awsegpf.post.ch

- Post CH AG -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 32:07:08:f0:84:1d:dd:8d:2e:6b:d7:06:47:e5:ba:ce:1d:e3:d2:dc was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Post CH AG

Organization: Post CH AG
Organization unit: [email protected]
Organization unit: I3
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 32:07:08:f0:84:1d:dd:8d:2e:6b:d7:06:47:e5:ba:ce:1d:e3:d2:dc
Serial Number (int): 285606422499250371331418755813010251315341939420
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: cd:c1:39:19:e2:ed:9b:91:05:ca:ef:c0:7c:b5:68:77:ca:41:3f:95
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): c9:14:ea:87:0b:cd:28:75:36:30:94:e4:1b:3a:c0:0c:26:0b:3c:cf
Fingerprint (sha256): 04:06:e0:d8:a3:b0:c6:b6:2d:bd:c9:f0:a5:6a:04:5e:71:d3:09:aa:6b:b7:41:6c:a5:4e:93:5c:cc:e9:90:9d

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate awsegpf.post.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for awsegpf.post.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

awsegpf.post.ch

Other certificates including the domain name post.ch

(limited to 100 certificates)
fakeext.post.ch
zwab-int.post.ch
moodle.pa.post.ch
mova.post.ch
webfocus.post.ch
digitaler-posteingang.post.ch
securepost.post.ch
filialemitpartner.post.ch
moodle.pa.post.ch
e-collaboration-int.post.ch
jobs-int.post.ch
m-extranet.post.ch
xray.tools.post.ch
ddstest.post.ch
directpoint.post.ch
places.post.ch
new.post.ch
mapservice.post.ch
wohnen-franklinplatz.post.ch
wwwsc.post.ch
gandalf.apis.post.ch
billingonline-dev.post.ch
dh-auth.apis.post.ch
cinfoni-germany.innovation.post.ch
vgk.apis-test.post.ch
loginint.post.ch
file-intpa-cms.post.ch
agentur-int.post.ch
gitit.post.ch
zubofi.apis-dev.post.ch
ef-testix.post.ch
transport-service.post.ch
directpoint.post.ch
ci-euw1.ireland.delivery.aimatch.net
accountint2.post.ch
address.apis-test.post.ch
docucenterint.post.ch
ci-euw1.ireland.delivery.aimatch.net
msmgateway-int.post.ch
uaasapp3rsa.post.ch
epostoffice3.post.ch
static.post.ch
location-poste-martigny.post.ch
uaasapp3rsadev2.post.ch
crypto-stamp.post.ch
gabi.apis-test.post.ch
nemoauth-test.post.ch
sorryrpz-int.post.ch
webservices-cashlog-int.post.ch
accountint1.post.ch
static.post.ch
cbt.externint.post.ch
wohnen-zollikofen.post.ch
directdayint.post.ch
apis.post.ch
gw.incamail-dev.post.ch
mx3.post.ch
salt-aboint.post.ch
ci-euw1.ireland.delivery.aimatch.net
postweb.post.ch
orgtool-int.post.ch
die-post-kann-mehrint.post.ch
erpcorp.apis-int.post.ch
schreibenint.post.ch
nemoint.post.ch
postzone.extern.post.ch
news-intern.post.ch
kurepo.apis-test.post.ch
cockpitint2.post.ch
dev.post.ch
apitest.post.ch
mp24hub.apis.post.ch
servicetest.post.ch
mobilecodeservice.apis.post.ch
vsc.apis.post.ch
stb-test.innovation.post.ch
pccweb.apitest.post.ch
webtransferint.post.ch
agentur-int.post.ch
www.post.ch
laborsendungen.post.ch
facetoface.post.ch
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
digitaler-posteingangint.post.ch
e-mobilityint.post.ch
fdsbc.post.ch
tresorit.post.ch
aaw.apis-test.post.ch
gw.incamail-dev.post.ch
gewinnende-worte.post.ch
accountint2.post.ch
rasns01.post.ch
ident.apis-dev.post.ch
test.post.ch
e-commerce.post.ch
salt-aboint.post.ch
96749.post.ch
juravote-int.post.ch
sventest.post.ch

Certificate

The complete raw certificate details for awsegpf.post.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285606422499250371331418755813010251315341939420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 06:44:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-26 06:44:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Post CH AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '[email protected]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'I3'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'awsegpf.post.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818396958370604111841966408416951331635943386809147352348760154817695175635998552445217049800303798722687391734258054733715998228275780174183488533255048229656396620815530070273581365745362728750487705546218814252084267321988767481287685482583787906616207119479807856470418325851520363352722445726953111463730094268522241233261566585993840745834162084435032264833900592779715924394045144153203591359785668045696838298444806389367762553020294815044662799565345117621728975013176871378467764793467194979710540714696294007174603400303296195210418211482090187937732699389707737146197626067895738693007021790296683636553152847127477615236426926042112059150028184907565813086454193214469280766969022642374089589304173673617537977414440254449171442508441710044410414314138060060848519904359469828472171798078169921888041901947448154623149307455298052218062161760221418600733947152187329968238658407871486075631753593473527458289100946368804171451433395257117680916154654391883497653668218907727993784854046270285059466285383457384162842135251543794136402609594422698280817422287471932392247634971973990360272740046704374722599332743760077881961642101844754785938339052264692264208033495917167541888380484936157967588680089362810960033011423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awsegpf.post.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cdc13919e2ed9b9105caefc07cb56877ca413f95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.13
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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