blog-preprod.crossknowledge.com

Issued by R3

About this certificate

This digital certificate with serial number 04:56:e7:f4:b3:e5:24:09:6b:d3:ed:0d:56:6d:a6:80:9d:73 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blog-preprod.crossknowledge.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:56:e7:f4:b3:e5:24:09:6b:d3:ed:0d:56:6d:a6:80:9d:73
Serial Number (int): 378021749518407213628231997341503397600627
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 32:fc:37:ba:71:42:19:bb:9b:68:c2:a6:0e:b7:f0:dd:c9:c5:87:4b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:4d:0a:cf:6e:a0:d7:21:16:7b:60:9c:01:50:1c:0f:c7:bf:59:1c
Fingerprint (sha256): 08:14:46:d7:07:26:9e:f6:64:0b:3f:1d:e2:61:75:7b:e5:b8:04:99:a4:8c:82:2b:85:60:32:a5:41:a0:7a:a8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate blog-preprod.crossknowledge.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog-preprod.crossknowledge.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog-preprod.crossknowledge.com

Other certificates including the domain name crossknowledge.com

(limited to 100 certificates)
*.k8s.crossknowledge.com
www-test.crossknowledge.com
status.palmerdonavin.com
www-test.crossknowledge.com
*.k8s.crossknowledge.com
trail.crossknowledge.com
healthstatus.clinicmaster.com
systemstatus.rrc.ca
status.dutchmillerauto.com
connect.crossknowledge.com
healthstatus.clinicmaster.com
www.hub.crossknowledge.com
documentation.crossknowledge.com
*.crossknowledge.com
status.cofh.org
track.crossknowledge.com
healthstatus.clinicmaster.com
blog-preprod.crossknowledge.com
learningwire.crossknowledge.com
www.hub.crossknowledge.com
healthstatus.clinicmaster.com
*.moodle-staging.crossknowledge.com
feeds-status.backatyou.com
site-status.motor.com
*.crossknowledge.com
connect.crossknowledge.com
info.crossknowledge.com
*.na.crossknowledge.com
status.rights.tokyo
nextconference.crossknowledge.com
sgp.crossknowledge.com
*.na.crossknowledge.com
status-salus-eu.uleeco.com
documentation.crossknowledge.com
www-preprod.crossknowledge.com
sgp.crossknowledge.com
learningwire.crossknowledge.com
crossknowledge.com
status.crossknowledge.com
*.asia.crossknowledge.com
*.crossknowledge.com
status.palmerdonavin.com
*.crossknowledge.com
status.bairdwarner.com
sigal.crossknowledge.com
nextconference.crossknowledge.com
www-preprod.crossknowledge.com
crossknowledge.com
*.lms.crossknowledge.com
www.crossknowledge.com
www-preprod.crossknowledge.com
*.asia.crossknowledge.com
*.jnstaging.crossknowledge.com
healthstatus.clinicmaster.com
saml.crossknowledge.com
connect.crossknowledge.com
healthstatus.clinicmaster.com
systemstatus.rrc.ca
www-preprod.crossknowledge.com
status.iknowchurch.co.uk
warning-pages.crossknowledge.com
crossknowledge.com
*.sa.crossknowledge.com
learningwire.crossknowledge.com
*.sa.crossknowledge.com
trail.crossknowledge.com
status.bairdwarner.com
www-preprod.crossknowledge.com
*.sa.crossknowledge.com
*.asia.crossknowledge.com
warning-pages.crossknowledge.com
feeds-status.backatyou.com
blog.crossknowledge.com
*.na.crossknowledge.com
systemstatus.rrc.ca
*.lms.crossknowledge.com
crossknowledge.com
uptime-global.crossknowledge.com
sgp.crossknowledge.com
*.moodle-staging.crossknowledge.com
*.staging.na.crossknowledge.com
crossknowledge.com
sgp.crossknowledge.com
wobily.noc.cloudi.cloud
*.lms.crossknowledge.com
*.lms.crossknowledge.com
crossknowledge.com
connect.crossknowledge.com
www.crossknowledge.com
blog.crossknowledge.com
documentation.crossknowledge.com
blog.crossknowledge.com
nextconference.crossknowledge.com
lemtrail.crossknowledge.com
crossknowledge.com
info.crossknowledge.com
crossknowledge.com
www-preprod.crossknowledge.com
go.crossknowledge.com
lemtrail.crossknowledge.com

