*.3456fea3b3d9.devices.meraki.direct

- Meraki, LLC -

Issued by Cisco Meraki CA

About this certificate

This digital certificate with serial number 07:c2:f3:9a:09:89:15:16:93:c8:1c:c9:dd:6a:ec:d4 was issued on by Cisco Systems, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Meraki, LLC

Organization: Meraki, LLC
State / Province: California
Locality: San Francisco
Country: US

Cisco Systems, Inc.

Organization: Cisco Systems, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:c2:f3:9a:09:89:15:16:93:c8:1c:c9:dd:6a:ec:d4
Serial Number (int): 10316842390671969734735186969525677268
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 4c:41:7b:45:3e:8a:30:28:6a:7c:90:06:c3:90:c2:e6:7d:e7:21:ed
AuthorityKeyId: 63:61:95:55:76:f4:14:16:a5:34:e3:b0:3d:73:10:37:fc:ca:83:8d

Fingerprint (sha1): 89:86:6f:1a:78:98:41:46:c3:9a:dc:d7:15:d6:ba:89:d1:c1:6d:5e
Fingerprint (sha256): 00:0e:d0:f9:4b:9a:45:ab:58:6e:41:56:64:df:76:02:6b:fc:c1:3b:f9:90:b0:83:f9:8e:b4:3c:38:67:c8:35

Issuing Certificate URL: http://cacerts.digicert.com/CiscoMerakiCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/CiscoMerakiCA.crl
CRL Distribution Point: http://crl4.digicert.com/CiscoMerakiCA.crl

Check the revocation status for certificate *.3456fea3b3d9.devices.meraki.direct

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.3456fea3b3d9.devices.meraki.direct

Public Key Algorithm

ECDSA

Key Size

384

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3456fea3b3d9.devices.meraki.direct

