OV SSL/TLS Certificate for turvaviesti.kkv.fi Issued to Kilpailu- ja kuluttajavirasto

Certificate is witin its validity period

Issued by SSL Corporation (Entrust OV TLS Issuing RSA CA 1)

About the turvaviesti.kkv.fi OV SSL/TLS Certificate

This certificate with serial number 25:e7:53:6d:0c:13:10:4b:99:22:20:c9:01:13:e3:c7 for turvaviesti.kkv.fi was issued on by SSL Corporation.

This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for turvaviesti.kkv.fi provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SSL Corporation

Organization: SSL Corporation
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 25:e7:53:6d:0c:13:10:4b:99:22:20:c9:01:13:e3:c7
Serial Number (int): 50382548497967116283922159506816230343
Serial Number Length: 126 bits, 16 octets

Subject Key Identifier: 63:c5:74:ca:55:9f:bf:be:3a:52:82:ed:bc:be:64:7e:10:c9:f3:ab
Authority Key Identifier: 68:0d:45:ca:35:c2:e7:9a:1b:f0:b3:84:dd:d5:da:7f:0b:89:c1:11

Fingerprint (SHA-1): 36:c5:f3:1c:04:99:1c:c4:6d:7a:27:02:8b:5c:2b:1f:31:75:d2:85
Fingerprint (SHA-256): 35:10:7d:e9:76:19:0d:a6:b2:ad:f9:3c:d9:b2:66:de:8d:83:95:42:47:34:4f:c7:7b:aa:32:aa:77:90:6b:52

Issuing Certificate URL: http://cert.ssl.com/Entrust-OVTLS-I-R1.cer

Revocation Information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/Entrust-OVTLS-I-R1.crl

Check the revocation status for certificate turvaviesti.kkv.fi
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for turvaviesti.kkv.fi

