oda.springer.com

- oda.springer.com -

Issued by GlobalSign Domain Validation CA

About this certificate

This digital certificate with serial number 01:00:00:00:00:01:2c:06:bb:6e:e3 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

oda.springer.com

Organization: oda.springer.com
Organization unit: Domain Control Validated
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Organization unit: Domain Validation CA
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:2c:06:bb:6e:e3
Serial Number (int): 1208925819615917777841891
Serial Number lenght: 81 bits, 11 octets

SubjectKeyId: 45:1f:3d:70:a0:75:5b:93:4e:7e:bc:80:05:e2:f1:a8:ea:da:cc:14
AuthorityKeyId: 36:12:4e:9e:71:c4:26:41:f1:fa:f1:29:4c:bf:17:a4:53:28:b6:eb

Fingerprint (sha1): 72:49:a7:b5:a3:9c:57:25:cb:2e:2d:ca:c9:1c:b3:18:a0:e7:3f:70
Fingerprint (sha256): 0b:73:3b:55:41:37:ae:3f:ed:33:35:92:ef:e0:70:ec:bc:cf:61:41:ac:2f:53:af:9d:94:ef:25:0f:24:71:53

Issuing Certificate URL: http://secure.globalsign.net/cacert/dvhe1.crt

Revocation information

CRL Distribution Point: http://crl.globalsign.net/DomainVal1.crl

Check the revocation status for certificate oda.springer.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oda.springer.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Microsoft Server-Gated Cryptography

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oda.springer.com

Other certificates including the domain name springer.com

(limited to 100 certificates)
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
www.3scale.net
springer2.map.fastly.net
adwizard.springer.com
springer2.map.fastly.net
fdus-51.freshdesk.com
lehrbuch-psychologie.springer.com
www.3scale.net
support13.cdnetworks.net
*.springer.com
springer2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting1e.map.fastly.net
*.springer.com
support13.cdnetworks.net
dns-vetting2.map.fastly.net
springer2.map.fastly.net
dns-vetting2.map.fastly.net
*.springer.com
dns-vetting2.map.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
support13.cdnetworks.net
www.springer.com
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
springer2.map.fastly.net
support13.cdnetworks.net
oda.springer.com
springer2.map.fastly.net
oda.springer.com
support13.cdnetworks.net
springer2.map.fastly.net
*.springer.com
springer2.map.fastly.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
springer2.map.fastly.net
support13.cdnetworks.net
dns-vetting2.map.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
fdus-51.freshdesk.com
*.springer.com
dns-vetting2.map.fastly.net
mailings.springer.com
support13.cdnetworks.net
support13.cdnetworks.net
*.springer.com
springer2.map.fastly.net
springer2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
i.ssl.fastly.net
dns-vetting1e.map.fastly.net
springer2.map.fastly.net
support13.cdnetworks.net
ict.kolibrie.nl
akamai-cn.springer.com
i.ssl.fastly.net
www.3scale.net
i.ssl.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
ftps.springer.com
dns-vetting1i.map.fastly.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
akamai-cn.springer.com
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting2.map.fastly.net
springer.com
www.springer.com
*.springer.com
dns-vetting1i.map.fastly.net
dns-vetting2.map.fastly.net
i.ssl.fastly.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
dns-vetting2.map.fastly.net
ict.kolibrie.nl
springer2.map.fastly.net
support13.cdnetworks.net
i.ssl.fastly.net
dns-vetting1e.map.fastly.net
support13.cdnetworks.net
www.springer.com
*.springer.com

