felsenberghof.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:18:55:d6:44:9a:c3:cf:a9:77:7e:80:a4:93:dd:71:bc:68 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=felsenberghof.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:18:55:d6:44:9a:c3:cf:a9:77:7e:80:a4:93:dd:71:bc:68Serial Number (int): 269617731524018298065656351163100316154984
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 70:da:0e:9d:15:65:0a:0a:eb:5d:55:f2:5e:b7:dc:09:ea:58:68:91
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 12:e6:a5:94:c5:b9:ae:a1:c0:84:ba:b2:29:b6:1b:1c:88:85:07:b9
Fingerprint (sha256): df:0a:e5:d7:6c:dd:3e:5d:7c:5c:5c:71:0f:a6:7f:6c:05:84:c4:9e:4b:43:79:d8:cc:0a:f3:fa:47:9d:13:77
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate felsenberghof.de
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for felsenberghof.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
felsenberghof.de
weinhaus-wagner.de
www.felsenberghof.de
www.weinhaus-wagner.de
weinhaus-wagner.de
www.felsenberghof.de
www.weinhaus-wagner.de
Other certificates including the domain name felsenberghof.de
(limited to 100 certificates)
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
felsenberghof.de
Certificate
The complete raw certificate details for felsenberghof.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGmjCCBYKgAwIBAgISAxhV1kSaw8+pd36ApJPdcbxoMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMzEwMTA0NTJaFw0x OTA2MjkwMTA0NTJaMBsxGTAXBgNVBAMTEGZlbHNlbmJlcmdob2YuZGUwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC7artnxccHleMcDHwPsle9s9YR1CU7 7meAhKhaaFDx4Qm7HvqRohhMdu7Pn2CJCmapC+augGfYnrzsWRGPCvpdPvos6pbj vxDMQOLuKSdBfS4A5hCC0/acKkdTM4NsDWG8D/X1gTxKDSw97+wMBLcm2NHvhPbq ZFhJxefg15VoFhzMozGW5gKPyBGcSMY4jI8MzfDedfhWOxpJDdnjuOoyKKd2iUck mgvGys4JiOhQ1zNj+arU0r/BCKynCzDv+apyS2DM7rFrhP4Vy2GNrMRaom6/yQ8s JtI4GVlPI4Kl+/4ixNHDahadgq/LquezpYteJPVGonncN/11pBle/6DbhdxIpDWt nQUv83gqAFRXQqnPoT7+b7YaR4phpw29ay09v7NMKjrej/h9/SYmDE1kzvnN5Y9g PVrWBckYMVOl0qH/Wu0ltLeYZRWxD2WPjpgjveH2cKibCSO/0fRblrVHEVOlplRx yPV1xK4JVH8zCikEVbnpvSfyGaOo0mRdf6QVikPdlWzagpr9CMmIGqz8VmOiFMNy V8Va+FmFmAsghri2J0razdNaf+eOcU6jXKcnNM3ls8/79TdrsKxsY1EVesSSlzCp RjwDInmnI+lsW/r6qRpBC6C6eWogO3oMdG+c3kwo7AADuvJE7WINXKmj3rl9yYBu R7x8ENkzWwRRgQIDAQABo4ICpzCCAqMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRw 2g6dFWUKCutdVfJet9wJ6lhokTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMF0GA1UdEQRWMFSCEGZlbHNlbmJlcmdob2Yu ZGWCEndlaW5oYXVzLXdhZ25lci5kZYIUd3d3LmZlbHNlbmJlcmdob2YuZGWCFnd3 dy53ZWluaGF1cy13YWduZXIuZGUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9 XkIgCMY3NXnmEHvMVgAAAWnRfgywAAAEAwBHMEUCIQCXwil40xvPjSZTOdjSeXVX A4cg/HuI3/C2Gsu0ZIX+pwIgRwYXg9Gxm+HfqeiGAMAIyOSmQ1cGTrLMFX3qk3zd jQwAdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWnRfgsPAAAE AwBHMEUCIDpDbRptfSmRXtfQgyUZ0XPvEaLC7MW4Z3kdl2B6A173AiEA5JBzZv3y mvP4F4WLmauqlhA0GEqECJBVKubgORffPjUwDQYJKoZIhvcNAQELBQADggEBAB60 7423kYMCPLLmdUc9qXmc5fSOhNIydjJs4HxvMCYmD0Zx2MNM81KPFsBG9OxxR6BU homeMtVyH2MURZBIgf3U/xckhyslVomLQIoMSqFMjj+m300W7U0/1TXNTvf/JgcM ZJnk1QGUe3KB4SNos7yGwHbx9gERMUodLdFpbhdq+JrHXNvYuI2+Evl+GA9lQWHz yzs7/pgFwn68szzj1q+7gJCQuRIKXP+lt8xYf6vyGw+bO9xM7tme148P1CEkVS2K 7ncBfmTpVMYvjWmiKd69tovsOnsl7gjEC49hPOzMYbjByU+l4qjK0K6uZFffIXTj