*.hirschmann-automotive.com

- Hirschmann Automotive GmbH -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 20:fb:9f:27:51:74:39:bf:0d:56:ce:a3:66:ef:7f:3c was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Hirschmann Automotive GmbH

Organization: Hirschmann Automotive GmbH
State / Province: Vorarlberg
Locality: Rankweil
Country: AT

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 20:fb:9f:27:51:74:39:bf:0d:56:ce:a3:66:ef:7f:3c
Serial Number (int): 43841790394843662229372626239740673852
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): f1:73:03:ba:2d:88:0a:b6:b7:84:f8:27:0e:c3:02:a7:5a:dd:d3:88
Fingerprint (sha256): 22:05:71:ce:2b:c2:4f:fb:59:ad:79:7e:6b:c4:31:4b:71:cb:60:f7:2c:47:d3:f3:a0:8e:2a:9b:48:23:d1:c7

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate *.hirschmann-automotive.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hirschmann-automotive.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hirschmann-automotive.com
hirschmann-automotive.com

Other certificates including the domain name hirschmann-automotive.com

(limited to 100 certificates)
jobs.hirschmann-automotive.com
tagesspiegel.kiosk.plus
kiosk.am-weststrand.com
shop.hirschmann-automotive.com
magazine.suncoastergroup.com
kiosk.am-weststrand.com
media.hirschmann-automotive.com
citrix.hirschmann-automotive.com
atedge01.hirschmann-automotive.com
shop.hirschmann-automotive.com
quals.truebeck.com
www.digital.britishtraveljournal.com
shop.hirschmann-automotive.com
*.hirschmann-automotive.com
magazin.tellz.me
hirschmann-automotive.com
quals.truebeck.com
*.hirschmann-automotive.com
publikationen.contipark.de
*.hirschmann-automotive.com
production-hirschmann-automotive.hosting.snk.de
citrix.hirschmann-automotive.com
kiosk.flp.ch
magazine.roarkidsmagazine.com
citrix.hirschmann-automotive.com
eft.hirschmann-automotive.com
kiosk.vidaglobal.de
publikationen.contipark.de
magazine.elektropraktiker.de
magazine.elektropraktiker.de
magazine.inversionesciel.com
*.hirschmann-automotive.com
kiosk.flp.ch
*.hirschmann-automotive.com
hirschmann-automotive.com
kiosk.der-kleine-georg.de
shop.hirschmann-automotive.com
brochure.ntpwarranty.com
wirbeicontipark.contipark.de
shop.hirschmann-automotive.com
shop.hirschmann-automotive.com
magazine.cioa.com
shop.hirschmann-automotive.com
hirschmann-automotive.com
shop.hirschmann-automotive.com
hirschmann-automotive.com
brochure.ntpwarranty.com
brochure.ntpwarranty.com
shop.hirschmann-automotive.com
quals.truebeck.com
ctx.hirschmann-automotive.com
brochures.keepmoat.com
jobs.hirschmann-automotive.com
magazine.cioa.com
production-hirschmann-automotive.hosting.snk.de
wirbeicontipark.contipark.de
shop.hirschmann-automotive.com
magazine.elektropraktiker.de
shop.hirschmann-automotive.com
shop.hirschmann-automotive.com
kiosk.vidaglobal.de
kataloge.teppich-stark.de
www.hirschmann-automotive.com
shop.hirschmann-automotive.com
kiosk.der-kleine-georg.de
kiosk.der-kleine-georg.de
production-hirschmann-automotive.hosting.snk.de
www.hirschmann-automotive.com
production-hirschmann-automotive.hosting.snk.de
tagesspiegel.kiosk.plus
kiosk.am-weststrand.com
production-hirschmann-automotive.hosting.snk.de
kiosk.am-weststrand.com
kiosk.am-weststrand.com
hirschmann-automotive.com
eft.hirschmann-automotive.com
wirbeicontipark.contipark.de
info.independenceaustralia.com.au
hirschmann-automotive.com
magazine.elektropraktiker.de
shop.hirschmann-automotive.com
cn.production-hirschmann-automotive.hosting.snk.de
shop.hirschmann-automotive.com
production-hirschmann-automotive.hosting.snk.de
magazines.somethinggoodmagazines.com
kiosk.vidaglobal.de
kiosk.der-kleine-georg.de
jobs.hirschmann-automotive.com
kataloge.teppich-stark.de
citrix.hirschmann-automotive.com
magazines.andadev.com
jobs.hirschmann-automotive.com
atedge01.hirschmann-automotive.com
shop.hirschmann-automotive.com
shop.hirschmann-automotive.com
atedge01.hirschmann-automotive.com
citrix.hirschmann-automotive.com
ctx.hirschmann-automotive.com
production-hirschmann-automotive.hosting.snk.de
magazin.tellz.me

Certificate

The complete raw certificate details for *.hirschmann-automotive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd2Pt3lZGg0UB0SOl6y+
s3uEW0N8nLOC46enEo0vJwUVgKHjjMGtI2hscnasnc2b5P/BOMVsRSqMW7wcrWrr
JHjlaysRY9T8P3OLl0u9WSaKJ/Pda9o62+HNlfhuJX0Iapn9w3dKa0O5bo71qetj
bg/eMYzyykkzY41ZISakWjrQu1OKVhIJZsYxbPT0+z4ap+DUR88XAHJ8XNKNOaWB
7FGwzY2DomqO5bEmXPReqWUBNUyXklq83t0Sq2buNnA+NV+qX76XEpjRr6IjPneO
0VZhydvwiydE95P+HqsXu8+w9FkxAfz9y1BELzCMg09iurRY8trTEi9sn3N1FPMv
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 43841790394843662229372626239740673852
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vorarlberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rankweil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hirschmann Automotive GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hirschmann-automotive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22453435974075675620298339906662702585395475142302856727727150215984537069582734165749757292783614619940300391032220097956647031891307420820055653613157450446365135958149596750968578420484318798675274203419425903009901009335312549397516723456772362799845951124987381413231759607263327619513501892224689583415699148258750497749178980846196733603685363186021002783334346804221506707890738444333750615839599443872026133015290989900587177224827973279380346828655999196580312594189089950013112370922882615740774880587534363776967413282500106331407342010043252003846049388384232178086983527139572213370572353272034698145739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hirschmann-automotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hirschmann-automotive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							01e2007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001540aea3532000004030047304502207174bb7c08c10472000c6917e4308b76587608bfa4f1fa6f8daff7ebcafeeea6022100cec92a59b0c06dd8361387f39c83b1a4f40d9858e4caa4291a566b4584b8964f007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001540aea35650000040300483046022100dd5984f5e217397d8c2beb7f4f4a79e0adac87d525187c8505699b72347fc27f022100d124785c087145f2db9c2797f938906a23f70bfb0091a011fc66e526637606c900760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001540aea3566000004030047304502203379bf1c664eed44c36b08c03a8dbb5a61ea652320c0139f0f4a324bd83f044a022100b1b4689f1ab23711246f5fdbf24bf6c850df7fcf8ce39fbd6340c37991406f14007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001540aea3575000004030048304602210085fa5c66f37330013abd2597947543852fc7b82963dad281299a64c51fc2fa12022100b05548d48d956fc11c36a4936972e9b7b0ae8b20396889e870558db516ad8670
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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