bbtest.net

- DigiCert, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0b:da:90:c9:04:44:c3:94:25:ea:2e:f4:b7:ae:4d:63 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DigiCert, Inc.

Organization: DigiCert, Inc.
Organization unit: Bobs burgers
State / Province: UT
Locality: Lehi
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:da:90:c9:04:44:c3:94:25:ea:2e:f4:b7:ae:4d:63
Serial Number (int): 15756365261959328821967935870524607843
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0c:77:81:54:34:0e:05:27:71:e0:16:03:8e:0f:12:02:00:1e:77:dc
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 89:13:2a:62:f5:e9:31:c2:dc:04:f4:a9:bf:30:f6:8c:39:f9:c5:9c
Fingerprint (sha256): 01:13:36:00:c9:8b:16:34:b9:ab:44:41:ff:64:bc:7d:32:e6:1e:49:34:7a:5b:82:63:79:48:59:51:e8:d0:74

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate bbtest.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bbtest.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bbtest.net
www.bbtest.net

Other certificates including the domain name bbtest.net

(limited to 100 certificates)
www.bbtest.net
evenevsha1汉字-1.bbtest.net
bbtest.net
bbtest.net
ssevchangecn.bbtest.net
UYse1vl.ATT_PROD.www.bbtest.net
?.bbtest.net
8Dec-prerelrenEV2.bbtest.net
jimmy.bbtest.net
www.bbtest.net
eccre.bbtest.net
bbtest.net
s9qSVMhN.bbtest.net
ptnr-pki-ws.bbtest.net
authapi8.bbtest.net
*.bbtest.net
renew1.bbtest.net
ssltest21.bbtest.net
*.bbtest.net
ssltest9.bbtest.net
bbtest.net
PTNR-MSSL-ADMIN.BBTEST.NET
bbtest.net
symc-pc2-enroll.symclab.net
漢字QtvBCW72.bbtest.net
dev-pki-est.symclab.net
msslmy.www.bbtest.net
565654.bbtest.net
?.bbtest.net
dev-pki-cbo.bbtest.net
alex2012.bbtest.net
joetestcustomfld.bbtest.net
pv-enterprise-ssl-adminmanager.websecurity.symclab.net
bryancicauto.bbtest.net
70h3n209em.bbtest.net
dev-mmadmin-manager.bbtest.net
Sep14ProdTest2.bbtest.net
vicy.www.bbtest.net
pv-testdrive-pki-idp.symclab.net
pv-userservices-auth.vip.symclab.com
mmadmin1-enroll.bbtest.net
bt-testdrive-pki-idp.bbtest.net
pv-mmadmin.bbtest.net
ft-ent-admin.bbtest.net
xofUVdb.www.bbtest.net
ptnr-vipservices-auth.bbtest.net
mnigudkar-vlabs.bbtest.net
authmail4.bbtest.net
25Aug201701.bbtest.net
oneyear2.bbtest.net
?.bbtest.net
standdsa.bbtest.net
ft-pki-internal-svc.symclab.com
漢字replace.bbtest.net
ptnr-authentication.bbtest.net
bbtest.net
24JULPRODEVVICE1.BBTEST.NET
trustblade.bbtest.net
ev34.bbtest.net
dev-trustcenter-enterprise1.websecurity.symclab.net
T0BEsAZda_b.bbtest.net
?.bbtest.net
server1.bbtest.net
pki-idp.symclab.net
SHA1.test01.bbtest.net
ssp.gqa.vip.symc.io
mmadmin10-manager.bbtest.net
ptnr-pki-idp.symclab.com
j1yau98.bbtest.net
?.bbtest.net
ssltest30.bbtest.net
certmanager5.websecurity.symclab.net
SjKElDRJ12.bbtest.net
ssltest27.bbtest.net
ft-vip-fin.bbtest.net
dHGsxJb.www.bbtest.net
?.bbtest.net
?.?.bbtest.net
ft.m.vip.symclab.com
dev-vsc.ws.symclab.com
dev-testdrive-pki-idp.bbtest.net
ft-ent-admin-enroll.bbtest.net
?.bbtest.net
ft-ent-control.bbtest.net
dev-pc1-ocsp.symclab.net
?.bbtest.net
bbtest.net
idc-cic-sso.symclab.net
ft-vsc.bbtest.net
?.bbtest.net
ssltest21.bbtest.net
final14-3sevv1汉字.bbtest.net
bbtest.net
*.bbtest.net
testing1.bbtest.net
ptnr-enterprise-ssl-admin.jp.websecurity.symclab.com
ptnr-sso.websecurity.symclab.com
pki-cmp.symclab.net
asb1-mpi-ise-2.net.bbtest.net
?.bbtest.net

Certificate

The complete raw certificate details for bbtest.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy3nF0z9OIuZMY2WDEkR
bOc+Tp1HRspazWx35Aj02Uroobw5kqT1G4tKEsd1jO7QPjN+dwBT7I0ubtY/qma5
6Nj97XqH9WZZ7H/GZpwO9gZhef2juXSiRLCOSt/v5ttim2dep7gMOZGlt3m6dUJP
2uT7mBErPhAPeVcMCm3HsV4KOwsKpTicIluPPEiluTXRKTYJjeBM3nYzbF2xRsTX
wnCA6RymF+H5lai9OvwN5pPSKpvwg0IkwMXn9VT5HLoOwYGepGzdft4oDHto7CLt
lx86Gx9+rF4Xt3cRZlaKSHyp5Dsp7xLUwvOlQGHNLr1hoiKvikEQn06dRv4M+XL0
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15756365261959328821967935870524607843
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lehi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bobs burgers'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bbtest.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24134151713172939007961888523143956042159780626953165899778741028428865053605881790198570737438066963185083837272385396090150269228464107031441716589762845294310863177758795722808775933611465960301327655041891359253305116401098928407269518800932550487564965465528169414962550468033010851807039005368863073045180264208659669640398866355591821635495557028835607841511387820398842043682821336432929414118698161675184163225896443483344234645387694388272528291459251745703489990234315252126387145294265248027489918947991190385992423046451957426173628036212294037563941725219754140252689738932355435724149444550073045414929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c778154340e052771e016038e0f1202001e77dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbtest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbtest.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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