geostruct.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d9:51:e2:14:fc:a4:72:c2:b7:22:57:67:10:f4:f2:ad:b7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=geostruct.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d9:51:e2:14:fc:a4:72:c2:b7:22:57:67:10:f4:f2:ad:b7
Serial Number (int): 335286972769537576873472729197902491200951
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: be:29:39:b9:37:5a:59:41:9e:5a:c6:53:04:49:18:bf:0f:8d:be:77
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6d:bc:18:d2:86:76:17:09:1d:e8:bf:78:48:5d:bf:86:86:f1:bf:99
Fingerprint (sha256): 1b:33:dd:c2:45:4c:4b:19:90:60:23:a7:e6:6f:0f:ef:8f:6d:b5:4d:ae:29:5b:4e:b7:7c:aa:f2:d9:33:dc:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate geostruct.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geostruct.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

geostruct.com
www.geostruct.com

Other certificates including the domain name geostruct.com

(limited to 100 certificates)
supporto.teameis.it
latest.test.geostruct.com
returns.globalamerican.us
support.robethood.net
support.itmagix.nl
support.glastechnology.com
supporto.teameis.it
geostruct.com
support.robethood.net
geostruct.com
petbase.mobile-xl.eu
geostruct.com
support.sirrahsoft.co.uk
support.sirrahsoft.co.uk
*.services.geostruct.com
customerservice.herful.com
support.robethood.net
help.markus.support
upload.geostruct.com
*.geostruct.com
help.adozi.com
supporto.teameis.it
support.itmagix.nl
geostruct.com
portal.visionsoft.com.cy
portal.geostruct.com
geostruct.com
support.glastechnology.com
support.astrad-austrokommunal.at
geostruct.com
customerservice.herful.com
support.hayaperegrinaciones.com
geostruct.com
apitestnew.beast.geostruct.com
services.espats.ch
gitlab.geostruct.com
*.geostruct.com
geostruct.com
soporte.error304.com
geostruct.com
kennisbank.nobelinstallaties.nl
support.glastechnology.com
support.robethood.net
services.espats.ch
help.adozi.com
geostruct.com
support.itmagix.nl
kennisbank.nobelinstallaties.nl
assistenza.amotive.it
petbase.mobile-xl.eu
support.inexdu.com
assistenza.lrsa.it
geostruct.com
dgsales.geostruct.com
help.markus.support
geostruct.com
help.adozi.com
help.wau73.com
support.inexdu.com
support.glastechnology.com
customerservice.herful.com
support.barion.nl
geostruct.com
support.itmagix.nl
help.markus.support
geostruct.com
help.wau73.com
services.espats.ch
helpdesk.evalink.io
tickets.geostruct.com
soporte.error304.com
lms.geostruct.com
tickets.geostruct.com
support.hayaperegrinaciones.com
demo.geostruct.com
soporte.error304.com
petbase.mobile-xl.eu
support.sirrahsoft.co.uk
*.services.geostruct.com
frtdemo.beast.geostruct.com
petbase.mobile-xl.eu
upload.geostruct.com
kennisbank.nobelinstallaties.nl
supporto.teameis.it
tickets.geostruct.com
portal.geostruct.com
support.itmagix.nl
geostruct.com
support.astrad-austrokommunal.at
kennisbank.nobelinstallaties.nl
inframapp.test.geostruct.com
support.barion.nl
support.sirrahsoft.co.uk
gitlab.geostruct.com
support.barion.nl
geostruct.com
geostruct.com
help.wau73.com
help.markus.support
services.espats.ch

