webmail.emt.pgd.pl

- webmail.emt.pgd.pl -

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 02:91:1f was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

webmail.emt.pgd.pl

Company registration number: WpDH6M06JVVJ2KnJqw32nwWMZGdpUvXg
Organization: webmail.emt.pgd.pl
Organization unit: GT09726618
Organization unit: See www.rapidssl.com/resources/cps (c)11
Organization unit: Domain Control Validated - RapidSSL(R)
Country: PL

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:91:1f
Serial Number (int): 168223
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: bc:55:5a:e2:4a:09:14:c2:e2:cb:85:17:30:d8:6f:bf:34:77:04:9b
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): c0:75:da:37:c3:a6:45:35:df:5b:bb:e4:ac:13:8b:1c:d9:bb:de:55
Fingerprint (sha256): 10:05:89:4e:db:31:48:0d:3a:37:57:9d:9d:3c:43:2c:ab:26:fe:45:d5:36:87:71:a2:b8:33:52:28:79:74:b8

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate webmail.emt.pgd.pl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.emt.pgd.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.emt.pgd.pl

Other certificates including the domain name pgd.pl

(limited to 100 certificates)
*.pgd.pl
smtp.ucz.pgd.pl
smtp.prz.pgd.pl
volvocars.pgd.pl
smtp.poz.pgd.pl
imap.ucz.pgd.pl
todo.pgd.pl
webmail.cho.pgd.pl
imap.kat.pgd.pl
blog.pgd.pl
webmail.bon.pgd.pl
webmail.bon.pgd.pl
webmail.emt.pgd.pl
*.pgd.pl
imap.lub.pgd.pl
webmail.szc.pgd.pl
*.pgd.pl
blog.pgd.pl
webmail.bka.pgd.pl
smtp.rze.pgd.pl
pgd.pl
volvocar.pgd.pl
smtp.tyc.pgd.pl
webmail.tyc.pgd.pl
care.pgd.pl
webmail.tar.pgd.pl
pgd.pl
volvocar.pgd.pl
pgd.pl
*.pgd.pl
volvocar.pgd.pl
www.ford.pgd.pl
webmail.kat.pgd.pl
webmail.lub.pgd.pl
volvocar.pgd.pl
stat1.pgd.pl
webmail.omc.pgd.pl
*.pgd.pl
webmail.cho.pgd.pl
smtp.emt.pgd.pl
webmail.ink.pgd.pl
webmail.bdg.pgd.pl
imap.dga.pgd.pl
smtp.exw.pgd.pl
webmail.szc.pgd.pl
pgd.pl
imap.emt.pgd.pl
*.pgd.pl
volvocar.pgd.pl
pgd.pl
webmail.bka.pgd.pl
webmail.tyc.pgd.pl
smtp.szc.pgd.pl
mamwypadek.pgd.pl
dealer20.isuzu.com.pl
care.pgd.pl
webmail.dga.pgd.pl
webmail.jmk.pgd.pl
webmail.omc.pgd.pl
imap.bka.pgd.pl
smtp.emb.pgd.pl
webmail.rze.pgd.pl
care.pgd.pl
smtp.omc.pgd.pl
webmail.prz.pgd.pl
netadmin.pgd.pl
smtp.lub.pgd.pl
todo.pgd.pl
smtp.kat.pgd.pl
webmail.ptk.pgd.pl
imap.rze.pgd.pl
webmail.rze.pgd.pl
www.ford.pgd.pl
smtp.ptk.pgd.pl
volvocar.pgd.pl
webmail.exw.pgd.pl
smtp.bon.pgd.pl
webmail.eck.pgd.pl
webmail.rze.pgd.pl
webmail.ucz.pgd.pl
www.ford.pgd.pl
imap.szc.pgd.pl
imap.tar.pgd.pl
imap.bon.pgd.pl
imap.poz.pgd.pl
webmail.poz.pgd.pl
imap.omc.pgd.pl
userportal2.pgd.pl
webmail.prz.pgd.pl
pgd.pl
webmail.emb.pgd.pl
webmail.jmk.pgd.pl
imap.exw.pgd.pl
imap.prz.pgd.pl
webmail.omc.pgd.pl
webmail.exw.pgd.pl
imap.eck.pgd.pl
imap.cho.pgd.pl
pgd.pl
webmail.tyc.pgd.pl

