promo.kasko2go.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f4:44:09:7f:9e:73:7b:d0:75:b4:e7:90:3a:ef:4d:46:90 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=promo.kasko2go.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f4:44:09:7f:9e:73:7b:d0:75:b4:e7:90:3a:ef:4d:46:90Serial Number (int): 344456192146794635917185927878627619063440
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 9b:27:a3:13:4a:ca:f1:74:25:de:1c:7a:e9:e7:e0:ca:82:6f:e0:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 8f:c6:9e:5e:12:e7:2e:8a:96:89:93:bf:00:38:51:ab:92:ef:de:a4
Fingerprint (sha256): 9c:e1:4a:e4:70:be:1f:17:30:13:03:fd:8d:b1:15:5c:6f:07:58:53:08:70:e8:18:a7:c8:15:37:65:f3:a8:42
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate promo.kasko2go.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for promo.kasko2go.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
promo.kasko2go.com
Other certificates including the domain name kasko2go.com
(limited to 100 certificates)
kasko2go.com
kasko2go.com
kasko2go.com
link.kasko2go.com
kasko2go.com
ico.kasko2go.com
promo.kasko2go.com
ico.kasko2go.com
*.kasko2go.com
promo.kasko2go.com
kasko2go.com
promo.kasko2go.com
promo.kasko2go.com
kasko2go.com
*.kasko2go.com
*.kasko2go.com
ico.kasko2go.com
kasko2go.com
test.kasko2go.com
*.kasko2go.com
ico.kasko2go.com
kasko2go.com
promo.kasko2go.com
sqr.app
kasko2go.com
ico.kasko2go.com
kasko2go.com
kasko2go.com
*.kasko2go.com
ico.kasko2go.com
*.kasko2go.com
link.kasko2go.com
kasko2go.com
*.kasko2go.com
ico.kasko2go.com
kasko2go.com
kasko2go.com
link.kasko2go.com
kasko2go.com
ico.kasko2go.com
promo.kasko2go.com
ico.kasko2go.com
*.kasko2go.com
promo.kasko2go.com
kasko2go.com
promo.kasko2go.com
promo.kasko2go.com
kasko2go.com
*.kasko2go.com
*.kasko2go.com
ico.kasko2go.com
kasko2go.com
test.kasko2go.com
*.kasko2go.com
ico.kasko2go.com
kasko2go.com
promo.kasko2go.com
sqr.app
kasko2go.com
ico.kasko2go.com
kasko2go.com
kasko2go.com
*.kasko2go.com
ico.kasko2go.com
*.kasko2go.com
link.kasko2go.com
kasko2go.com
*.kasko2go.com
ico.kasko2go.com
Certificate
The complete raw certificate details for promo.kasko2go.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgISA/RECX+ec3vQdbTnkDrvTUaQMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjcxMDU0MzZaFw0y MDAzMjYxMDU0MzZaMB0xGzAZBgNVBAMTEnByb21vLmthc2tvMmdvLmNvbTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL4oxfZknEjxJDwLsUJnwZgpX4nQ pkyh0hPPYaEzsbe15CWThLj3EjSagnHOHy/ZDzPYYNAT/4No3PioNqNisdkpJGiU jhqoLiWiU7nks1/TFW5TkEaR2fTEvESAMaKfVf0V9qJyAQPYqFU9kTUq/z3zzK/J bSpp49m1LP5ZaDv4glAOZ7pVqwXNx2iYdms52kelMuGHwv1PFcckZ2vsbVbvKmdI T/GrS2XojmAloYu8KvO7PfBFhOzb+G6C80+M3pfGb/voInHQnLm8XrZNkh1mmpN/ Pk4YosXcOZD1YQ+oCCM995nSvQk4VGIChrBbIuq71BP8fGJ4qs0V4uJn1rJ2TW1r OFul7h0M/MCvHGCFWIl5DLu4AJ9xqzNnDpITw6ZfIu8lZsi7RvX744z6+tAqHbgI cmPBze7yeskBr7r77+GgA1BLemOUppNTHjDeBZl1+EpwfoQMlhCeZE6asAVuGZ1O VfM+N9rM8m4XM7hN3MVRWH6SV1vkRvgKVaXjj2T76bi/YWrGvQgqP5UHBDdV3bKr wQIJHflHKNY0CPX4zGZnn4MBrLhH+SV7vljegegW4BN7XwGEvdr5J+hNec6Ufud5 JP9SY8JQCfNQtnnsUbRLgeqEap5DnTEucdBwMN2tdhhg3FxHLdxM1UKTVd7ktK1+ RBDy88xCQlc/3CVfAgMBAAGjggJoMIICZDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FJsnoxNKyvF0Jd4ceunn4MqCb+A8MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIIScHJvbW8ua2Fza28y Z28uY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHW eQIEAgSB9gSB8wDxAHcAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMA AAFvRzVeDAAABAMASDBGAiEA0Qu6KR6tmiOo9leEgxp2i9pMucQBBwUIH3W49HMV DsgCIQDFCZxrvl9mms+EJ6lO+3J0+SZyz7dzbG+OQc/fXyRE9gB2ALIeBcyLos2K