jira-stage.granicus.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:4b:d5:ca:bc:93:a2:fe:3c:58:e9:fc:44:c7:76:d3 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jira-stage.granicus.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:4b:d5:ca:bc:93:a2:fe:3c:58:e9:fc:44:c7:76:d3
Serial Number (int): 19002950421075003635077506452630763219
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 23:a5:10:1f:26:2d:a4:63:6f:97:af:0e:48:75:fa:4e:28:2f:ca:ba
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 23:15:12:3c:93:fa:d3:22:b0:29:77:e3:50:6d:11:99:3d:ab:89:14
Fingerprint (sha256): 00:cc:88:94:e0:23:54:78:ab:46:d2:7a:ca:d3:e1:58:7b:ce:0c:73:48:fa:65:ae:e6:26:d6:82:3b:9e:e5:11

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate jira-stage.granicus.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jira-stage.granicus.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jira-stage.granicus.com

Other certificates including the domain name granicus.com

(limited to 100 certificates)
eu1-status.mulesoft.com
jira-stage.granicus.com
5718998062727168-fe2.pantheonsite.io
secure01.lithium.com
eu1-status.mulesoft.com
secure02.stage.lithium.com
*.ca.granicus.com
5718998062727168-fe2.pantheonsite.io
int.granicus.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
*.granicus.com
5645056174194688-fe3.pantheonsite.io
govdelivery.co.uk
eu1-status.mulesoft.com
granicus.com
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
5718998062727168-fe2.pantheonsite.io
support.granicus.com
corphelpdesk.granicus.com
vpn-prod.granicus.com
5645056174194688-fe3.pantheonsite.io
*.ca.granicus.com
*.granicus.com
*.dev.granicus.com
go.granicus.com
about.govdelivery.com
vpn2-ap-southeast-2.granicus.com
5645056174194688-fe3.pantheonsite.io
jira-stage.granicus.com
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
eu1-status.mulesoft.com
secure01.lithium.com
go.granicus.com
eu1-status.mulesoft.com
5718998062727168-fe2.pantheonsite.io
ceros.map.fastly.net
5714142736416768-fe4.pantheonsite.io
info.granicus.com
www.granicus.com
san-1-s12.tlsprovisioning.exacttarget.com
secure01.lithium.com
5714142736416768-fe4.pantheonsite.io
click.granicus.com
istatus.edgenuity.net
*.granicus.com
secure02.stage.lithium.com
int.granicus.com
secure01.lithium.com
san-1-s12.tlsprovisioning.exacttarget.com
*.ca.granicus.com
secure01.lithium.com
view.ceros.com
ceros.map.fastly.net
view.ceros.com
5718998062727168-fe2.pantheonsite.io
eu1-status.mulesoft.com
secure02.stage.lithium.com
secure01.lithium.com
2fsupport.govdelivery.com
5645056174194688-fe3.pantheonsite.io
vpn2-eu-west-2.granicus.com
secure01.lithium.com
eu1-status.mulesoft.com
ceros.map.fastly.net
5714142736416768-fe4.pantheonsite.io
image.20210419.test1.s12.et.yellsatcloud.com
5645056174194688-fe3.pantheonsite.io
5718998062727168-fe2.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
govdelivery.co.uk
secure02.stage.lithium.com
ceros.map.fastly.net
secure01.lithium.com
eu1-status.mulesoft.com
secure02.stage.lithium.com
eu1-status.mulesoft.com
istatus.edgenuity.net
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
secure02.stage.lithium.com
5714142736416768-fe4.pantheonsite.io
secure01.lithium.com
5690091590647808-fe2.pantheonsite.io
eu1-status.mulesoft.com
5690091590647808-fe2.pantheonsite.io
secure02.stage.lithium.com
ceros.map.fastly.net
eu1-status.mulesoft.com
view.ceros.com
secure01.lithium.com
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
eu1-status.mulesoft.com
5714142736416768-fe4.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5718998062727168-fe2.pantheonsite.io
5645056174194688-fe3.pantheonsite.io

