workplace-search-jira-on-prem.app.elstc.co

Issued by R3

About this certificate

This digital certificate with serial number 03:45:49:d1:12:b0:ec:b2:77:c9:65:f8:89:e4:56:9c:f0:18 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=workplace-search-jira-on-prem.app.elstc.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:45:49:d1:12:b0:ec:b2:77:c9:65:f8:89:e4:56:9c:f0:18
Serial Number (int): 284914460325662010241571961891958923522072
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:23:35:f3:ec:d2:98:cb:f1:18:a8:18:5b:82:c3:59:01:30:10:3a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9c:68:d1:00:16:55:6c:4e:9d:98:67:fa:e5:b5:98:72:ae:98:cd:a8
Fingerprint (sha256): 0a:81:4c:6a:3e:58:82:4a:14:e7:b6:d7:95:9a:7e:26:c4:cd:08:43:a0:1e:40:05:8f:ed:ab:c3:09:cf:32:a7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate workplace-search-jira-on-prem.app.elstc.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for workplace-search-jira-on-prem.app.elstc.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

workplace-search-jira-on-prem.app.elstc.co

Other certificates including the domain name elstc.co

(limited to 100 certificates)
webteam-scheduled-tasks.app.elstc.co
elastic-co-ds-epic-ux.app.elstc.co
elastic-co-downloads.app.elstc.co
github-stats-staging.app.elstc.co
http-logger-fe.app.elstc.co
botelastic.app.elastic.dev
mira.sa.elstc.co
*.eu-west-1.aws.qa.cld.elstc.co
elastic-co-downloads.app.elstc.co
*.qa.cld.elstc.co
elastic-co-ds-epic-ux.app.elstc.co
elastic.co
xkcd-golang.app.elstc.co
*.qa.cld.elstc.co
ccs-benchmarking.app.elstc.co
webteam-scheduled-tasks.app.elstc.co
dev-recommend.app.elstc.co
global-api.gcp.qa.cld.elstc.co
tiles.maps.elastic.co
tiles.maps.elastic.co
argocd-genesis.us-central1.gcp.qa.cld.elstc.co
es.ea-stargate.elstc.co
*.gcp-qa-us-central1-app-1-gke.qa.cld.elstc.co
dev-13051-carousel-two-column-a11y.app.elstc.co
p.elstc.co
artifacts-no-kpi.elastic.co
argocd.us-central1.gcp.qa.cld.elstc.co
manifest.synthetics.gcp.qa.cld.elstc.co
intotheindex.staging.ingress.eden.elstc.co
cloud-kpi.app.elstc.co
staging.ea-demo-staging.elstc.co
elastic-co-preview.app.elstc.co
upload-staging.elstc.co
eden.elstc.co
cloud-kpi.app.elstc.co
artifacts-no-kpi.elastic.co
dev-2432.app.elstc.co
artifacts-no-kpi.elastic.co
es.ea-demo-prod.elstc.co
elastic-co-ds-ux.app.elstc.co
artifacts-no-kpi.elastic.co
cloud-kpi.app.elstc.co
us-central1.synthetics.gcp.qa.cld.elstc.co
dev-2415.app.elstc.co
dev-elastic-co.app.elstc.co
es.elastic-uploader-production.elstc.co
obs-load-orch.app.elstc.co
http-logger-fe.app.elstc.co
*.aws.qa.cld.elstc.co
elastic-co-a11y.app.elstc.co
testlink-basic.app.elstc.co
homer.app.elstc.co
tiles.maps.elastic.co
es.ea-eden-staging.elstc.co
kcare-eportal-production.elstc.co
argo-wf-qa-awseuw1-cp-internal-app-1.qa.cld.elstc.co
es.ea-registry-staging.elstc.co
http-logger-fe.app.elstc.co
dev-2385.app.elstc.co
*.eu-west-1.aws.qa.cld.elstc.co
*.eden.elstc.co
workplace-search-jira-on-prem.app.elstc.co
cloud-build-cache.app.elstc.co
pmm-dev.eden.elstc.co
epr-logs-staging.app.elstc.co
site-search-sales-preview.app.elstc.co
*.eden.elstc.co
elastic-co-ds-epic-ux.app.elstc.co
github-notifier.app.elstc.co
es.elastic-uploader-production.elstc.co
dev.ea-stargate.elstc.co
tiles.maps.elastic.co
*.qa-awseuw1-cp-app-1.qa.cld.elstc.co
elastic.co
tiles.maps.elastic.co
*.qa.cld.elstc.co
dev-2591-use-case-condition.app.elstc.co
*.us-central1.gcp.qa.cld.elstc.co
p.elstc.co
kibana.ea-demo-staging.elstc.co
site-search-sales-preview.app.elstc.co
ensemble-qa-us-central1.gcp.qa.cld.elstc.co
*.eden.elstc.co
dev-2407.app.elstc.co
teleport-dev-proxy-alb.dev.cld.elstc.co
rum-session-apm-server.app.elstc.co
*.qa.cld.elstc.co
*.azure.qa.cld.elstc.co
argo-wf-gcp-qa-us-central1-app-1-gke.qa.cld.elstc.co
rum-session-apm-server.app.elstc.co
ece-release.eden.elstc.co
v1.us-gov-east-1.govstaging.aws-gov.cld.elstc.co
obs-load-orch.app.elstc.co
botelastic.app.elastic.dev
elastic-co-a11y.app.elstc.co
kibana-localization-es-7-2.app.elstc.co
apm.elstc.co
webteam-webhooks.app.elstc.co
elastic-co-veil.app.elstc.co
go.elastic.co

