static.marin.drivercopilot.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:dd:ae:6a:73:aa:89:d4:3f:a3:18:e1:35:bf:45:71 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=static.marin.drivercopilot.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:dd:ae:6a:73:aa:89:d4:3f:a3:18:e1:35:bf:45:71
Serial Number (int): 3809491170559234952679008378711655793
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 12:2a:d2:ec:21:b8:2f:50:92:9f:d7:d9:9b:50:8f:cd:2f:f4:1e:2b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ff:a5:37:87:e0:cb:1e:ca:87:ee:40:be:f9:77:f3:18:9d:1f:ae:be
Fingerprint (sha256): 1c:f3:18:63:0b:55:21:b8:1c:ba:26:cb:88:84:d1:61:b4:4e:4a:c5:07:cc:94:66:c9:4f:16:00:04:b2:41:f0

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate static.marin.drivercopilot.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for static.marin.drivercopilot.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

static.marin.drivercopilot.com

Other certificates including the domain name drivercopilot.com

(limited to 100 certificates)
artrader.co
static.pvbe-test.drivercopilot.com
dashboard.rooster.drivercopilot.com
board.mobly-test.drivercopilot.com
board.mobly.drivercopilot.com
board.mobly.drivercopilot.com
board.bnpit-test.drivercopilot.com
app.ecolora.io
board.rooster.drivercopilot.com
*.drivercopilot.com
porsche.drivercopilot.com
mydaytracker.net
operationfindandfeed.org
dashboard.triglav.drivercopilot.com
static.kuc.drivercopilot.com
dashboard.maritime-test.drivercopilot.com
static.maritime-production.drivercopilot.com
callback.piacockpit.at
dashboard.youse-test.drivercopilot.com
static.aigsg-test.drivercopilot.com
www.jfcollections.com
mikeparsonsink.com
static.josip.drivercopilot.com
board.kuc.drivercopilot.com
callback.piacockpit.at
board.pvbe.drivercopilot.com
www.rnav.tk
board.triglav-test.drivercopilot.com
app.radanalyzer.com
static.aigma-test.drivercopilot.com
buydev2-links.gojabu.com
app.onfakt.no
batalhadepalavras.com
alkhabourah.net
dashboard.mobly.drivercopilot.com
s.zotosu.net
tryapollo.com
static.pvbe.drivercopilot.com
www.benknight.me
www.grandmasjid.com
board.aigsg.drivercopilot.com
board.infra.drivercopilot.com
dashboard.infra.drivercopilot.com
web-testttt-v6.drivercopilot.com
static.demo.drivercopilot.com
twocanapp.com
backup.foyer-drp.drivercopilot.com
static.bnpit.drivercopilot.com
agency.umrahmarket.com
app.infrab.drivercopilot.com
static.demo.drivercopilot.com
board.youse-test.drivercopilot.com
callback.piacockpit.at
dashboard.aigsg-test.drivercopilot.com
mindfulmetrics.org
app.infra2.drivercopilot.com
static.motionauto.drivercopilot.com
static.infra.drivercopilot.com
dashboard.maritime.drivercopilot.com
static.ivan.drivercopilot.com
dashboard.infra.drivercopilot.com
static.marin.drivercopilot.com
dashboard.maritime-test.drivercopilot.com
board.porsche-test.drivercopilot.com
callback.piacockpit.at
static.bnpit.drivercopilot.com
hiloshilazas.com
birthdayforacause.org
freshonthegopr.com
www.benknight.me
static.maritime.drivercopilot.com
callback.piacockpit.at
static.maritime.drivercopilot.com
app.clinicaneocor.com.br
dashboard.bnpit-test.drivercopilot.com
unifcvhomolog.orchestra4edu.com
adly.link
static.demo.drivercopilot.com
izonick.izone.ua
dazz.spillpdf.com
marketscombined.com.au
dashboard.aitech-test.drivercopilot.com
board.test.drivercopilot.com
static.infra.drivercopilot.com
static.src-test.drivercopilot.com
find.30daysofspa.com
board.pvbe-test.drivercopilot.com
static.aighk.drivercopilot.com
static.ivan.drivercopilot.com
board.tuvauto-test.drivercopilot.com
board.maritime.drivercopilot.com
app.sabade.ir
shop.pontedilegnotonale.com
dashboard.aigma.drivercopilot.com
kernersville-knvl.cox2m.com
board.triglav.drivercopilot.com
board.miso.drivercopilot.com
board.motion-test.drivercopilot.com
admin.horacestudio.com
poststacks.com

