hyokadb02.jimu.kyutech.ac.jp

- Kyushu Institute of Technology -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 65:fc:3c:85:4b:25:ec:70:af:f1:1c:34:13:bb:10:e5 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Kyushu Institute of Technology

Organization: Kyushu Institute of Technology
Organization unit: Administration Headquarters
State / Province: Fukuoka
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 65:fc:3c:85:4b:25:ec:70:af:f1:1c:34:13:bb:10:e5
Serial Number (int): 135561713887806335772186395301283303653
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 16:44:5c:0a:69:c5:b7:e7:66:1a:5c:b2:d1:c0:a4:7a:67:30:b4:36
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): 4e:8b:d1:34:40:82:08:f0:6d:f8:59:25:d0:78:54:18:18:fd:68:98
Fingerprint (sha256): 00:36:c2:a3:66:9d:94:5f:9b:8b:5a:90:24:af:60:2e:6d:2b:4c:db:46:26:e5:0f:27:38:d9:91:7b:64:a8:7a


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate hyokadb02.jimu.kyutech.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hyokadb02.jimu.kyutech.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hyokadb02.jimu.kyutech.ac.jp

Other certificates including the domain name kyutech.ac.jp

(limited to 100 certificates)
hyokadb02.jimu.kyutech.ac.jp
mikity3d.mk.ces.kyutech.ac.jp
www.melt.kyutech.ac.jp
www.lib.kyutech.ac.jp
www.mk.ces.kyutech.ac.jp
mountain.elcs.kyutech.ac.jp
www.c3.club.kyutech.ac.jp
imap.lai.kyutech.ac.jp
*.ipl-e.ai.kyutech.ac.jp
idm.kyutech.ac.jp
www.ylab.ai.kyutech.ac.jp
mail.tech-i.kyutech.ac.jp
mail.bio.kyutech.ac.jp
*.club.kyutech.ac.jp
edu.iizuka.isc.kyutech.ac.jp
kiso.mns.kyutech.ac.jp
md-tobata-01.kiban.kyutech.ac.jp
ohio.jimu.kyutech.ac.jp
pluto44.pluto.ai.kyutech.ac.jp
www.ksl.ci.kyutech.ac.jp
edu.tobata.isc.kyutech.ac.jp
t.el.kyutech.ac.jp
leo10.cse.kyutech.ac.jp
edu-git2.bio.kyutech.ac.jp
vpn-i.kiban.kyutech.ac.jp
hoken.jimu.kyutech.ac.jp
www.ai.kyutech.ac.jp
www.ipl-e.ai.kyutech.ac.jp
www.ltc.kyutech.ac.jp
vbc.kiban-i.kyutech.ac.jp
edragon-demo.jimu.kyutech.ac.jp
research01.jimu.kyutech.ac.jp
webmail.lsse.kyutech.ac.jp
demo.slab.ces.kyutech.ac.jp
webmail.lsse.kyutech.ac.jp
icpserv.isc.kyutech.ac.jp
pmu.ele.kyutech.ac.jp
www.admission.kyutech.ac.jp
zodiac30.cse.kyutech.ac.jp
gw.jimu.kyutech.ac.jp
www.ai.kyutech.ac.jp
mail.bio.kyutech.ac.jp
www.irisa-lab.bio.kyutech.ac.jp
virginia.jimu.kyutech.ac.jp
secure.jimu.el.kyutech.ac.jp
research02.jimu.kyutech.ac.jp
ex.melt.kyutech.ac.jp
www2.slab.ces.kyutech.ac.jp
edragon-syllabus.jimu.kyutech.ac.jp
www.ipl-e.ai.kyutech.ac.jp
securesv.kiban.kyutech.ac.jp
gds.tom.ai.kyutech.ac.jp
ltc-apa.el.kyutech.ac.jp
leo10.cse.kyutech.ac.jp
www.iizuka.kyutech.ac.jp
*.ipl-e.ai.kyutech.ac.jp
www.pl.ai.kyutech.ac.jp
idp.idm.kyutech.ac.jp
gcl.ltc.kyutech.ac.jp
www.ces.kyutech.ac.jp
www.isc.kyutech.ac.jp
leo10.cse.kyutech.ac.jp
www.lai.kyutech.ac.jp
onlineguide.isc.kyutech.ac.jp
sec.kyutech.ac.jp
www.irisa-lab.bio.kyutech.ac.jp
www.mk.ces.kyutech.ac.jp
mail1.dhs.kyutech.ac.jp
inohira.mns.kyutech.ac.jp
mail.pl.ai.kyutech.ac.jp
*.club.kyutech.ac.jp
www.ai.kyutech.ac.jp
www.taskit.mk.ces.kyutech.ac.jp
www.ksl.ci.kyutech.ac.jp
www.irisa-lab.bio.kyutech.ac.jp
sec.kyutech.ac.jp
rabbit.mns.kyutech.ac.jp
sheep.tech-t.kyutech.ac.jp
sog-sien.jimu.kyutech.ac.jp
koh-career-ext.tobata.kyutech.ac.jp
edragon-portal.jimu.kyutech.ac.jp
dragon.civil.kyutech.ac.jp
sheep.civil.kyutech.ac.jp
idm.kyutech.ac.jp
www4.dumbo.ai.kyutech.ac.jp
virusbuster3.tobata.kyutech.ac.jp
onlineguide.isc.kyutech.ac.jp
hiko.isc.kyutech.ac.jp
www4.dumbo.ai.kyutech.ac.jp
www.yasunaga-lab.bio.kyutech.ac.jp
idm.kyutech.ac.jp
ml.tech.kyutech.ac.jp
ppl2017.ipl-e.ai.kyutech.ac.jp
account.compsys.brain.kyutech.ac.jp
www3.isc.kyutech.ac.jp
www.iizuka.kyutech.ac.jp
leo10.cse.kyutech.ac.jp
sog-sien.jimu.kyutech.ac.jp
nursing.mns.kyutech.ac.jp
www.pl.ai.kyutech.ac.jp

