redefininghk.scmp.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b0:4a:cc:10:f2:75:59:33:0b:8c:1e:96:b3:94:a4:62:5f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=redefininghk.scmp.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:4a:cc:10:f2:75:59:33:0b:8c:1e:96:b3:94:a4:62:5f
Serial Number (int): 321325976817341220957336172399407462113887
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:62:c4:2d:26:ad:e1:b3:1a:8d:47:7a:60:7f:24:9d:d7:00:27:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bc:b9:e2:9a:9a:9b:15:18:07:42:58:b1:e3:ff:bd:f9:d7:3a:ee:60
Fingerprint (sha256): 11:ea:e7:25:02:29:0e:cc:6a:d4:bc:81:34:66:ab:ec:09:11:3d:b7:ab:52:74:c9:8d:51:5e:26:43:95:21:5a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate redefininghk.scmp.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for redefininghk.scmp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

redefininghk.scmp.com

Other certificates including the domain name scmp.com

(limited to 100 certificates)
enterprisinghk.scmp.com
scmp.com
chinaconference.scmp.com
tls.automattic.com
hometownheroes.lb-swireproperties.com
gba.scmp.com
www.celebratinghksar20.scmp.com
www.redefininghk.scmp.com
ssl451105.cloudflaressl.com
scoop.scmp.com
redefininghk.scmp.com
profiles.ope.scmp.com
photo.scmp.com
www.celebratinghksar20.scmp.com
www.redefininghk.scmp.com
celebratinghksar20.scmp.com
boson.easyuni.com
www.redefininghk.scmp.com
www.celebratinghksar20.scmp.com
www.redefininghk.scmp.com
redefininghk.scmp.com
chinaconference.scmp.com
www.celebratinghksar20.scmp.com
scoop.scmp.com
tls.automattic.com
celebratinghksar20.scmp.com
redefininghk.scmp.com
us.chinaconference.scmp.com
chinaconfsea.scmp.com
*.scmp.com
boson.easyuni.com
classifiedpost.scmp.com
redefininghk.scmp.com
chinaconfsea-cn.scmp.com
chinaconference.scmp.com
celebratinghksar20.scmp.com
celebratinghksar20.scmp.com
sea.chinaconference.scmp.com
ssl451105.cloudflaressl.com
celebratinghksar20.scmp.com
www.celebratinghksar20.scmp.com
enterprisinghk.scmp.com
redefininghk.scmp.com
tls.automattic.com
enterprisinghk.scmp.com
tls.automattic.com
scmp.com
library.yp.scmp.com
chinaconfsea-cn.scmp.com
m.yp.scmp.com
enterprisinghk.scmp.com
deisummit.scmp.com
scoop.scmp.com
tls.automattic.com
webmail.scmp.com
www.redefininghk.scmp.com
secure.scmp.com
*.scmp.com
www.redefininghk.scmp.com
www.binarysolutions.com.hk
m.yp.scmp.com
www.redefininghk.scmp.com
www.celebratinghksar20.scmp.com
www.celebratinghksar20.scmp.com
winecircle.scmp.com
chinaconference.scmp.com
celebratinghksar20.scmp.com
hometownheroes.swireproperties.com
hometownheroes.lb-swireproperties.com
celebratinghksar20.scmp.com
api.racing.scmp.com
us.chinaconference.scmp.com
www.chinaconfsea.scmp.com
photo.scmp.com
www.redefininghk.scmp.com
scoop.scmp.com
old-redefininghk.scmp.com
storage.scmp.com
sea.chinaconference.scmp.com
celebratinghksar20.scmp.com
access.scmp.com
boson.easyuni.com
boson.easyuni.com
enterprisinghk.scmp.com
www.celebratinghksar20.scmp.com
chinaconfsea.scmp.com
www.chinaconference.scmp.com
scsustainability.scmp.com
www.chinaconference.scmp.com
chinaconfsea-cn.scmp.com
library.yp.scmp.com
tls.automattic.com
ssl451105.cloudflaressl.com
shop.osc.scmp.com
winecircle.scmp.com
chinaconfsea-cn.scmp.com
*.scmp.com
gba.scmp.com
hkkidsfestival.scmp.com
tweet.scmp.com