Certificate

The complete raw certificate details for blog-preprod.crossknowledge.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISBFbn9LPlJAlr0+0NVm2mgJ1zMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTEyMjcxNTA2MTVaFw0yMjAzMjcxNTA2MTRaMCoxKDAmBgNVBAMT
H2Jsb2ctcHJlcHJvZC5jcm9zc2tub3dsZWRnZS5jb20wggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQCxhqccp7/JPvVTyp9OWKBh4E+XE12Z78OkEKn3PmQm
A37NgRwolJhcO4kbG1RzTHjK+m4yAF2R/7nkto0vaxEy1OMg9fjVIxYILOCFcouS
MHwbf8A0oZAhJF4kOqHbvzKlYqBYVZk+ORtoCji0ZijgzSMGh+yzqzl8JI9z1eoz
EZRehQdHlcGQ/Au/pPMqKHJv6b7RqbyAFrLjCqDNrowmw0ZSkQsdesrswyo1xIUQ
l3Zl8xadedWC1K9CXDplNc+z3vy6cQt/1OY9+Uo8DGSLfA/c8mAc9MzhTKTeBLYh
KscdIpx2nhyCMRFAa6KkvWskRM9AXg7QIIHVg4zCAfIxAgMBAAGjggJcMIICWDAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFDL8N7pxQhm7m2jCpg638N3JxYdLMB8GA1Ud
IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr
BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw
Oi8vcjMuaS5sZW5jci5vcmcvMCoGA1UdEQQjMCGCH2Jsb2ctcHJlcHJvZC5jcm9z
c2tub3dsZWRnZS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEG
BgorBgEEAdZ5AgQCBIH3BIH0APIAdwBGpVXrdfqRIDC1oolp9PN9ESxBdL79SbiF
q/L8cP5tRwAAAX38pHQuAAAEAwBIMEYCIQDT1TD0XIAvlZRIash9b6aWqP2W/EdD
C90Q4Z0TnCALTwIhAJNtVVGVEZ8swD4eQZa/Qs0uUn9ecr8PzRuIW8KM3ANyAHcA
36Veq2iCTx9sre64X04+WurNohKkal6OOxLAIERcKnMAAAF9/KR1/gAABAMASDBG
AiEAm3RdGlsqMB23vPZZ+oDvf1GJJiglGBNp6AZ8kTO6te8CIQDqomwoYXMqcMGO
+xbTsYDyT80zmv9SzluGM/xfV3nUTjANBgkqhkiG9w0BAQsFAAOCAQEAghjITExK
JzFaHIeTyH4CgS+kdGqg4YHDg5nqsjsyYTlPMeCj2P+cDZsmdAV3lT09mldMe+uX
XxKLKhfszBAzSpUyiajqXhs627nIVgK0jAZIhuntJZ9JkP0M1yDXPXKoeGAbseXX
vQkcCzwsqXP0/MEtHnQ6/MSZxFsWxzyD3I340MCPnyW9XgnKFSho4Zlqzm+EQ2Ad
MS7RZPd3aI4L2omvuwmXWWdvS5mzSh2dsqBYGRw+HRNiF539ipgLtLfgAj6/e1Re
a/iVxVEgJO+h1wHwkPdd7vsm46ZyItzN5palzwHTVB1S2TUW4756VDDPQW1GnGp/
227prMV8B4lxOA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYanHKe/yT71U8qfTlig
YeBPlxNdme/DpBCp9z5kJgN+zYEcKJSYXDuJGxtUc0x4yvpuMgBdkf+55LaNL2sR
MtTjIPX41SMWCCzghXKLkjB8G3/ANKGQISReJDqh278ypWKgWFWZPjkbaAo4tGYo
4M0jBofss6s5fCSPc9XqMxGUXoUHR5XBkPwLv6TzKihyb+m+0am8gBay4wqgza6M
JsNGUpELHXrK7MMqNcSFEJd2ZfMWnXnVgtSvQlw6ZTXPs978unELf9TmPflKPAxk
i3wP3PJgHPTM4Uyk3gS2ISrHHSKcdp4cgjERQGuipL1rJETPQF4O0CCB1YOMwgHy
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378021749518407213628231997341503397600627
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-27 15:06:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-27 15:06:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog-preprod.crossknowledge.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22410579740053859574199436261613345087141081341896715616817252409402421286924790730473393827021796753253803869711750110051754357205858121112863432574873353473207798335643482496201895122546357215425311334768722974384120004733026594822246612856194423657073027763038616592099854604475603485088262444388077822500389824269882227868197120938323784158085630444388147206266339315793833781581136629279303377622999962423323865332705007934243043160239628318897874757542858552254407278876213292648882187952446196737113503827694831982592665719796863869668137440674655829176929889623129350080109919218579210974099677805344865776177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32fc37ba714219bb9b68c2a60eb7f0ddc9c5874b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog-preprod.crossknowledge.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017dfca4742e0000040300483046022100d3d530f45c802f9594486ac87d6fa696a8fd96fc47430bdd10e19d139c200b4f022100936d555195119f2cc03e1e4196bf42cd2e527f5e72bf0fcd1b885bc28cdc0372007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017dfca475fe00000403004830460221009b745d1a5b2a301db7bcf659fa80ef7f5189262825181369e8067c9133bab5ef022100eaa26c2861732a70c18efb16d3b180f24fcd339aff52ce5b8633fc5f5779d44e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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