www.gordonbernell.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number e3:90:cf:4e:92:a3:f5:25:13:70:be:c9:87:d9:dd:ce was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.gordonbernell.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e3:90:cf:4e:92:a3:f5:25:13:70:be:c9:87:d9:dd:ce
Serial Number (int): 302486650474772574342300911169005280718
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 7b:f4:4d:41:5d:04:06:f5:c4:d6:fd:d7:44:75:9a:67:5c:cf:32:c4
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 02:12:01:bc:df:c6:f1:71:7c:b3:96:81:66:c1:92:c1:a1:07:6b:3c
Fingerprint (sha256): 2d:36:90:c8:2a:4b:64:06:0b:e0:cb:2c:ad:c1:0d:e8:d5:6b:ad:ca:04:b1:5d:8a:8f:c8:9f:c8:36:7e:a6:99

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/lXNKWeNAWEM
CRL Distribution Point: http://crls.pki.goog/gts1p5/MegjlTbyKjs.crl

Check the revocation status for certificate www.gordonbernell.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gordonbernell.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gordonbernell.org

Other certificates including the domain name gordonbernell.org

(limited to 100 certificates)
admin.almadinah-school.com
admin.newbernmiddle.gocats.org
ahs.oc-sd.com
abchandler.henderson.k12.ky.us
tcms.todd.kyschools.us
webmail.gordonbernell.org
admin.tcms.todd.kyschools.us
admin.almadinah-school.com
admin.mes.mayfield.kyschools.us
webmail.gordonbernell.org
admin.clarabartonhs.org
admin.almadinah-school.com
webmail.gordonbernell.org
anniebelle.tiftschools.com
www.nicholsonstemacademy.org
www.gordonbernell.org
lorenaisd.net
abchandler.henderson.k12.ky.us
admin.rembrandt-elementary.vanguardacademy.education
www.pcsd4.org
www.saltlake.k12.hi.us
admin.almadinah-school.com
abchandler.henderson.k12.ky.us
lorena.exteraschools.org
www.pacificschool.com
camden.cuhsd.org
lawtellelem.slp.k12.la.us
trinitystelementary.com
abchandler.henderson.k12.ky.us
www.mountalverniaacademy.org
www.notredameacademy.org
admin.hickam.k12.hi.us
gordonbernell.org
www.ccs-nc.org
webmail.gordonbernell.org
abchandler.henderson.k12.ky.us
www.gordonbernell.org
webmail.gordonbernell.org
admin.gordonbernell.org
admin.almadinah-school.com
admin.highlandrenaissanceacademy.wearecms.com
admin.almadinah-school.com
admin.ntes.todd.kyschools.us
admin.clarabartonhs.org
gordonbernell.org
admin.almadinah-school.com
admin.almadinah-school.com
admin.almadinah-school.com
admin.newbernmiddle.gocats.org
kalihi.k12.hi.us
admin.almadinah-school.com
admin.gordonbernell.org
www.beethoven-secondary.vanguardacademy.education
admin.almadinah-school.com
admin.tcms.todd.kyschools.us
admin.almadinah-school.com
admin.todd.kyschools.us
abchandler.henderson.k12.ky.us
abchandler.henderson.k12.ky.us
independence.summitacademyschools.org
abchandler.henderson.k12.ky.us
admin.almadinah-school.com
gordonbernell.org
abchandler.henderson.k12.ky.us
admin.almadinah-school.com
gordonbernell.org
www.leilehua.k12.hi.us

