www.anbieter-ausweisapp2.governikus.de

- Governikus GmbH & Co. KG -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 54:a6:b1:81:00:f4:59:c8:c1:06:6b:f2:76:f1:cb:36 was issued on by D-Trust GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Governikus GmbH & Co. KG

Company registration number: CSM040955511
Organization: Governikus GmbH & Co. KG
State / Province: Bremen
Locality: Bremen
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 54:a6:b1:81:00:f4:59:c8:c1:06:6b:f2:76:f1:cb:36
Serial Number (int): 112520673131677927289881126532111518518
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 45:91:18:66:c5:ae:b8:31:fd:1c:af:4f:53:7c:c7:61:4e:6a:c0:95
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): d8:24:31:f4:f5:99:0a:59:fc:0e:ba:de:08:df:c0:54:d6:99:f6:c9
Fingerprint (sha256): ae:30:7a:1f:b7:52:89:ef:33:7e:20:52:39:8e:77:c1:30:0c:66:b5:76:e1:d8:70:2c:2f:6a:8b:c2:42:59:13

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate www.anbieter-ausweisapp2.governikus.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.anbieter-ausweisapp2.governikus.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.anbieter-ausweisapp2.governikus.de
anbieter-ausweisapp2.governikus.de

Other certificates including the domain name governikus.de

(limited to 100 certificates)
pilot.id.governikus.de
*.governikus.de
autclient.governikus.de
www.governikus.de
www.jahrestagung.governikus.de
pgp.governikus.de
*.governikus.de
localhost.governikus.de
messe.governikus.de
pgp.governikus.de
kommone.dvdv.governikus.de
localhost.governikus.de
portal.governikus.de
messeapp.governikus.de
kommone.dvdv.governikus.de
www.governikus.de
pilot.id.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
repo.portal.governikus.de
*.governikus.de
pgp.governikus.de
cloud.governikus.de
www.anbieter-ausweisapp2.governikus.de
governikus.com
sirs.governikus.de
portal.governikus.de
www.anbieter-ausweisapp2.governikus.de
auth.governikus.de
www.anbieter-ausweisapp2.governikus.de
www.governikus.de
www.anbieter-ausweisapp.governikus.de
messe.governikus.de
*.governikus.de
www.anbieter-ausweisapp2.governikus.de
pgp.governikus.de
portal.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de

Certificate

The complete raw certificate details for www.anbieter-ausweisapp2.governikus.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy52M3uPh3gUteh9067vf
uZLi0NCRHQFRNa21bNPkMwISHFO1NdS59303B5e26qrPXJ1scuta/wkSFDTpJxWf
xJvp5o5YyAX/P4VN3K0/Iuiz+Zir8DpnhjmCuNZlIVRR3wVXmFe0vEAg+YTK7GmC
Hv9fyMPeqeOpW9r0xIXtlWpytVTEl2X4Ugtfx/KuCqQwGlJZmSZHeQGgMnBkpf7p
8ARNeww7M4hUyWBOk5rZ756BgIriMH/aXepOerMlzqYflEj2codlb/hc1ybBDc7w
Q+1RKJJhqFpBjCT/UNndZe5gGFp2k4P+wkaHbYFsnZyCCcFfJAcPWEGzBx8+a5S8
ROfvqK0yG3XBppIalP5A+w+tA/5/bvCppMOQgk8fF8R2ZvNoH7vOIN2fseV4nYzD
BFnTwNxx4OBFYzGyNZP+FCmnYUVMLoRE+g16QgT8++KhKCFwKlJG4x1i3DMTDlHR
fVINSLO6Q5M7374jM9FAthJJ5NSy7MkGGUo7UA3HXJ54uaBMQsp/p7u4N65ut8zA
SqXR338XDC9VwaWUgH4bWNw+BCFGRafJO+Rb4P7m7sX/0FlaIQ5eWNBXpUwmZzLl
BOx6vF6RuvL2ZKPZYpPVAI3XQg87W44VU48ZQQX5KTCvls4ndGK5QCayHrEitZ9R
BYJMaOLdS2iOq+u5Ef/wnJcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 112520673131677927289881126532111518518
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 14:02:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-15 14:02:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM040955511'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Governikus GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.anbieter-ausweisapp2.governikus.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830678484280886960841944398716854652543527593008011958902880981085160073117615692740216420553964520122705132370029719757409165401494030193900331364976371980009386409254475478095019417780246144676056804026765298841390388716062054083320699651699479184060380586782548955445568306792177999672011211491962780451821461951151382728322146125172920341299824394917951617300811676581586958191926235045812008605295540142453396414154350569601132160673638814462686901586030076642166916196480262848218927406518860923312810346586519446323541646177390978234594421391418560466559623776726772819976592993550906636068700332995969726725047820599587466441061814527270671175149711186158705494164471581019989896506621738508421758468867755889994450515126636553568608986787948658836869989321342119281472797208980748259463707300837173655700133575080620895741888487221834382268152316001124887904941268684525327959942301116924556024483066875602786295816127881836529481964484430036411836543162165749724070962594956823849510855871117642855536941872730704500325795610931599236605304396113627777334519940195316506959596628333356596658531002780009083394870028944792908872859792183093382094051914535684825644304548806428856565345670105171247203655394376713748370988183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anbieter-ausweisapp2.governikus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anbieter-ausweisapp2.governikus.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45911866c5aeb831fd1caf4f537cc7614e6ac095
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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