tapi.nc.pb.ua

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 0d:cc:45:0f:6c:70:3f:45:68:0b:1e:85:d9:8c:0c:3b was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tapi.nc.pb.ua

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:cc:45:0f:6c:70:3f:45:68:0b:1e:85:d9:8c:0c:3b
Serial Number (int): 18340593212590180405107016626671979579
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cc:7b:5c:b5:dd:62:e0:ae:f5:dd:b4:12:cc:eb:3c:59:ac:97:3f:3b
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): f1:d9:f8:75:a4:46:80:5c:d5:83:2c:7a:d7:89:9b:be:85:75:67:f3
Fingerprint (sha256): 1b:49:33:f0:6b:91:a6:40:f1:f7:1a:35:1f:09:75:46:7d:1b:7a:29:2e:e3:b1:7b:28:ad:eb:99:bc:d8:96:f1

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate tapi.nc.pb.ua

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tapi.nc.pb.ua

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tapi.nc.pb.ua

Other certificates including the domain name pb.ua

(limited to 100 certificates)
limit.pb.ua
900.pb.ua
bigbro.pb.ua
putivnykgp.pb.ua
m.pb.ua
cashback.pb.ua
rmweb.pb.ua
m.pb.ua
pb.ua
q.pb.ua
invoices.pb.ua
consolidator.nc.pb.ua
tp1-pbcom.pb.ua
limit.pb.ua
confluence.pb.ua
dm.pb.ua
rimsweb.pb.ua
my.pb.ua
sb.pb.ua
www.docs.pb.ua
tickets.pb.ua
sendmoney.pb.ua
inventpay.pb.ua
*.dm.pb.ua
*.acsk.pb.ua
bonus.pb.ua
srv2.pbcom.pb.ua
iknow.pb.ua
cm2.pbcom.pb.ua
tapi.nc.pb.ua
udesk.pb.ua
pass.pb.ua
fin.do.pb.ua
discount.pb.ua
vmark.pb.ua
help.pb.ua
stage.messaging-service.pb.ua
doc.pb.ua
rmweb.pb.ua
taxi.pb.ua
bok.pb.ua
messaging-service.pb.ua
riavisa.pb.ua
messaging-service.pb.ua
oplata.pb.ua
core.pb.ua
wrm.pb.ua
dhn.pb.ua
ifond.pb.ua
discount.pb.ua
stocktest.pb.ua
blago.pb.ua
cb.pb.ua
my.pb.ua
help.pb.ua
atmqrcode.pb.ua
old-juniorbank.pb.ua
gopay.pb.ua
stock.pb.ua
kviten.pb.ua
chast.pb.ua
holder.pb.ua
pax.pb.ua
slides.pb.ua
www.inkubator.pb.ua
doc.pb.ua
limits.pb.ua
q.pb.ua
webconstruct.pb.ua
blago.pb.ua
webconstruct.msb.pb.ua
taxi.pb.ua
testmms.pb.ua
insurance.pb.ua
perevodpm.pb.ua
bok.pb.ua
freelance.pb.ua
insurance.pb.ua
kpay.pb.ua
bigbro.pb.ua
www.auto.pb.ua
hotmessage.pb.ua
partpayment.pb.ua
s-port.pb.ua
dhn.pb.ua
brief.pb.ua
umark-next.pb.ua
udesk.pb.ua
cm2.pbcom.pb.ua
emulator.pb.ua
docs.pb.ua
*.dm.pb.ua
tapi.nc.pb.ua
sip2-pbcom.pb.ua
npsout.pb.ua
limit.pb.ua
ws.pb.ua
oplata.pb.ua
lot.pb.ua
oneclick.pb.ua