Certificate

The complete raw certificate details for workplace-search-jira-on-prem.app.elstc.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISA0VJ0RKw7LJ3yWX4ieRWnPAYMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MDcyMjM3NDhaFw0yMzEwMDUyMjM3NDdaMDUxMzAxBgNVBAMT
KndvcmtwbGFjZS1zZWFyY2gtamlyYS1vbi1wcmVtLmFwcC5lbHN0Yy5jbzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMDdJXmlFu7V2yy7nopfRh913YIc
WwyQRc6yDucb+a3v8asEP1tNHaUdQ80xbrThBQjI7jDG7mJ+OOnNpeSbfFBMfSK4
2SwYPAObrTxhjvmUydCToZyRZYQULuTnxk1xMyxcMrZt+uRMcOv53N08y48BEqo5
3tl0xIbVygwBkrXNOzCcxd+xgM/f2vrxRGO4H8a6a2F4Bi9B9ali4weDysHEzLF4
KLSzKhEyq7VlRhL78AX3vPtgV2KJUwUPnNRbnSX46xfVJ5aY6MAHFAHrANzjo7No
nIk8ObNCtrjhg5CswGuM5evOyHjWX/h5uSWQiYyx8rgsNlpT1b14HLlgCM0CAwEA
AaOCAiswggInMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU9iM18+zSmMvxGKgYW4LD
WQEwEDowHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUH
AQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYB
BQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wNQYDVR0RBC4wLIIqd29ya3Bs
YWNlLXNlYXJjaC1qaXJhLW9uLXByZW0uYXBwLmVsc3RjLmNvMBMGA1UdIAQMMAow
CAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAejKMVNi3LbYg6jjg
Uh7phBZwMhOFTTvSK8E6V6NS61IAAAGJMrgGhgAABAMARjBEAiAA3W3jaUA38qRx
V2oQ+EXrUwin69clORWFrPvdK4qaEgIgQw5eUAGzAgonYSjTnUEAmIYLNCU0Fk+D
YbtizrtsZbQAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYky
uAZTAAAEAwBHMEUCIHDDs96kJeKDSqK9lfsk4sRU+mKZdAmDRqSIF0nztp3VAiEA
+w+emGX6z94HjQhsfRqQzj7RfT7Texk/twdbvi60ZxAwDQYJKoZIhvcNAQELBQAD
ggEBADCNGekqaJHDL6+MbbPbgJO6lz1Q2K0KBC7ZZrEbTYfy6eTUStEn96l7b76e
noqJTVlWNNrBkqWTSm/8/HJO0ewdr17MJAM9pgG4OzJ1y86HdLtUf+IDtv8mgBPO
ehgqWDTI4zfs1yJZyEMlVWWfZkXeBO9wvl4iYIQR8OYNToBWGCZyGca1rZvSSPGu
pnCUK56jn4YRDMcl3ivb5mmUxZsvpLQcatDbbKKmKDTeuvfdjibe1wt7HvzFU3Hy
smpbvYa931AmtUpgldN4+vupht2dt/L+CmkDjnZ2jSjn3cH60gSU3NJn1RhpiwoQ
R3P7iAbb4niK9q7Ey3TNo2itevs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN0leaUW7tXbLLueil9G
H3XdghxbDJBFzrIO5xv5re/xqwQ/W00dpR1DzTFutOEFCMjuMMbuYn446c2l5Jt8
UEx9IrjZLBg8A5utPGGO+ZTJ0JOhnJFlhBQu5OfGTXEzLFwytm365Exw6/nc3TzL
jwESqjne2XTEhtXKDAGStc07MJzF37GAz9/a+vFEY7gfxrprYXgGL0H1qWLjB4PK
wcTMsXgotLMqETKrtWVGEvvwBfe8+2BXYolTBQ+c1FudJfjrF9UnlpjowAcUAesA
3OOjs2iciTw5s0K2uOGDkKzAa4zl687IeNZf+Hm5JZCJjLHyuCw2WlPVvXgcuWAI
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284914460325662010241571961891958923522072
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 22:37:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 22:37:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'workplace-search-jira-on-prem.app.elstc.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24346805901511363231798574445101817243815062640369210416391302735181605002489308210053111622512616120227069761467370325224821009643182581915643708642399138134455347818073485512868214221305595131689147611477909213617560682566320091282203566462987937650511110094108836284385469413184475178888677266008004454284592119558198729656860781517101858918274900301066475727850623543752208490344629818824053253842423350172618530875921217561560569518078407798913669486206317761877070637351028844414191327994144668384008267118510179926966006080226355053737630390105448378269288938036968853688351744067065902052712467054084084467917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f62335f3ecd298cbf118a8185b82c3590130103a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workplace-search-jira-on-prem.app.elstc.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018932b806860000040300463044022000dd6de3694037f2a471576a10f845eb5308a7ebd725391585acfbdd2b8a9a120220430e5e5001b3020a276128d39d410098860b342534164f8361bb62cebb6c65b4007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018932b806530000040300473045022070c3b3dea425e2834aa2bd95fb24e2c454fa629974098346a4881749f3b69dd5022100fb0f9e9865facfde078d086c7d1a90ce3ed17d3ed37b193fb7075bbe2eb46710
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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