mweb.lvn.broadcom.net

- Broadcom Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0e:5e:36:df:91:ff:2c:b7:08:a0:86:59:42:fc:e9:f8 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Broadcom Inc.

Organization: Broadcom Inc.
State / Province: California
Locality: Palo Alto
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:5e:36:df:91:ff:2c:b7:08:a0:86:59:42:fc:e9:f8
Serial Number (int): 19098380808873747557483163635133770232
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 49:c5:ea:7f:de:77:e4:9e:e3:33:44:15:70:3a:f8:69:71:63:b3:fc
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): f8:38:9f:4c:d4:a0:ba:c7:df:7a:ac:18:7c:4a:44:81:93:b3:46:e5
Fingerprint (sha256): 13:66:79:00:78:6f:77:9f:3a:bf:f3:e3:70:db:54:17:e5:2b:12:05:81:06:7a:1d:ba:89:81:29:0d:c9:54:8b

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate mweb.lvn.broadcom.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mweb.lvn.broadcom.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mweb.lvn.broadcom.net
mweb-lvnhf-bsn-01.lvn.broadcom.net
mweb-lvnhf-bsn-02.lvn.broadcom.net

Other certificates including the domain name broadcom.net

(limited to 100 certificates)
IAUTOLB02.LVN.broadcom.net
codeinsight-test.broadcom.net
*.app.apim.broadcom.net
ccm-ibn-pub01.broadcom.net
*.nw-am.broadcom.net
mfgweb.lvn.broadcom.net
arasplm.broadcom.net
wpdvnfp01.ash.Broadcom.net
sed.broadcom.net
*.imp.broadcom.net
wpdvwccahet02.broadcom.net
pinkman.cos.broadcom.net
lnpvrfm01.yis.broadcom.net
apimangementlic.lvn.broadcom.net
asaguidev-bsn-01.gwd.broadcom.net
traps-test.broadcom.net
ccm-kc1-ucnp.broadcom.net
apim-httpd-tls.lvn.broadcom.net
ibn.broadcom.net
LNPVMOOG01.lvn.broadcom.net
aps-dev.broadcom.net
pam-license.ims.labs.broadcom.net
lnpvweb04.ash.broadcom.net
jira-lvn-44.lvn.broadcom.net
spl-irv-sec01.lvn.broadcom.net
lvntest001115.bpc.broadcom.net
*.artifactory-bsn.broadcom.com
erp-pdev.broadcom.net
ibn-cp02-ap.ibn.broadcom.net
fopsincorta.broadcom.net
saascddev.gwd.broadcom.net
wpdvsnwa01.broadcom.net
conf-lvnd-it-16.lvn.broadcom.net
apim-grafana.lvn.broadcom.net
pentest-3ds.bes.broadcom.net
ccm-lvn-impp.broadcom.net
lpdvrfm03.mys.broadcom.net
*.prov.d4.cmes.gcd.broadcom.net
ghedev-bsn-01.gwd.broadcom.net
ras100.lvn.bsnlab.broadcom.net
casupport-internal.broadcom.net
*.imp.broadcom.net
lpdvprfmcntr01.ash.broadcom.net
jirastg-bsn-01.gwd.broadcom.net
www.broadcom.net
bsnbhnp.broadcom.net
*.ppmrd.gwd.broadcom.net
www.broadcom.net
tses-np.broadcom.net
chs-cp02-nw-em.chs.broadcom.net
kc1-cp01-ap.kc1.broadcom.net
pamqa-ci.ims.labs.broadcom.net
*.d4.cmes.gcd.broadcom.net
*.message.d4.cmes.gcd.broadcom.net
ccm-ash-pub01.broadcom.net
xray-lvn.broadcom.net
lvnds888202k.lvn.broadcom.net
platinum.lvn.broadcom.net
ccm-ibn-exwc2.broadcom.net
wpdvnfp01.ash.Broadcom.net
tcs.inp.broadcom.net
LPDVNAGIOS02.lvn.broadcom.net
svn-ric-01.lvn.broadcom.net
apim-rancher.lvn.broadcom.net
cloudatlas.gcd.broadcom.net
eca-ccxsw.lvn.broadcom.net
MOOGLB.lvn.broadcom.net
synchost2.broadcom.net
portalwccbec.vpn.broadcom.net
aadev.broadcom.net
*.echo-server.dlp.cstackus.saasdev.broadcom.net
mweb.lvn.broadcom.net
feedtracker.inp.broadcom.net
lvn-cp02.nw-am.broadcom.net
oamtst.broadcom.net
craveprod-bsn-02.gwd.broadcom.net
cmapp-dcsg-1.gwd.broadcom.net
ccm-ibn-pub01.broadcom.net
sonarqube-bsn-01.gwd.broadcom.net
apim-wiki.lvn.broadcom.net
eca-sj1-13.lvn.broadcom.net
jenkins12-legacy.starcm.broadcom.net
alfred.engdlp.broadcom.net
5GQMZY2.broadcom.net
receiveorder.broadcom.net
lvnbld014834.msd.labs.broadcom.net
sji-wcrtl-01.nw-am.broadcom.net
artifactorydev-bsn-02.gwd.broadcom.net
demantra-patch.broadcom.net
eng-mec-01.mec.broadcom.net
bitbucket-sed.broadcom.net
jira-lvn-47.lvn.broadcom.net
techstack-dev.broadcom.net
ccm-lvn-impp.broadcom.net
*.app.paysecsolint.psdev.broadcom.net
ced.broadcom.net
downloads-author-qa.broadcom.net
*.broadcom.net
*.casb.protect.broadcom.com
chs-cp02-nw-em.chs.broadcom.net

Certificate

The complete raw certificate details for mweb.lvn.broadcom.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19098380808873747557483163635133770232
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Palo Alto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Broadcom Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mweb.lvn.broadcom.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 644771405619348475153665784979216448293799914244902488791102744995991015679073923548685726178425282177650733076855631502651022305463847450815320845396076588203175177526009567720832557113045387442850377662235465489192617411986914999943221459546646353472286119826331746570978302583100945057602907351996816221706901325760357466263620474183167807264404911129527636042829957810886654031875016985511823043928286337763299734703249755317635037699842960613110890704258329382152864533834907349083963612769550233457078810398038852133187875285704539735364597617313810673660851631893932103987104115190701751097265962389108237325564703010372954936194557479159939569794410315932948153647170756458688625422679158000016489856636331891370198702651732633555100548100878577022557568561469062070218192376612299426301363838081665625818973680380533102653926080681074538745492004955380778755615175020661334061394543134362286159949739794335871987268338588411655867786609391532579785152417545424466521512942789037829714290745440744831542762044185198133928326702341619028438611555467550154989855835544727899311833943317956231887054976995471692740707583467403830429969451570711269302411748372633737466861766771941050744120797053929712397857755306220694802678013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49c5ea7fde77e49ee3334415703af8697163b3fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mweb.lvn.broadcom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mweb-lvnhf-bsn-01.lvn.broadcom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mweb-lvnhf-bsn-02.lvn.broadcom.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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