Certificate

The complete raw certificate details for tapi.nc.pb.ua in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEtDCCA5ygAwIBAgIQDcxFD2xwP0VoCx6F2YwMOzANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRSYXBpZFNTTCBSU0EgQ0EgMjAxODAe
Fw0xOTAzMDcwMDAwMDBaFw0yMDA1MDUxMjAwMDBaMBgxFjAUBgNVBAMTDXRhcGku
bmMucGIudWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrFEwZvgLW
eK4JhOLjy/XCP5S/gFa+vdzh0E56PDb3+chg9HtougF0bzlRhsG+y7raicZDzRh4
JuG4IwS9gP5RFE28vXC49iOt7gyg8V5IqWgVsPNpz4tWDomljD27Wh9q1F/MCfic
k4PkTKoDCPjfjSMpoFCpElJicPHUpdvolrNdjdMqPbFUSs0msriqnO6zPP6Fpkrf
UM/PdmEtCUh6BcC8+e/d1AuzlTvKbMx2hlAvMVtsDPZXndqxH3ViMGLTUGEhOgms
SBoTu2IgrO1Fw/Rfyv/fjYudAN+ajWPmY7sI2WYeLdWvLSOJz8CxWXB0zsSex0pY
cb+ibnBWB5wnAgMBAAGjggGyMIIBrjAfBgNVHSMEGDAWgBRTyhdZ/GvAAyEvGq7k
qqgcglbadTAdBgNVHQ4EFgQUzHtctd1i4K713bQSzOs8WayXPzswGAYDVR0RBBEw
D4INdGFwaS5uYy5wYi51YTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jZHAucmFw
aWRzc2wuY29tL1JhcGlkU1NMUlNBQ0EyMDE4LmNybDBMBgNVHSAERTBDMDcGCWCG
SAGG/WwBAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20v
Q1BTMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwJgYIKwYBBQUHMAGGGmh0dHA6
Ly9zdGF0dXMucmFwaWRzc2wuY29tMD0GCCsGAQUFBzAChjFodHRwOi8vY2FjZXJ0
cy5yYXBpZHNzbC5jb20vUmFwaWRTU0xSU0FDQTIwMTguY3J0MAkGA1UdEwQCMAAw
EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAItzBy60l/hL
78ymrsn+CGmD5UTvCj6fBaa3iYKEGApJ83qtreoxTxM8LC7ZSHPosRscoc84jFXn
YFBYJWNlDSGxhkgBIiubWpWLW7ELi3qnNJZqHCe1k4AKEOlGjTZzSlIt4pK/ZBkQ
rJfdYsozLmYHa5kEekaO0nhRIuVF6s+BE2WwABD2wuI4IK/Lfq1IeCUrsVeoPHBs
D5ZsxbJchbFwa7MbZ7r5ERoKGpNpHTTG397tbwDklxQQFvbK1mSckaF6kOEkQBVc
lEtde5/C8UsNFqdwgmVXHmdj6Xkb32kyk0n3XUhuC27+8du+4DWvKOgxU7e1pfdf
d3ZNYgkHHXw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxRMGb4C1niuCYTi48v1
wj+Uv4BWvr3c4dBOejw29/nIYPR7aLoBdG85UYbBvsu62onGQ80YeCbhuCMEvYD+
URRNvL1wuPYjre4MoPFeSKloFbDzac+LVg6JpYw9u1ofatRfzAn4nJOD5EyqAwj4
340jKaBQqRJSYnDx1KXb6JazXY3TKj2xVErNJrK4qpzuszz+haZK31DPz3ZhLQlI
egXAvPnv3dQLs5U7ymzMdoZQLzFbbAz2V53asR91YjBi01BhIToJrEgaE7tiIKzt
RcP0X8r/342LnQDfmo1j5mO7CNlmHi3Vry0jic/AsVlwdM7EnsdKWHG/om5wVgec
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18340593212590180405107016626671979579
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tapi.nc.pb.ua'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21596759104984762799661501888638152596967843322819284704826964002349709958848912892344882506407800268210281412592893758694210480504001600295382519018788301488266188527145276454997866328460503255926153204976618429082724838248462582654004626247284638952171863393626197288946764344821446268920641331664228450697271008153222396231397969568488967067838946059163643655888250348986009843483129389309718308498102334792307230902670435580661898452321799080461247174266678413068917512957809608947767439548821212608303519703587973042672485591059084560138184893172571377472046274453753578557255657137333702800975864065019232099367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc7b5cb5dd62e0aef5ddb412cceb3c59ac973f3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapi.nc.pb.ua'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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