streambankipv4.com
Issued by R3
About this certificate
This digital certificate with serial number 04:3d:0f:e8:5a:ca:ee:d3:fc:62:eb:f7:b1:bc:30:49:c5:55 was issued on by Let's Encrypt.
With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=streambankipv4.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:3d:0f:e8:5a:ca:ee:d3:fc:62:eb:f7:b1:bc:30:49:c5:55Serial Number (int): 369227512983521053539943116263496060880213
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 8d:dc:21:20:25:f9:57:0c:f6:cc:ba:ad:3a:85:4f:c3:c5:5f:2c:75
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): bc:94:5a:38:98:9c:de:6d:83:7d:43:ae:2c:91:0c:b7:d6:40:27:d1
Fingerprint (sha256): b0:3f:35:99:46:7d:81:55:ac:a8:4d:ad:56:f1:63:f5:25:ff:68:ac:5e:fc:18:fa:ca:0f:f3:f8:5c:da:a5:08
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate streambankipv4.com
13
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for streambankipv4.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
arbitrageurs.at
audioengineer.co
bamajr.com
certifiedpublicadjusters.us
digitallanguageofnumbers.com
fortworthprays.com
go603chiro.com
kamyab.in
kleppo.com
saeat.com
seatoysmarine.com
streambankipv4.com
stress-management.com
audioengineer.co
bamajr.com
certifiedpublicadjusters.us
digitallanguageofnumbers.com
fortworthprays.com
go603chiro.com
kamyab.in
kleppo.com
saeat.com
seatoysmarine.com
streambankipv4.com
stress-management.com
Other certificates including the domain name streambankipv4.com
(limited to 100 certificates)
christmaslightsinstalledprice.com.streambankipv4.com
scriptureuntangled.ca
sculpit.media
hazelcrest.work
puratae.hilltophorizons.ca
sued.co.za
sculpit.media
sculpit.media
cagliari.work
robots.cool
usc.mba
jenksamericatoastmasters.club
sculpit.media
jenksamericatoastmasters.club
healthmanagement.ae
backorder.world
robots.cool
sculpit.media
portland.world
hazelcrest.work
radiator.cc
sanl.co.za
dumptruck.ca
puruzsuz.me
sculpit.media
mack.ac
shiftcrm.ca.poisonivyexterminators.org
usc.mba
radiator.cc
indestructible.bible
streambankipv4.com
playgolf.club
usc.mba
radiator.cc
radiator.cc
sculpit.media
playgolf.club
caremap.org
kiesza.ca
suncityplaza.com.pinnacleforum.org
elasticexecutiveservice.cloud
dominiospremium.ca
hazelcrest.work
rabbitholedelics.com.srilasridharamaharaja.org
portland.world
scriptureuntangled.ca
sculpit.media
hazelcrest.work
puratae.hilltophorizons.ca
sued.co.za
sculpit.media
sculpit.media
cagliari.work
robots.cool
usc.mba
jenksamericatoastmasters.club
sculpit.media
jenksamericatoastmasters.club
healthmanagement.ae
backorder.world
robots.cool
sculpit.media
portland.world
hazelcrest.work
radiator.cc
sanl.co.za
dumptruck.ca
puruzsuz.me
sculpit.media
mack.ac
shiftcrm.ca.poisonivyexterminators.org
usc.mba
radiator.cc
indestructible.bible
streambankipv4.com
playgolf.club
usc.mba
radiator.cc
radiator.cc
sculpit.media
playgolf.club
caremap.org
kiesza.ca
suncityplaza.com.pinnacleforum.org
elasticexecutiveservice.cloud
dominiospremium.ca
hazelcrest.work
rabbitholedelics.com.srilasridharamaharaja.org
portland.world
Certificate
The complete raw certificate details for streambankipv4.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISBD0P6FrK7tP8Yuv3sbwwScVVMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMDgxODMwMjFaFw0yNDA1MDgxODMwMjBaMB0xGzAZBgNVBAMT EnN0cmVhbWJhbmtpcHY0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2ORxjNoSW1ARawwx5160doiLseIvncVk9TCNef/c/JLwF/jvPGwBys5k0R HdwRgit150fEwbLwKOnreJTw6dMCPz+qGjHlQhjDBOwpb6diKhutwoOnMjkuH9Fl V0o/kS4obGTZ/PnSHqmnElAv8zA0WTzj3CPiIpd9em3tCK9DM6mj5y3O3Zh+yWX/ vazho1GknUABanVuDgKEMm7s4bNVqX6TCf4uesCVo75+xpZnCWdmsrYkh3VD/23o OrzhcfoXNXlQCZSV8Bh36ZxmyL3LkVPt+KLfohaD1s8rfhTcFTg73FVS9WSj5KlN spO/6MjzyFx34dfH5OuvTJnJ4L8CAwEAAaOCAvAwggLsMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUjdwhICX5Vwz2zLqtOoVPw8VfLHUwHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wgfkGA1UdEQSB8TCB7oIPYXJiaXRyYWdldXJzLmF0ghBhdWRpb2VuZ2lu