Certificate

The complete raw certificate details for oda.springer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEZzCCA0+gAwIBAgILAQAAAAABLAa7buMwDQYJKoZIhvcNAQEFBQAwcTELMAkG
A1UEBhMCQkUxHTAbBgNVBAsTFERvbWFpbiBWYWxpZGF0aW9uIENBMRkwFwYDVQQK
ExBHbG9iYWxTaWduIG52LXNhMSgwJgYDVQQDEx9HbG9iYWxTaWduIERvbWFpbiBW
YWxpZGF0aW9uIENBMB4XDTEwMTEwMTA4MjMyN1oXDTExMTEwMjA4MjMyNVowZjEL
MAkGA1UEBhMCREUxITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDEZ
MBcGA1UEChMQb2RhLnNwcmluZ2VyLmNvbTEZMBcGA1UEAxMQb2RhLnNwcmluZ2Vy
LmNvbTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxfJCFvKijC/mN5JwZC1J
6hhPMqDzUqhkaQGnyOB9QW3M+RZXBkfMk5feogiTICd3W4bpcYSKMCrxd1rw114y
zAiMbQh+MrOc9ACbiLavpDw5h2LUeTosDcDymUAfIrOigNDQifH1lwaxcBqf3J6i
yNykPZamojFeMl1hIXZu/McCAwEAAaOCAY0wggGJMB8GA1UdIwQYMBaAFDYSTp5x
xCZB8frxKUy/F6RTKLbrMEkGCCsGAQUFBwEBBD0wOzA5BggrBgEFBQcwAoYtaHR0
cDovL3NlY3VyZS5nbG9iYWxzaWduLm5ldC9jYWNlcnQvZHZoZTEuY3J0MDkGA1Ud
HwQyMDAwLqAsoCqGKGh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5uZXQvRG9tYWluVmFs
MS5jcmwwHQYDVR0OBBYEFEUfPXCgdVuTTn68gAXi8ajq2swUMAkGA1UdEwQCMAAw
DgYDVR0PAQH/BAQDAgTwMCkGA1UdJQQiMCAGCCsGAQUFBwMBBggrBgEFBQcDAgYK
KwYBBAGCNwoDAzBLBgNVHSAERDBCMEAGCSsGAQQBoDIBCjAzMDEGCCsGAQUFBwIB
FiVodHRwOi8vd3d3Lmdsb2JhbHNpZ24ubmV0L3JlcG9zaXRvcnkvMBEGCWCGSAGG
+EIBAQQEAwIGwDAbBgNVHREEFDASghBvZGEuc3ByaW5nZXIuY29tMA0GCSqGSIb3
DQEBBQUAA4IBAQCfuOlQUhbVZ80oNZG0iZpXYKgFzJ3ltSTO7o/f8C+aTAZZb9qw
tno+NPIVxevXo5NEO5mZUv3xO7HUC9vp7s90477wLFFVZvI+m26KhJvasRKVgGUz
qz72Now4UIuGKQHy5jZ17ju+EknA9owgsBdMPfarv4wxMXn0Gq6Tl0ONktH0LmXW
gaVSX8iqXrDK6LIXEUl8Ul4+okGRBvcCwP//leRsVQH3NiNHyGGxXMgZeKotOJ4Z
C6k34tVBgjqYPm39rLJU7bnys2f4xJIGWi4dXfRzyg53V6ZdGHkcA+uImc+hYYuj
J6voqQWQmLFS+X0KxxiyzOCpVfQwtz980rbf
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDF8kIW8qKML+Y3knBkLUnqGE8y
oPNSqGRpAafI4H1Bbcz5FlcGR8yTl96iCJMgJ3dbhulxhIowKvF3WvDXXjLMCIxt
CH4ys5z0AJuItq+kPDmHYtR5OiwNwPKZQB8is6KA0NCJ8fWXBrFwGp/cnqLI3KQ9
lqaiMV4yXWEhdm78xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1208925819615917777841891
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validation CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-11-01 08:23:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-11-02 08:23:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oda.springer.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oda.springer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 139002633687204772139294375662237774603619562937059113773008883415326637259600785245103336793106818816768176322757541046496809539334674902003072937575298992568935834187374990146652147144459767020905913577793773417261273309485215235222376561325690010831067074539002620353778631365548065208650475982688839728327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 36124e9e71c42641f1faf1294cbf17a45328b6eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.net/cacert/dvhe1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.net/DomainVal1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							451f3d70a0755b934e7ebc8005e2f1a8eadacc14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.globalsign.net/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oda.springer.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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