www.socialdice.net
Issued by RapidSSL SHA256 CA
About this certificate
This digital certificate with serial number 5e:ac:31:fd:94:4e:4b:44:e2:43:1c:5f:39:22:a7:1a was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=www.socialdice.net
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 5e:ac:31:fd:94:4e:4b:44:e2:43:1c:5f:39:22:a7:1aSerial Number (int): 125841520592144210561451023370763282202
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f
Fingerprint (sha1): fe:39:91:7e:cd:65:c0:66:1b:81:ff:f3:ce:2e:38:84:d2:66:34:0c
Fingerprint (sha256): 9c:50:08:ea:fe:84:b2:f9:bf:59:70:34:43:0d:27:e3:5b:81:5b:74:1e:c9:fd:de:ec:49:a6:8f:cd:2e:0a:49
Issuing Certificate URL: http://gp.symcb.com/gp.crt
Revocation information
OCSP Server: http://gp.symcd.comCRL Distribution Point: http://gp.symcb.com/gp.crl
Check the revocation status for certificate www.socialdice.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.socialdice.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.socialdice.net
socialdice.net
socialdice.net
Other certificates including the domain name socialdice.net
(limited to 100 certificates)
sni116228.cloudflaressl.com
socialdice.net
sni116228.cloudflaressl.com
www.socialdice.net
tls.automattic.com
www.socialdice.net
socialdice.net
tls.automattic.com
sni116228.cloudflaressl.com
blog.socialdice.net
www.socialdice.net
tls.automattic.com
www.socialdice.net
startups.socialdice.net
*.socialdice.net
*.socialdice.net
socialdice.net
*.socialdice.net
startups.socialdice.net
*.socialdice.net
*.socialdice.net
www.socialdice.net
www.socialdice.net
www.socialdice.net
sni116228.cloudflaressl.com
sni116228.cloudflaressl.com
www.socialdice.net
sni116228.cloudflaressl.com
*.socialdice.net
socialdice.net
www.socialdice.net
sni116228.cloudflaressl.com
tls.automattic.com
socialdice.net
sni116228.cloudflaressl.com
sni116228.cloudflaressl.com
*.socialdice.net
blog.socialdice.net
*.socialdice.net
www.socialdice.net
socialdice.net
*.socialdice.net
www.socialdice.net
*.socialdice.net
*.socialdice.net
socialdice.net
socialdice.net
tls.automattic.com
*.socialdice.net
*.socialdice.net
www.socialdice.net
www.socialdice.net
sni116228.cloudflaressl.com
www.socialdice.net
socialdice.net
sni116228.cloudflaressl.com
www.socialdice.net
tls.automattic.com
www.socialdice.net
socialdice.net
tls.automattic.com
sni116228.cloudflaressl.com
blog.socialdice.net
www.socialdice.net
tls.automattic.com
www.socialdice.net
startups.socialdice.net
*.socialdice.net
*.socialdice.net
socialdice.net
*.socialdice.net
startups.socialdice.net
*.socialdice.net
*.socialdice.net
www.socialdice.net
www.socialdice.net
www.socialdice.net
sni116228.cloudflaressl.com
sni116228.cloudflaressl.com
www.socialdice.net
sni116228.cloudflaressl.com
*.socialdice.net
socialdice.net
www.socialdice.net
sni116228.cloudflaressl.com
tls.automattic.com
socialdice.net
sni116228.cloudflaressl.com
sni116228.cloudflaressl.com
*.socialdice.net
blog.socialdice.net
*.socialdice.net
www.socialdice.net
socialdice.net
*.socialdice.net
www.socialdice.net
*.socialdice.net
*.socialdice.net
socialdice.net
socialdice.net
tls.automattic.com
*.socialdice.net
*.socialdice.net
www.socialdice.net
www.socialdice.net
sni116228.cloudflaressl.com
www.socialdice.net
Certificate