Certificate

The complete raw certificate details for www.gordonbernell.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIRAOOQz06So/UlE3C+yYfZ3c4wDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMxMjAxMDE1MTE3WhcNMjQwMjI5
MDE1MTE2WjAgMR4wHAYDVQQDExV3d3cuZ29yZG9uYmVybmVsbC5vcmcwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvVyZggQvxQ45itdDlLoyuvsUq/FGz
0Q1NEceTmHnIRq0XIXsoX30QTOpxsrGWgmVQ3NXU56XRf6VMbICdZbTLBExr44rh
nkYj6MFuDx8nrQ7nUQza80+nciydTzTOBmHcnPsws78FVcDQpO+D9x6FFwOH/Eqg
Kf2t2TkPnnbJibD1bJSzpiV1wQh1tQoYeTtg03MwyyeiMenXwoZtGsFhTtD1+khK
VE/ruStzdfEnVvQ5onKwdlm1rc2mygo0GXmKL6l7eLtYqcqT68eqfkZp5kJbVvDd
DlSpEfQTYbEO4AfTU8whXIuYhdVDf15KK67kCW9RWn9GVArSYzMl0K7tAgMBAAGj
ggJ7MIICdzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUe/RNQV0EBvXE1v3XRHWaZ1zPMsQwHwYDVR0j
BBgwFoAU1fyeDd8eyt0Il5duK8VfxSv17LgweAYIKwYBBQUHAQEEbDBqMDUGCCsG
AQUFBzABhilodHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFwNS9sWE5LV2VOQVdF
TTAxBggrBgEFBQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMXA1
LmRlcjAgBgNVHREEGTAXghV3d3cuZ29yZG9uYmVybmVsbC5vcmcwIQYDVR0gBBow
GDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRw
Oi8vY3Jscy5wa2kuZ29vZy9ndHMxcDUvTWVnamxUYnlLanMuY3JsMIIBAwYKKwYB
BAHWeQIEAgSB9ASB8QDvAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xa
OnQAAAGMI0mjuAAABAMARzBFAiBbCAPMjI0yDJQMUn80WbijFMGtNrseQn3Is+QT
R0VQ/wIhAJfZNTAmdkcTFEuq4fqfF6XdKCmL2RTKG6n7SSDf9fjsAHUAO1N3dT4t
uYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGMI0mjiwAABAMARjBEAiAzZKDg
56kAs86z2kV0K3JxzNgtl2tIQhqRYCvHLNsEZQIgU/WODWGcjqD9K6hGbhx0YWp1
tti3BuMgEWMXwReE82UwDQYJKoZIhvcNAQELBQADggEBAEnKeEy0oa68K/io01xN
RU0CqFBsFxozy95Ts9eegJ6bkp5tH74Xp7zIoeZBZ/8/0RK6088Gea1bm0xkvqS5
0NEFicAtaoRZZ3A2yXUwKyg0B1yADHsSIMu4EPWShkw4NW7UL4q1Ko+zLYU3qRIx
FVW+KSquIjudQRS7ARic4wX3C7Hx+JnqZXM53EopngDHM4iD3pWHoE/mj3bGQepC
G4OjKJxzQgmKG1HAoqTmsRo4YCULqRE8rNe8geYNkjfhJCoGsGtzeEUKoDVDp4bc
LrnwW+FIp8Yt5m4rPAH7GUx14l8s1sGHbKxIl/I5t4EDeG7dd8Cx4A72zj6Cy3qC
Jj0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1cmYIEL8UOOYrXQ5S6M
rr7FKvxRs9ENTRHHk5h5yEatFyF7KF99EEzqcbKxloJlUNzV1Oel0X+lTGyAnWW0
ywRMa+OK4Z5GI+jBbg8fJ60O51EM2vNPp3IsnU80zgZh3Jz7MLO/BVXA0KTvg/ce
hRcDh/xKoCn9rdk5D552yYmw9WyUs6YldcEIdbUKGHk7YNNzMMsnojHp18KGbRrB
YU7Q9fpISlRP67krc3XxJ1b0OaJysHZZta3NpsoKNBl5ii+pe3i7WKnKk+vHqn5G
aeZCW1bw3Q5UqRH0E2GxDuAH01PMIVyLmIXVQ39eSiuu5AlvUVp/RlQK0mMzJdCu
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302486650474772574342300911169005280718
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 01:51:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 01:51:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gordonbernell.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22134678591407250210674708142785299216405760948793869256109786040693240021962648940559703627731350731839377789148796278020599534466048825796347594556761177887427923751298934017455151931243979186889444943378142884733620471966052913823779232377407312255326021324948928976604094638252192426552078480246674971406477433485034152916984051033989458626633745041435044297936256969475868432802592261415129204333822537363580502262885502479779480019770175098530696683620970774645776239823758101523286609999728892611398432512840565202293164749122794045611868631584744021112685307129481935767486586859337367083462124560596752969453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7bf44d415d0406f5c4d6fdd744759a675ccf32c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/lXNKWeNAWEM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gordonbernell.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/MegjlTbyKjs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c2349a3b8000004030047304502205b0803cc8c8d320c940c527f3459b8a314c1ad36bb1e427dc8b3e413474550ff02210097d9353026764713144baae1fa9f17a5dd28298bd914ca1ba9fb4920dff5f8ec0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c2349a38b000004030046304402203364a0e0e7a900b3ceb3da45742b7271ccd82d976b48421a91602bc72cdb0465022053f58e0d619c8ea0fd2ba8466e1c74616a75b6d8b706e320116317c11784f365
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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