IE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABb0c1Xd4AAAQDAEcwRQIgdtVO/j8Q 3jADG6guGlotyUiw5rpMY0MxZcf2C1UfFTwCIQDNsxFNVT9Ffzp27eAqKZv3zMMv SmC0d4+DhTkCrScUFDANBgkqhkiG9w0BAQsFAAOCAQEAIR0ZXluZXbsJBZUkLbMG OYYCIX65xAyNFmmnmDyaBmQVUL5YX+83Khhg6Jadzk4UP9R0zsgALuSqpmDywSMS js1coxNbPRT3+pxMBZT0Buwh1GHNVPPEyjiDyRIWyLZcNxWovNU5NuumrQdDoR2M ZxXOKFObiwhCg2rBx7qx6SIQDsGzAGCBTzLKzS5Bnn3nRKTPbXsTRdm6TQZObXxr mvaN264EhL+bljnsR2LkgLPyv04/8lIaxbcly24Zh9vyIvCB4gXZuBYbl5yF6qr9 szFjj2jJpdiVse67mhOcRC6pEArn5kkGiirIaDE1edo8ovb2jQEpodgxGB02ERbp nA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvijF9mScSPEkPAuxQmfB mClfidCmTKHSE89hoTOxt7XkJZOEuPcSNJqCcc4fL9kPM9hg0BP/g2jc+Kg2o2Kx 2SkkaJSOGqguJaJTueSzX9MVblOQRpHZ9MS8RIAxop9V/RX2onIBA9ioVT2RNSr/ PfPMr8ltKmnj2bUs/lloO/iCUA5nulWrBc3HaJh2aznaR6Uy4YfC/U8VxyRna+xt Vu8qZ0hP8atLZeiOYCWhi7wq87s98EWE7Nv4boLzT4zel8Zv++gicdCcubxetk2S HWaak38+Thiixdw5kPVhD6gIIz33mdK9CThUYgKGsFsi6rvUE/x8YniqzRXi4mfW snZNbWs4W6XuHQz8wK8cYIVYiXkMu7gAn3GrM2cOkhPDpl8i7yVmyLtG9fvjjPr6 0CoduAhyY8HN7vJ6yQGvuvvv4aADUEt6Y5Smk1MeMN4FmXX4SnB+hAyWEJ5kTpqw BW4ZnU5V8z432szybhczuE3cxVFYfpJXW+RG+ApVpeOPZPvpuL9hasa9CCo/lQcE N1XdsqvBAgkd+Uco1jQI9fjMZmefgwGsuEf5JXu+WN6B6BbgE3tfAYS92vkn6E15 zpR+53kk/1JjwlAJ81C2eexRtEuB6oRqnkOdMS5x0HAw3a12GGDcXEct3EzVQpNV 3uS0rX5EEPLzzEJCVz/cJV8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 344456192146794635917185927878627619063440 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 10:54:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 10:54:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'promo.kasko2go.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 775782140558161645081998224834363423405906875111225850517960855363946497346789819108016498728732533069298611260515434623708275196332453759564510766927535195413477199970731954485499863767468525626059824692275293853098770127228464829901795160552514987165670872806925706959750496683060540254989873081173018790821662526092251681540083780500588282399904047588993232952911115113076290797919951405174448815499594773248587964936809982483352673692724328974520269721220464263997615404317542770658181829930873356736159468033498584366214068881235824156304395409024481849187426551630862146897744828167136444493627344985905960336454928272636275003769311796231776941298592540172011631004761247906596173628346432889530725305156173872688877474233811162670524806134143278827589531428417598247068443368902232667909871737953980958030240924749077081728833280423481331468562691456712659219543836069470321927559675089602266860474777901319565383747107404748289533238447230317132515219087822651841781918984189653115081387090290600267953393761932848067560648799545746765529532544567399738667102006191039185008730141333288560285112279378903823031195569787555159979209966857674381323380812284608001629473047975606173241736966383080230148771287057751150700537183 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9b27a3134acaf17425de1c7ae9e7e0ca826fe03c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promo.kasko2go.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f47355e0c0000040300483046022100d10bba291ead9a23a8f65784831a768bda4cb9c4010705081f75b8f473150ec8022100c5099c6bbe5f669acf8427a94efb7274f92672cfb7736c6f8e41cfdf5f2444f6007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f47355dde0000040300473045022076d54efe3f10de30031ba82e1a5a2dc948b0e6ba4c63433165c7f60b551f153c022100cdb3114d553f457f3a76ede02a299bf7ccc32f4a60b4778f83853902ad271414 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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