csbsui.cglcloud.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 06:1d:1f:c8:73:80:63:5e:18:98:d0:a9:ff:6b:f4:5e was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=csbsui.cglcloud.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:1d:1f:c8:73:80:63:5e:18:98:d0:a9:ff:6b:f4:5e
Serial Number (int): 8126589219683209177714386172019209310
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 71:7f:aa:fa:e9:40:ad:91:f6:bc:79:60:32:ff:4e:7d:0f:03:67:a0
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 33:e6:e8:d6:90:b2:bb:74:7c:75:a0:dd:8e:75:f6:26:1b:8c:7b:e8
Fingerprint (sha256): 12:17:aa:1a:a5:ae:5c:3e:92:99:8f:e7:bb:98:4e:5d:17:f2:07:55:f2:23:97:13:b7:46:f9:b7:33:6b:f8:90

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate csbsui.cglcloud.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for csbsui.cglcloud.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

csbsui.cglcloud.com
phcopra.mycargill.com

Other certificates including the domain name cglcloud.com

(limited to 100 certificates)
git-engineering.cglcloud.com
csbsui.cglcloud.com
*.refapps.cglcloud.com
cglcloud.com
git.cglcloud.com
*.cglcloud.com
*.git-engineering.cglcloud.com
*.cglcloud.com
sni.cloudflaressl.com
waffle.cglcloud.com
sni.cloudflaressl.com
git.cglcloud.com
*.cglcloud.com
cglcloud.com
csbsui.cglcloud.com
ilc.cglcloud.com
git.cglcloud.com
git-engineering.cglcloud.com
*.cglcloud.com
*.cglcloud.com
*.refapps.cglcloud.com
sni.cloudflaressl.com
*.cglcloud.com
*.cglcloud.com
*.refapps.cglcloud.com
*.cglcloud.com
git.cglcloud.com
*.git-engineering.cglcloud.com
waffle.cglcloud.com
git-engineering.cglcloud.com
git-engineering.cglcloud.com
*.cglcloud.com
waffle.cglcloud.com
cptnstaticadddnsmccclxxxv.cglcloud.com
git.cglcloud.com
git-engineering.cglcloud.com
wiki.cglcloud.com
*.refapps.cglcloud.com
wiki.cglcloud.com
git.cglcloud.com
cglcloud.com
git.cglcloud.com
waffle.cglcloud.com
alpha-demo.cglcloud.com
cglcloud.com
csbsui.cglcloud.com
git.cglcloud.com
git.cglcloud.com
git.cglcloud.com
cglcloud.com
cglcloud.com
sni.cloudflaressl.com
*.cglcloud.com
ilc.cglcloud.com
*.cglcloud.com
csbsui.cglcloud.com
git.cglcloud.com
*.cglcloud.com
cglcloud.com
*.git-engineering.cglcloud.com
*.cglcloud.com
ccpcaptain.com
cglcloud.com
*.cglcloud.com
cptnuswebsiteallmccxcrcii.cglcloud.com
cglcloud.com
git-engineering.cglcloud.com

