web2.univ-lyon3.fr

- Université Lyon 3 Jean Moulin -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 09:76:db:ab:bf:43:b2:1f:9e:a4:cf:9f:44:e0:09:bc was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Université Lyon 3 Jean Moulin

Organization: Université Lyon 3 Jean Moulin
State / Province: Auvergne-Rhône-Alpes
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 09:76:db:ab:bf:43:b2:1f:9e:a4:cf:9f:44:e0:09:bc
Serial Number (int): 12580198446283818241631030453536295356
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 87:ed:28:aa:dc:74:f1:01:97:ae:28:3c:b1:f7:1b:00:2d:cb:88:b7
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 78:f8:20:ac:56:f3:af:ed:4f:a8:c9:31:4c:5c:f7:45:93:68:88:95
Fingerprint (sha256): 10:5d:e2:3a:f1:55:93:98:33:dd:1a:f8:d9:80:bf:97:9e:0b:ee:e7:47:ec:f1:7d:ae:3d:a0:f9:af:e1:12:8b

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate web2.univ-lyon3.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web2.univ-lyon3.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web2.univ-lyon3.fr
www.web2.univ-lyon3.fr

Other certificates including the domain name univ-lyon3.fr

(limited to 100 certificates)
sfbconf.univ-lyon3.fr
portail-vacataires-ens-consult.univ-lyon3.fr
vsp-quai-chev.univ-lyon3.fr
nextcloud-preprod.univ-lyon3.fr
parefeu-master-ipmi.univ-lyon3.fr
sondage.univ-lyon3.fr
evenements.univ-lyon3.fr
webtv.univ-lyon3.fr
web2.univ-lyon3.fr
webmail.univ-lyon3.fr
mail.univ-lyon3.fr
haproxy-pp.univ-lyon3.fr
webinscription.univ-lyon3.fr
ged.univ-lyon3.fr
psc.univ-lyon3.fr
superview.univ-lyon3.fr
pop.univ-lyon3.fr
vsp-manu-b4-haut.univ-lyon3.fr
webscolarite.univ-lyon3.fr
vsp-manu-b4-haut.univ-lyon3.fr
impression.univ-lyon3.fr
mahara.univ-lyon3.fr
webmail.univ-lyon3.fr
vdi.univ-lyon3.fr
fdv-srv.univ-lyon3.fr
llm.univ-lyon3.fr
netmanager.univ-lyon3.fr
esrs.univ-lyon3.fr
iaedt.univ-lyon3.fr
applications.univ-lyon3.fr
vsp-quai-chev.univ-lyon3.fr
adfs.ad.univ-lyon3.fr
ecandidat.univ-lyon3.fr
adfs.ad.univ-lyon3.fr
web2.univ-lyon3.fr
revues.univ-lyon3.fr
kanboard.univ-lyon3.fr
hra-for.univ-lyon3.fr
mahara.univ-lyon3.fr
applications.univ-lyon3.fr
boutique.univ-lyon3.fr
catalogue.univ-lyon3.fr
vsp-manu-b6-bas.univ-lyon3.fr
www.univ-lyon3.fr
idptest.univ-lyon3.fr
css03.univ-lyon3.fr
eduspot2.univ-lyon3.fr
autodiscover.univ-lyon3.fr
impression-pers.univ-lyon3.fr
choisirsonsport.univ-lyon3.fr
idp.univ-lyon3.fr
vsp-manu-b6-haut.univ-lyon3.fr
ligeo-gestion.univ-lyon3.fr
webelection.univ-lyon3.fr
esrs.univ-lyon3.fr
candidat-ens-chercheur.univ-lyon3.fr
oa.univ-lyon3.fr
webmail.univ-lyon3.fr
cervoprint2.univ-lyon3.fr
questionrep.univ-lyon3.fr
veeam.ad.univ-lyon3.fr
webtv.univ-lyon3.fr
cas.univ-lyon3.fr
moodle.univ-lyon3.fr
prel.univ-lyon3.fr
applications.univ-lyon3.fr
glpi.univ-lyon3.fr
impression.univ-lyon3.fr
imptest-pers.univ-lyon3.fr
owncloud.univ-lyon3.fr
survey.univ-lyon3.fr
piwik.univ-lyon3.fr
piwik.univ-lyon3.fr
vsp-quai-huvelin.univ-lyon3.fr
boutique.univ-lyon3.fr
atelier-artistique.univ-lyon3.fr
indicateurs-preprod.univ-lyon3.fr
cervoprint.univ-lyon3.fr
docker-registry.univ-lyon3.fr
acces-distant.univ-lyon3.fr
eas.univ-lyon3.fr
cadeaunoel.univ-lyon3.fr
idp.univ-lyon3.fr
moodle.univ-lyon3.fr
moodle.univ-lyon3.fr
imap.univ-lyon3.fr
bo.univ-lyon3.fr
impression-adm-ens.univ-lyon3.fr
edseg.univ-lyon3.fr
ezscd.univ-lyon3.fr
webmail.univ-lyon3.fr
scd-resnum.univ-lyon3.fr
clic.univ-lyon3.fr
imap.univ-lyon3.fr
mediatheque.univ-lyon3.fr
cervoprint2.univ-lyon3.fr
pop.univ-lyon3.fr
parefeu.univ-lyon3.fr
cerebro.univ-lyon3.fr
gitlab.univ-lyon3.fr

Certificate

The complete raw certificate details for web2.univ-lyon3.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12580198446283818241631030453536295356
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université Lyon 3 Jean Moulin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web2.univ-lyon3.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 795200934915971586451720150620660233717870816264324157869940359296224389823659203124025063884306056208956483385395881917339530849667749689095329761376979448427267156984369348260303494206099770170082080610012680112766491769837892572160687151472600711800935420736546777329217791616101762500074252513611110892125830984257966989192510578203460061380619464763126597161796521253388963181498396479750346664143575036655120252565819377065883944684822987881156819088077298198534305820101389462397313533417963514017862975791537147292579812220344639548923377878830769429734192827940109678027565192759786252534597585424332958774361336932194616132645475603599240787192737013197294635361216052842774458364257296771997923767646425398254461246307056225255962184128590219072927589539051169571172024264943428427256803563152689486973997507425478663082449307614437015796483054183807476835484134445730075626904255385599179024858481459787429275544767803594899512447650422193220721356535126396918521135046369728610002347678567511672056626988592341278830260021661989851912242566639419416096781180162103935546334742967046571579465280667195616798120578119860275757950747851883048853591785888290178627288286993529525632165538569410516828543367690946378459173599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87ed28aadc74f10197ae283cb1f71b002dcb88b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b3ccd674b0000040300463044022050cc754cf00101f80bfc70c6cdf2ae761f8bfc270e279d796c0b23c607402c3f0220013e4ac198efc1b966f821a082f1f12d9fe41d13128afac51a3f71d6d3bd23f9007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b3ccd67b20000040300473045022100bc2752e43c7f51f98b482ca78bf1ba5209e2eb8b7d67d5075888d4c03983703d022044f36dae53ec0c406b54977ede75bdb614f8c2e8edb6af5cfa89834ff56f5b4b007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b3ccd677a0000040300473045022100f8753b772bde9c1fccbd0742780ee4642c7db848a295cbf080631902a487790b022030bc74b3b7b1a63ca2e137f79a1f3d82b8552749a423acc6da6871cce15f52bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web2.univ-lyon3.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web2.univ-lyon3.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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