imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:34:60:ed:2e:65:39:8f:1d:38:e0:cf:51:10:80:49 was issued on by GlobalSign nv-sa.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:34:60:ed:2e:65:39:8f:1d:38:e0:cf:51:10:80:49
Serial Number (int): 1601193335183877125038658300486385737
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ec:c6:58:58:eb:29:a1:3d:ff:a8:a2:86:37:85:3f:99:af:9a:ba:83
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): 87:86:a3:81:74:ad:bc:24:67:3e:39:92:51:47:88:63:f2:e3:0f:d1
Fingerprint (sha256): 9f:1e:af:47:de:6d:d7:31:76:f7:bf:ed:10:9d:bd:aa:7a:28:ca:86:83:fd:aa:f5:2b:22:4c:07:0f:12:61:42

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ca.qa.ai.carear.app
bell-portal.xerox.ca
printkioskqa-r3.portal.xerox.com
qa.mainframe.xerox.com
*.docushareflex.com
aart-test.corp.xerox.com
printkioskqa-r2-1.portal.xerox.com
staging-partner.fittle.com
printkioskstage.portal.xerox.com
*.beta.apiv2.carear.app
app.ai.carear.app
clar.corp.xerox.com
flexdemo-na.docushareflex.com
imperva.com
*.qa.ai.carear.app
bell-portal-stg.xerox.ca
indtest.corp.xerox.com
*.carear.app
flexdemo-us.docushareflex.com
*.mainframe.eur.xerox.com
server-workplacekioskqa-r2-1.services.xerox.com
ppmmproxy-test.corp.xerox.com
moj-portal.corp.xerox.com
server-workplacekiosk-stage.services.xerox.com
*.eu.qa.ai.carear.app
worksafebc.docushareflex.com
staging-customer.gofinancing.com
www.customer.gofinancing.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgLsTzPU1cKwazKkkpLN
WCrsNFDv+3o/XgV52cpticKnvHOhlJWZq8rFUeLfJwOgxUwpH4XzV8oE5b8qDVn/
+glEs7lBcaamP7l77/Sy6NKqdSBqAAckxNbMSNxHPm1s6Wg2dw1Wq+AyngtkowH+
QscqpRQbcklqtRCd9itre7RBvap670rqEJR81LOwdsXi2PKNgoWXUfHQGEhH0Mrk
Dw4KFVRl/E8A/s/Bb3OOMPd1TZD3+l0ez1XDW+ny5cHg/zj0YnSQbcmLkznwRqEH
7q+QJCzPvc9JjawuejlqakVJaBu54OgAxSd3ibZPGLdoVHs85P28wWphpcMbjDhC
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1601193335183877125038658300486385737
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-30 04:32:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 04:32:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19442140390986199451149388751009655247298857659585125300343860375458747373194246729321142305491686861877442562856836972026879910406571755051751844218959245301497945065563923608000717762891698313942482166470146019990673760687634396036121933639206995447143594897410230080506007070890568377917003329378402639016025870203457710078005525851573876805086599464901917776902237655895839229957711740549498373374726741620338366998724391892412966702167967939904460115330738429448624497307193960483005768721702465475241419677720327384907363220862689262005983987470747829245356296765252421949832280591015025162270349504415654232717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (775 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ca.qa.ai.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bell-portal.xerox.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printkioskqa-r3.portal.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.mainframe.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.docushareflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aart-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printkioskqa-r2-1.portal.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-partner.fittle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printkioskstage.portal.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.apiv2.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ai.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clar.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexdemo-na.docushareflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.ai.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bell-portal-stg.xerox.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indtest.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexdemo-us.docushareflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mainframe.eur.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server-workplacekioskqa-r2-1.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppmmproxy-test.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moj-portal.corp.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server-workplacekiosk-stage.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.qa.ai.carear.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worksafebc.docushareflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-customer.gofinancing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.customer.gofinancing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ecc65858eb29a13dffa8a28637853f99af9aba83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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