Certificate

The complete raw certificate details for jira-stage.granicus.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEhDCCA2ygAwIBAgIQDkvVyryTov48WOn8RMd20zANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA0MjYwMDAwMDBaFw0yMDA1MjYx
MjAwMDBaMCIxIDAeBgNVBAMTF2ppcmEtc3RhZ2UuZ3JhbmljdXMuY29tMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc2wiUc67otEdNSBnP89uguFuCO6
RbEq60GQJ/XkqsycPOY0SUX6jitnYTx5CNo3tFoOK5uhVTz0rJxExWl5G0PgDodR
4oyoYkdTXhnCGmet8Aft/PXzXpVFgIPqqeohp9g3G53ILKv+wGPh69YM79+4a2tu
ZXM4f++IVVbyRI1XwwfWNROULxTLanI6R8egdgfKxD3YAzqgvb0uiJ7ce8vSHayb
vu4hV1rXTz4y6+3nSbDbx8X05rzuBVuH4ToNUZcNHr/5VCKtFZ5iTieVbe/AvRyQ
nGpMvE3Ae7Xrx3w0AWLIsbyPjXRfwGvqr+UPbEGa87qzOX6S8Taygw/3DwIDAQAB
o4IBkDCCAYwwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0O
BBYEFCOlEB8mLaRjb5evDkh1+k4oL8q6MCIGA1UdEQQbMBmCF2ppcmEtc3RhZ2Uu
Z3JhbmljdXMuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5h
bWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAEC
MAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9v
Y3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2Ny
dC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAw
EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAHRiX44rziF3
MVn+hUsyHUABBPXyGacEA57dl/sbYBu8DKkf4uOd9ABCr2CpNLnTvkO3LxfzhkhK
jq/8Dn2dh2K/Odv5ZT1/ONpZO/FCNHdvH4ehDv/fkouahXuSHoS0TSKJdoQvtVXA
iaG4PzKMtqunzyBtZ7RB4JB3iwv9BN65QdwR1KBrak326i6doRlZRHVbcnI550Fr
GvttoeRlviGZ2WiT56Ae5oCPm3uDx23CFisiGWGcTqt5925Ugk4dlbOBjybr7Z1X
3YGnPCxkw8xoZaehL2Ud0+GS3uqvFzla51dtBkQI0EsOW/z99EUDGWQp4agiahLh
rttVl4CrPM4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc2wiUc67otEdNSBnP89
uguFuCO6RbEq60GQJ/XkqsycPOY0SUX6jitnYTx5CNo3tFoOK5uhVTz0rJxExWl5
G0PgDodR4oyoYkdTXhnCGmet8Aft/PXzXpVFgIPqqeohp9g3G53ILKv+wGPh69YM
79+4a2tuZXM4f++IVVbyRI1XwwfWNROULxTLanI6R8egdgfKxD3YAzqgvb0uiJ7c
e8vSHaybvu4hV1rXTz4y6+3nSbDbx8X05rzuBVuH4ToNUZcNHr/5VCKtFZ5iTieV
be/AvRyQnGpMvE3Ae7Xrx3w0AWLIsbyPjXRfwGvqr+UPbEGa87qzOX6S8Taygw/3
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19002950421075003635077506452630763219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jira-stage.granicus.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22445609298461330625621330484207751276005096612291401477253050076172978996284352654524380051490403543447655827958601624914844554427974133569200174231721482225044158786090652978757215072687098852417102117639122027242104726839511321549762575896914591354860568883366038608855806723866830901563615141781328646592741912321194739658012786858526173538166926534480366312841539898727800793561028638241112632580785720994176198757604228945659872394518521273699059239635337142624968361947555809931098808815919396795185919824931387951390660824535731005483710535344063641027048801954998925098908498530243786505196616175374943909647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23a5101f262da4636f97af0e4875fa4e282fcaba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira-stage.granicus.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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