thichallenge.com

Issued by cPanel, Inc. Certification Authority

About this certificate

This digital certificate with serial number 53:ac:9b:55:01:26:ac:ef:b1:68:c9:06:58:43:5a:5e was issued on by cPanel, Inc..

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thichallenge.com

cPanel, Inc.

Organization: cPanel, Inc.
State / Province: TX
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 53:ac:9b:55:01:26:ac:ef:b1:68:c9:06:58:43:5a:5e
Serial Number (int): 111222149218054628384064915391381723742
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 99:a7:8c:03:59:bc:01:f2:9c:0f:2e:7f:71:6a:ad:e9:97:b2:9a:5b
AuthorityKeyId: 7e:03:5a:65:41:6b:a7:7e:0a:e1:b8:9d:08:ea:1d:8e:1d:6a:c7:65

Fingerprint (sha1): 54:be:e9:fd:d9:ec:51:8a:be:b7:6c:3d:7f:f4:45:8a:62:2d:b4:f5
Fingerprint (sha256): a3:36:fd:2c:72:4e:34:e0:d4:90:08:cb:6b:2b:94:3a:d4:04:bc:c3:97:71:50:1b:7d:99:29:c8:fa:b0:43:2c

Issuing Certificate URL: http://crt.comodoca.com/cPanelIncCertificationAuthority.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/cPanelIncCertificationAuthority.crl

Check the revocation status for certificate thichallenge.com

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thichallenge.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thichallenge.com
digitalwellness.ca
eq-wellness.com
firsttwenty.thichallenge.com
firsttwentyperformance.com
firsttwentywellness.com
fithealthyu.thichallenge.com
generalmills.thichallenge.com
livewell.allinahealth.org
mail.digitalwellness.ca
mail.eq-wellness.com
mail.firsttwenty.thichallenge.com
mail.firsttwentyperformance.com
mail.firsttwentywellness.com
mail.fithealthyu.thichallenge.com
mail.generalmills.thichallenge.com
mail.mbs.thichallenge.com
mail.thichallenge.com
mail.vfp.thichallenge.com
mbs.thichallenge.com
portal.balanceintegration.com
vfp.thichallenge.com
www.digitalwellness.ca
www.eq-wellness.com
www.firsttwenty.thichallenge.com
www.firsttwentyperformance.com
www.firsttwentywellness.com
www.fithealthyu.thichallenge.com
www.generalmills.thichallenge.com
www.mbs.thichallenge.com
www.portal.balanceintegration.com
www.thichallenge.com
www.vfp.thichallenge.com

Other certificates including the domain name thichallenge.com

(limited to 100 certificates)
thichallenge.com
kkrchallenge.com
thichallenge.com
leadiantwellness.com
thichallenge.com
signup.thichallenge.com
fundraising2016.com
thichallenge.com
thichallenge.com
fundraising2016.com
fundraising2016.com
signup.thichallenge.com
thichallenge.com
thichallenge.com
signup.thichallenge.com
thichallenge.com
kkrchallenge.com
leadiantwellness.com
thichallenge.com
thichallenge.com
signup.thichallenge.com
thichallenge.com
fundraising2016.com
thichallenge.com
thichallenge.com

Certificate

The complete raw certificate details for thichallenge.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTwv0eaZ6IHkak0igp8x
coN/2IAg9lj02PEbo4RS9VdlVEslr+e51PlO74iNXGoBjEHlvRPoZw3CRGz+rN7a
F6xCPnHLarbT5TWAHi1ebjYkgm54rCCS4sxVAhmWkNE3tOomwpuXq8We5EZjsody
tehChvOjMw/CjfgQKlTFwPGQvbMdc+8nOvu8okLhgg+aQs6dyEoNzX4gLwKcl6ly
JYjKH9xofVmLoef69uzL3fqI72MizsacrR7J7gW/tsyfHWTVOMPEbiGjoUZ632ab
uL6KBnM0bDDuTFMSVNGND3J+MmcI1xPUZXl6d9kklWJJ6zt6ZPIBiPg8SEITfPqr
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 111222149218054628384064915391381723742
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cPanel, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cPanel, Inc. Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thichallenge.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23888718854139085617288973870757540025387590897521480512489057132423533532860902286712628722288701971793186294256971171017768745709614698384059373768702681653125053784486458805273456719785964597828561001050376275727240947409753652863268989702410501629512832116709984550207613959977231065810094351623756362314326404963783570537662717994765185356364008276355618612302501234205533391522929388033264558472627961698622016373069431287217574411145350760153569606696291975454484914960529904219759980155594371102689869417612603252375870412723600083858249665757805789559248676800580870487157380101774648340628744890922619808737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7e035a65416ba77e0ae1b89d08ea1d8e1d6ac765
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99a78c0359bc01f29c0f2e7f716aade997b29a5b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.52
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/cPanelIncCertificationAuthority.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/cPanelIncCertificationAuthority.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (916 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalwellness.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eq-wellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsttwenty.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsttwentyperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsttwentywellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fithealthyu.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generalmills.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livewell.allinahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.digitalwellness.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.eq-wellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.firsttwenty.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.firsttwentyperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.firsttwentywellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.fithealthyu.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.generalmills.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mbs.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vfp.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbs.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.balanceintegration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfp.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalwellness.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eq-wellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttwenty.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttwentyperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttwentywellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fithealthyu.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generalmills.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbs.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portal.balanceintegration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfp.thichallenge.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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