dgljuridischadvies.nl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:5d:07:ea:bf:8a:2e:b2:03:38:db:55:13:92:1d:ab:f8:cb was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dgljuridischadvies.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:5d:07:ea:bf:8a:2e:b2:03:38:db:55:13:92:1d:ab:f8:cbSerial Number (int): 292993641397251580841642064300026209499339
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b0:c3:50:10:c3:18:18:74:00:df:de:c0:80:87:af:e4:0d:74:af:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 69:39:11:d5:7b:e2:77:87:a6:35:38:58:ea:d7:f3:a0:1e:4b:47:fc
Fingerprint (sha256): b5:d5:ae:42:8e:de:86:27:84:12:71:2c:95:13:80:38:02:dd:43:cd:32:ce:ff:30:12:0a:50:3d:1e:32:fe:b6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate dgljuridischadvies.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dgljuridischadvies.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dgljuridischadvies.nl
www.dgljuridischadvies.nl
www.dgljuridischadvies.nl
Other certificates including the domain name dgljuridischadvies.nl
(limited to 100 certificates)
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
Certificate
The complete raw certificate details for dgljuridischadvies.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGfjCCBWagAwIBAgISA10H6r+KLrIDONtVE5Idq/jLMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMDUyMjEyMDBaFw0y MDAyMDMyMjEyMDBaMCAxHjAcBgNVBAMTFWRnbGp1cmlkaXNjaGFkdmllcy5ubDCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMRtQ6cGt07dzQ20xRL3vWph EBdkyiL7VqCSkb1DJozNBj5sA9ChAybfsVPv7gqa7vg9FK6/3azhVAh1Q9oHcPG1 c+cdei7QIIUk7I+oqLO/yi5LQHTm+7HcuwcFLy0bC7jDZmV0Uh5hOuWGBqt59UUD ySrIYairw5kSA1eYjPKgebkF0eDiwp2I1IM73NRF/Un9AIfFYHxy8kNaTQDB1ROp MS9W5xjAswpgxhe3Kpp/hI+0q4LMyv0TfUf6MyMV4ODVUnOgOGJDJpoQVsdtJFq9 w212UvMktBw8ex1q/vQKUaQyWAo81fdVi+Um+7m2mZ+8B9ewF4kBf2vhNZ0EoTUo TbU4sqXxQbJcF9I0OMFSk76QXnqnxsWObWovqNwELv4165sW+BSXZM5LoglmLhB4 DDyieIxmvbsas6ZIS0Tg6jf3/KFzHOrBZ+Gc1GCNX9lnMmM6LofDb2SN8WbNsGnj w+/NBvSqqrLgITMxwd5V6LrS3De989I879h5MHpy1k9kzEWCV/XF1ug1KQQjVb/d exVw8UmCboUlYTmOz2VL6nOBNWxiPG9pidiwyROa6M0ANaF2DOVNLXWQK6Q28lYr w4xJqhA4SDgdn+MQkseMipdv5s7HSbV2VVSWoiIJCbbg0QKIDYfk9wTLr1vBVgkF mqqWnWSMEhJMgmMbXoBHAgMBAAGjggKGMIICgjAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFLDDUBDDGBh0AN/ewICHr+QNdK+FMB8GA1UdIwQYMBaAFKhKamMEfd265tE5 t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wOwYDVR0RBDQwMoIVZGdsanVyaWRp c2NoYWR2aWVzLm5sghl3d3cuZGdsanVyaWRpc2NoYWR2aWVzLm5sMEwGA1UdIARF MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6 Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA Xqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFuPdbWmwAABAMARzBF AiA5a0H8TGN5DGf4rFYkEa/e0bTnYVMHetb6Y9OXL9KU5gIhAMCb8TpeTLxqFtnm ZPF9yKSVOBtwkcUAEOypcFFVkk8NAHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDn sklTLe+LkF4AAAFuPdbWdAAABAMASDBGAiEA7n9UkcjwjxrFNga2fM47cIa+djXA UMWkLF5DOKn2lKECIQC5q84lZdDzT0QcYxcvwM/64+g5ZdKB0V001yBi/FJOTzAN BgkqhkiG9w0BAQsFAAOCAQEAITZHxyr+OrqEAoqbUL1Qphb9iYJ+CPDFsVbo78YJ ypuJ5PYFxbK7i30nOh5gSccf2SkmGa0XtUy8gFObclnZekjK8OaWKtFiFPeIqLON aTYOgXIewkl7fGKeGPXaythmDwgm2yDfhvRlhn/xpERdxSE1usrnLQS3jKvDJHK+ uSdPqokOQfhJByBGyGb4JtaSatrYel5s7PuXnpaAvoZUDYuBWE5Mx6ioQIAYNJvS