omniroofing.com
Issued by ZeroSSL RSA Domain Secure Site CA
About this certificate
This digital certificate with serial number 9d:af:91:4e:37:c0:00:ab:83:08:56:f0:43:10:e6:bd was issued on by ZeroSSL.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=omniroofing.com
ZeroSSL
Organization:
ZeroSSL
Country:
AT
This certificate will expire on
Certificate Details
Serial Number (hex): 9d:af:91:4e:37:c0:00:ab:83:08:56:f0:43:10:e6:bdSerial Number (int): 209600394434918384947095466363931649725
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 6f:05:2e:32:95:e9:28:04:16:30:f0:52:81:32:96:a6:ef:f1:ca:36
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6
Fingerprint (sha1): c7:5c:7f:11:af:b2:5b:d5:cf:1c:b3:2b:a2:25:79:e7:23:9a:c6:d2
Fingerprint (sha256): de:51:1a:0f:5a:fb:da:61:84:d4:a8:45:d8:c2:43:2b:c9:26:06:6d:98:c6:84:ae:df:f9:d2:53:de:e4:d6:de
Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt
Revocation information
OCSP Server: http://zerossl.ocsp.sectigo.comCheck the revocation status for certificate omniroofing.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for omniroofing.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
omniroofing.com
www.omniroofing.com
www.omniroofing.com
Other certificates including the domain name omniroofing.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for omniroofing.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHgjCCBWqgAwIBAgIRAJ2vkU43wACrgwhW8EMQ5r0wDQYJKoZIhvcNAQEMBQAw SzELMAkGA1UEBhMCQVQxEDAOBgNVBAoTB1plcm9TU0wxKjAoBgNVBAMTIVplcm9T U0wgUlNBIERvbWFpbiBTZWN1cmUgU2l0ZSBDQTAeFw0yNDA0MDkwMDAwMDBaFw0y NDA3MDgyMzU5NTlaMBoxGDAWBgNVBAMTD29tbmlyb29maW5nLmNvbTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAOnYvQQIhiq1huCs2TFOH7oXim83AgS8 e5AVWNYfQ/3IAkNzGjDsL/WMv7CyD2i39WA4rHZrsz4YF4okTKlRpM5LmhlJsueD qlPHm6Txcks6kvzm56zrRhPlOFzrbO7BTZnUxPCHHjnZ8XaSBKdSkYLeIegxg9ot MGKYxJSLAaNyhQ5WaAWH6RD7EMA4hsURSnS6uEj/grKYpYWJilO45hP0LK4GMeC6 8z4BESeIg+P2sHyitcAHpAyjiL7L9/FoXUmlLWfPb6FU1tyjUASSDKuHt8WIwNrB nnzjdAJwrVuqPdiDEEcjyvN5YDB6qvN6BCzSvWz85B8G0BvL16G45KFSdbLjADqN Na+hQiAgZCNoMOuvt2Lu2L9Qma1ijF5c7Dergrha19v5+CO9VJ+MmvYHFAwsiUBX qyWQXBlwZieBZ4fCod/dp3euVGcKw1z4N9XQtNlSptJ6Qx1CPp5yOlPSgJGGzBi8 P2pzChWCJa3F1aoeveCb+40PXb4rrU3/RtSb9CdnK+NU7Pj2/U5WEsMJsXRalS2f fZNU6Ol1AJmB8YdL2+h2TMrx/8yibwkaPH/DuKNsjnwLoz083oJa6fF1o9fX0G8I AR67i3e+5cnk8QjOLVohlZcUlhpa0R00AKqeo+vPrr6EvCittyR5LBIK8+ZOX1oC afmvlsJcXNkTAgMBAAGjggKQMIICjDAfBgNVHSMEGDAWgBTI2XhootkZaNU9ct5f Cj7ctYaGpjAdBgNVHQ4EFgQUbwUuMpXpKAQWMPBSgTKWpu/xyjYwDgYDVR0PAQH/ BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMEkGA1UdIARCMEAwNAYLKwYBBAGyMQECAk4wJTAjBggrBgEFBQcCARYXaHR0 cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQIBMIGIBggrBgEFBQcBAQR8MHow SwYIKwYBBQUHMAKGP2h0dHA6Ly96ZXJvc3NsLmNydC5zZWN0aWdvLmNvbS9aZXJv U1NMUlNBRG9tYWluU2VjdXJlU2l0ZUNBLmNydDArBggrBgEFBQcwAYYfaHR0cDov L3plcm9zc2wub2NzcC5zZWN0aWdvLmNvbTCCAQQGCisGAQQB1nkCBAIEgfUEgfIA 8AB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjsRh428AAAQD AEcwRQIhAKi32WZoMGfifkYQ28R/8t17LVc2DVubKMxP0jU6NMLkAiBzzBZo8oB4 wmrvUSj698HcotYItceDc9Cxtnw4stNbOQB2AD8XS0/XIkdYlB1lHIS+DRLtkDd/ H4Vq68G/KIXs+GRuAAABjsRh4wUAAAQDAEcwRQIgVTE+GbBmgjo4GcCA+w1rzYjJ bvj4ObVgKP6STPOz8noCIQCC9V6Fz2L97l7iB+PvtM0NGR4qZ++tnQ3/Nzt8B6jq FjAvBgNVHREEKDAmgg9vbW5pcm9vZmluZy5jb22CE3d3dy5vbW5pcm9vZmluZy5j b20wDQYJKoZIhvcNAQEMBQADggIBACXaTd+b1HJ+r9x3TjnzlfLi79ia+TNWpxVi 7f+Daf3ra7vxk46JIhyX4tkOjox+dcP3MC2gy87gqo9A+4Z1X8JgvuQd+XXFhGZ8 8WMXmPPG/6/OpvqxT1ipXuDIJ7E8CmUj/1JslGBw+iKa+kc2/KHV4FIthrxddcX5 