www.bvk-immobilien.ch

Issued by GeoTrust SSL CA - G3

About this certificate


This digital certificate with serial number 7f:4e:6c:db:b0:fc:db:22:15:a4:9b:b6:b3:9e:be:ec was issued on by GeoTrust Inc. .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

BVK Personalvorsorge des Kantons Zuerich

Organization: BVK Personalvorsorge des Kantons Zuerich
Organization unit: Web
State / Province: Zuerich
Locality: Zuerich
Country: CH

GeoTrust Inc.

Organization: GeoTrust Inc.
State / Province: Zuerich
Locality: Zuerich
Country: CH

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 7f:4e:6c:db:b0:fc:db:22:15:a4:9b:b6:b3:9e:be:ec
Serial Number (int): 169219162525629863280212802844537831148
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 25:87:9d:41:4e:c1:c8:d7:e7:8f:66:af:66:11:f6:f7:a9:95:3a:04
Fingerprint (sha256): ee:e6:dd:ef:55:19:17:b3:fd:63:13:50:6f:24:a8:8c:ee:59:33:77:e3:39:87:e1:7c:e0:b1:78:13:73:0b:12

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for the current certificate on www.bvk-immobilien.ch
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bvk-immobilien.ch
bvk-immobilien.ch

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIQf05s27D82yIVpJu2s56+7DANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTUwNDA5MDAwMDAwWhcNMTgwNDA4MjM1 OTU5WjCBkjELMAkGA1UEBhMCQ0gxEDAOBgNVBAgMB1p1ZXJpY2gxEDAOBgNVBAcM B1p1ZXJpY2gxMTAvBgNVBAoMKEJWSyBQZXJzb25hbHZvcnNvcmdlIGRlcyBLYW50 b25zIFp1ZXJpY2gxDDAKBgNVBAsMA1dlYjEeMBwGA1UEAwwVd3d3LmJ2ay1pbW1v YmlsaWVuLmNoMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoZWhQ6F/ qZTBLLUtkNmRD+9oUQRWo1KDJ/ytjuYpIxjRJTp7BxMJhCBufOV8AKGq3pGTNDwu 7DR3NUHwPHv6daO7wh0bB5YQZkTNeNBVKH/wFRdLOl37KWCANHxXrw+2elr02yRN EK8Nm/e1ToLw1WJKttvL0BTtxvzm6DWCRi9zTb2r2p/SXPfInHk8SBlNM+bPPbkY jaFK7GN/hOTjeu089JsnJhe1KYJNcEnC9W88vvm4h742OzafFy5r0JTdhGhhHK4+ NAzB89gevR1Fif6NckacFOpGAsc9CNwNgrKi+XcBH0WkcV1d79AliriR3oBEFzWo vlQMfJlFpeipxUR+cpJAknuLPTXnz8bbKasI0ceQ/ySjEZsaDBCD24eUKLG13+hY ot+/5W+/cA1SRRXSDzggYt5x8luWVoHviuJqptyqXLHSijP/40o/YIAsQULwETy9 DHzGec8+v6RFEo1fLx8AjM4zn32FORVUMFnbXAMqbfODQe/d2EpUqzn8DbgNDFYC mWGnrN87bPCw7T2zaJXZzR5sLP0FBmLuKI7kmiPJ2SS38szDVINp5LvJNWnY3b6O DbSP5jc+Q2ObfnGSXp8U+U4HofrGlfalwW1Szs8oH8tfUZkodqIqPS2IXdZdI4MR mL8c6pLTZMaawCWafYZEUZLSAN/5A+vq5gsCAwEAAaOCAbowggG2MDMGA1UdEQQs MCqCFXd3dy5idmstaW1tb2JpbGllbi5jaIIRYnZrLWltbW9iaWxpZW4uY2gwCQYD VR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDov L2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGE MD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2Vz L3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2Vv dHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb/eW9IU/cjwwfSPahXib o3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1j ZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MA0G CSqGSIb3DQEBCwUAA4IBAQAvWZi8ATsNTDt88/6psQ1ylDQf+tZfTWvkFEh4wpxT 8pmQ+q9iKD9JBGxSeXqSH6/ibol+FG8iSX3K/Nk/04jkMf/MS+LE2E7DkfdmaRzy Ff+rIFdej0IjA88qRXXm+gmJtv3fKIHNSDtUlsD3Lb6xYQF99L/trHrwXk6DCVtN U8Ny7hW+UOUGgrD2M2c9RcPS0FAv9hKGOW5U0TrjYY/cr4fDyBHVqAuo5sLwd5kD yYZZI9w+u+6M41pKHTbADdHNrQIB4Tbt2ArT/+OGrVofDHvdl99/sh0tI4OuSi0D 7QJLL8HeLqmlv+S4v0f9zpT8lSkiNt5ToEhW2H4npw/n -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoZWhQ6F/qZTBLLUtkNmR D+9oUQRWo1KDJ/ytjuYpIxjRJTp7BxMJhCBufOV8AKGq3pGTNDwu7DR3NUHwPHv6 daO7wh0bB5YQZkTNeNBVKH/wFRdLOl37KWCANHxXrw+2elr02yRNEK8Nm/e1ToLw 1WJKttvL0BTtxvzm6DWCRi9zTb2r2p/SXPfInHk8SBlNM+bPPbkYjaFK7GN/hOTj eu089JsnJhe1KYJNcEnC9W88vvm4h742OzafFy5r0JTdhGhhHK4+NAzB89gevR1F if6NckacFOpGAsc9CNwNgrKi+XcBH0WkcV1d79AliriR3oBEFzWovlQMfJlFpeip xUR+cpJAknuLPTXnz8bbKasI0ceQ/ySjEZsaDBCD24eUKLG13+hYot+/5W+/cA1S RRXSDzggYt5x8luWVoHviuJqptyqXLHSijP/40o/YIAsQULwETy9DHzGec8+v6RF Eo1fLx8AjM4zn32FORVUMFnbXAMqbfODQe/d2EpUqzn8DbgNDFYCmWGnrN87bPCw 7T2zaJXZzR5sLP0FBmLuKI7kmiPJ2SS38szDVINp5LvJNWnY3b6ODbSP5jc+Q2Ob fnGSXp8U+U4HofrGlfalwW1Szs8oH8tfUZkodqIqPS2IXdZdI4MRmL8c6pLTZMaa wCWafYZEUZLSAN/5A+vq5gsCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 169219162525629863280212802844537831148 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuerich' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuerich' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BVK Personalvorsorge des Kantons Zuerich' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Web' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.bvk-immobilien.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 659207214052165415776705461963567285076545797161397520816536145610767605626992524877131136932819178057614853996675933042279206997507061196313191886204362653619860363617182721778868978151191751783894184180665877662341926142587496915781914532659226534449747027668296441079054677875695549363040812501970681869271411854093814445609605818901778728017440540256653598682324434405687301255337916932078038034368624497034948627086568000580173146868109786205194816426820968535173923383557638542533845991139462173193053164256680902816712341686824668315581850872425128498188561387137054882699654903312763440585891916679141569599919182216323724372286695178884661400253431531694148388355674608044280214436041208163211079973818970427934056933263078238437542523272230498979340358315833877360416101259321855160296592664036281889003098517598224092062594627794988161558180593932930826724805589187699674425608661792014938806166129282821255599619914250569115203189216469057480243186470130552530849582951290114278501304598895416948349117244126206006923012295282481944347838855736001880854528449119653695414211367244537429877099309460208896005475176299089694665239022509439874753957089411848208171359407104146152445093821512221013904224641037422743394117131 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bvk-immobilien.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bvk-immobilien.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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