odtvs.opac.nm.cz

Issued by R3

About this certificate

This digital certificate with serial number 04:79:8a:a8:ec:04:ab:74:e6:99:39:58:6c:a4:5a:05:56:c7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=odtvs.opac.nm.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:79:8a:a8:ec:04:ab:74:e6:99:39:58:6c:a4:5a:05:56:c7
Serial Number (int): 389807620680783735279962821788145495135943
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e3:ad:35:df:98:aa:1b:cf:bb:6d:c2:22:7d:b4:00:d7:5c:e5:bd:cd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:54:88:de:25:af:a4:1c:a4:ad:ca:1c:21:48:45:54:e9:ad:0d:a4
Fingerprint (sha256): 20:66:f8:e5:88:50:b0:7b:dc:cf:24:0f:73:22:61:5b:da:39:7e:2c:1b:90:b5:ea:77:a7:29:ea:0f:72:b1:2f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate odtvs.opac.nm.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for odtvs.opac.nm.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

odtvs.opac.nm.cz

Other certificates including the domain name nm.cz

(limited to 100 certificates)
nm.opac.nm.cz
mbssceny.opac.nm.cz
rezervace.benesovavila.nm.cz
kanesh.nm.cz
kanesh.nm.cz
kanesh.nm.cz
cmhdok.opac.nm.cz
vademecum.nm.cz
intro.nm.cz
nm.opac.nm.cz
vavobd.nm.cz
kanesh.nm.cz
cmhdok.opac.nm.cz
kanesh.nm.cz
nm.cz
stt.opac.nm.cz
npm.opac.nm.cz
nm.cz
npm.opac.nm.cz
prazskestopyantoninadvoraka.nm.cz
kanesh.nm.cz
sumerian.nm.cz
nm.cz
cmhdok.opac.nm.cz
posta.nm.cz
antonindvorak.nm.cz
kanesh.nm.cz
amusing.nm.cz
publikace.nm.cz
nm.cz
botanika.opac.nm.cz
android-app.nm.cz
amusing.nm.cz
intro.nm.cz
mbssceny.opac.nm.cz
entomologie.opac.nm.cz
oncd.opac.nm.cz
kanesh.nm.cz
kerio.nm.cz
edukace.benesovavila.nm.cz
grepo.nm.cz
mbs.opac.nm.cz
botanika.opac.nm.cz
publikace.nm.cz
botanika.opac.nm.cz
cmh.opac.nm.cz
nm.cz
*.opac.nm.cz
zbraslav.opac.nm.cz
kanesh.nm.cz
intro.nm.cz
helpdesk.nm.cz
zbraslav.opac.nm.cz
kanesh.nm.cz
csds.opac.nm.cz
eshop.nm.cz
posta.nm.cz
odtvs.opac.nm.cz
antonindvorak.nm.cz
stt.opac.nm.cz
odtvs.opac.nm.cz
zbraslav.opac.nm.cz
odtvs.opac.nm.cz
bedrichsmetana.nm.cz
rad.nm.cz
*.opac.nm.cz
navigation-app.nm.cz
mad.opac.nm.cz
no.opac.nm.cz
t.mailkit.com
no.opac.nm.cz
admin.nm.cz
helpdesk.nm.cz
mad.opac.nm.cz
ms.nm.cz
kanesh.nm.cz
amusing.nm.cz
mad.opac.nm.cz
npm.opac.nm.cz
antonindvorak.nm.cz
onedrive.nm.cz
p.pozvanky.nm.cz
intro.nm.cz
helpdesk.nm.cz
rezervace.pamatnikpalackeho.nm.cz
t.mailkit.com
prazskestopyantoninadvoraka.nm.cz
amusing.nm.cz
intro.nm.cz
t.mailkit.com
oncd.opac.nm.cz
ms.nm.cz
rd-gw.nm.cz
onedrive.nm.cz
mbs.opac.nm.cz
helpdesk.nm.cz
mad.opac.nm.cz
muzeum3000.nm.cz
oncd.opac.nm.cz
helpdesk.nm.cz