The complete raw certificate details for www.socialdice.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIQXqwx/ZROS0TiQxxfOSKnGjANBgkqhkiG9w0BAQsFADBC MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE3MDEyNTAwMDAwMFoXDTE4MDEyOTIzNTk1 OVowHTEbMBkGA1UEAwwSd3d3LnNvY2lhbGRpY2UubmV0MIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEA6E7vFlVfH5BEDlt9tFAsQNP0ETyGmq9SABt6Dl8+ 1GZd5OOS4M+jd0MlDBDMaPDG8XVx46b8gLzVMOqz9+RuIW6fHRM4gFU5lmSSDecJ V9Xwg7vK5hQEXHxHanW+lvjhQvX43tu6TTKakckuQsc7ikIvfEDmWjgIMXW4JptV exL0meH6wP+Qxm5Qe6MS3ZCL5oByKmcoH9CDMF2g9v04CbheIrRkJPxIOMQ2xhlI kbz/JAqPimSOA1bPPkz9ngNpVLIps5NLWvySlB0zkYdFsKWu2RiQz15AF7zxm43x v83Du9KY4zKCnH5PvaiztrJ8X2LeNe3N2NZr0HauO+zOzwIDAQABo4ICjjCCAoow LQYDVR0RBCYwJIISd3d3LnNvY2lhbGRpY2UubmV0gg5zb2NpYWxkaWNlLm5ldDAJ BgNVHRMEAjAAMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9ncC5zeW1jYi5jb20v Z3AuY3JsMG8GA1UdIARoMGYwZAYGZ4EMAQIBMFowKgYIKwYBBQUHAgEWHmh0dHBz Oi8vd3d3LnJhcGlkc3NsLmNvbS9sZWdhbDAsBggrBgEFBQcCAjAgDB5odHRwczov L3d3dy5yYXBpZHNzbC5jb20vbGVnYWwwHwYDVR0jBBgwFoAUl8InUJ7CyewMiDLI fK3ipgFP2m8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9ncC5z eW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9ncC5zeW1jYi5jb20vZ3AuY3J0 MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHV XIiNPRHEzbbsvswAAAFZ0u37swAABAMARzBFAiEA7C+sjuF8GuHh7lTdHT30IM3X QH+XgVQurE7HKqOP+KkCIGAXfHhvWFgAE81d4dmEut/rIqPAkKeZbeKxldYTRySd AHcApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFZ0u376AAABAMA SDBGAiEA53j+CHP1TslD4D5Kz+sHL7E/eiDPJvmXR4wHA7XbzsACIQD4rkwTlSsD Kpb7iAKEyU/yph3jjqRNPP6RA1tlWl3b4DANBgkqhkiG9w0BAQsFAAOCAQEAGwH9 0yWOMdGuxRV7/PC05tJKiV+kMr3xPvfCYru/ZUzxGzFOB/LmcG+TFUOsmxPvKkd5 dB03RrYYreEeFltV1TI8TfRvizbybime4sELgkw0iypYbaz/qZoJsariQoC734j7 05Fj9DI2zggk2gblwrkXa/JbM+/c0t4qQK0zNRFl4GvFGWeizg5dlU2XgmO78JMH rPCB7IQa6V18KRcJ6WUGXhwtwn+jWSmZgU5mIdXk5rtnBsVnTsmOCHlqqVzDhGCS QW9i3SSaxPSTpJrEeTGa3SzVU2BcgUyvtc9FB7Jud8JfOE27LToqzxJGEF5XzRzq deKHJD35IFTPtJjLrQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6E7vFlVfH5BEDlt9tFAs QNP0ETyGmq9SABt6Dl8+1GZd5OOS4M+jd0MlDBDMaPDG8XVx46b8gLzVMOqz9+Ru IW6fHRM4gFU5lmSSDecJV9Xwg7vK5hQEXHxHanW+lvjhQvX43tu6TTKakckuQsc7 ikIvfEDmWjgIMXW4JptVexL0meH6wP+Qxm5Qe6MS3ZCL5oByKmcoH9CDMF2g9v04 CbheIrRkJPxIOMQ2xhlIkbz/JAqPimSOA1bPPkz9ngNpVLIps5NLWvySlB0zkYdF sKWu2RiQz15AF7zxm43xv83Du9KY4zKCnH5PvaiztrJ8X2LeNe3N2NZr0HauO+zO zwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 125841520592144210561451023370763282202 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.socialdice.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29326210525952198510941299700460659960145573545805965180339363869756164852972598330972550731081206353012907912388607019306960177795967937325889059300414382389593509019156095289689001378656483964529947502335063680921711600839058399060029799071791534699451216370928364370830722641025514761908962037031607582691353768975191118111156353855849662547380457367996987003999858660053329109414649847088916606890571009168913334228692337160096595971604341464739931471693471025205894404086052197561580072012708743844247439843820088410250539076422529636554880894439887312834246230987473038085626600429767437938904581903924337626831 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.socialdice.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialdice.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000159d2edfbb30000040300473045022100ec2fac8ee17c1ae1e1ee54dd1d3df420cdd7407f9781542eac4ec72aa38ff8a9022060177c786f58580013cd5de1d984badfeb22a3c090a7996de2b195d61347249d007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000159d2edfbe80000040300483046022100e778fe0873f54ec943e03e4acfeb072fb13f7a20cf26f997478c0703b5dbcec0022100f8ae4c13952b032a96fb880284c94ff2a61de38ea44d3cfe91035b655a5ddbe0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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