con.api.mini

- Bayerische Motoren Werke Aktiengesellschaft -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:02:59:6d:df:a9:3a:99:ef:9f:0b:e0:09:a3:f3:02 was issued on by DigiCert Inc.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bayerische Motoren Werke Aktiengesellschaft

Organization: Bayerische Motoren Werke Aktiengesellschaft
State / Province: Bavaria
Locality: Munich
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:02:59:6d:df:a9:3a:99:ef:9f:0b:e0:09:a3:f3:02
Serial Number (int): 13304478391110409828324865523476329218
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c2:76:64:d7:00:11:61:61:44:ba:13:fd:15:20:10:c0:bc:bc:3d:36
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 19:72:67:f5:b3:c5:f7:e9:64:0c:53:f9:ad:4b:16:aa:b4:26:bb:7f
Fingerprint (sha256): 9f:b7:b1:29:a0:e5:7d:73:0b:33:f3:46:f2:a0:d9:71:b1:ee:60:77:b2:25:51:81:27:f5:f2:96:79:f4:d7:33

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate con.api.mini

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for con.api.mini

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aem-author-pocaka-inta6.bmw.com
con-int1.api.mini
con.api.mini
con.bmw.at
con.mini.at
dtmassets.bmw.com
qrcode-int1.api.bmw
qrcode.api.bmw
slwa-admin-frontend-int1.api.bmw
slwa-admin-frontend-preprod.api.bmw
slwa-admin-frontend.api.bmw
slwa-internet-backend-int1.api.bmw
slwa-internet-backend-preprod.api.bmw
slwa-internet-backend.api.bmw
slwa-intranet-backend-int1.api.bmw
slwa-intranet-backend-preprod.api.bmw
slwa-intranet-backend.api.bmw
slwa-third-party-int1.api.bmw
slwa-third-party-preprod.api.bmw
slwa-third-party.api.bmw
static2.bmw.com
static3.bmw.com
static4.bmw.com
tracking-api-int1.api.bmw
tracking-api.bmw.com
wpm-int1.api.bmw
wpm.api.bmw
www.p112.mini.com
www.p113.mini.com
www.p114.mini.com
www.p115.mini.com

Other certificates including the domain name api.mini

(limited to 100 certificates)

Certificate

The complete raw certificate details for con.api.mini in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEmE9OgGldaeEB4Zz/D+r42FuvE67E
CN30O5SgQtPnTqoRRk/7IVl6AkzFl17J4Gd+SLKl7DKzd6dgqQdbKtD9Zw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13304478391110409828324865523476329218
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayerische Motoren Werke Aktiengesellschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'con.api.mini'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004984f4e80695d69e101e19cff0feaf8d85baf13aec408ddf43b94a042d3e74eaa11464ffb21597a024cc5975ec9e0677e48b2a5ec32b377a760a9075b2ad0fd67
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c27664d70011616144ba13fd152010c0bcbc3d36
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (761 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aem-author-pocaka-inta6.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con-int1.api.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.api.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.bmw.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mini.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtmassets.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrcode-int1.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrcode.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-admin-frontend-int1.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-admin-frontend-preprod.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-admin-frontend.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-internet-backend-int1.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-internet-backend-preprod.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-internet-backend.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-intranet-backend-int1.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-intranet-backend-preprod.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-intranet-backend.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-third-party-int1.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-third-party-preprod.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-third-party.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api-int1.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm-int1.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p112.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p113.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p114.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p115.mini.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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