Certificate

The complete raw certificate details for odtvs.opac.nm.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGJjCCBQ6gAwIBAgISBHmKqOwEq3TmmTlYbKRaBVbHMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA5MjgyMTI2MzhaFw0yMTEyMjcyMTI2MzdaMBsxGTAXBgNVBAMT
EG9kdHZzLm9wYWMubm0uY3owggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQDPOM0awZClWnBAwSHd7FxLslQexY/39rTHk08wiEHRky7iPeLMKsAkVu/Yu4bA
PpJ8pwf3zbQeliLcAHt/bdI5PeGDmnml/zN1jpIUY8TaRxJ1yto9KBfmImE/R//j
89tttXSwVzK3TJ8TKuyjxqI8py75dIjWqX3W88AuijtLxVi8TfRubaKXkMzHhMhh
hWxChpPsmsMzvozmmLzsCTSg7QF6F8osFx2/Q1gYnzgoT2DWNbDw/tezh6iNS08+
w2uQ/oJXAADmsbn/84zlE0TCeY45YKKqO5NCxjTGoaHAfBngaCWGq7HyGZU9ZyX8
tQ91TsGKn6osm54z4R/lOlo0M5gUt6ZFVbioKHrHpb13Q/KkFBW2hFTYTJmiyBa7
LESSo6wkVyRq6y4P3AF/vcqQN+c0dcyr/VhHR6SDdJzWyDsEECIfgog9TN9pPgkB
aSU90W4vpB9h6Sm4/MsZpwoS5y8u8ZyfIDAGsJxE9A6Go3Qb3uXXNS9thp/KhUxY
zLjNluzEcHNgwqYKfc6bv5xby02qGcDBqsVC5BS3TNrGh+W6qzWDn0ezpbsO4yVc
5Pl9K9tSnjNJ0ywMKVu03HTXp4kBH7qDl7Fd6a8IqUKzvqPcyDM8lDTReMIPUn9t
jUSP1maaYI+W1yO4g4TafmMq1RNDYrjqpScYaQ31l1p5QwIDAQABo4ICSzCCAkcw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTjrTXfmKobz7ttwiJ9tADXXOW9zTAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzAbBgNVHREEFDASghBvZHR2cy5vcGFjLm5tLmN6
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB
9QSB8gDwAHYAlCC8Ho7VjWyIcx+CiyIsDdHaTV5sT5Q9YdtOL1hNosIAAAF8LoRb
wQAABAMARzBFAiEA351mMP9UpPEBuDjW1ZDFNz8ZXADQNGA1kp+qDocEv5ICIB2p
NqvwWVKhCK6uFrcJIgz27F9gJolYVydFfI7w+bSLAHYA9lyUL9F3MCIUVBgIMJRW
juNNExkzv98MLyALzE7xZOMAAAF8LoRbugAABAMARzBFAiEA4xpNW+eFGh5DsdXz
q/tinoeJnUa2lrKJiPCIooF+npYCIGD+DZR6QzhAx3v7r7CcZi+rTDesl7LU1QPJ
ZO2yFjULMA0GCSqGSIb3DQEBCwUAA4IBAQACJ0PVfCvgpc6ZVuQbVFMlsq0hQOW5
3weCg1DwgTuwSTWH+KU0By6k71L5TW01vlPdfayZjU3zPfrthlaZihYdPFV2BGwM
cLJjMB9Dr4W5h/TplR4NPYtqtKR4vsMMb2NE755qyA2Yi8+/W8Z181yL2xkOYZog
vSqYESfas0W6C8yidC3Xxwxr0/SSSKpnRKvrCEJzTjfbtjSy5JFmqJ51OQkPKAyv
6RocOXkx9J2TfztDS3lHDvD5hseOBI2gs5kyes8B1ae6+mCaw0PPQSH8fSDSD2oS
h+EAbcJnsIeQSIxy64VoAhoHGJyAHC1setsdqOmCFE+fHlcQkPkz5ozQ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389807620680783735279962821788145495135943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-28 21:26:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-27 21:26:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'odtvs.opac.nm.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845391512064013893852389498444248425665541983310385981658637352987443472093029586348846457984216385709329509579203932316192951055691492574865089092185189467931027547882415493430366426066219615282888518851252757717149436339447230901238119737316985991384269543719551379910040239798331088599032970489118262516975584934709685947151055450700645393925800743419916706287200597219776903556202869229986614195469067611116360137334578027009607478076610348667806589168565253073261490164050392575349583051186398998355597661548860028098956098695031438221870758067917634502683108844067348507289246614468134777078345267139071430482311825875920863872764985196318425485903592613350901112872243046229758815695315133686216791846356001561099064113063988303371823948404328581159799683742544508583695044775225575622344018516984665942331408321686836244586886437278065163343823832073331688749533141669548755948356170718047644123672658249859954599245421647679325834582758125559198291929202195504822806304048935813519717220766626514644717267129115664891981826400277105351003973846078148385888453457612588556247419435574959260062329295615452613796104344375641900742089373957529784047935649925037313458064112439248461514989832044485295024288310654405495599298883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3ad35df98aa1bcfbb6dc2227db400d75ce5bdcd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odtvs.opac.nm.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017c2e845bc10000040300473045022100df9d6630ff54a4f101b838d6d590c5373f195c00d0346035929faa0e8704bf9202201da936abf05952a108aeae16b709220cf6ec5f602689585727457c8ef0f9b48b007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017c2e845bba0000040300473045022100e31a4d5be7851a1e43b1d5f3abfb629e87899d46b696b28988f088a2817e9e96022060fe0d947a433840c77bfbafb09c662fab4c37ac97b2d4d503c964edb216350b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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