*.axisbank.lifeuat.stage.mintpro.in

Issued by Amazon

About this certificate

This digital certificate with serial number 03:69:c1:d5:79:fc:e2:1d:11:d4:0f:f0:67:67:5a:40 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.axisbank.lifeuat.stage.mintpro.in

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:c1:d5:79:fc:e2:1d:11:d4:0f:f0:67:67:5a:40
Serial Number (int): 4536806575906428116393868403797350976
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 52:cc:ac:7d:b3:d0:ca:e9:94:2b:15:44:00:9a:b8:92:35:52:3e:9d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 7c:67:a9:ec:ea:e3:c8:2d:68:0a:c8:98:5c:1c:01:00:f5:c2:bd:73
Fingerprint (sha256): 0e:b6:ca:1c:fd:91:0e:db:71:32:6f:a8:f3:ff:37:59:41:cf:d3:57:e1:85:d7:b3:01:fc:b4:f4:c3:a3:32:9c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.axisbank.lifeuat.stage.mintpro.in

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.axisbank.lifeuat.stage.mintpro.in

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.axisbank.lifeuat.stage.mintpro.in
*.bandhanbank.lifeuat.stage.mintpro.in
*.hdfcbank.lifeuat.stage.mintpro.in
*.getquote.bajajcapitalinsurance.com
*.posp.tataaig.com
*.lifeuat.posp.tataaig.com
*.lifeuat.planturtle.com
*.planturtle.com
*.lifeuat.getquote.bajajcapitalinsurance.com
*.lifeuat.stage.mintpro.in

Other certificates including the domain name mintpro.in

(limited to 100 certificates)
*.axisbank.ct.stage.mintpro.in
*.axisbank.uatone.stage.mintpro.in
*.arrow.getquote.bajajcapitalinsurance.com
*.axisbank.ironman.stage.mintpro.in
*.kube.stage.mintpro.in
*.nova.stage.mintpro.in
*.thor.stage.mintpro.in
*.axisbank.bane.stage.mintpro.in
*.stagesecurity.stage.mintpro.in
*.sre.stage.mintpro.in
*.axisbank.leo.stage.mintpro.in
*.lifeuat.stage.mintpro.in
*.axisbank.leo.stage.mintpro.in
learning.mintpro.in
*.ajooba.stage.mintpro.in
*.broker.stage.mintpro.in
*.neon.stage.mintpro.in
*.groot.stage.mintpro.in
*.axisbank.procedure.stage.mintpro.in
www.mintpro.in
*.posp.stage.mintpro.in
*.spring.stage.mintpro.in
*.cyborg.stage.mintpro.in
*.golmaal.hdfcbankinsurance.mintpro.in
*.axisbank.spidy.stage.mintpro.in
*.axisbank.joker.stage.mintpro.in
*.axisbank.mocha.stage.mintpro.in
*.mintpro.in
*.axisbank.panther.stage.mintpro.in
*.axisbank.checkinst2.stage.mintpro.in
*.axisbank.yesbankuat.stage.mintpro.in
*.aquaman.stage.mintpro.in
*.mf.stage.mintpro.in
*.joker.stage.mintpro.in
*.axisbank.joy.stage.mintpro.in
hdfc.mintpro.in
*.axisbank.lifeuat.stage.mintpro.in
*.flash.hdfcbankinsurance.mintpro.in
*.hdfc.stage.mintpro.in
*.batman.stage.mintpro.in
*.devops.stage.mintpro.in
*.axisbank.mintpro.in
*.hawkeye.stage.mintpro.in
mintpro.in
*.axisbank.ironman.stage.mintpro.in
*.ronann.stage.mintpro.in
*.lifeuat.hdfcbankinsurance.mintpro.in
*.thor.stage.mintpro.in
*.panther.stage.mintpro.in
*.axisbank.joker.stage.mintpro.in
mintpro.in
*.albert.stage.mintpro.in
*.hdfcbankinsurance.mintpro.in
*.axisbank.sanity.stage.mintpro.in
*.batman.stage.mintpro.in
*.k8suat.mintpro.in
*.axisbank.preprod.stage.mintpro.in
*.wsa.planturtle.com
*.sanity.stage.mintpro.in
*.ajooba.getquote.bajajcapitalinsurance.com
*.thor.hdfcbankinsurance.mintpro.in
*.ironman.stage.mintpro.in
*.robin.stage.mintpro.in
*.aquaman.getquote.bajajcapitalinsurance.com
*.axisbank.spidy.stage.mintpro.in
*.axisbank.bank-uat.stage.mintpro.in
*.uri.hdfcbankinsurance.mintpro.in
*.mintpro.in
*.sanity.stage.mintpro.in
*.upgrade.stage.mintpro.in
*.hdfcbankinsurance.mintpro.in
*.axisbank.security.stage.mintpro.in
*.thanos.stage.mintpro.in
*.axisbank.korg.stage.mintpro.in
*.lifeuat.stage.mintpro.in
*.axisbank.ronan.stage.mintpro.in
*.flash.stage.mintpro.in
*.getquote.stage.mintpro.in
*.qacommon.stage.mintpro.in
*.pixel.stage.mintpro.in
*.prismd.stage.mintpro.in
*.axisbank.shazam.stage.mintpro.in
*.hdfcbank.k8suat.mintpro.in
api.learning.mintpro.in
*.axisbank.cd.stage.mintpro.in
*.sas.stage.mintpro.in
*.ironman.stage.mintpro.in
*.hdfcbank.k8suat.mintpro.in
*.aquaman.getquote.bajajcapitalinsurance.com
*.shazam.stage.mintpro.in
*.axisbank.brokertest.stage.mintpro.in
*.axisbank.ronann.stage.mintpro.in
*.mintpro.in
*.axisbank.ironman.stage.mintpro.in
*.shazam.stage.mintpro.in
*.bankuat.stage.mintpro.in
*.bandhanbank.mintpro.in
*.axisbank.pprod.stage.mintpro.in
*.axisbank.korg.stage.mintpro.in
*.mintpro.in

