*.ansm.sante.fr

- ANSM -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:18:6d:d8:45:3e:48:26:0f:0d:8f:66:e9:b9:50:94 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ANSM

Organization: ANSM
State / Province: Île-de-France
Locality: Saint-Denis
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:18:6d:d8:45:3e:48:26:0f:0d:8f:66:e9:b9:50:94
Serial Number (int): 9431439012458907877521150713443995796
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a3:7a:2b:21:a3:b3:a3:2c:78:20:55:6f:e6:f1:fc:ef:f3:ca:0c:82
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 94:d2:ca:04:3d:7f:f5:dc:e8:e4:1c:66:c6:80:64:3c:29:d4:8b:e6
Fingerprint (sha256): 1f:88:e8:d3:08:02:fc:3f:64:f0:15:66:05:85:70:9d:0c:a0:ea:4e:7a:44:d2:d7:93:f6:09:e8:68:6f:0c:83

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate *.ansm.sante.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ansm.sante.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ansm.sante.fr

Other certificates including the domain name sante.fr

(limited to 100 certificates)
www.ocean-indien.paps.sante.fr
*.briques.sante.fr
*.briques.sante.fr
mon-rdv-dondesang.efs.sante.fr
auth.efs.sante.fr
actualites.wiztopic.com
atih.sante.fr
sni.cloudflaressl.com
coopps.ars.sante.fr
actualites.wiztopic.com
re7.efs.sante.fr
actualites.wiztopic.com
pdlo-mentor.efs.sante.fr
re7.donneurs.efs.sante.fr
cms.efs.sante.fr
ra.efs.sante.fr
ecars-ppc.ars.sante.fr
ecarsproxy-ppc.ars.sante.fr
applis.atih.sante.fr
qualhas.atih.sante.fr
www.hauts-de-france.paps.sante.fr
secours.sipg.sante.fr
*.asc.paca.sante.fr
mon-rdv-dondesang.efs.sante.fr
*.guichet-unique.paca.sante.fr
mail.atih.sante.fr
www.sipg.sante.fr
www.ocean-indien.ars.sante.fr
www.projet-regional-de-sante-pays-de-la-loire.ars.sante.fr
lesagoras.paca.ars.sante.fr
donneurs.efs.sante.fr
www.cls-bretagne.ars.sante.fr
sirec.ars.sante.fr
atih.sante.fr
www.democratie-sanitaire-pays-de-la-loire.ars.sante.fr
www.cng.sante.fr
mon-rdv-dondesang.efs.sante.fr
*.annuaire.sante.fr
re7.oudonner.api.efs.sante.fr
www.mini-site1.ars.sante.fr
cms.efs.sante.fr
www.mini-site1.ars.sante.fr
ecarsextranet.ars.sante.fr
ecarsproxy.ars.sante.fr
coopps.ars.sante.fr
mtsfp-vm-sante-ars-recette.accelance.net
ars.sante.fr
paps.sante.fr
inscriptions.cestanous.efs.sante.fr
sslcertificate2.queue-it.net
www.epmsi.atih.sante.fr
actualites.wiztopic.com
sslcertificate2.queue-it.net
mtsfp-sante-papsars-recette.accelance.net
webconf.intranet.atih.sante.fr
mtsfp-vm-sante-ars-preprod.accelance.net
www.epmsi.atih.sante.fr
cawi.esteban.invs.sante.fr
es-mayotte.ars.sante.fr
mtsfp-sante-papsars-recette.accelance.net
www.paps.pp.ars.sante.fr
sivss.sante.fr
www.guyane.paps.sante.fr
www.mini-site1.ars.sante.fr
*.inpes.sante.fr
sslcertificate2.queue-it.net
ecarsextranet.ars.sante.fr
applis.atih.sante.fr
actualites.wiztopic.com
actualites.wiztopic.com
arhgos.ars.sante.fr
mail.atih.sante.fr
donneurs.efs.sante.fr
ecars-frm.ars.sante.fr
tdb-esms.atih.sante.fr
www.cng.sante.fr
imotep.ars.sante.fr
paca-sport-sante.fr
www.corse.ars.sante.fr
www.efs.sante.fr
*.ansm.sante.fr
paca-sport-sante.fr
mti.efs.sante.fr
ecarsextranet-frm.ars.sante.fr
sslcertificate2.queue-it.net
www.ansm.sante.fr
imotep.ars.sante.fr
*.efs.sante.fr
actualites.wiztopic.com
dondesang.efs.sante.fr
arceidf.ars.sante.fr
ra.efs.sante.fr
partage.ars.sante.fr
www.epmsi.atih.sante.fr
www.efs.sante.fr
partenaires.annuaire.sante.fr
sni.cloudflaressl.com
form.api.efs.sante.fr
ecarsproxy-frm.ars.sante.fr
*.efs.sante.fr

Certificate

The complete raw certificate details for *.ansm.sante.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9431439012458907877521150713443995796
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint-Denis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ANSM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ansm.sante.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776613629121373248457557766846316986003240535281256234004921438929991389855463028777332544467720385945213936817492392386304822708664167298587431219394134298319220955486382112981956568527887054933847710299091439617007962248787357373815182804270050410356974606033145279443620510068199249702192388738490907885354221127098775031934233217662086726195880616952354401047334052231929216260900454458407222494324989441355814920861891359533968004433265705655504236068611898375160003068274887441212576121227711187126620274942187303475280996955961089449861602679114908870422246560762416588272739720772859814321814182198915384814222549616528727511001935461443799507870484529522455291066276382152747611410828736248612362640886003381753572652384622071824464480017433617609098367233326239497276110398810802357894835384977278795726892648197810673456485086863111705254137635407517485339610356021858090728153084568277937015603455920171599257128678932764303529493507267742307407606467905515431665005806042280767577768330368467945500029410208205055687471331316059095481759115221010408420171181519704426459725246308265725536199814492406380747210170336857804482836573918222425938764086640453693544125507499711681177747773541590330057606104609489186158617559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a37a2b21a3b3a32c7820556fe6f1fceff3ca0c82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ansm.sante.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000187045b75320000040300463044022078d3c3d5ce48079bf56ae17426c3a3c9421f3221f0cd1b920b19217dc10fd191022071035e620092dfd5820448bf9b8a7051a516630bef8fb4e611a57f0e768dd68700760073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b500000187045b75360000040300473045022100fc23c351fc6c1cbb623a2dc290ba19888c9ad8dcb0c5c04d7aa7d2095f23276c02205bbcc4c56ee7a9bdf8bc7a2afe6538b064b625e28acc9b55d9ccde17e855bf6a00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000187045b75000000040300463044022024772d72b30f4cb48c1c3ae70341ef02e38b4852965dfd40cd159dfa1bfc51cd02207ed9a5ac08bab36a8152d5b5b8fac54557e3f48e9233223e52cefbc9ad4ddd7a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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