math0.pm.tokushima-u.ac.jp

- Tokushima University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 45:3a:cd:f9:31:18:a9:42:db:52:e0:0f:44:51:9a:93 was issued on by National Institute of Informatics.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Tokushima University

Organization: Tokushima University
Organization unit: Mathematical Methods in Sciences
State / Province: Tokushima
Locality: Tokushima-city
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 45:3a:cd:f9:31:18:a9:42:db:52:e0:0f:44:51:9a:93
Serial Number (int): 92022062563930008891215739626546371219
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: bd:cc:e6:5a:f5:f0:33:03:b2:6f:0b:cf:17:96:fb:19:28:d9:5a:b9
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): bc:51:fd:15:12:45:85:9b:d4:34:94:27:11:b6:bd:b9:da:6d:8a:d4
Fingerprint (sha256): 23:11:79:ff:a6:26:84:1a:50:a6:f7:aa:b1:d3:84:ba:a9:3f:a4:ec:dd:9d:e5:f4:22:c9:64:11:f0:18:d2:da


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate math0.pm.tokushima-u.ac.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for math0.pm.tokushima-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

math0.pm.tokushima-u.ac.jp
sun.pm.tokushima-u.ac.jp

Other certificates including the domain name tokushima-u.ac.jp

(limited to 100 certificates)
ZAIMU-TOKUDAI.jim.tokushima-u.ac.jp
kjm.medsci.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
repo.lib.tokushima-u.ac.jp
industal.tokushima-u.ac.jp
tocms.hosp.med.tokushima-u.ac.jp
iaso.ait231.tokushima-u.ac.jp
www.cue.tokushima-u.ac.jp
pch91.ait.tokushima-u.ac.jp
uzu.ias.tokushima-u.ac.jp
web-apply.ait.tokushima-u.ac.jp
uls01.ulc.tokushima-u.ac.jp
kangoportal.hosp.med.tokushima-u.ac.jp
rad91.ait.tokushima-u.ac.jp
sihep.ait231.tokushima-u.ac.jp
www.awasapo.tokushima-u.ac.jp
kaigi.hosp.med.tokushima-u.ac.jp
kouza.cue.tokushima-u.ac.jp
taiwa.honbu.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
shikin.ccr.tokushima-u.ac.jp
web-apply.ait.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
sv4x5.ait231.tokushima-u.ac.jp
moo3.chi.tokushima-u.ac.jp
goukaku.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
study.ait231.tokushima-u.ac.jp
gidp.ait230.tokushima-u.ac.jp
femto.me.tokushima-u.ac.jp
zsysap.jim.tokushima-u.ac.jp
eweb92.stud.tokushima-u.ac.jp
ldap.ait.tokushima-u.ac.jp
eweb91.stud.tokushima-u.ac.jp
cluster.tokushima-u.ac.jp
cws.ocs.tokushima-u.ac.jp
ek4lms01.ulc.tokushima-u.ac.jp
irud.med.tokushima-u.ac.jp
adas.ait231.tokushima-u.ac.jp
kj.medsci.tokushima-u.ac.jp
kj.medsci.tokushima-u.ac.jp
am.ait.tokushima-u.ac.jp
www2.e.tokushima-u.ac.jp
www.isc.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
www2.e.tokushima-u.ac.jp
sns.ait230.tokushima-u.ac.jp
lyncsip.ait230.tokushima-u.ac.jp
moo.chi.tokushima-u.ac.jp
frigg.db.tokushima-u.ac.jp
bml.me.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
iccsv.ait.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
risa.is.tokushima-u.ac.jp
gidp.ait230.tokushima-u.ac.jp
math0.pm.tokushima-u.ac.jp
adas.ait230.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
bun.honbu.tokushima-u.ac.jp
uls01.ulc.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
kjw.medsci.tokushima-u.ac.jp
www.tokushima-u.ac.jp
cidp.ait.tokushima-u.ac.jp
cluster.tokushima-u.ac.jp
iccsv-s.ait.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
cidp.ait.tokushima-u.ac.jp
ce.ce.tokushima-u.ac.jp
moo.chi.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
uzu.ias.tokushima-u.ac.jp
web.ph.tokushima-u.ac.jp
www-math.ias.tokushima-u.ac.jp
www.pled.tokushima-u.ac.jp
medinfo.ait231.tokushima-u.ac.jp
kangoportal.hosp.med.tokushima-u.ac.jp
hub.tokushima-u.ac.jp
moo2.chi.tokushima-u.ac.jp
tocms.hosp.med.tokushima-u.ac.jp
www.ee.tokushima-u.ac.jp
kjm.medsci.tokushima-u.ac.jp
avian.aitre.tokushima-u.ac.jp
els.stud.tokushima-u.ac.jp
moo2.chi.tokushima-u.ac.jp
www-me.ait231.tokushima-u.ac.jp
cbtph.ait.tokushima-u.ac.jp
twf.ait.tokushima-u.ac.jp
www.cue.tokushima-u.ac.jp
www2.isc.tokushima-u.ac.jp
rad01.ait.tokushima-u.ac.jp
web-ias.ait231.tokushima-u.ac.jp
ed.st.tokushima-u.ac.jp
weierstrass.is.tokushima-u.ac.jp
web2.ias.tokushima-u.ac.jp
dev.ipc2.tokushima-u.ac.jp
vdi.ait.tokushima-u.ac.jp

Certificate

The complete raw certificate details for math0.pm.tokushima-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BrkxD+/J9SeCrugWEoK
EuePm2rz0+WUjT7lzwlRSG+0E299MHML9ibgduLv45zF1cNWxNvU1h3me4a98G+Z
M51wQmvsrQl2aO+5VKLSn5EVeRR+bE9QDZPfUA6Gqpk6F+5JFKtP/1xR5x6BoT7S
9miKhWsegPUcQAjH3FDHDJT/XA0m32WVIUYSaytCV9sS5/zYEF98T4MJQUjSWovX
PIqdMfQ7GGsCt59bR3cTztmsR2684dYdRQ7XM7YMcN1GZG93Kp5WM7XoPlohjCSK
xo/VrpA/yEiUNwv7YYaiIVR0+K5jZZuy+cqvtSJpwGFIYhKfe+6UjaXRFWmFW6UT
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92022062563930008891215739626546371219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-27 05:47:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-28 05:47:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokushima'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokushima-city'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokushima University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mathematical Methods in Sciences'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'math0.pm.tokushima-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26270829170998364014206726463162150963140769891144067203612312899927252477270542881380075699207845435828411693989803180523302970438076420840897826248836948789277485095619731773088494511814987768602093873790432360972008420576590161362954370611259906438106588044635103604502902097588974488639828014192484616573205280007231483106249300899157059508024104901524005574675056738758447537920336464606602550691860562865908524140592154455840715059228504880793268258348667827031286086056783987282461432186207609248977534288983513251359406901780297234221290602501365525555087876430337896482915976200931004369414783889386999452571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'math0.pm.tokushima-u.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sun.pm.tokushima-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bdcce65af5f03303b26f0bcf1796fb1928d95ab9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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