aro.pitt.edu

- University of Pittsburgh -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number d3:31:fa:11:02:49:c0:28:94:9b:59:4a:99:85:be:d6 was issued on by Internet2.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Pittsburgh

Organization: University of Pittsburgh
State / Province: Pennsylvania
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d3:31:fa:11:02:49:c0:28:94:9b:59:4a:99:85:be:d6
Serial Number (int): 280726601606673260444018292645760974550
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 24:34:26:86:33:bc:98:56:bc:99:2a:59:1d:28:c0:95:e8:1f:e2:c1
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 6b:2b:cf:ca:bc:95:9e:af:04:36:f6:e2:88:39:66:7c:78:30:dd:78
Fingerprint (sha256): 00:75:be:06:c3:8f:b2:5e:09:f6:3b:9e:b9:b9:a9:62:99:23:7c:de:4c:bc:5b:33:c0:cf:ec:81:49:8f:d2:2e

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate aro.pitt.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aro.pitt.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aro.pitt.edu
aro-pro-web.cssd.pitt.edu
www.aro.pitt.edu

Other certificates including the domain name pitt.edu

(limited to 100 certificates)
statuspage.io
apistatus.pitneybowes.com
online.orientation.pitt.edu
www.kidneycenter.pitt.edu
www.wiser.pitt.edu
my.pulmonarytrials.pitt.edu
www.ctmhr.pitt.edu
www.chronicle.pitt.edu
pitt-dr-vcweb.cssd.pitt.edu
statuspage.io
www.diabetesprevention.pitt.edu
statuspage.io
aro.pitt.edu
services.rods.pitt.edu
statuspage.io
coi.hs.pitt.edu
cutislaxa.hgen.pitt.edu
www.medstudentaffairs.pitt.edu
www.cwscholars.blog.pitt.edu
my.education.pitt.edu
ewi-vip-01.cssd.pitt.edu
www.scholarlyproject.medschool.pitt.edu
go.innovation.pitt.edu
pjephl.law.pitt.edu
jmla.pitt.edu
telerehab.pitt.edu
tincture.pharmacy.pitt.edu
valet.haa.pitt.edu
www.games4socialimpact.pitt.edu
www.pts.pitt.edu
www.phdl.pitt.edu
omed.pitt.edu
www.collision.pitt.edu
www.upgservices.pitt.edu
www.afcbt.pitt.edu
clip.pharmacy.pitt.edu
eval.medschool.pitt.edu
fsc-bbm-fe01qa.fis.pitt.edu
www.roc.pitt.edu
www.iise.pitt.edu
navigator.medschool.pitt.edu
rms-pgaw-01.cssd.pitt.edu
5673649784750080-fe1.pantheonsite.io
*.tt.pitt.edu
dev-itbill.pitt.edu
www.rusfilm.pitt.edu
www.totalrewards.pitt.edu
statuspage.io
stage.fm.pitt.edu
ssoe-sp13-01.engr.pitt.edu
ewi-zweb-19.cssd.pitt.edu
ledger.pitt.edu
securedns1.planmygift.org
passport.pitt.edu
securedns1.planmygift.org
scherlock.lrdc.pitt.edu
www.aspire.pitt.edu
shrsft6029himb.shrs.pitt.edu
www.ucisportfolios.pitt.edu
anthro-age.pitt.edu
durrantlab.bio.pitt.edu
www.collision.pitt.edu
scalefunder.net
overdrive.library.pitt.edu
katz-sepm.univ.pitt.edu
www.healthyhomelaboratory.pitt.edu
ppr.pitt.edu
www.gso.cs.pitt.edu
www.law.pitt.edu
rd-r9-26-cons-1.net.pitt.edu
www.ois.pitt.edu
www.ncbrr.pitt.edu
www.connect.pitt.edu
stage.lamp.pitt.edu
www.alumnionline.pitt.edu
moira.pitt.edu
passport.pitt.edu
oam.pitt.edu
www.exhibit.library.pitt.edu
data.act.pitt.edu
www.cba.pitt.edu
stage-pittdc-01.univad.stage.pitt.edu
www.publichealth.pitt.edu
www.osp.pitt.edu
contacts.katz.pitt.edu
50.shrs.pitt.edu
chassis.hsrdc.pitt.edu
www.japanstudies.pitt.edu
www.students.pharmacy.pitt.edu
5673649784750080-fe1.pantheonsite.io
www.hopeteam.pitt.edu
www.pediatrics.pitt.edu
www.medfaculty.pitt.edu
statuspage.io
statuspage.io
www.medadmissions.pitt.edu
www.vmi.pitt.edu
www.cmh.pitt.edu
rms-sjaw-01.cssd.pitt.edu
statuspage.io

Certificate

The complete raw certificate details for aro.pitt.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc/BVRykH/M9/3+1JqPg
/Zpx/xHysvjLKG972KRaF29Vk4EAbB1ejFN/nwZ5kt1beElIaNVH8g7wVgz3UwLg
SF7vKd1m5KvfyyUYJQCsjR9kfad7pdyIBQLmNYw4liFij2XHNgPc3HujbpVybCZo
7zvxJ/2iOKOoHNy01X8GLN5dl+oQpGGrc/NptXW3XHcqQoCcOv4qk8BTIFo5U87Y
psRo/Pq+JpFWm9WicqGZGvo663eAMCN083RRm5/jbCj8agRG5TA0CuqbxYLyNNbz
BkcV8o43q2wVIY94v6+K3r7YqRy09cBpjVfa/xIIst2Y4VYqxMgpjsDrmxeqo1xe
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280726601606673260444018292645760974550
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aro.pitt.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22446627888841188781867784814276638479749614569495481685735197914399695797385244942925561718517457335284283985133352001542231933458285288574812049000863920277382771520854676769292618182482021445958480612236217990693740276477374605218987037754509674712375614396766274806528910542899780424843238471431934929545632267789790491232822708030251041837048998543723666747042285139003424523038640837075771792375688868127066550574723893710749823825662964614636140930894837181813944641166020957740789013485583573980686582703817834472205574415881093728344673243925473562304758211727750245780349284239495306501722432445993753272041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2434268633bc9856bc992a591d28c095e81fe2c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aro.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aro-pro-web.cssd.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aro.pitt.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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