www.kit.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ac:41:b5:51:d3:bb:86:12:c1:b6:f5:b3:dc:a3:ee:99:05 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kit.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ac:41:b5:51:d3:bb:86:12:c1:b6:f5:b3:dc:a3:ee:99:05
Serial Number (int): 319952766190789925958879143863865981180165
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 23:01:2a:b5:d0:fb:b4:64:16:c3:e4:14:a6:15:c5:a6:f9:2c:86:52
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ea:e0:f6:63:cd:95:ae:9f:c3:ff:af:96:e9:3d:8b:05:bc:fb:c7:f2
Fingerprint (sha256): 0d:9d:f3:21:5b:e4:a1:ac:6d:54:be:d6:5a:9a:ee:3a:08:6d:77:ae:10:49:51:94:12:b9:5f:ca:61:d0:17:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.kit.edu

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kit.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kit.edu
www.cio.kit.edu
www.forschung.kit.edu
www.fzk.de
www.hiu.kit.edu
www.kit.edu
www.kitedu.com
www.nanomikro.kit.edu
www.research.kit.edu
www.th-karlsruhe.de
www.uka.eu
www.uni-karlsruhe.com
www.uni-karlsruhe.de
www.uni-karlsruhe.eu
www.uni-karlsruhe.net
www.uni-karlsruhe.org
www.unikarlsruhe.de
www.universitaet-karlsruhe.de
www.zib.kit.edu
www.zib.uni-karlsruhe.de

Other certificates including the domain name kit.edu

(limited to 100 certificates)
primo.bibliothek.kit.edu
bmc-cdp2-b2.scc.kit.edu
bwlsdf-owncloud1.lsdf.kit.edu
zeus2011.aifb.kit.edu
bvt.blt.kit.edu
www.botanik.kit.edu
surveys.scc.kit.edu
www.kitcard.kit.edu
*.k8s.iism.kit.edu
i43vm-slt.ipd.kit.edu
officeonlineserver.scc.kit.edu
cm.tm.kit.edu
technik.anka.kit.edu
scc-owa-test.scc.kit.edu
sccemc-isi-04-dmgmt.scc.kit.edu
architekturen2019.ipd.kit.edu
www.mensch-und-technik.kit.edu
concerto.ee.kit.edu
www.for583.kit.edu
www.energiezustandsdaten.kit.edu
intern.math.kit.edu
www.soziologie.kit.edu
www.radio.kit.edu
fm-energo.fm.kit.edu
bpe.iesl.kit.edu
test-protokolle.asta.kit.edu
bmc-v1-11.scc.kit.edu
www.kv-reihe.kit.edu
test2-heike.scc.kit.edu
actinides13.ine.kit.edu
code.ipd.kit.edu
pse-virturell.kit.edu
dualcareer.pst.kit.edu
scc-p-iis-intern.scc.kit.edu
umfrage.zml.kit.edu
www.myhealth.kit.edu
www.stg-mit.kit.edu
gitlab.itiv.kit.edu
int-digimat.int.kit.edu
svnserver.informatik.kit.edu
apps.scc.kit.edu
stage-bip.ibcs.kit.edu
www.sport.kit.edu
www-2.mach.kit.edu
derivate.fbv.kit.edu
iam-cloud.iam.kit.edu
itunesu.informatik.kit.edu
www.itt.kit.edu
mediaservice.bibliothek.kit.edu
event.aserv.kit.edu
square.phi.kit.edu
sapwdp02.kit-sap.kit.edu
vcsa-11b.scc.kit.edu
www.mobilitaetssysteme.kit.edu
rll.ipr.kit.edu
bmc-v2-21.scc.kit.edu
doculib-extern.fusion.kit.edu
vbt.ebi.kit.edu
www.afk.kit.edu
www.energiezustandsdaten.kit.edu
e-installation.forschung.kit.edu
koroibot-motion-database.humanoids.kit.edu
socketio1.lectrans.scc.kit.edu
campus.studium.kit.edu
iai-lupoth.iai.kit.edu
www.oew.kit.edu
scc-big-ip-04.scc.kit.edu
www.khys.kit.edu
todo-management.cm.tm.kit.edu
rds-test.bibliothek.kit.edu
i72projekte.tm.uni-karlsruhe.de
captive-portal.scc.kit.edu
scc-spamtrap-always-defer.scc.kit.edu
tts.fm.kit.edu
i58bibdc3.informatik.kit.edu
scc-ilias-05.scc.kit.edu
wsm.scc.kit.edu
mail.fs-fmc.kit.edu
www.wiwi.kit.edu
www.ipf.kit.edu
km.aifb.kit.edu
www.izeus.kit.edu
stage-vbt.ebi.kit.edu
munin.informatik.kit.edu
cloud.aifb.kit.edu
www.gloria.kit.edu
ltipc2007.lti.kit.edu
irans-test.ira.uni-karlsruhe.de
a1proxy.scc.kit.edu
asr.anthropomatik.kit.edu
kit-cd.scc.kit.edu
todo-management.cm.tm.kit.edu
ama-orgapi-prod.scc.kit.edu
formal.iti.kit.edu
ce.ioc.kit.edu
www.bausim2018.kit.edu
fw.scc.kit.edu
www.tvt.kit.edu
bg.ikb.kit.edu
iai-kisgrid2.iai.kit.edu

Certificate

The complete raw certificate details for www.kit.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319952766190789925958879143863865981180165
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 04:34:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 04:34:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kit.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 960019962792009129647045441282042948720134850291393929821378793112121191425193240073583137363929128227380338959928852346790207547468954241213454312870177323065843017132730811077918087761244732555713375292444672778763353070896989768357721224362969012509028279144049324980666321134302262337726086658280677246167874299977450839039683731384659774374211175850689486211992737377738840860769283293719624616898606462547800357816244170019030016181113698300109936824745052838155255610581175123112120856511111096604153075599164303458194959523770484101694516411698483522168489734780514254647836966317081076891341221523426855677430373544872892724626793468232494722946918105680423538130539541554081389485952321868053975773829962090192929921492203018840502672720085677679146873183082394166652719317690534998533381379715029503930329435847424291250574585019612043545540563436787436992084515341579591255551149385590594936960289453398301754986501523715446397228608267316517427408630801964952056802082972586413252357713779732306404038015944743971928297634900900752258925170773535664774456645355075358217365702851712625224793651902441164503967869685307302802861186458299022611214265367091157122266197347037643592783318455214521804733803965695118887560643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23012ab5d0fbb46416c3e414a615c5a6f92c8652
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (397 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cio.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forschung.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fzk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiu.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nanomikro.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.research.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.th-karlsruhe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uka.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uni-karlsruhe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uni-karlsruhe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uni-karlsruhe.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uni-karlsruhe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uni-karlsruhe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unikarlsruhe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universitaet-karlsruhe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zib.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zib.uni-karlsruhe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e3a0ea69a00000403004730450221009d8c834097d40e953ad3e1fa00631968c144f7a23e5d18e1ff4b82464f1fc80f022043a2bbfb9e1a6e0f332a7595c87800be1693272dbf2c94e3a427c618ef6bd41300770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e3a0ea6d00000040300483046022100ff88d8207b2b960ca80316245fd8eb9a67126056a327406fa61227e7b47f31b0022100b2f5d95d76d4ab7cdc04ae779ba7ca24b5ade103ebbbde5a089573e12239a3d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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