Certificate

The complete raw certificate details for redefininghk.scmp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISA7BKzBDydVkzC4welrOUpGJfMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMTIxMDI4MTVaFw0x
OTA0MTIxMDI4MTVaMCAxHjAcBgNVBAMTFXJlZGVmaW5pbmdoay5zY21wLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALamVx42CMUxv/XGMXNRQgxp
nlYUONqVpoqz2PqJ7ELFM03yWINtSd04ACLRw5OfdbZu7+bTERJapVMPGxmshD+F
A3YGVqa6J/cyBf2RU0YwyFkjUEcMhphSTirlA6mQgzXao0al5Xvgo4uP5BiZ9OBK
ffr0rN6ATHcen7tWtTVC2eg/CmS0ZeBh1LWoATpr4+wJAV4p6E1XpTMR0Yf1IEiM
tCwnla5z6Tkd0iksHLd9cZlBtzT+bt0MO7TAdUta4IYW6sV2bWfgTaB5rUX4tikV
1Pimm5acMoWc88sqvHzee1djFHFRdiCa1EElpQsutFNeZ/cyKIzu1JF+qcfqGkMC
AwEAAaOCAmowggJmMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUaGLELSat4bMajUd6
YH8kndcAJ7gwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzAgBgNVHREEGTAXghVyZWRlZmluaW5naGsuc2NtcC5jb20wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy
APAAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWhB0c1JAAAE
AwBHMEUCIDjguqx42NwVX1nrXElQjW2z0LGKW9rVQZf6nR2LkA7UAiEA8R0eilvG
fxf88FZLt183UhZDEWCh4GVR3fEv0R6PhLgAdgApPFGWVMg5ZbqqUPxYB9S3b79Y
eily3KTDDPTlRUf0eAAAAWhB0c88AAAEAwBHMEUCIQCCpLYFO/BBtGk7wxPRyJQM
1QvpfJBLdeBAXqAjSlJu5QIgaovhOf/G2BjVdMS3Nh77FyXGYm9CstXoOc31a7H7
hzYwDQYJKoZIhvcNAQELBQADggEBACfvi+68JVrOZM0gswtSDAzdKySXuAaChaQh
cxFw5GN47G2gZv5AlzG9inMzYPgfK0wLS/iiA1evWts3JajeNx1mr4UhfuXQz0Bs
sLGjy3u18U4PeS0/NP9kVQkkYcq6x+bQjbf54E53aNgXRolnqNIw2imkLIc/IK8W
CHYWhVauAgBuHiNuj8sgri8FlwoI1thYB/FBgQcYaM+C2PqXnye/CQmxW4vmlSD6
GPVFvjA4SjoDiMn3gkOsNu+A1hdJJgX7IVn+4Zd1Dq938tXu255oYCuBp2LAw6dj
Rlxd+GpDNG9A3ssiTWJaNpVFc3HQFHzumMw3KUNsNmAksQEIgS0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqZXHjYIxTG/9cYxc1FC
DGmeVhQ42pWmirPY+onsQsUzTfJYg21J3TgAItHDk591tm7v5tMRElqlUw8bGayE
P4UDdgZWpron9zIF/ZFTRjDIWSNQRwyGmFJOKuUDqZCDNdqjRqXle+Cji4/kGJn0
4Ep9+vSs3oBMdx6fu1a1NULZ6D8KZLRl4GHUtagBOmvj7AkBXinoTVelMxHRh/Ug
SIy0LCeVrnPpOR3SKSwct31xmUG3NP5u3Qw7tMB1S1rghhbqxXZtZ+BNoHmtRfi2
KRXU+KablpwyhZzzyyq8fN57V2MUcVF2IJrUQSWlCy60U15n9zIojO7UkX6px+oa
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321325976817341220957336172399407462113887
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-12 10:28:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-12 10:28:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redefininghk.scmp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23057396965217996807537532437039898438740369417627948943537839575114717290128099731559902247651397842910811304266069457894787268333497173984754445961949617239677616024444019497620983127470462713215900920877436303234772241825616299868931581062925179669743631751344128504525284868959269696844578040330973741411136326302659185127680864622778243940081407449006388081072708159495342816351077968444349964653768692874230161220120866386759036172946110823219627706477786183193657428226984369116949845879891281153995178148426839486926240838194120333599960342902852138357426068023712260336835453088037399513887562531152079755843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6862c42d26ade1b31a8d477a607f249dd70027b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redefininghk.scmp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016841d1cd490000040300473045022038e0baac78d8dc155f59eb5c49508d6db3d0b18a5bdad54197fa9d1d8b900ed4022100f11d1e8a5bc67f17fcf0564bb75f375216431160a1e06551ddf12fd11e8f84b8007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016841d1cf3c000004030047304502210082a4b6053bf041b4693bc313d1c8940cd50be97c904b75e0405ea0234a526ee502206a8be139ffc6d818d574c4b7361efb1725c6626f42b2d5e839cdf56bb1fb8736
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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