*.stern.nyu.edu

- New York University -

Issued by InCommon Server CA

About this certificate

This digital certificate with serial number 39:df:d8:5d:fb:bd:99:47:3c:45:30:e7:95:67:0c:c9 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

New York University

Organization: New York University
Organization unit: Stern School of Business
Address: 44 West Fourth Street
Postal code: 10012
State / Province: NY
Locality: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 39:df:d8:5d:fb:bd:99:47:3c:45:30:e7:95:67:0c:c9
Serial Number (int): 76928266405796922185272688563167104201
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: cd:9a:f6:75:d5:75:0a:9a:3d:9f:58:92:06:55:d1:d2:15:42:f0:5a
AuthorityKeyId: 48:4f:5a:fa:2f:4a:9a:5e:e0:50:f3:6b:7b:55:a5:de:f5:be:34:5d

Fingerprint (sha1): 11:ad:a8:d6:e1:73:40:8b:c6:ca:87:6e:d9:4c:99:73:8f:3f:4a:b5
Fingerprint (sha256): 01:ea:30:17:70:fe:c4:f2:52:01:0d:e2:8d:39:00:5a:03:b2:da:65:38:30:18:f4:8f:ce:19:91:5a:45:4a:49

Issuing Certificate URL: http://cert.incommon.org/InCommonServerCA.crt

Revocation information

OCSP Server: http://ocsp.incommon.org
CRL Distribution Point: http://crl.incommon.org/InCommonServerCA.crl

Check the revocation status for certificate *.stern.nyu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.stern.nyu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.stern.nyu.edu

Other certificates including the domain name nyu.edu

(limited to 100 certificates)
nyush-nac1.shanghai.nyu.edu
hosting.nyu.edu
rits.hosting.nyu.edu
rebekahrust.hosting.nyu.edu
ssoprod.its.nyu.edu
zora.hosting.nyu.edu
giki.hosting.nyu.edu
diploma.sps.nyu.edu
5648867420798976-fe4.pantheonsite.io
fastmri.med.nyu.edu
fcl.law.nyu.edu
mobileprint.nyu.edu
admissions.emeritus.org
cluster3.technolutions.net
pdsdev.library.nyu.edu
5676582576324608-fe3.pantheonsite.io
cluster3.technolutions.net
applicant.stern.nyu.edu
katejustement.hosting.nyu.edu
heng.hosting.nyu.edu
drkjlancaster.hosting.nyu.edu
klaporta.hosting.nyu.edu
sueannlau.hosting.nyu.edu
recreationregistration.nyu.edu
dcone.hosting.nyu.edu
makerspace.engineering.nyu.edu
shanghai.hosting.nyu.edu
cairoash.hosting.nyu.edu
laurafranklin-hall.hosting.nyu.edu
ssl714081.cloudflaressl.com
tolga.hosting.nyu.edu
greenestuff.hosting.nyu.edu
tisch.nyu.edu
cb.engineering.nyu.edu
5629935204958208-fe2.pantheonsite.io
newborn.hosting.nyu.edu
dslinks.hosting.nyu.edu
holostor.hpc.nyu.edu
cas02pmvwi.shc.sa.nyu.edu
bennyboy.hosting.nyu.edu
drr.cfs.nyu.edu
j3.shared.global.fastly.net
affiliate-snd.albert.its.nyu.edu
webinar.online.engineering.nyu.edu
nyush.hosting.nyu.edu
marl.smusic.nyu.edu
isdm.nyu.edu
sliu.hosting.nyu.edu
shibboleth.nyu.edu
kimmelonestop.nyu.edu
underrights.hosting.nyu.edu
cybersymposium.engineering.nyu.edu
vgc.poly.edu
debrajlevine.hosting.nyu.edu
banking-business-review.com
cga.hosting.nyu.edu
keywords.nyupress.org
sl5298.hosting.nyu.edu
christinexu.hosting.nyu.edu
rh.abudhabi.nyu.edu
shanghai.hosting.nyu.edu
home.nyu.edu
tmsdc02.shc.sa.nyu.edu
osiris.cyber.nyu.edu
jose.hosting.nyu.edu
katejustement.hosting.nyu.edu
violetnetwork.nyu.edu
koh.hosting.nyu.edu
whyb.hosting.nyu.edu
balletcenter.nyu.edu
eatingglobally.heatherruthlee.hosting.nyu.edu
vh-b7-te.law.nyu.edu
spanua3.hosting.nyu.edu
cluster3.technolutions.net
shanghai.hosting.nyu.edu
englishchannel.hosting.nyu.edu
textbooks.shanghai.nyu.edu
engage.its.nyu.edu
cga.hosting.nyu.edu
ais-web.stern.nyu.edu
*.stern.nyu.edu
wormtails.bio.nyu.edu
banking-business-review.com
seungguini.hosting.nyu.edu
laraybabrar.hosting.nyu.edu
learn.gencore.bio.nyu.edu
cluster2.technolutions.net
alicezhao.com
sofie.stern.nyu.edu
isdm.nyu.edu
fasedtech.hosting.nyu.edu
alyazia.hosting.nyu.edu
vgc.poly.edu
5629935204958208-fe2.pantheonsite.io
hockygroup.hosting.nyu.edu
drkjlancaster.hosting.nyu.edu
nyuresearchsites.org
5676582576324608-fe3.pantheonsite.io
fame.nyu.edu
guantanamo.dlib.nyu.edu

Certificate

The complete raw certificate details for *.stern.nyu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpXTfpfOdmYwfNRlPnAO
7Z6UmCzw8VS7TrTXS41LZbgKbZGMwsTVtKL7M2rJE8wS6v8qwbM/sXgnZsYzV9uA
SWmkZuTP/52raD+EAskG87oivg3gT1lR5NwZapdN4gkgpioM613escW9OeWpU5HE
+YDZvRnOzvbLHM5/xC34yEG2foIu/6IWSyz+Lt11Wga7YUIpcY7NLwvEbnFgXEru
FQT+yMVSGCCFmE+aL4HPfiGIcZu62puCavxC7CJvQNQ1X5ShE0Gq+F41Waua6H06
91luyL2CtaoVZBeEg+SeEMs5FgKVwh6yNtyWVlpgzk17SouXGpLXxrQKRRlEaI3a
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 76928266405796922185272688563167104201
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10012'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '44 West Fourth Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stern School of Business'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.stern.nyu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24059159971937142898290640749765628093795388894902832718500781234010799067104472253070217875493380928757308312498038203247767107227082273895926223318400457332746285328502834852232996927625371333035131857408988835594953000432631448164614574274596472291753423387396246281669512241790890999674685792592290855802849145549865132514564115749307166057393990632763853338266767330435709945399520841252206853092334080563928871771940179118170766866273598319928217259686133759169322493498428950096310426461702391971206671454393921500135870604869265180454124482607094909729541197165227477153127755077099086119676948591694744246897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 484f5afa2f4a9a5ee050f36b7b55a5def5be345d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd9af675d5750a9a3d9f58920655d1d21542f05a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon.org/InCommonServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.incommon.org/InCommonServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.incommon.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stern.nyu.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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