data.aau.at

- Alpen-Adria Universitaet Klagenfurt -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0e:80:80:e6:b3:1b:f3:e1:46:32:42:cd:6f:99:e8:56 was issued on by TERENA.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Alpen-Adria Universitaet Klagenfurt

Organization: Alpen-Adria Universitaet Klagenfurt
Locality: Klagenfurt
Country: AT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:80:80:e6:b3:1b:f3:e1:46:32:42:cd:6f:99:e8:56
Serial Number (int): 19276420365219535297498409116825675862
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: be:31:50:72:c6:91:d1:53:4d:95:75:18:b3:c3:15:fa:62:f8:13:31
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 16:f6:54:7b:a8:a4:74:e7:84:5c:c3:46:14:ef:60:b8:ce:d3:be:d7
Fingerprint (sha256): 23:30:9d:0b:b6:d0:08:d8:47:50:5d:a6:19:22:b1:f4:a2:f0:1c:12:f5:71:d4:48:e7:15:cd:aa:2e:93:fd:cd

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate data.aau.at

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for data.aau.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

data.aau.at
ftp.aau.at
data.uni-klu.ac.at
ftp.uni-klu.ac.at

Other certificates including the domain name aau.at

(limited to 100 certificates)
studdorf.aau.at
clouare.aau.at
shib.aau.at
campus-gis.aau.at
scs-iwas.aau.at
qualitative-content-analysis.aau.at
elearning.aau.at
lab-iid.aau.at
dx-workshop.org
seafile.aau.at
survey-test.aau.at
web-ainf.aau.at
dx-workshop.org
survey.aau.at
ae-ainf.aau.at
seafile.aau.at
pervasive.aau.at
www.stat.aau.at
swilt.aau.at
jobs.aau.at
www.itec.aau.at
ub.aau.at
mobile.aau.at
scs-iwas.aau.at
kiss.aau.at
uniclub.aau.at
lab-iid.aau.at
elearning.aau.at
uniclub.aau.at
narrativeencounters.aau.at
rooms.nes.aau.at
lids.aau.at
doku-inf.aau.at
narrativeencounters.aau.at
ameise.aau.at
icn.itec.aau.at
moodle.aau.at
campusplan.aau.at
newsletter.uniclub.aau.at
scs-iwas.aau.at
bscw.aau.at
wiki.nes.aau.at
dia-2018.aau.at
pfl.aau.at
trusteye.nes.aau.at
informatikwerkstatt.aau.at
vulnscan.zid.aau.at
mailbox.itec.aau.at
pfl.aau.at
tomwinkler.nes.aau.at
svn-itec.aau.at
data.aau.at
ius2.aau.at
sepse-iid.aau.at
www-app1.aau.at
www.aau.at
tech.nes.aau.at
moodle-standby.aau.at
kcgl.aau.at
kindergruppe.aau.at
crowdmeteodata.aau.at
data.aau.at
video.aau.at
apollon.aau.at
aau.at
kiss.aau.at
darwin-isys.aau.at
ius.aau.at
indy.nes.aau.at
codex-management.aau.at
litkult1920er.aau.at
trusteye.nes.aau.at
wiki-ainf.aau.at
mmsys2016.itec.aau.at
ahesn.aau.at
informatik-spl.aau.at
me-sci.aau.at
crosmos.nes.aau.at
dia-2018.aau.at
saner.aau.at
uniclub.aau.at
spiderino.nes.aau.at
doku-inf.aau.at
ide.aau.at
tewiki.uni-klu.ac.at
mc40.aau.at
usionline.aau.at
ius.aau.at
survey.aau.at
mooshak.nes.aau.at
www-php1.aau.at
blog.tewi.aau.at
sauron.aau.at
tomwinkler.nes.aau.at
www.edu.aau.at
aesn-api.aau.at
bbb.aau.at
crosmos.nes.aau.at
www.aau.at
vcs-isbi.aau.at

Certificate

The complete raw certificate details for data.aau.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19276420365219535297498409116825675862
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Klagenfurt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alpen-Adria Universitaet Klagenfurt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'data.aau.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853865240799455376357019324554178976645528557904025936565027272098206136240863268765181751177802951280464181156204024206196321445170851787611955878944730492058795960572487531336900839374461921715866446878473946615336159497632661489397271892952783931417952479202833376399692903457001540442952806841506432859957618713459815090121375181100579078173906418667344240758501220680483403101399398487910965385231415912549635533264950125614434823232796412664459445077002908972630697161080816515130805459150509279004332324532521460644492741478913338752748357121371606715005799221657886315484539803283257302154972913342703894643901545598090810698996989018307887512295055999409534254460745700399983389117672829159328578144927100819309680785669194111532361634089165269439687651628042145614768863081387325660564881556092633820368111738827729279618344282203072647676054497075234751185173433366737838110953335826798121328957095340771875212674499437257200173309274733953755100780641036695105128080289515976354647723652867541405749163935807077004000830660212840086707738186375059935823734715021994355798388094670999703740763635016600774950091860498236637522442520607906812164521818506292985721373536893849147197094910795317193946017054243715846811973401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be315072c691d1534d957518b3c315fa62f81331
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.aau.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.aau.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.uni-klu.ac.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.uni-klu.ac.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							01660075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000171bfd66411000004030046304402202ccaae03a37f16d9c71c12eb104fdbd132ce9e8469571a8153a269d970d4854402200c796cb1a8fc4678083fb66c2aad47bf1639df721d73350a67a95cf535e2298d0075002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f0200000171bfd66449000004030046304402201fe5e0acd5003c408c55608e24ff88afc905dfc46c70270289904484318897960220471b5bcaf56b4a1966efca7190dcba076c13f88e732ed8fc935475a81c062ac800760051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e500000171bfd66487000004030047304502201d5dbc7ebcbc88579f012431b7c8b61ddee58917223d81f21779772d2e6631a1022100a68c8ee6744b1686126181e6598065539b5ce4d70ce9024a1c2edcbf4cd38732
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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