socaas.forticloud.com

- Fortinet, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:a6:4e:3f:12:9b:76:5d:88:4e:29:da:c3:88:42:df was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fortinet, Inc.

Organization: Fortinet, Inc.
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a6:4e:3f:12:9b:76:5d:88:4e:29:da:c3:88:42:df
Serial Number (int): 4851192290953524877432309939511509727
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 84:36:51:6c:36:4c:7b:df:22:29:db:c9:5a:83:6c:92:07:04:93:47
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 5e:26:c7:b9:79:7d:49:0f:ba:d9:79:ff:05:56:57:1b:c5:5f:a8:14
Fingerprint (sha256): 1b:9f:21:20:58:77:e0:e4:06:6f:27:a2:2d:c0:d0:7c:e9:14:3e:db:2c:ce:3d:a9:06:2f:e8:8b:1a:99:ab:bd

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate socaas.forticloud.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for socaas.forticloud.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

socaas.forticloud.com

Other certificates including the domain name forticloud.com

(limited to 100 certificates)
check24status.mambu.com
azfra1status.mambu.com
amtrust.kinnser.com
ca-west-1.fortianalyzer.forticloud.com
12a10fad.status.cleafy.cloud
azfra1status.mambu.com
darryltest.atl-css.net
azfra1status.mambu.com
azfra1status.mambu.com
12a10fad.status.cleafy.cloud
dalestatus.mambu.com
azfra1status.mambu.com
cddos.status.radwarecloud.com
darryltest.atl-css.net
bb2status.mambu.com
*.fortinet.com
darryltest.atl-css.net
status.509.equinixms.com
12a10fad.status.cleafy.cloud
au.status.clio.com
azfra1status.mambu.com
forticlient-status.forticloud.com
*.fortinet.com
azfra1status.mambu.com
darryltest.atl-css.net
162-internal.networkstatus.co.nz
au.status.clio.com
*.forticloud.com
162-internal.networkstatus.co.nz
*.fortianalyzer.forticloud.com
forticlient-status.forticloud.com
beta.status.veracode.com
au.status.clio.com
ca-west-1.fortianalyzer.forticloud.com
azfra1status.mambu.com
au.status.clio.com
check24status.mambu.com
azfra1status.mambu.com
amtrust.kinnser.com
azfra1status.mambu.com
12a10fad.status.cleafy.cloud
status.509.equinixms.com
check24status.mambu.com
darryltest.atl-css.net
check24status.mambu.com
azfra1status.mambu.com
*.forticloud.com
darryltest.atl-css.net
forticlient-status.forticloud.com
cddos.status.radwarecloud.com
dalestatus.mambu.com
status.509.equinixms.com
azfra1status.mambu.com
status.509.equinixms.com
beta.status.veracode.com
azfra1status.mambu.com
162-internal.networkstatus.co.nz
au.status.clio.com
check24status.mambu.com
*.ems.forticlient.forticloud.com
dalestatus.mambu.com
*.fortinet.com
au.status.clio.com
customdomain.stpg-personal.space
status.509.equinixms.com
myip.fortinet.com
azfra1status.mambu.com
customdomain.stpg-personal.space
*.forticloud.com
12a10fad.status.cleafy.cloud
forticlient-status.forticloud.com
*.forticloud.com
status.509.equinixms.com
162-internal.networkstatus.co.nz
au.status.clio.com
socaas.forticloud.com
customdomain.stpg-personal.space
darryltest.atl-css.net
darryltest.atl-css.net
forticlient-status.forticloud.com
cddos.status.radwarecloud.com
162-internal.networkstatus.co.nz
azfra1status.mambu.com
au.status.clio.com
azfra1status.mambu.com
customdomain.stpg-personal.space
azfra1status.mambu.com
status.509.equinixms.com
darryltest.atl-css.net
check24status.mambu.com
amtrust.kinnser.com
au.status.clio.com
162-internal.networkstatus.co.nz
darryltest.atl-css.net
au.status.clio.com
customdomain.stpg-personal.space
162-internal.networkstatus.co.nz
cddos.status.radwarecloud.com
amtrust.kinnser.com
bb2status.mambu.com

Certificate

The complete raw certificate details for socaas.forticloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqc9AoKE7fSpxKquBCy1B
dprVDMoTcjjqdG50lGMFdcYwpR6IDk8o1eFHsSWloy23Di2kmRn1jAQrNJDA46n9
5Re56df5OI5CiCCZACgtPP7NBQc2BoSFq3AfoPFNd5Sm0yLMGx34SHI8oPYujVdP
BHcXUEZMYPzRi2XaBLR0Srt4KjR4WvwMCdiXvrm/gQgjP05EKOKjKWw5S6nj9UG4
mkWpY3QuN3Dkx4nXq5dkpVrwq/JUDyC1uJwADF2kX0CQMGfn9/qBJYsvYrFh+FOB
YZ4WYb2qkSm9IpBaFdec29nj5w42aebYtxUGjx1NxM1Ayf626vK00Y6dEBLqsug2
Y+hNW+e2YcrqIuNKtpYB6mgAD4Sl68vCV5bhHmp5rZVhRY8y8AtbmeVwBJ0WqX/9
6UyA0E1xe19FByUi+6bxgtrbTfP36uhr7utFAg0Qp2u/w8KvSwKBMACeeEA5fYm0
aYGgDoZFSKnnPrUISfWTHFzVymDVMeERa92mTP60R6ZlsMjCfxm+bzztZhhaBTYG
58IjQF9bz7wlMV2IEMTZA02XBitExMTfOwSaqRUJn2mjLVHcJBs9qtJlcOeLT+C6
ZYOWyJLF8shKyeO9hsytYzEbcAk2g9kg8obv+yZnaKy8cVl6ixqxbDAEeLzzSDjy
LDy1BaaJoHexWNgEQXxxVWECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4851192290953524877432309939511509727
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fortinet, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'socaas.forticloud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 692762645278104141875724303465980505061587892972423476483034983217731729443127417380858078034063290997750611364907101806048941866454556453901102508642682803522209455747633861756370461869539893912248939486400208542455854560044536496087920161457490242853881221866193839918539811502674245884761898226288041633360600461675555460928079370698077836540590111290973282896394487197503734193602210425209995330225927163810237918651791172812921528317481707735981406977254002453154599289315320376983469987568557193850558635891014350379515519854434248614889471756342117065817808301796618772530480938692046359006146658092498369495077443610498577082414701867317396054491796921087476085085676922344938490287364987970530712668478787175696238433225318808800567542570507643289930026909477656462352131525413613746243890057879137339484244133573354361096186062603487644282004891926381703147606639541818823156586088003024257787182348755102241768538533933922057315921498680278116413886288942205695567281358570792583876363522248104569377680789945582686975644919753094034522993008160745993537374017460264655160318577637771798938240199003426265510667964356232618062683179703829679358765191861820865826956414051127238697218080064161580891637330936200553777157473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8436516c364c7bdf2229dbc95a836c9207049347
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socaas.forticloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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