Certificate

The complete raw certificate details for hyokadb02.jimu.kyutech.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEPKln/wdP28DOu9PaJP
fl1L4R8TWg7q042Zhs/EtWGyIXeButsvY+yJaMt6O/L7rKy5tBYACCmNqxwM1a/J
2uPH0+9zLkXEKzwTnX2CfSbtPjtI9rUbhkqz5aiXyStDU4hvGgHK72I7fHKspQhU
tbbsCUJLu0zkTgqKKigmX0TrcMonUsPksb89RDAY+2XOFz8lk7GwHCqqkpz7kInM
fKXYqVdreGhMRmIoaGOL4wHtn+Oe8jauaogEaRAsydI7NCik7dqRIgZlAYHesh9x
Ubo25Acd+dGefn9Zh7zeXJe8+VidYlmweJ1UtdT+1eLK8i7wsVq7uQPkL5hN109z
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 135561713887806335772186395301283303653
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-12 06:02:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-13 06:02:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fukuoka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyushu Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Administration Headquarters'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hyokadb02.jimu.kyutech.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19726604739722540629894525692945470243347571996549035039811484657471311779771024230333428732626406858367570176721084501626904714142641841645382933304188869865612712324961106742493846118786606932118288698007996524497236582367578035335743136236748304226494345311967594869524301828870716528827302475217815534751696887492107541891875367876533361918143243481246352753882894303112639469798948180967617424188190929948426356518788881269742044728457863983604019751672053151408396726806243675159294067421947519086598652571996246458928395065410977945293346659424681838410358455579878990129523581679264538893894184314760625877789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyokadb02.jimu.kyutech.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							16445c0a69c5b7e7661a5cb2d1c0a47a6730b436
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016d2419de020000040300483046022100fbf048877e0f34c2e1d0ec68795c847ca30395cee237b47d63087b35f8a60e5a0221009bc75bbbfe639c40eca5776250839ce3151e7da8799956f3e2121ac018ea75f5007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016d2419e5630000040300483046022100d4d666103356daaf0d2188c39dd5c1f75c7f2bbad7adbe697e35e4bd4bfdb926022100f3128642bb6b46830fe6cb64035267a1026e35a8badef9cc6f725036a9399e970076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d2419ed3b00000403004730450221009685ec54cf1a65ba55ddf5bd16f47407dba3f4f7b9c4c06e9a2586a0efb87c8f02202feb8a4efcc382b3da4e21c49b121edb20cd2f005b661a0bf898b7122e10d11d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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