kibana.prod-sro.luxgroup.net

- Luxottica Group SpA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:23:27:9b:75:fa:3a:18:dc:c0:c4:a8:50:1d:9f:d6 was issued on by DigiCert Inc.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Luxottica Group SpA

Organization: Luxottica Group SpA
Locality: Milano
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:23:27:9b:75:fa:3a:18:dc:c0:c4:a8:50:1d:9f:d6
Serial Number (int): 12145585682964945909137516510136082390
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fb:0e:b7:30:e6:4a:0d:5d:38:ea:c5:ff:e5:ea:a6:48:85:88:d5:04
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 80:ab:46:82:5a:9d:7e:18:d4:45:53:1b:50:13:8c:76:02:ca:39:a5
Fingerprint (sha256): 12:98:18:95:cd:c4:99:1a:91:7a:2a:c3:1d:2e:fd:f7:f2:ae:7c:78:89:58:7f:aa:6a:23:a8:7d:e5:28:38:3a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate kibana.prod-sro.luxgroup.net

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kibana.prod-sro.luxgroup.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kibana.prod-sro.luxgroup.net
api.prod-sro.luxgroup.net
api-rfeyed.luxottica.com
mosquitto.prod-sro.luxgroup.net
mosquitto-rfeyed.luxottica.com
wss.prod-sro.luxgroup.net
wss-rfeyed.luxottica.com
apibe-rfeyed.luxottica.com
api-iot.prod-sro.luxgroup.net
be.prod-sro.luxgroup.net
ui.prod-sro.luxgroup.net
live-rfeyed.luxottica.com

Other certificates including the domain name luxgroup.net

(limited to 100 certificates)
clarifye.luxgroup.net
access.luxgroup.net
lyncpool.luxgroup.net
*.luxgroup.net
ROZ-ISEPOLP01.luxgroup.net
kibana.prod-sro.luxgroup.net
webmail.luxottica.com
lyncpool.luxgroup.net
support.luxgroup.net
lyncpool.luxgroup.net
guest-sed01.luxgroup.net
webmail.luxotticaretail.com
webmail.luxotticaretail.com
webmail.luxotticaretail.com
webmail.luxotticaretail.com
guest-ped01.luxgroup.net
Access.luxgroup.net
miucsp05.luxgroup.net
webmail.luxottica.com
empdashboard.luxgroup.net
guest-sed02.luxgroup.net
webmail.luxotticaretail.com
suwmail1.luxgroup.net
support.luxgroup.net
myluxapps.luxgroup.net
usswtslxp005.luxgroup.net
usswtslxp004.luxgroup.net
guest-rov01.luxgroup.net
LSRP.Luxgroup.net
lyncpoolcvg.luxgroup.net
embi.eyemed.com
remedy.luxgroup.net
webmail.luxotticaretail.com
remedy.luxgroup.net
LYNCPOOL.luxgroup.net
lyncpool.luxgroup.net
webmail.luxotticaretail.com
ROZ-ISEPOLP02.luxgroup.net
webmail.luxottica.com
access.luxgroup.net
suwmail1.luxgroup.net
LYNCPOOL.luxgroup.net
webmail.luxotticaretail.com
support.luxgroup.net
keys.luxgroup.net
LYNCPOOL.luxgroup.net
atlmail1.luxgroup.net
usswvulxp846.luxgroup.net
LYNCPOOL.luxgroup.net
ldapidt.luxgroup.net
mdm.luxgroup.net
webmail.luxotticaretail.com
myluxapps.luxgroup.net
sslrelay-usswtslxp004.luxgroup.net
access.luxgroup.net
expe01.luxottica.com
myluxapps.luxgroup.net
remedy.luxgroup.net
guest-ago01.luxgroup.net
mdm.luxgroup.net
keys.luxgroup.net
webmail.luxottica.com
guest-mil01.luxgroup.net
luxgroupemeapam01.luxgroup.net
lsrp.luxgroup.net
emoag.luxgroup.net
webmail.luxotticaretail.com
webmail.luxottica.com
webmail.luxotticaretail.com
esbservices-uat.luxgroup.net
webmail.luxottica.com
mdm.luxgroup.net
emoag.luxgroup.net
suwmail1.luxgroup.net
mdm.luxgroup.net
usfhcmexpe02.luxgroup.net

Certificate

The complete raw certificate details for kibana.prod-sro.luxgroup.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzvBf5cacZYlNRBJBBhD
rfLPphBbWWxybKo74yOsWdAnHaEGExfS/65CxjqPALQQlJN40XnyibqeLp+mnhaQ
UcWVtQj+hYr3yetodl1NIywC0mBH5xeJJGvouDFS3q3K08bFVVHKGm7+nu33sZsT
SKp/aIN+djZno7BVb4/BhOvhEbAnU3U5Zjry9F9AZrjVGIRApIY0Uj0E+7N3TmTu
Makmm5jmOlmjPVW4u0Nx1lMyJIIA6Y9zefHoE9scoOolBL5bxaB7nsLxZU8pRFE9
vMMI7oycYrr7op2jMjqGICY9gCt5PGUuHpZVdMSBYIVX7kJtwsm0VcVKK3om/O+E
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12145585682964945909137516510136082390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxottica Group SpA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kibana.prod-sro.luxgroup.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23636029738067050337274903663208654280010803200314053938987950128406246261204063537299275001211206650616133604928945875473225064137561579358252673826309142205408754838398892851634835631796239632438791450291076717638665406461608294398446971218528711776565397609609886373829127269861214103949843524093499898220050142456024066770430651007790829132078344916381070623282608067708450471105015231216199591469497000012198942314946749426977162463141240568524882067375186867013435460873584896828086152125455239199928908189449733633075514292923799688996033540586744896833293829156639870879519484110981061515887826289702390957213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb0eb730e64a0d5d38eac5ffe5eaa6488588d504
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (343 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kibana.prod-sro.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.prod-sro.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-rfeyed.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosquitto.prod-sro.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosquitto-rfeyed.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wss.prod-sro.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wss-rfeyed.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apibe-rfeyed.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-iot.prod-sro.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.prod-sro.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ui.prod-sro.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-rfeyed.luxottica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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