.in
diginthere.com
www.prodmmd.com
ajsnextbooks.ajonp.com
tilvalg.rorteknikk.no
rxfirereact.ajonp.com
dev.niclas.xyz
4geeks.lapieza.io
mojitxt.com
rwgprd-1907.enchatment.com
partners.amy.app
ajsbooks.ajonp.com
papapp.ca
www.mimicha.me
caminhoneiros.desconfieja.com.br
s.upbrand.asia
rakko.app
www.hushup.app
www.mindright.app
www.ledartstudio.com
portal.vtmoney.com.br
blaze-consulting.com
www.lala-mobile.com
www.thefab.co
ajsbooks.ajonp.com
salil.co
chcjr.com.br
vc.coza.org.ng
my.tismoapp.com
beonair.app
ajonp.com
test.farmacare.dev
my.tismoapp.com
share.okki.app
bradycarey.com
gustawjakubowski.com
titosmunchiez.com
initiatives.app
www.bgasoft.com
www.cryptoway.io
amp.ajonp.com
agreements.praece.com
app.everwoke.com
futij.com
sunnykakar.com
rxfiresvelte.ajonp.com
admin.ajonp.com
www.insta-coin.co.uk
www.wels.app
losojosdelhincha.com
bitdrive.company
stage-speak.beepboop.us
www.dynamik.fi
record.dev.retorio.com
xglobal.sthima.com
gunitado.com.ar
proto-store-mgmt-demo.ai-linka.com
resume.hoangtrinhj.com
www.reganiu.ca
invite.projecthap.com
importer.equappment.com
papapp.ca
atomicshutter.studio
info.ujay.com
albertfungdev.com
www.kink-o-meter.com
www.mindright.app
ucp.alcidesbezerra.com.br
www.meghufoundation.com
redpath.dev
farpost.co.uk
faccode.co
ajonp.com
ajonp.com
link.ajonp.com
merf.co
q6a.com.au
staging-auth.evfy.sg
ajonp.com
sulmoggo.live
chip7.solidweb.com.br
www.packageroute.com
achalukkhal.me
finafree.bengtiong.com
www.codedezk.com

Certificate

The complete raw certificate details for ajonp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIRAOko1ca3CukQCiy1btqeDNcwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjMxMTIxMTIxMTI3WhcNMjQwMjE5
MTI1NjM2WjAUMRIwEAYDVQQDEwlham9ucC5jb20wggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuTXjfgHPuDtQg3Imsf55kfJIRv7P6dD4EAYzeisVJE7GX
q2zciXJStlo5N284pjAi2YZ9WU8z7Ag9VCn3S63/eELB+RPGJakgEWVGvxhIvFWk
9/MpHDxdFjDzKTRXrBXZFZjBsPO4wczwFeT8Q4k5HC2hyfHCjh+Ic/3cJHaNToNv
Bdi0UaKSq6c9OSNMTMaBmO+I1ZbGlnVxL9VYlgS+/BYw3d3k1PaGJZfkDEN/+srz
3xRxEb/fO1DhD/ZG1LK9iHNV2ba9b/FYsIYJFeEcOmkQg2kNzQYKUJvv8HjfNIBm
gGpwIaYp/mfVMBCtCQHul3d7rB/Ux4mxNtuLL9EvAgMBAAGjggJvMIICazAOBgNV
HQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUggEOCnDKutiKDeUZV1G6Ow6l5cowHwYDVR0jBBgwFoAUJeIYDrJX
kZQq5dRdhpCD3lOzuJIweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUFBzABhilodHRw
Oi8vb2NzcC5wa2kuZ29vZy9zL2d0czFkNC8tQzhOdVZQc05URTAxBggrBgEFBQcw
AoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMWQ0LmRlcjAUBgNVHREE
DTALgglham9ucC5jb20wIQYDVR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIF
AzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxZDQv
MVVMaTNFakVkLXcuY3JsMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAdv+IPwq2
+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGL8gHTqgAABAMARzBFAiEAkOCf
x42p98TKeFYx7aw8oi5qcjuxjbVujzqPiRezzEMCIATujgTb5LRYfjPFHYzdwDYQ
gcIqFP0759lFYhGLdKMKAHUAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H6
1BcAAAGL8gHXfAAABAMARjBEAiAQbyxXfMO6flYQq5+dbmR1LJzgIgsCdAo6amF8
YXkSvQIgLlBp7GaLmIEx1P5viB2Dx3Qee4c8C1T1WS4T0jL0qqgwDQYJKoZIhvcN
AQELBQADggEBAGC/tXLnq46V2uPD0Z8jfzTPAU2JLLk6EryKx8SvDgFaxMCWKrWD
t9Kj35nT5OaOebv/Zu7TCjVxxW5GfbZJbhZbgbObsYQZ4oASyNCNiBIssp0tiXCw
5+TD3FMAKlNabgkHzxnox7DRPLUcbPsxyum38SrjwObbbB7CApdqUWzUi0yBUXNA
7U1ApaR6GNfnSkp59+MYehr0sK5AhXkPkPm2hWvfgAOZOa/tDgR9D5slcZagSMmd
WiW9fFCqgbYpjyW8dH/PYZUEFdwvauC/KfMlJGPE1b7kQ21FEtFv3YBhhiHhlg13
b7+IEeh9gbcUDwINXbK/TnSvySKn/un9fgA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk1434Bz7g7UINyJrH+e
ZHySEb+z+nQ+BAGM3orFSROxl6ts3IlyUrZaOTdvOKYwItmGfVlPM+wIPVQp90ut
/3hCwfkTxiWpIBFlRr8YSLxVpPfzKRw8XRYw8yk0V6wV2RWYwbDzuMHM8BXk/EOJ
ORwtocnxwo4fiHP93CR2jU6DbwXYtFGikqunPTkjTEzGgZjviNWWxpZ1cS/VWJYE
vvwWMN3d5NT2hiWX5AxDf/rK898UcRG/3ztQ4Q/2RtSyvYhzVdm2vW/xWLCGCRXh
HDppEINpDc0GClCb7/B43zSAZoBqcCGmKf5n1TAQrQkB7pd3e6wf1MeJsTbbiy/R
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309922150789297493784641277186858159319
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 12:11:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 12:56:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ajonp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22003668010214147056882864695627618217598739921510122636326548640909429668984044060775148512961480134117508687583767985229043530895033824505996700751309398677149076341565485538892301583207992606395232530796863880218515043843183836957087278074815571715208875837550432329436900229238309037619206113636752151310680339330771137286214767167355480882956199356521236903626130607724488038396873177857858413420544255691797917069590734462190587344663972765213519888082513939214125635143158246387422213158960525724491507034411563486871478078065759108273732248376384159643838041559194007006720692677114366715319083029596658979119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82010e0a70cabad88a0de5195751ba3b0ea5e5ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/-C8NuVPsNTE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajonp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/1ULi3EjEd-w.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bf201d3aa000004030047304502210090e09fc78da9f7c4ca785631edac3ca22e6a723bb18db56e8f3a8f8917b3cc43022004ee8e04dbe4b4587e33c51d8cddc0361081c22a14fd3be7d94562118b74a30a0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bf201d77c00000403004630440220106f2c577cc3ba7e5610ab9f9d6e64752c9ce0220b02740a3a6a617c617912bd02202e5069ec668b988131d4fe6f881d83c7741e7b873c0b54f5592e13d232f4aaa8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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