Certificate

The complete raw certificate details for webmail.emt.pgd.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIDApEfMA0GCSqGSIb3DQEBBQUAMDwxCzAJBgNVBAYTAlVT
MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEUMBIGA1UEAxMLUmFwaWRTU0wgQ0Ew
HhcNMTEwNzI1MTc0NDU2WhcNMTIwODI2MTU1OTE0WjCB6zEpMCcGA1UEBRMgV3BE
SDZNMDZKVlZKMktuSnF3MzJud1dNWkdkcFV2WGcxCzAJBgNVBAYTAlBMMRswGQYD
VQQKExJ3ZWJtYWlsLmVtdC5wZ2QucGwxEzARBgNVBAsTCkdUMDk3MjY2MTgxMTAv
BgNVBAsTKFNlZSB3d3cucmFwaWRzc2wuY29tL3Jlc291cmNlcy9jcHMgKGMpMTEx
LzAtBgNVBAsTJkRvbWFpbiBDb250cm9sIFZhbGlkYXRlZCAtIFJhcGlkU1NMKFIp
MRswGQYDVQQDExJ3ZWJtYWlsLmVtdC5wZ2QucGwwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFTKNj26xv/qG53Eg13UrqT5qU1GphVjW5axIOMQFGi1W0
8lmaLjFm7Df0KQp0ZcQloEp2e9IPL+1g1J6nfFdsX4BH2F0u/DTLjn23+GLpf2RO
SHsSZefj+CR4BG+JLV+hyQephXaCvTJpIX7I8N9Qa4SsL/VQwqJ/ekPiP2G17VHc
9CQfy+jzcL/Ov7IMjhy+0bt1tMMjnUzBQsgERwgfp6waivA29k+4bZG9giLCK/iD
ppuVYZxG2QITZ1+JLXPmVZh5U2sxt488Od9AWCEv4B5VV6Kc83bNRCRw2VPhbjqX
sT2uptPXoh2nmeEpeeLOiJ3PrYH7q6WBvyY02L5vAgMBAAGjggEwMIIBLDAfBgNV
HSMEGDAWgBRraT1qGEJK3Y8CZTn9NSSGeJEWMDAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdEQQWMBSCEndlYm1haWwu
ZW10LnBnZC5wbDBDBgNVHR8EPDA6MDigNqA0hjJodHRwOi8vcmFwaWRzc2wtY3Js
Lmdlb3RydXN0LmNvbS9jcmxzL3JhcGlkc3NsLmNybDAdBgNVHQ4EFgQUvFVa4koJ
FMLiy4UXMNhvvzR3BJswDAYDVR0TAQH/BAIwADBJBggrBgEFBQcBAQQ9MDswOQYI
KwYBBQUHMAKGLWh0dHA6Ly9yYXBpZHNzbC1haWEuZ2VvdHJ1c3QuY29tL3JhcGlk
c3NsLmNydDANBgkqhkiG9w0BAQUFAAOCAQEASYtW2Fk/Cd/hAfpYY5auvaXR/7U+
cQWj3lkZxC8skKvhRLB8KTG4tZVMCwl+bvWnDJ03BdWXTNWikh69m8or2DhVTpy/
Dwrh4OfVMHKErNSzE6YjRUuf8w4LHSO8ky9WNc/mcEdnIs/SK/XcQFPa4YAl01L9
TZYfz+0kLp0sJ4Eb9pBYGTgYnEefEECllQHnwvsoc3jaPr42K37tGmD4CZymV9uQ
ECRJ1s32aiq9exwTyF4rz1JvX8LwfxBAQoIdJwoVrSd5ZNguVFDfz736VA2tvWuZ
+yTWWVtBEpe5/huA/Brj4qi1SpfqJtW0ePB29Xi/MxzwsEDSbozUFUgFFw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUyjY9usb/6hudxINd1K
6k+alNRqYVY1uWsSDjEBRotVtPJZmi4xZuw39CkKdGXEJaBKdnvSDy/tYNSep3xX
bF+AR9hdLvw0y459t/hi6X9kTkh7EmXn4/gkeARviS1fockHqYV2gr0yaSF+yPDf
UGuErC/1UMKif3pD4j9hte1R3PQkH8vo83C/zr+yDI4cvtG7dbTDI51MwULIBEcI
H6esGorwNvZPuG2RvYIiwiv4g6ablWGcRtkCE2dfiS1z5lWYeVNrMbePPDnfQFgh
L+AeVVeinPN2zUQkcNlT4W46l7E9rqbT16Idp5nhKXnizoidz62B+6ulgb8mNNi+
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 168223
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-07-25 17:44:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-08-26 15:59:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WpDH6M06JVVJ2KnJqw32nwWMZGdpUvXg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.emt.pgd.pl'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT09726618'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)11'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.emt.pgd.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24906737804189303172477915800243926615262033206604937159466149920465203381160505010484551663643649889118367251709808184374274896163666042414909981356343199370675110835161546084844853362928569793006196845173288981081603294267590584404748515808293715123018255355122934159213161662038733944636745756777287164382302108558528290202197164240428974475234562291178007448067202548333721728712167706834106049586663602358066619100176488277888463998210569224979294311452559382001425388944193006607018860248647971705320971152862587208637065142547913332880690948464530571462503340198681906821335350776716198497874255784157900226159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.emt.pgd.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc555ae24a0914c2e2cb851730d86fbf3477049b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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