wfmweb.swisscom.ch

- Swisscom (Schweiz) AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 40:58:d7:3b:53:cf:f5:42:d1:cd:b6:3a:6a:07:3f:32:fe:8c:65:34 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Swisscom (Schweiz) AG

Organization: Swisscom (Schweiz) AG
State / Province: BE
Locality: Worblaufen
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 40:58:d7:3b:53:cf:f5:42:d1:cd:b6:3a:6a:07:3f:32:fe:8c:65:34
Serial Number (int): 367356624239737104759982124629313942393061139764
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 6c:0b:22:38:ca:5d:37:e9:3e:07:46:a5:fb:af:6b:59:11:fd:e4:b2
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 7f:33:f2:0b:b1:c7:62:f8:d9:59:ba:f0:62:5c:c3:0a:51:b8:51:ea
Fingerprint (sha256): 04:89:3e:9b:af:f1:ff:8f:fe:18:1d:64:2f:4f:bb:7c:17:eb:0e:a0:e3:3d:53:b2:b6:7e:ba:26:53:03:90:47

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate wfmweb.swisscom.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wfmweb.swisscom.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wfmweb.swisscom.ch
www.wfmweb.swisscom.ch

Other certificates including the domain name swisscom.ch

(limited to 100 certificates)
olr-stag.swisscom.ch
cms.staging.entertainment.swisscom.ch
email.swisscom.ch
cp.cspp.swisscom.ch
spscms4linux02.exotrack.swisscom.ch
tvnow.swisscom.ch
internetbox-nas.staging.swisscom.ch
issue.swisscom.ch
secure04.stage.lithium.com
blockchain.swisscom.ch
partner-authz-staging.swisscom.ch
netzausbaukarte.swisscom.ch
magazin.swisscom.ch
i.swisscom.ch
docsafe-beta.swisscom.com
twint-prd.swisscom.ch
ssc1.imst.swisscom.ch
octane.swisscom.ch
*.portal.bankinghub.swisscom.ch
gaia-gateway.vega.m6s.swisscom.ch
iot.vodafone.swisscom.ch
sbc1-emea-che-zhh.teamsa.swisscom.ch
ccs.join.swisscom.ch
*.tcsbc02.teamsa.swisscom.ch
multi.swisscom.ch
l2.shared.global.fastly.net
bcs.join.swisscom.ch
secure05.lithium.com
wast.swisscom.ch
sdx.swisscom.ch
identity.phoenix.m6s.swisscom.ch
ccs.join.swisscom.ch
l2.shared.global.fastly.net
global-portal-dev.swisscom.ch
l2.shared.global.fastly.net
btbcs.swisscom.ch
tools.swisscom.ch
l2.shared.global.fastly.net
ssc1.ims.swisscom.ch
internetbox-nas.staging.swisscom.ch
lite.m2m.swisscom.ch
vimaphet-dasbc1.joind.swisscom.ch
extranet-acc.swisscom.ch
extranet-int.swisscom.ch
shop.swisscom.ch
secure05.stage.lithium.com
internetbox-nas.swisscom.ch
media.oid.swisscom.ch
5670976570261504-fe4.pantheonsite.io
acs.joind.swisscom.ch
secure04.stage.lithium.com
dis.swisscom.ch
wrc.joind.swisscom.ch
*.tasbc01.teamsd.swisscom.ch
sensu-backend-8.exotrack.swisscom.ch
simple2.swisscom.ch
secure04.stage.lithium.com
srv04795.int.bkw.ch.exotrack.swisscom.ch
5754818358411264-fe2.pantheonsite.io
issue-int.swisscom.ch
l2.shared.global.fastly.net
wmt5443.conferencing.swisscom.ch
check.swisscom.ch
clientrvk.testweb38.swisscom.ch
tpe-staging.swisscom.ch
marketplace.bankinghub.swisscom.ch
inone-game.swisscom.ch
check.swisscom.ch
dns-vetting1e.map.fastly.net
handyhilfe.swisscom.ch
secure04.stage.lithium.com
hpalm-app-prd.swisscom.ch
cockpit.dev1.swisscom.ch
secure05.stage.lithium.com
rtc-dis.swisscom.ch
het-cds.swisscom.ch
mds01.swisscom.ch
www.survey.swisscom.ch
wfmweb.swisscom.ch
tv-thankyou.swisscom.ch
inone.swisscom.ch
buyback.swisscom.ch
secure04.stage.lithium.com
stag-messagingproxy.swisscom.ch
secure05.lithium.com
oms-tst.omsaas.swisscom.ch
cockpit.swisscom.ch
vergleich-server-cloud.swisscom.ch
buyback.swisscom.ch
hipchat.swisscom.ch
regapi-1olb.swisscom.ch
stream.swisscom.ch
repairmanager.swisscom.ch
robotics.swisscom.ch
zhheapp-sasbc01.joineapp.swisscom.ch
git-test.swisscom.ch
5754818358411264-fe2.pantheonsite.io
acs.gated.swisscom.ch
www.lawe-network.lime.novu.ch
chat.projuventute.swisscom.ch

Certificate

The complete raw certificate details for wfmweb.swisscom.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367356624239737104759982124629313942393061139764
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-19 18:43:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 18:43:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Worblaufen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wfmweb.swisscom.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 916829619505066191778934979219441298725578232547044607736299939481959521312972721182899572241280302089014318629011158889624324991333274471564738817379306537015274778426676365009882362004320394866212062854742920253165345274151134126084761223363539917022775047771085336173017005347287975091079785305255565513595520086514908921358239569919529368196878527510872653464378467149191353463808533593677157813632470754416852504815624458407297370619870796060324661047417067113172275358899258713765472822502776296980912448943970048657358521554772317833314761439064642441170010917311666620515645287777013036531460808848644611818743685521892286325878957678562511732971728466847305561845077385945737666279027558960132464964625448026222062770813913009910572398639081622906078575243064443699727561196182353185178338358274603875687925536138624281987811771652823702746809092031324819126801975174140961025091134351303971381161788142826114551238126834929375540497128557574375392132292700515655411120747659831536606746392508745643073027498674885027166231485596068042243411119460373679046722148862065231071602922585294585792613632772650717902207383665330213551735104463658727839144401369868060602615603520767113514062093686284730677601332710894472192869187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfmweb.swisscom.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wfmweb.swisscom.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c0b2238ca5d37e93e0746a5fbaf6b5911fde4b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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