gWQytMDkrXatyUJq4Ru7BxTwChv11imVvL88gNWy700qHsXMkcwV64NAgTH7pzKU wG8y52PcPURHr5tmWS7s5Mghu8UfE6jX8fIxYL6SgyOTAw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxG1Dpwa3Tt3NDbTFEve9 amEQF2TKIvtWoJKRvUMmjM0GPmwD0KEDJt+xU+/uCpru+D0Urr/drOFUCHVD2gdw 8bVz5x16LtAghSTsj6ios7/KLktAdOb7sdy7BwUvLRsLuMNmZXRSHmE65YYGq3n1 RQPJKshhqKvDmRIDV5iM8qB5uQXR4OLCnYjUgzvc1EX9Sf0Ah8VgfHLyQ1pNAMHV E6kxL1bnGMCzCmDGF7cqmn+Ej7SrgszK/RN9R/ozIxXg4NVSc6A4YkMmmhBWx20k Wr3DbXZS8yS0HDx7HWr+9ApRpDJYCjzV91WL5Sb7ubaZn7wH17AXiQF/a+E1nQSh NShNtTiypfFBslwX0jQ4wVKTvpBeeqfGxY5tai+o3AQu/jXrmxb4FJdkzkuiCWYu EHgMPKJ4jGa9uxqzpkhLRODqN/f8oXMc6sFn4ZzUYI1f2WcyYzouh8NvZI3xZs2w aePD780G9KqqsuAhMzHB3lXoutLcN73z0jzv2HkwenLWT2TMRYJX9cXW6DUpBCNV v917FXDxSYJuhSVhOY7PZUvqc4E1bGI8b2mJ2LDJE5rozQA1oXYM5U0tdZArpDby VivDjEmqEDhIOB2f4xCSx4yKl2/mzsdJtXZVVJaiIgkJtuDRAogNh+T3BMuvW8FW CQWaqpadZIwSEkyCYxtegEcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 292993641397251580841642064300026209499339 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 22:12:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 22:12:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dgljuridischadvies.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 801351484676533782300390830159774827897569967954455636876465803926793673362622021689370917348033265731188140983354711858517749217344348892312794447136485325531844627803779188070292795965081280960225979356915685105256975335036678620695362345556108414889872286446426592510573736874407826910339139674940828859519078643278020737675614819278309813559474185161195136044109551231916868615438578360934986714962219534107212943545755517413473991776498769973467962606754770252577364464729767838989456661016428953169513224490731434489014921382386147842417189118941774903281946130265669628741286509551575025366008419446193938978650833933180272063804003808361918756136056814962960009521949034115816747877640243359780672683575127779129079332940492857566609103870063659284627633238319415929543372246019712272498800015223589829288227351768609059868404628058117875758993945197443689818524898653411797218100253394897852528778863124560650927226918513823652095491554772062858999117230604997685163423904243896231110931565579354525511532348758906195396594282016976712822595791235037478058248912033778283358956840693636217149072255153990505403473378888828338322029027394437308619154278802138362725495398918870287437394110183433298360898399903305966374780999 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b0c35010c318187400dfdec08087afe40d74af85 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dgljuridischadvies.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dgljuridischadvies.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e3dd6d69b00000403004730450220396b41fc4c63790c67f8ac562411afded1b4e76153077ad6fa63d3972fd294e6022100c09bf13a5e4cbc6a16d9e664f17dc8a495381b7091c50010eca9705155924f0d007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e3dd6d6740000040300483046022100ee7f5491c8f08f1ac53606b67cce3b7086be7635c050c5a42c5e4338a9f694a1022100b9abce2565d0f34f441c63172fc0cffae3e83965d281d15d34d72062fc524e4f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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