Certificate

The complete raw certificate details for *.axisbank.lifeuat.stage.mintpro.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKLuAiTxZY8E6DsZVClS
G6E1hfBvNxKVRHC2d+ypRmtiZTTOUYggNOB70A9HOtB2LB1qktwb2Yho1Hif48b8
VYzSIp7hGXr/GstpTbW2rFGI7NbsH/cA7F7hEeM9CeV/fjQK7LMreGmAD/NusWSb
BC+CHtiLSI/sn2rpOVJGISiwKwt1ke4A0r0wNUWpQeI6ednfJXQ7KRMnO9fmhbld
dVaPiOtCtfgHADyR/rql7RuD3C1P+a6s8xsdDySt3riitd7yGimrzxXFNO5z6Kfc
x96l8lBz2Owdrx78dkSVTWsEPKQSp3/l+3RDrU43bKp5EjhxnBvsRB9cFxyi5cDT
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4536806575906428116393868403797350976
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.axisbank.lifeuat.stage.mintpro.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24318098192971966986028213330485766169573592906277240750348584081542593081447232930329851424290669489486282605295269937409091193021968566025657876031778573434543051630202228843560866751511962530996276529559039549194392048512505226360957264269141894342793323629606104080289461794184223882220237127611651190466579680861722467098526867569954100263613683942347324597920608924219700293954689189626731149799015716841115038635870914618959007631019400862867771250894294995082403226694213959862010992919516999141356747386813313469069731227944555870806363907086536670857269179783942954375963464878006622340765743091713277219687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52ccac7db3d0cae9942b1544009ab89235523e9d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (322 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.axisbank.lifeuat.stage.mintpro.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bandhanbank.lifeuat.stage.mintpro.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdfcbank.lifeuat.stage.mintpro.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getquote.bajajcapitalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.posp.tataaig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifeuat.posp.tataaig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifeuat.planturtle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planturtle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifeuat.getquote.bajajcapitalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifeuat.stage.mintpro.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016cbabf499a000004030046304402202d84463414d155af6898baf26793ca83e44e0dd6623a7921d5aa07016afe23a402204f23c5eafcac5981034e8991e5ca53bb1a48cac650844f58dfe9446479f4ec2b0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016cbabf49e90000040300473045022100e833d1ee4681bba18725d7b1013ea05ee1240cc49f55aff3cde9640000b58b6b0220494814cd0a66d7a41755ed75db5b502b913a7fba94412ee0900f0e10b1567cb4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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