Certificate

The complete raw certificate details for geostruct.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgISA9lR4hT8pHLCtyJXZxD08q23MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTkxMzExMTFaFw0y
MDA2MTcxMzExMTFaMBgxFjAUBgNVBAMTDWdlb3N0cnVjdC5jb20wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDDoxW8ffqsHMK8GTFyQkBcGwT9vmGcS1jV
Q7ns0kS4ITlxvsFwppiQWh+NhPiPggtmrUCsZsGq9MFbCNdtTOL7O4mHxO3YAL49
WKz3nwhF9jakogcfR0SeQPVUq1HBji205sWMIrr9KqDYZk/LtzwWXjSkqSzW5XCK
eSGsJ3xevUe8Av5bZRpFOcv1cO31IPuwAkf7M8cPHm3ASgQJrw5BB2KCli0Dj868
KNZ80qKX7oyahw1dMJG+rhOZZocrqFhvgT6KxX1Qtdf0WXgdloLX14sgwZrscord
0bX9Rr9WSIFRMfqXRL0zeY+Lm6tFsdWBskgeyfJ0rGoE46MprkGeP/onIudRDE7Q
Gwc729owLU+fHYFti05+ndnOyEx4d8Mm0vAnccI8/wk1uU2r7Dy1lJ8y6cxeE10v
ESLZZNEZmy+HX7cgyNMlfmbP9Cwb5WAkwFKHf2Ldxg/C9M6VPicyDcgVt7n0XqZh
RaiUA5G9uh6KZjOD2TGT9pYBnVZ60WiydQ+m6UwFTbOqMhDPPu9x8DTVdqQSVTA1
Rr/tt3R9ASwRempOEcDV3qcCwowm7HhsfmOWssohR8NJo+qxvqYUF8G3+np0rfRI
yAmsQn6AfOoCiVz1FLJqZfskwC1/NMqCeiZohH9Jo6xeMyQl3eJTBj90Uq4JgBSU
JyfbSxhaoQIDAQABo4ICdTCCAnEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS+KTm5
N1pZQZ5axlMESRi/D42+dzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDWdlb3N0cnVjdC5jb22CEXd3
dy5nZW9zdHJ1Y3QuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T
AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB
BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIS
hBh1loFxRVgAAAFw8yI8LgAABAMARzBFAiEA8zQzwz4mhCGYvNr4c7GIg7Dx3WsU
QxPGxzy54EQqvigCIFpNLu6VZCKhQN4BgxSt548JjCfYseV3H87yFHAP99d8AHYA
B7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFw8yI8VAAABAMARzBF
AiB8VvQpS7Pqg1VxAPt9xO9YR6vuCdCVfdNnOqktMiMGKwIhALf7CCen9O3oqXpK
QPQ7A/RkdKa6ySIIKlSGQlOfRqqWMA0GCSqGSIb3DQEBCwUAA4IBAQA4kEAD9yAn
/ofNiCHDHJc58tQNRfqShQIfoYIH+vYDraB8AeZtxKxor8uSvMuR10tnpmRVkta2
4ga/HuDfYWrUhkbDWYCTx9j0q9SlzPLnkLv20tM/TbtmwVmRLqU7oPZxO4er2Lmp
buUgfISOphQYn/j4rbpe9MyccLfgUW6dX/IoFdeq3kWgJZKk6CdsCT7Gd9eQfaiU
fL5CM6G3kCxKr5DE51GWJnU0VbZB3OYsXeOYoY1TgqJRYhP8E/jSCFL8kmH0vnEc
Qnx+i4FlEbNGXUFDp0wr5TwH3iSmxVyQ7Uf92J2/7zqtKtwNbU57fpLqAR5991Kd
sHnpIZArUs5T
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335286972769537576873472729197902491200951
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 13:11:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-17 13:11:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geostruct.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798129532229175053720914619031740921131823773586433523625531549028794880853785327441310455353241642381645447187152508480096494197182829314398863237508262366643301373033276483346059056779756075346796124757006185425288546597930866385320553243072005466016760801957089577964503885067443818346429374872169442597917072629358415544844969837604017693372004440919765144145681874970924743418565165162922241088345900900067103036982689162762641286048624991450294565586030856534018548550951599477258012611232067188128382497574516345177471150040623218128439968971152516813819221336286612114793135077474091365785746519008866726142915612692272983989845331891104596669295667640313155936083462161286869874538355335137244547771529704030571306313002495990375883846013091226078100664877472447818509421802485512772757617248364089907742365877722770164304174752061410480707166570356713027082163028010452300417385355847860461455942857672346668573220310951831215938060955119874330880989400777231377918369933388798592306890009567658821080599120732049551729491572017677163752088982171437142114613106972026701647362087016966709565664815501416166471035718715773873517017585046635704652987431779308091886639775504256229429815621337205643910670858254642646766607009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be2939b9375a59419e5ac653044918bf0f8dbe77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geostruct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geostruct.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170f3223c2e0000040300473045022100f33433c33e26842198bcdaf873b18883b0f1dd6b144313c6c73cb9e0442abe2802205a4d2eee956422a140de018314ade78f098c27d8b1e5771fcef214700ff7d77c00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170f3223c54000004030047304502207c56f4294bb3ea83557100fb7dc4ef5847abee09d0957dd3673aa92d3223062b022100b7fb0827a7f4ede8a97a4a40f43b03f46474a6bac922082a548642539f46aa96
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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