diabetes.ihs.gov

- US Dept of Health and Human Services -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 3f:70:00:05:c6:d1:29:37:28:b2:f5:19:15:a3:87:c4 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

US Dept of Health and Human Services

Organization: US Dept of Health and Human Services
State / Province: Maryland
Locality: Rockville
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:70:00:05:c6:d1:29:37:28:b2:f5:19:15:a3:87:c4
Serial Number (int): 84322901440277305334112126964211091396
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 6f:fb:b1:c7:5e:59:fa:3f:e8:72:9c:35:45:4c:e6:c4:1b:74:a8:ad
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): a7:cb:ab:fd:87:8a:b6:2b:2f:8d:06:cd:c8:4c:b6:6a:75:51:2e:07
Fingerprint (sha256): 19:0c:b5:5d:73:0d:34:20:89:1f:fd:cf:5e:23:e5:2b:df:7b:47:3b:6c:b4:d7:93:c6:87:e6:4a:d2:f4:39:fc

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate diabetes.ihs.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for diabetes.ihs.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

diabetes.ihs.gov
www.diabetes.ihs.gov

Other certificates including the domain name ihs.gov

(limited to 100 certificates)
meet.ihs.gov
i-star.ihs.gov
hq1apps.ihs.gov
SMTPALTXWAY3.ihs.gov
cesrtcaccess1.ihs.gov
www.ihs.gov
auth.ihs.gov
SMTPXWAY1.ihs.gov
dqmd.mpi.ihs.gov
seal6.ihs.gov
IHSDEV4DHAPIM.ihs.gov
ihsazuditd4dhs2.ihs.gov
h1003sjccm001-ms.d1.na.ihs.gov
SMTPXWAY1.ihs.gov
smtpre.ihs.gov
listserv.ihs.gov
h1003vcecluster.ihs.gov
SMTPXWAY4.ihs.gov
hqrnsp02.ihs.gov
mstofficeonlineapp1.ihs.gov
phradmin.ihs.gov
wstars.ihs.gov
h1003sjccm001-ms.d1.na.ihs.gov
phrperfm.ihs.gov
mstrtcaccess1.ihs.gov
webplus.ihs.gov
www.maps.ihs.gov
phr.ihs.gov
www.maps.ihs.gov
telehealthtest.ihs.gov
staging.surescripts.ihs.gov
SMTPALTXWAY1.ihs.gov
wireless.ihs.gov
SMTPXWAY1.ihs.gov
telehealthtest.ihs.gov
SMTPXWAY0.ihs.gov
SMTPALTXWAY4.ihs.gov
hqrnsp01.ihs.gov
adfs.ihs.gov
authpreview.ihs.gov
seal6.ihs.gov
hq2apps.ihs.gov
webplus.ihs.gov
vpn.remote.ihs.gov
mail.ihs.gov
hqansp02.ihs.gov
hqrcknoscfw1.ihs.gov
vpn.remote.ihs.gov
ABRSFOEXPE2.ihs.gov
hqrnsp02.ihs.gov
dtsservices.ihs.gov
aas.ihs.gov
wwwQA.ihs.gov
diabetes.ihs.gov
authpreview.ihs.gov
phrperfm.ihs.gov
orap.ihs.gov
SMTPALTXWAY4.ihs.gov
cesofficewebapp1.ihs.gov
SMTPOUT2.ihs.gov
webplus.ihs.gov
i-star.ihs.gov
i-star.ihs.gov
smtpre.ihs.gov
Gis.ihs.gov
dtsservices.ihs.gov
mdmmail1.ihs.gov
www.maps.ihs.gov
h1003sjccm001-ms.d1.na.ihs.gov
hsp.ihs.gov
doh.ihs.gov
IHSABQEXPE1.ihs.gov
hqabqdistarws01.d1.na.ihs.gov
IHSRCKEXPE1.ihs.gov
d1.na.ihs.gov
diabetes.ihs.gov
mds.ihs.gov
smtpex2.ihs.gov
4DeHXD.ihs.gov
securedata.ihs.gov
hqrcknoscfw1.ihs.gov
ABRSFOEXPE1.ihs.gov
hqansp02.ihs.gov
ftp.ihs.gov
webehrs.ihs.gov
securedata.ihs.gov
SMTPALTXWAY3.ihs.gov
cesrtcaccess1.ihs.gov
GIS.IHS.GOV
cesofficewebapp1.ihs.gov
hqansp01.ihs.gov
phr.ihs.gov
SMTPXWAY4.ihs.gov
phrperfm.ihs.gov
hqansp02.ihs.gov
SMTPALTXWAY2.ihs.gov
FacilOps.ihs.gov
SMTPALTXWAY4.ihs.gov
4DeHXT.ihs.gov
extauth.ihs.gov

Certificate

The complete raw certificate details for diabetes.ihs.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun1/rCB5ITriD0WWjv9Z
604kkoPguh0/MTDAf9XQiBVBqn4uEQbCJ9GmBkyr4/jyjWNRC2fFSoKzADineU79
Ef9xC0Ce4KZpJJfEkYfRmxJhPsn1oPWb3blxM+kG+0xnMh5W7ZsYjwBdhz6dG63a
p3+GT9FNDOpp85Uw36Gg6JSMg+jIL6JrErs0EMYsX5/ineL3SiA0VeHQe7tYIw+c
Dm4jqmc4ZaQYRYQY85/Wv2FWkjwbfPswrm+w6sgClLe5CIY2rqLf2FmsuDRIG6BC
rgnGE8Pv5MkJJz8K1UpDlpWgtwwwL+ko8jNiF4U2+VZKyFyJbjaDVIwozxk+iJp0
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84322901440277305334112126964211091396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-13 19:16:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-13 19:16:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rockville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US Dept of Health and Human Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'diabetes.ihs.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23542210449128751574942431720254793358390640255478500917767899028996638647665505179470706273646084114089494391671439195164815457908011853507597318623123903431160193933008147609846087302473268536376426178804017671187800885597860217355057847834728879161464409872208312231319268749791406886591635540509460989962721006364524671647780079821555827302806242814187268883462430846241687301223789604756677419949589944189112574241543150850865602489880452054226892454874783334943382801085704649249448732426771358437130975797156013264734365281125506777521969243762045695996696265587314855472713650313515081129524474699558782923821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ffbb1c75e59fa3fe8729c35454ce6c41b74a8ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diabetes.ihs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diabetes.ihs.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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