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

turvaviesti.kkv.fi

X.509 Certificate

The complete raw X.509 certificate details for turvaviesti.kkv.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIMDCCBhigAwIBAgIQJedTbQwTEEuZIiDJARPjxzANBgkqhkiG9w0BAQsFADBR
MQswCQYDVQQGEwJVUzEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMSgwJgYDVQQD
DB9FbnRydXN0IE9WIFRMUyBJc3N1aW5nIFJTQSBDQSAxMB4XDTI1MDIwNjExNDM1
OFoXDTI2MDMwNjA1MDAwMFowZTELMAkGA1UEBhMCRkkxETAPBgNVBAcMCEhlbHNp
bmtpMSYwJAYDVQQKDB1LaWxwYWlsdS0gamEga3VsdXR0YWphdmlyYXN0bzEbMBkG
A1UEAwwSdHVydmF2aWVzdGkua2t2LmZpMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A
MIICCgKCAgEA1urVrwksApazJ/vJ9ABQsIR/udxvW2MtmqaR9QNRAH+ASEWE0aef
U1Em6HLJBCyHvZIzyIx+H2d5jAvNE/jlOPbbB73O6F7/ZxYm4eArekphWZGXVYvc
uvz6kqEGmSL1Yixkcr4J8nviV/OIS2Vm/2Wf4mVoJZqS9JVEUJCG1EPcgPtbgurG
SdVMuAMHGplDdnpgpbHE26fC1cvctCQJTR9e4gRCHj/pDpXSEa/9NvK93nc7T5qL
nCivI0YEy5XCQl8c3YjVKZ1evID3BVNUSnVXbxdwAUN60oG57GceE65fhxun/bUP
4T/eSTYgxDfzs9xPwELbfJzzkbxvCKWYGtHiep4O10r6bG3mBoUZMgfJRngi64N1
n4HlzYW5Fr1PfbmRg3OjUBLlyMPSYBQwWyliSyNalEJbYmNBJjSc0AXjbFHeleuw
v2hUUgX/L/cEIzj7QBrit57w3JhN3rkFwQIN9oapsCw+hWVvPrE+IcSwxhbcuizM
kMflpY3pjCDq+xALcKRUv+92OFQKeWSGMdlYPEztPS4Waq5JITxAEn/Z4sf+/MOG
3XpyOO/o53R6IIHqDN/61/G2uKLZRxUdEPBcvSW3SFatSQ57ujj6CHstw9yz6V6U
n87+T0aGLHOujzeuIvNxEs0Vz9wl6no26TQsc+xZ4RoIU0o9dSK6328CAwEAAaOC
Au4wggLqMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUaA1FyjXC55ob8LOE3dXa
fwuJwREwaAYIKwYBBQUHAQEEXDBaMDYGCCsGAQUFBzAChipodHRwOi8vY2VydC5z
c2wuY29tL0VudHJ1c3QtT1ZUTFMtSS1SMS5jZXIwIAYIKwYBBQUHMAGGFGh0dHA6
Ly9vY3Nwcy5zc2wuY29tMB0GA1UdEQQWMBSCEnR1cnZhdmllc3RpLmtrdi5maTAj
BgNVHSAEHDAaMAgGBmeBDAECAjAOBgwrBgEEAYKpMAEDAQIwHQYDVR0lBBYwFAYI
KwYBBQUHAwIGCCsGAQUFBwMBMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmxz
LnNzbC5jb20vRW50cnVzdC1PVlRMUy1JLVIxLmNybDAdBgNVHQ4EFgQUY8V0ylWf
v746UoLtvL5kfhDJ86swDgYDVR0PAQH/BAQDAgWgMIIBfgYKKwYBBAHWeQIEAgSC
AW4EggFqAWgAdgCWl2S/VViXrfdDh2g3CEJ36fA61fak8zZuRqQ/D8qpxgAAAZTb
HBxzAAAEAwBHMEUCIEh/6+mo2ex42MX4a/ks3ZvpKZu20s9bwEGAdD9M/r/kAiEA
nJDjPLUPcAvyT2wXA70ryqahm6Yg3o1AsTVXvGDiAvoAdgBWbNWjdr6D3+NCtnXE
nCMkmKdpusOCy6tJo4d9mrMtAQAAAZTbHBxNAAAEAwBHMEUCICq8VK5VlHbzhiSu
7PJ9/xq5wKjg7vfPu0Bw6+YVXuOTAiEA/tk7fk8MrNhYsdIcTqVxxIrwBETkYoyM
RUpp2N8WG0IAdgAZhtTHKKpv/roDb3gqTQGRqs4tcjEPrs5dcEEtJUzH1AAAAZTb
HBwzAAAEAwBHMEUCICeE1vhJDCb5EFxl6Bp584swZAZzqaSEu0cTYBlxUTC+AiEA
5nfdLC09u5JY2TY+OEjILf2sxQRXFwFk0DYS+MB1R/wwDQYJKoZIhvcNAQELBQAD
ggIBAGvMZoVyuvfm2i8Z07tglVe/UMUrtuQPPFWYRjG4KPUqzvuCK2c+KLWUAyJ2
8moPxNe/Kt8SvkOnRQg0bHorvkhXpmgFildrdIiuMrFtdzthgrD0fydgebKGcur0
GfHqg2LrH3aNykALKRfEhDHedtUwa1IvSaMFyP5DErrYRSWWl5Vi/E1TtJQssrL/
Pdpl1/Lp/44E4smbldr62LKZNafrKGub+P8367vV7dmTJq5AGDS4wudw9Iw8Pr0R
PetkAc8nJcqG6TT3s0rxVw8ETMnaohkve9q9E2KulM3RYZ3Q8D3F75j6iLaz7b8P
QQbObepX5+8k5waqENbAzAVSNncVOV0rgxWuRO1Ze/+UOseiqMk2A7VtKW4XEgY9
mX+IOYQHfBjLwebUZ5kHuI6/rCNycPweWMpUSbzFjhNq7x7rSst7ER8CwJOtGvg5
tM35WCIR0A1mCjEtxAjNojxPFeO7tkam6wVfZY9SB801yCrAR7Yn7ASp1KGMIxBB
4DScvCevqwYWtHS/GRF4ZpYmjSGiOW+xMhfj3+BrAPiGSEFcO8CpYVlqU9uj2hWz
nWWjonShddOSid+a1EYpBeR/CAOJ7wu6H13fedAkCp2rMU3k7qTDlcK/EUmOg1v/
/0mPvOgRx32vJ20UzmPrfcAu0P+n5fAdgjByNjNj+3X0sh7s
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 50382548497967116283922159506816230343
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Entrust OV TLS Issuing RSA CA 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-06 11:43:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-03-06 05:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kilpailu- ja kuluttajavirasto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'turvaviesti.kkv.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 876786182116172113481988122762201633661711921980022727508299436983975438874246830308391016992332043575614745634937272632941681496747482258931980268397129988984858115563345432570417204465471562304173549297018236674701521375088856797241300944002372626069082327375696145901940799892454266781948847715065089618549178987320838880950849498023912110864255283615615147407729241084221723174067919093155439743223158141388160584467384083805159557209814272837696315890362233881320241650888022056895645420663048000598580011477479104845057447409649308973521632413911548845581606702294675401152819235194710340889431550146112616024387712410250523864062574262301254128556520703716894266957510227751502673348605440807103596643446650590319502717203382991884537729700610930969501106274403620458723902771996887543644168756182320691875417434125477317742741057778469207408136791737307271164328138928658689121665776058628991575243788950000490535362745411820100548653210179221904634834075498522644510430312515285746292549974298222995570705807879577948611401971519888319953566180273483201377624187000727421027566186181531209721908592765346655930325478395695616526821670429476272071515626373037582565373720716569821175591626580755847732656975601877137965637487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 680d45ca35c2e79a1bf0b384ddd5da7f0b89c111
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/Entrust-OVTLS-I-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turvaviesti.kkv.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/Entrust-OVTLS-I-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63c574ca559fbfbe3a5282edbcbe647e10c9f3ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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