Certificate

The complete raw certificate details for static.marin.drivercopilot.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIQAt2uanOqidQ/oxjhNb9FcTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA3MTMwMDAwMDBaFw0xOTA4MTMx
MjAwMDBaMCkxJzAlBgNVBAMTHnN0YXRpYy5tYXJpbi5kcml2ZXJjb3BpbG90LmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIs6O8EPFKThpbWudBmf
mJu998up6YyFVGJmmbOOMdBvliZcUKt4SeMJj9J+PYeJjPV2YOXahBflEYm5lAZC
HRtjYfukMAjCw3wqDLREkwPB6JrYtgNgNhzOyz3BO+nd8u/CEQ0qkS5A/jDnPAqO
GOU9N34Wdppo+HX8qIQONeLXozPyNVzOmsl4gR0hiuzUzVeF0IHpezwepubWIuAY
f5Zgoeg3meVgv6KIbx776t2FBtQaH9eSvI+Y8ZowR1tPoYFeEe77Kg9XY1J69+UK
UAnZ+tkeSHIzux/jlEl2GNHC8HYKbsVweNQP+HKx1Prv2a6zw9K5qWVNg8U8L759
Zx8CAwEAAaOCAZcwggGTMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3Q
MB0GA1UdDgQWBBQSKtLsIbgvUJKf19mbUI/NL/QeKzApBgNVHREEIjAggh5zdGF0
aWMubWFyaW4uZHJpdmVyY29waWxvdC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRw
Oi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkw
FzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEF
BQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUF
BzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQw
DAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAb4Ur1GL1vz3hmaVZXLSPD9rl5RBB1nvaKjrtoca/VBgy+77NHm1Nsgh9
AneTxivMct59RyhlPEOPKkk81HnochV0a3inLwWJ5y+Z/VVYEZ/bPFKHUtJSRuty
RKzLFXiVB31i9SdihzbXDNF3MJVZlKOODTCCwi9PAWd9FcZ05IG9TRxXx7p30pja
EXzrlFn/gxiN2VA4c3oSRiPLBS7XlAOcIF9nIn2hIDbZHiLyvetPp4OQG/I1CQe0
G+FTpEXmbZbSmxQDovlJeqIJcF0GOEg/Ys/cGEXRWXTJAPv6/D8+xB8ohau1jOO1
B9EG6uG1boUBAph2e5LmETPBv3u9zw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizo7wQ8UpOGlta50GZ+Y
m733y6npjIVUYmaZs44x0G+WJlxQq3hJ4wmP0n49h4mM9XZg5dqEF+URibmUBkId
G2Nh+6QwCMLDfCoMtESTA8Homti2A2A2HM7LPcE76d3y78IRDSqRLkD+MOc8Co4Y
5T03fhZ2mmj4dfyohA414tejM/I1XM6ayXiBHSGK7NTNV4XQgel7PB6m5tYi4Bh/
lmCh6DeZ5WC/oohvHvvq3YUG1Bof15K8j5jxmjBHW0+hgV4R7vsqD1djUnr35QpQ
Cdn62R5IcjO7H+OUSXYY0cLwdgpuxXB41A/4crHU+u/ZrrPD0rmpZU2DxTwvvn1n
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3809491170559234952679008378711655793
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'static.marin.drivercopilot.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17575840357277771179204677702197428664415302584363020500184786768832710814804214857429141047581508375467489868501485783510436080141911544535337966413855426277955848593502780741067220419994401339184323199094687883057883036441663855246508797740154264130887138163972591124735872198315508958577858458357915777466777153752692842230987481360031130373672902493752591814005919068491468040251116245358601391252934223521338306839367466773222486931076503468281303639481403504255679145207745351635403537977485115087493530633690450593902671353639125853479098071837108551656439139250591782998322129928604267168617721171304089741087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							122ad2ec21b82f50929fd7d99b508fcd2ff41e2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.marin.drivercopilot.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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