ZWVyLmNvggpiYW1hanIuY29tghtjZXJ0aWZpZWRwdWJsaWNhZGp1c3RlcnMudXOC HGRpZ2l0YWxsYW5ndWFnZW9mbnVtYmVycy5jb22CEmZvcnR3b3J0aHByYXlzLmNv bYIOZ282MDNjaGlyby5jb22CCWthbXlhYi5pboIKa2xlcHBvLmNvbYIJc2FlYXQu Y29tghFzZWF0b3lzbWFyaW5lLmNvbYISc3RyZWFtYmFua2lwdjQuY29tghVzdHJl c3MtbWFuYWdlbWVudC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEE AdZ5AgQCBIH0BIHxAO8AdQA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frU FwAAAY2KMxxMAAAEAwBGMEQCIDEFjmO0XgftFUJDgSMXa7sPGdYOi6zb3v1Ui+B5 pQQHAiBNKtx3Zm6KKwJAZPqzhSHSmoQrunlSAbrR8wTYwuynLQB2AO7N0GTV2xrO xVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjYozHFcAAAQDAEcwRQIgPP8F8qIx Kd6HDNLcwPqiWhM6a7ZDE7a4OibKIfAjOxwCIQDZpy+q9N6DRq+56C2qFfhD3uGB h0a3d7w4e9Kr9llJwDANBgkqhkiG9w0BAQsFAAOCAQEAcCGL0dZRvGhXm6shVRnb MXkbVVFM9vHkaqoJPgHEZ/dx/CVeAymkoorswn4MofPnMiMt5wpp3vpJnLBw5O3H GfXUN4N0DsBvbLhh2op5+9GHTPJLbmElBdmY8LwTPcW6HC53nCDjCw7C7U05l2o7 RFh+C3F4TUQBPTq+o8z0Kdv/26pDXpu5juS4v6hnFtZ19M8vkLHuPep5QelYGAd8 3684kPFQtdKKe3nrfGG1u+PKjmu1Lr2/teabqWN1bmT5O9xoVVtDoo0ZIiKn2mhh Rhc2tYejEpgMys+5heUnVf0GWVwh+61k0FSBXJVr0VIiJDCJCaXuGw9XYSBYjyky yA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY5HGM2hJbUBFrDDHnXr R2iIux4i+dxWT1MI15/9z8kvAX+O88bAHKzmTREd3BGCK3XnR8TBsvAo6et4lPDp 0wI/P6oaMeVCGMME7Clvp2IqG63Cg6cyOS4f0WVXSj+RLihsZNn8+dIeqacSUC/z MDRZPOPcI+Iil316be0Ir0MzqaPnLc7dmH7JZf+9rOGjUaSdQAFqdW4OAoQybuzh s1WpfpMJ/i56wJWjvn7GlmcJZ2aytiSHdUP/beg6vOFx+hc1eVAJlJXwGHfpnGbI vcuRU+34ot+iFoPWzyt+FNwVODvcVVL1ZKPkqU2yk7/oyPPIXHfh18fk669Mmcng vwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 369227512983521053539943116263496060880213 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 18:30:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 18:30:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'streambankipv4.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23929199398300538753193938560972784858835781631502396652569797135196618638229219567598192351184853981536624225092126025522214137011018767541653008847263781108632938365667436380313820615565487631260516109441531772338058408169649702142797921653338417229446331565581014628130436614247793912408663987219480966123586248353015999128421990705693804650890455495380607999251287619316913330806555270057830704654585435564525283464972526858339026373338004636828301035051673752982286684557586957086736720374778852969066345134181717949972749704585981458765808084264907804400382802818217281898350230171389898863446871550798733107391 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8ddc212025f9570cf6ccbaad3a854fc3c55f2c75 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageurs.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audioengineer.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bamajr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certifiedpublicadjusters.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitallanguageofnumbers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortworthprays.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go603chiro.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamyab.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kleppo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saeat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seatoysmarine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streambankipv4.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stress-management.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d8a331c4c0000040300463044022031058e63b45e07ed1542438123176bbb0f19d60e8bacdbdefd548be079a5040702204d2adc77666e8a2b024064fab38521d29a842bba795201bad1f304d8c2eca72d007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d8a331c57000004030047304502203cff05f2a23129de870cd2dcc0faa25a133a6bb64313b6b83a26ca21f0233b1c022100d9a72faaf4de8346afb9e82daa15f843dee1818746b777bc387bd2abf65949c0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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