szp1Qr+OCoqG0PINwPM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu2q7Z8XHB5XjHAx8D7JX vbPWEdQlO+5ngISoWmhQ8eEJux76kaIYTHbuz59giQpmqQvmroBn2J687FkRjwr6 XT76LOqW478QzEDi7iknQX0uAOYQgtP2nCpHUzODbA1hvA/19YE8Sg0sPe/sDAS3 JtjR74T26mRYScXn4NeVaBYczKMxluYCj8gRnEjGOIyPDM3w3nX4VjsaSQ3Z47jq MiindolHJJoLxsrOCYjoUNczY/mq1NK/wQispwsw7/mqcktgzO6xa4T+FcthjazE WqJuv8kPLCbSOBlZTyOCpfv+IsTRw2oWnYKvy6rns6WLXiT1RqJ53Df9daQZXv+g 24XcSKQ1rZ0FL/N4KgBUV0Kpz6E+/m+2GkeKYacNvWstPb+zTCo63o/4ff0mJgxN ZM75zeWPYD1a1gXJGDFTpdKh/1rtJbS3mGUVsQ9lj46YI73h9nComwkjv9H0W5a1 RxFTpaZUccj1dcSuCVR/MwopBFW56b0n8hmjqNJkXX+kFYpD3ZVs2oKa/QjJiBqs /FZjohTDclfFWvhZhZgLIIa4tidK2s3TWn/njnFOo1ynJzTN5bPP+/U3a7CsbGNR FXrEkpcwqUY8AyJ5pyPpbFv6+qkaQQugunlqIDt6DHRvnN5MKOwAA7ryRO1iDVyp o965fcmAbke8fBDZM1sEUYECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 269617731524018298065656351163100316154984 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-31 01:04:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-29 01:04:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'felsenberghof.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764594334405700306408548632803900470868488503365715256664542775578516326525336498276671856739253001723533224683980753334634258730800591378194162774354840636958273414460247503935789031680792571027822707642180817548839716113974683303659675340853475116270478749234385460615675942071317460372506173865865679608299386493304543889721351538147617408583418818071788860510714872644343107179378626684967834630023470772029281689501850216105276165674816425239891184336125615853951174317690545751141030949466280394061379349051700432468951621343403043282555367789976481159480429864713072731913863900904729080316476166097539085517070068921466144297236053365236374164065331162482869926772654563968857670550402430464766333033162298179996050266380953510503575257886944343468536155608076294648611640963380860381741196769197814665852481742056635846645919796240409597871408367165137342203073182907762925641599330741861365890108367175134723441980600579849502118594905502233988616028427849158724571916566424633823838148835417516485695859868245992418301980455598475299970527189995779069913004874316108285669373054977607066730363403649979372836759833203745366239279718367756427239744982202635049091047187359242025928137360625441204347947584366498916390424961 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 70da0e9d15650a0aeb5d55f25eb7dc09ea586891 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felsenberghof.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weinhaus-wagner.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.felsenberghof.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weinhaus-wagner.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169d17e0cb0000004030047304502210097c22978d31bcf8d265339d8d2797557038720fc7b88dff0b61acbb46485fea7022047061783d1b19be1dfa9e88600c008c8e4a64357064eb2cc157dea937cdd8d0c00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169d17e0b0f000004030047304502203a436d1a6d7d29915ed7d0832519d173ef11a2c2ecc5b867791d97607a035ef7022100e4907366fdf29af3f817858b99abaa961034184a840890552ae6e03917df3e35 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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