citrixaccesstest.harrishealth.org

- Harris Health System -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 33:84:64:c2:f5:19:32:f4:00:00:00:00:50:e3:87:73 was issued on by Entrust, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Harris Health System

Organization: Harris Health System
State / Province: Texas
Locality: Houston
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:84:64:c2:f5:19:32:f4:00:00:00:00:50:e3:87:73
Serial Number (int): 68478054657435490870433678498096973683
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 81:9b:03:2f:b1:9d:97:66:5c:50:25:38:e7:d5:c6:4b:fc:9e:e7:8f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): c2:4b:fc:97:aa:c1:24:e3:8e:9d:3b:be:79:34:22:22:bb:78:bf:f6
Fingerprint (sha256): 12:f5:eb:94:e3:22:96:2d:b0:31:36:17:b0:2b:80:c4:c4:1f:d8:f8:e7:68:d3:f7:4c:fd:1c:73:41:0c:39:78

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate citrixaccesstest.harrishealth.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citrixaccesstest.harrishealth.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citrixaccesstest.harrishealth.org
citrixtestaccounts.harrishealth.org
citrixaccesstestcb.harrishealth.org

Other certificates including the domain name harrishealth.org

(limited to 100 certificates)
es.harrishealth.org
myaccess.harrishealth.org
vtestepicmyc01.harrishealth.org
owa.harrishealth.org
testhsw.harrishealth.org
testepicce.harrishealth.org
testceic.harrishealth.org
bca.harrishealth.org
welcomeweb.harrishealth.org
ft-ise-psn1.harrishealth.org
TIMETRACKING.HARRISHEALTH.ORG
testpacsweb.harrishealth.org
myhealth.harrishealth.org
mobile.harrishealth.org
ftpexternal.harrishealth.org
vuc-expe02.harrishealth.org
jobs.harrishealth.org
terpaphr.harrishealth.org
psftfsprd.harrishealth.org
perppsft01.harrishealth.org
ceicimageexch.harrishealth.org
testceic.harrishealth.org
careselect.harrishealth.org
btvpn.harrishealth.org
cantohaiku.harrishealth.org
testhsw.harrishealth.org
VUC-UCMQAPUB01-ms.harrishealth.org
testsurescripts.harrishealth.org
terppsft01.harrishealth.org
testpsmobile.harrishealth.org
view.harrishealth.org
access2013.harrishealth.org
patst.harrishealth.org
auth.harrishealth.org
vuc-expe.harrishealth.org
fsint.harrishealth.org
sip.harrishealth.org
jobs.harrishealth.org
careselect.harrishealth.org
cantohaiku.harrishealth.org
testcantohaiku.harrishealth.org
myaccess.harrishealth.org
testtimetracking.harrishealth.org
perppsft02.harrishealth.org
citrixaccesstest.harrishealth.org
orders.harrishealth.org
mobile1.harrishealth.org
kronostestext.harrishealth.org
bca.harrishealth.org
citrixaccesstest.harrishealth.org
sentry1.harrishealth.org
prosolv.harrishealth.org
careselect.harrishealth.org
WebFTP.harrishealth.org
nsi.harrishealth.org
jobs.harrishealth.org
fstst.harrishealth.org
access2013.harrishealth.org
terppsft02.harrishealth.org
epiccarelink.harrishealth.org
testcommunityconnect.harrishealth.org
testpacsweb.harrishealth.org
psftfsprd.harrishealth.org
hrpsft.harrishealth.org
myhealth.harrishealth.org
citrixaccesstest.harrishealth.org
ceic.harrishealth.org
testbca.harrishealth.org
WebFTP.harrishealth.org
epiccarelink.harrishealth.org
hsexceptions.harrishealth.org
fsint.harrishealth.org
testcantohaiku.harrishealth.org
supplier.harrishealth.org
testaccountreg.harrishealth.org
trainic-fgsvr.harrishealth.org
VUC-CIMPP01-ms.harrishealth.org
trainic-fgsvr.harrishealth.org
es.harrishealth.org
perppsft01.harrishealth.org
hhiron01.harrishealth.org
testepicce.harrishealth.org
view.harrishealth.org
testintegration.harrishealth.org
orders.harrishealth.org
hherpap1.harrishealth.org
hrint.harrishealth.org
citrixaccess.harrishealth.org
temployees.harrishealth.org
surescripts.harrishealth.org
analytics.harrishealth.org
sp19inet.harrishealth.org
testcantohaiku.harrishealth.org
mobile.harrishealth.org
owa.harrishealth.org
perppsft02.harrishealth.org
hsmatch.harrishealth.org
testsurescripts.harrishealth.org
testnsi.harrishealth.org
perppsft01.harrishealth.org

Certificate

The complete raw certificate details for citrixaccesstest.harrishealth.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxPmoMeBOhFVAXFC6wHJ
RkHnXhX1HJQkjQ6Pxw6S87mYJAc8VZYf345pGCL1mTuRtKjrw2YvtbV8W4cQXQKL
wOXvul5hFyN+x2y82dfhMo/KFnuEbzuQmdzf2h7V1gn76NlUw1Ig4Utb3MZMSqND
O9Ngc9oDzscA7z+V1HF+RgphL715bfSim2HgkXtEvP+XDjQYyQCq5KFr1IxNZykY
S9i6UvTm2sX+dkzyu9JAzO/t00BBcG7+x01r8Ija1JZgnkfD+BBqsXkKtT1FTIkI
4YGeZYESUX/SaRByYoQ4QnoJGR8QV6ZfcZTYQUgo1/QxZi3itCId2LaDVf8AeDrI
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 68478054657435490870433678498096973683
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-06 14:55:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-05 15:25:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Harris Health System'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citrixaccesstest.harrishealth.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22606470083930788385979377820107881067739299467327731522381636301940490156902498692190720606871919151840663145305602629928063109494883451352729745521394765774491527193300878097054033309812331186116931673993960939873195167674235306079232707107560950811091324514091331631850510235956105173997714715853450334761867950744244550142684207617523448086673087503768925190144587984067190215751746045825638083809535437055856477573869906056282870540857800727889731025332426932024018505836205080089166634131062689745169417613019672924231105462220539950263298284535513099762081283114665990305198180042549927193351692693507025848331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrixaccesstest.harrishealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrixtestaccounts.harrishealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrixaccesstestcb.harrishealth.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							819b032fb19d97665c502538e7d5c64bfc9ee78f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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