c5BI9nea0p0JcawlTGKTeDRw+AV7YdB+le/2T3cKG7gExHZ+2zTv1NDgYQT7dBHA quWjY6o2OK8l67jX7Qab/BNVz/R3iwSt9Lj8+XSnKdoxjyHXRcmPZBjvToSqVzwk bsk4iFGr3GdRgsjKjlIGoZwxQOQp4zux3Y23QaSP3kdXsOcTK1Yc5goOTCtltbKe rHjj28/0M1eQX+TTmh+yf7g1QOE0jmGvUeiiZmh/wAlsIhFspCNhTbQEW/sh2mIF j3qofrZK7gJX1EXFR1OEm6HIGLHdv/Xpl4sM9n4R/YTAhJuvqL1ODrmlYGnbWrqE l5+h3NUYJKm/QtXAvB81T6DTk+IZPaFIjRHBlnSpasldBLk41CaJsBJPzflPBB/Z KgDih65tJmQGq2ANur3M6wiZfLrLMDf1rYeIAUnHfyk4Q/WVV/4Rs3zFDLVyGHg5 G1oP8bWRQtJCnZD4uqPIN3jFxRs1RUiIy76xbj2BS7F0MsOXSgQPi4RhOKih5Im+ YT0ANue/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6di9BAiGKrWG4KzZMU4f uheKbzcCBLx7kBVY1h9D/cgCQ3MaMOwv9Yy/sLIPaLf1YDisdmuzPhgXiiRMqVGk zkuaGUmy54OqU8ebpPFySzqS/ObnrOtGE+U4XOts7sFNmdTE8IceOdnxdpIEp1KR gt4h6DGD2i0wYpjElIsBo3KFDlZoBYfpEPsQwDiGxRFKdLq4SP+CspilhYmKU7jm E/QsrgYx4LrzPgERJ4iD4/awfKK1wAekDKOIvsv38WhdSaUtZ89voVTW3KNQBJIM q4e3xYjA2sGefON0AnCtW6o92IMQRyPK83lgMHqq83oELNK9bPzkHwbQG8vXobjk oVJ1suMAOo01r6FCICBkI2gw66+3Yu7Yv1CZrWKMXlzsN6uCuFrX2/n4I71Un4ya 9gcUDCyJQFerJZBcGXBmJ4Fnh8Kh392nd65UZwrDXPg31dC02VKm0npDHUI+nnI6 U9KAkYbMGLw/anMKFYIlrcXVqh694Jv7jQ9dviutTf9G1Jv0J2cr41Ts+Pb9TlYS wwmxdFqVLZ99k1To6XUAmYHxh0vb6HZMyvH/zKJvCRo8f8O4o2yOfAujPTzeglrp 8XWj19fQbwgBHruLd77lyeTxCM4tWiGVlxSWGlrRHTQAqp6j68+uvoS8KK23JHks Egrz5k5fWgJp+a+Wwlxc2RMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 209600394434918384947095466363931649725 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'omniroofing.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 954011033842786929781402064947380870402965757708475664484719060052476569595024155810305040422678267486764413632401156013629600829189407462252813086931928245001630482575915325778772901969571048321170304021106232522620628143100810632169702371556758760952901233643317454234632582930161198894198172194300029620520353875645990210021775253335331621317094784300334989822370511412522502966280586510495122800612573075763664897377836535838571964989497592518211466803847432726734954659027533256773738794867791628027149514758092302642863143765568807576218557363994408788108810184302333419326468317133507057725286408773210526828952541296669554184116172555014168282187194774688472615323751225083630391321109170272265788659547558941203272786745709639766281528783865294578702256867604537371904847889134091675500288203753475571994131950316544997833743677648033500665242402088985553459626238275448226411363724808471185342826803737928160720800297164135094026344652131750618251879001348057729196813170751747516337057789157614927412446733800857840318174675744163712569025069713490921251468072297494364763021440295411715580401298472623043884973527440680273534362469692632269960790399759083015519520607293770884027058733459821021489736273403741116357728531 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6f052e3295e928041630f052813296a6eff1ca36 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ec461e36f0000040300473045022100a8b7d966683067e27e4610dbc47ff2dd7b2d57360d5b9b28cc4fd2353a34c2e4022073cc1668f28078c26aef5128faf7c1dca2d608b5c78373d0b1b67c38b2d35b390076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ec461e3050000040300473045022055313e19b066823a3819c080fb0d6bcd88c96ef8f839b56028fe924cf3b3f27a02210082f55e85cf62fdee5ee207e3efb4cd0d191e2a67efad9d0dff373b7c07a8ea16 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omniroofing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omniroofing.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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