Certificate

The complete raw certificate details for csbsui.cglcloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF6TCCBNGgAwIBAgIQBh0fyHOAY14YmNCp/2v0XjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIyMTIwNzAwMDAwMFoXDTI0MDEwNTIzNTk1OVowHjEc
MBoGA1UEAxMTY3Nic3VpLmNnbGNsb3VkLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMjcmqv/Py5kDD9YAGnRuHqO+k1Bd5+ke60GkkJxxIi3bt0v
sdRk6ZbOZs+WEEkejrg4z9TfEoiQhlKCa8Xsa9erv7GzG3gpoqakLPN3XXQ7Ck92
EoD3RhYe5lPDW6seKLbZGRcQgT+OZiIOsCCSat03+a0yunl/tsz1ifA3FegidXb7
49aU4DXJ83226+Gi7nQJyGeXSX0VPKgLQprqXFHi1RnxYwKhZu8UDt9+u+caEpuw
sDv2wJ9NWcfCSRQ+acYNl7Cel4MezRje97qK0f6VXFoqLkiymc0THBQNDS2Njpml
l/NYmTJA6BcKK/waR5QDqEpy+wcyvHMRImZi368CAwEAAaOCAwMwggL/MB8GA1Ud
IwQYMBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBRxf6r66UCtkfa8
eWAy/059DwNnoDA1BgNVHREELjAsghNjc2JzdWkuY2dsY2xvdWQuY29tghVwaGNv
cHJhLm15Y2FyZ2lsbC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIy
bTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jcmwwEwYDVR0gBAwwCjAIBgZngQwB
AgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0w
MS5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDEu
YW1hem9udHJ1c3QuY29tL3IybTAxLmNlcjAMBgNVHRMBAf8EAjAAMIIBfgYKKwYB
BAHWeQIEAgSCAW4EggFqAWgAdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlG
cR+1mwAAAYTrjCMpAAAEAwBGMEQCID8qSr4XSfI9VM/TXq+eE5aDs54sLQ/em1jH
AwErUSTGAiAsA7I8BW5jNrz70bczbGHpbEWLmm3Vll1zakCGvKWI1gB3AHPZnokb
TJZ4oCB9R53mssYc0FFecRkqjGuAEHrBd3K1AAABhOuMIw8AAAQDAEgwRgIhAP21
Q3jc900fF8bh19/XNj2E8uS7X/Hhgx1N2JBHQ0PHAiEA/gFpiJrUuKh2GhncDviV
KkyExAJag0kskS6Hy5do7YoAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+r
OdiEcwAAAYTrjCLWAAAEAwBHMEUCIG3YtzjlP3GrXZLYnRgyyxejTsXNe4VMJ5c3
P+XtCO03AiEAlIvmc4XC4ibjotbwj0kv9EoVZol0+ksIMecLPtoUxZ0wDQYJKoZI
hvcNAQELBQADggEBAESbTrV5oBCtNVnH9BTldUPPEBJbAnWCHP/CPD2QTR/QztRL
IBrJM8lJvaviyfr/hJtfm8/axy4RFQDx/Twe2xe319Y1Q8B7KaMCzf20wNfuUgKT
6Vw22VCML9O3JB3Go3jl6T75jz6vy4TpnY1YkLPQ8LK3i4A/z68X4BGkSq3J2/Qq
G3AEuBXcA9oakw4BvJt3OFaCx7U7H11Aui48HHmuwC+v5w+Rz/87fg/8meCszfom
uWHvdox+QHYuHKgs+DYGMBeFN5dnRCZyz8FPhq9Wyd5ayQ3J8olQw+CsZ2BxlJz+
7qAoW14+IcYr0XfMMV3keI476b6o5Z5EMt+Fcjk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNyaq/8/LmQMP1gAadG4
eo76TUF3n6R7rQaSQnHEiLdu3S+x1GTpls5mz5YQSR6OuDjP1N8SiJCGUoJrxexr
16u/sbMbeCmipqQs83dddDsKT3YSgPdGFh7mU8Nbqx4ottkZFxCBP45mIg6wIJJq
3Tf5rTK6eX+2zPWJ8DcV6CJ1dvvj1pTgNcnzfbbr4aLudAnIZ5dJfRU8qAtCmupc
UeLVGfFjAqFm7xQO33675xoSm7CwO/bAn01Zx8JJFD5pxg2XsJ6Xgx7NGN73uorR
/pVcWiouSLKZzRMcFA0NLY2OmaWX81iZMkDoFwor/BpHlAOoSnL7BzK8cxEiZmLf
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8126589219683209177714386172019209310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'csbsui.cglcloud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25356444972239487821763513940531939898000054178589670581821287730041555068890881545669012320431827653565528175369621325581157492186735981673809171153009069114367017845544227102307735780967815408503629982435076207475857188750532163512441756909450743988981715541569732022706166879919659942463672883951936537374577115069861463898795957515693680614993301489664855538464684820576055931404894770431372138669226213874085452996236624495918418258913906378544650482464345050998732952095487058963816627712721934368869557710786016210669951762711517872318500791595692196519817317754918140320368771916178969949783386897287255089071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							717faafae940ad91f6bc796032ff4e7d0f0367a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csbsui.cglcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phcopra.mycargill.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000184eb8c2329000004030046304402203f2a4abe1749f23d54cfd35eaf9e139683b39e2c2d0fde9b58c703012b5124c602202c03b23c056e6336bcfbd1b7336c61e96c458b9a6dd5965d736a4086bca588d600770073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b500000184eb8c230f0000040300483046022100fdb54378dcf74d1f17c6e1d7dfd7363d84f2e4bb5ff1e1831d4dd890474343c7022100fe0169889ad4b8a8761a19dc0ef8952a4c84c4025a83492c912e87cb9768ed8a00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000184eb8c22d6000004030047304502206dd8b738e53f71ab5d92d89d1832cb17a34ec5cd7b854c2797373fe5ed08ed37022100948be67385c2e226e3a2d6f08f492ff44a15668974fa4b0831e70b3eda14c59d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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