legalhold.gecompany.com

- General Electric Company -

Issued by Trusted Secure Certificate Authority

About this certificate

This digital certificate with serial number 12:24:ba:60:64:f7:48:0f:06:19:85:66:64:a8:8c:28 was issued on by Trusted Secure Certificate Authority.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

General Electric Company

Organization: General Electric Company
Organization unit: Provided by General Electric Company
Organization unit: Enterprise SSL
Address: 3135 Easton Turnpike
Postal code: 06828
State / Province: Connecticut
Locality: Fairfield
Country: US

Trusted Secure Certificate Authority

Organization: Trusted Secure Certificate Authority
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:24:ba:60:64:f7:48:0f:06:19:85:66:64:a8:8c:28
Serial Number (int): 24116806776373066034077665234053008424
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: e8:93:88:00:1a:4a:e4:1f:44:d0:2e:f6:d0:5a:f8:e2:36:9e:14:3f
AuthorityKeyId: cc:03:5b:96:5a:9e:16:cc:26:1e:bd:a3:70:fb:e3:cb:79:19:fc:4d

Fingerprint (sha1): 9e:fb:00:b3:f9:8b:4a:e4:c6:66:56:31:8d:db:9f:5f:18:58:1b:48
Fingerprint (sha256): 93:9a:d3:45:64:59:0e:03:a1:09:bd:9d:3b:75:f1:fb:05:ad:57:b1:0a:c7:b7:35:10:0f:04:00:87:08:72:79

Issuing Certificate URL: http://crt.csctrustedsecure.com/TrustedSecureCertificateAuthority_3.crt

Revocation information

OCSP Server: http://ocsp.csctrustedsecure.com
CRL Distribution Point: http://crl.csctrustedsecure.com/TrustedSecureCertificateAuthority_3.crl

Check the revocation status for certificate legalhold.gecompany.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legalhold.gecompany.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

legalhold.gecompany.com
www.legalhold.gecompany.com

Other certificates including the domain name gecompany.com

(limited to 100 certificates)
*.ecomex.gecompany.com
fss.gecompany.com
svn.gecompany.com
federation.gecompany.com
federation.gecompany.com
pledge.gecompany.com
live.gallery.gecompany.com
kenexa-b2b.gecompany.com
affiliateservices.gecompany.com
fss.gecompany.com
affiliateservices.gecompany.com
*.gecompany.com
*.mobilere.gecompany.com
apm-rm-mt.apps.ge.com
federation.gecompany.com
fss.gecompany.com
affiliateservices.stage.gecompany.com
stage.prb.gecompany.com
aaf.gecompany.com
fss.stage.gecompany.com
fss.gecompany.com
affiliateservices.stage.gecompany.com
stage.kenexa-b2b.gecompany.com
affiliateservices.stage.gecompany.com
fss.stage.gecompany.com
fss.gecompany.com
pwb2b.gecompany.com
affiliateservices.gecompany.com
affiliateservices.stage.gecompany.com
volunteers.gecompany.com
*.gallery.gecompany.com
affiliateservices.stage.gecompany.com
kenexa-b2b.gecompany.com
affiliateservices.gecompany.com
aaf.gecompany.com
stage.mobilere.gecompany.com
fss.gecompany.com
lease.gecompany.com
affiliateservices.gecompany.com
federation.gecompany.com
gensuite.gecompany.com
prod.fosmobile.gecompany.com
stage.gets.gecompany.com
imperva.com
affiliateservices.gecompany.com
*.prb.gecompany.com
fosmobile.gecompany.com
pwb2bdev.gecompany.com
authentication.gecompany.com
*.gets.gecompany.com
kenexa-b2b.gecompany.com
stage.prb.gecompany.com
affiliateservices.gecompany.com
*.smallworldwide.com
*.smallworldwide.com
aaf.gecompany.com
fss.stage.gecompany.com
affiliateservices.stage.gecompany.com
fosmobile.gecompany.com
fosmobile.gecompany.com
pledge.gecompany.com
gensuite.gecompany.com
*.pledge.gecompany.com
affiliateservices.gecompany.com
stage.prb.gecompany.com
affiliateservices.gecompany.com
federation.dev.gecompany.com
stage.kenexa-b2b.gecompany.com
kenexa-b2b.gecompany.com
fss.stage.gecompany.com
*.pledge.gecompany.com
svn.gecompany.com
stage.cremobile.gecompany.com
unicom.gecompany.com
affiliateservices.gecompany.com
legalhold.gecompany.com
stage.prb.gecompany.com
fosmobile.gecompany.com
vise.gecompany.com
imperva.com
prb.gecompany.com
affiliateservices.stage.gecompany.com
volunteers.gecompany.com
lease.gecompany.com
mobilere.gecompany.com
stage.pledge.gecompany.com
affiliateservices.gecompany.com
legalhold.gecompany.com
vise.gecompany.com
stage.gets.gecompany.com
pledge.gecompany.com
svn.gecompany.com
prb.gecompany.com
stage.fosmobile.gecompany.com
fss.gecompany.com
stage.prb.gecompany.com
cremobile.gecompany.com
files.gecompany.com
stage.prb.gecompany.com
hlvdi.gecompany.com

Certificate

The complete raw certificate details for legalhold.gecompany.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmfSYc7L4ThDOYtZNFr2
tJ5t3ueQu5Qj7nzd83vUaCNuf9pxI0jR5lWjQC19lS8akxLtaVKJ9ETe8LF7qjPQ
Fy9cQfmLPvB0m5hlQKNCA1pR0b6t8+zPXvLOiVLEI4fxGe5EYNMj38SHLil7QEp3
Lh+Khj0QMhly7Pk5ddqM84p52XVcRXij/T9hjo6WkemMmtjQkEYv4QwFF/HRCtrF
CEvmlDyPGwK8t28uUEIbrMp1AefbUKwDQ3+WPljonClO5Ydlm1HopyTlx05Q+kQJ
9LuQdjdmZHAnO+sHvRt9WXrV0GDAIy1l1D+GpJ65PxpCcklgzMSu5EvZ2SFbsTzU
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24116806776373066034077665234053008424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-04-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '06828'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fairfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3135 Easton Turnpike'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'General Electric Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Provided by General Electric Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legalhold.gecompany.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18481988965172288850778557874854323680461887717103160000450203971318188554876499019616607324711947208049745668275126502006069954000193355017064824863162744528068710437825720071727332137790932470603364263001673373985760238565008190655337755762177444611330393506775811020721164311189241084624400949898660294387523111742235577175288479308531302742219305183910935603005972441346386940412780692270514199953383155015842360381281047840197407786190080235887779307503280618350570645504592949568146489130840094818584150859968032417818342695689143254698502454771388998710110045305141350738852759077687988794711621395362019595351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cc035b965a9e16cc261ebda370fbe3cb7919fc4d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e89388001a4ae41f44d02ef6d05af8e2369e143f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.csctrustedsecure.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.csctrustedsecure.com/TrustedSecureCertificateAuthority_3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.csctrustedsecure.com/TrustedSecureCertificateAuthority_3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.csctrustedsecure.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalhold.gecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legalhold.gecompany.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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