Other certificates including the domain name meraki.direct

(limited to 100 certificates)
*.ac17c8630708.devices.meraki.direct
*.e0553d848e34.devices.meraki.direct
*.3456fea31e48.devices.meraki.direct
*.ac17c8632e8c.devices.meraki.direct
*.3456fea3ad7f.devices.meraki.direct
*.3456fea35da2.devices.meraki.direct
*.ac17c863ba51.devices.meraki.direct
*.0c8ddb690ba7.devices.meraki.direct
scep.185021236924963.meraki.direct
scep.189218156438258.meraki.direct
*.ac17c80b2466.devices.meraki.direct
scep.185021236924963.meraki.direct
*.3456fea23255.devices.meraki.direct
scep.247165646065069.meraki.direct
*.3456fea38880.devices.meraki.direct
*.ac17c80b6927.devices.meraki.direct
577023702256868311.500075.radius.meraki.direct
scep.114598837484780.meraki.direct
*.ac17c862020d.devices.meraki.direct
*.ac17c8630684.devices.meraki.direct
*.e0cbbc0aac6e.devices.meraki.direct
*.3456fea25ce2.devices.meraki.direct
*.9818885092be.devices.meraki.direct
*.683a1e538c71.devices.meraki.direct
scep.57548246404608.meraki.direct
*.e0553d84abec.devices.meraki.direct
*.e0cbbc0ac0e5.devices.meraki.direct
scep.114598837484780.meraki.direct
*.3456fea44a0a.devices.meraki.direct
*.683a1effcb41.devices.meraki.direct
scep.114598837484780.meraki.direct
*.ac17c80bbdc3.devices.meraki.direct
*.e0cbbc0a3507.devices.meraki.direct
*.ac17c80b675f.devices.meraki.direct
*.ac17c8622d45.devices.meraki.direct
*.683a1e5378c4.devices.meraki.direct
*.ac17c80b1773.devices.meraki.direct
*.3456fea38e68.devices.meraki.direct
*.3456fea3b3d9.devices.meraki.direct
*.ac17c80b19e0.devices.meraki.direct
*.ac17c8632f01.devices.meraki.direct
*.ac17c8639b43.devices.meraki.direct
*.683a1effd804.devices.meraki.direct
*.ac17c80b8ee6.devices.meraki.direct
*.ac17c863edff.devices.meraki.direct
*.3456fea252ec.devices.meraki.direct
*.e0cbbc0aa8ca.devices.meraki.direct
*.ac17c80bd455.devices.meraki.direct
*.ac17c80bd962.devices.meraki.direct
*.ac17c8638e62.devices.meraki.direct
*.ac17c80b4017.devices.meraki.direct
*.e0cbbc0aaede.devices.meraki.direct
scep.185021236924963.meraki.direct
*.e0cbbc0ac852.devices.meraki.direct
*.3456fea27095.devices.meraki.direct
*.3456fea33cc3.devices.meraki.direct
*.e0cbbc0a332c.devices.meraki.direct
686235993220646829.1522740.radius.meraki.direct
*.ac17c862f735.devices.meraki.direct
*.ac17c863f8fd.devices.meraki.direct
*.e0cbbc0aadbe.devices.meraki.direct
*.ac17c8633006.devices.meraki.direct
*.683a1effdb6a.devices.meraki.direct
*.3456fea257ba.devices.meraki.direct
*.e0cbbc0a1ec9.devices.meraki.direct
*.ac17c8621485.devices.meraki.direct
*.3456fea44824.devices.meraki.direct
*.e0cbbc0a49cf.devices.meraki.direct
*.3456fea2a029.devices.meraki.direct
*.ac17c862a12b.devices.meraki.direct
*.3456fea44ea5.devices.meraki.direct
*.ac17c862292e.devices.meraki.direct
*.e0cbbc0a4441.devices.meraki.direct
*.ac17c86299c6.devices.meraki.direct
scep.247165646065069.meraki.direct
*.3456fea3734d.devices.meraki.direct
*.981888d27446.devices.meraki.direct
*.981888656c85.devices.meraki.direct
*.683a1effb80f.devices.meraki.direct
*.ac17c8634410.devices.meraki.direct
*.3456fea42cdc.devices.meraki.direct
*.3456fea25ce2.devices.meraki.direct
*.ac17c86272de.devices.meraki.direct
*.e0cbbc0a9e1b.devices.meraki.direct
*.e0cbbc0a44bf.devices.meraki.direct
*.3456fea41695.devices.meraki.direct
*.ac17c8631eb4.devices.meraki.direct
*.e0cbbc0aa6df.devices.meraki.direct
*.ac17c863da70.devices.meraki.direct
*.ac17c8633cd5.devices.meraki.direct
*.3456fea3dbf9.devices.meraki.direct
*.3456fea334f2.devices.meraki.direct
*.ac17c80baffe.devices.meraki.direct
*.e0553d84abbc.devices.meraki.direct
*.e0cbbc0a09e9.devices.meraki.direct
scep.189218156438258.meraki.direct
*.0c8ddb958fcf.devices.meraki.direct
*.e0cbbc0ac73d.devices.meraki.direct
*.e0cbbc0abf2a.devices.meraki.direct
*.3456fea46f96.devices.meraki.direct

Certificate

The complete raw certificate details for *.3456fea3b3d9.devices.meraki.direct in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEv1JzYqj4/Juzhte2T3+9Tg7PJGKyMx24
spuLzIUiRmd6l18Ksx05F5iEchTa7oFhNHeR8ES6fscj+seynW+nkI2CuCz1wjcj
wEubblr0UQXjNVJimaKvVE9MAvfOwHZ0
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10316842390671969734735186969525677268
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cisco Systems, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cisco Meraki CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-09 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Meraki, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.3456fea3b3d9.devices.meraki.direct'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.132.0.34 (secp384r1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (776 bits)
				0004bf527362a8f8fc9bb386d7b64f7fbd4e0ecf2462b2331db8b29b8bcc852246677a975f0ab31d391798847214daee8161347791f044ba7ec723fac7b29d6fa7908d82b82cf5c23723c04b9b6e5af45105e335526299a2af544f4c02f7cec07674
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6361955576f41416a534e3b03d731037fcca838d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c417b453e8a30286a7c9006c390c2e67de721ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3456fea3b3d9.devices.meraki.direct'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CiscoMerakiCA.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CiscoMerakiCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CiscoMerakiCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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