citrix-ag.stmk.gv.at

- Amt der Steiermärkischen Landesregierung -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 9d:f9:93:ef:c1:8e:77:a9:0d:ec:d7:2f:af:26:3b:42 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Amt der Steiermärkischen Landesregierung

Organization: Amt der Steiermärkischen Landesregierung
Address: Hofgasse 15
Postal code: 8010
State / Province: Steiermark
Locality: Graz
Country: AT

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 9d:f9:93:ef:c1:8e:77:a9:0d:ec:d7:2f:af:26:3b:42
Serial Number (int): 209984677765652381272150306121117481794
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 55:16:96:d3:ca:1c:34:0f:e5:69:d4:d1:f8:d6:43:27:d6:90:27:67
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): cd:29:bb:bf:4e:c7:71:71:40:27:93:67:be:68:5d:76:31:5d:36:fc
Fingerprint (sha256): 2f:78:08:bd:9c:93:94:db:b6:9e:30:25:7e:93:3c:00:4b:8c:15:01:7e:50:eb:e2:86:56:da:b4:89:19:c9:b5

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate citrix-ag.stmk.gv.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citrix-ag.stmk.gv.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citrix-ag.stmk.gv.at
www.citrix-ag.stmk.gv.at

Other certificates including the domain name stmk.gv.at

(limited to 100 certificates)
wis.stmk.gv.at
ctxshare.stmk.gv.at
egovtest.stmk.gv.at
sterztest.stmk.gv.at
pallast2.stmk.gv.at
citrix-ag.stmk.gv.at
citrix-test.stmk.gv.at
pallast2.stmk.gv.at
moatest.stmk.gv.at
moa.stmk.gv.at
pi-test.stmk.gv.at
xmtest.stmk.gv.at
xmtest.stmk.gv.at
moatest.stmk.gv.at
sterz3test.stmk.gv.at
datenschutz.stmk.gv.at
pallast2.stmk.gv.at
egov.stmk.gv.at
sterz3test.stmk.gv.at
xmtest.stmk.gv.at
wis.stmk.gv.at
ref-test.stmk.gv.at
moatest.stmk.gv.at
pallasttest.stmk.gv.at
egov.stmk.gv.at
sanis.stmk.gv.at
egov.stmk.gv.at
digitaltest.stmk.gv.at
ref-test.stmk.gv.at
autodiscover.stmk.gv.at
wis.stmk.gv.at
citrix-ag.stmk.gv.at
lyncrp.stmk.gv.at
sanis.stmk.gv.at
gis.stmk.gv.at
wis.stmk.gv.at
rsa.stmk.gv.at
sterztest.stmk.gv.at
ngmxm.stmk.gv.at
pvptest.stmk.gv.at
citrix-ag.stmk.gv.at
sanis.stmk.gv.at
pallast2.stmk.gv.at
sterztest.stmk.gv.at
modestest.stmk.gv.at
wis.stmk.gv.at
sanis.stmk.gv.at
sterz3.stmk.gv.at
adfs.stmk.gv.at
pallast-schulung.stmk.gv.at
nstest.stmk.gv.at
sterztest.stmk.gv.at
citrix-ag.stmk.gv.at
egov.stmk.gv.at
mail2.stmk.gv.at
datenschutz.stmk.gv.at
sterz3.stmk.gv.at
citrix-test.stmk.gv.at
jobs.stmk.gv.at
datenschutz.stmk.gv.at
sterz3.stmk.gv.at
egovtest.stmk.gv.at
samlawptest.stmk.gv.at
ctxmxm-test.stmk.gv.at
ctxsharetest.stmk.gv.at
nstest.stmk.gv.at
vpn-ns.stmk.gv.at
sterztest.stmk.gv.at
as.stmk.gv.at
lyncrp.stmk.gv.at
moatest.stmk.gv.at
sanis.stmk.gv.at
test-app.stmk.gv.at
lib.stmk.gv.at
ngmodestest.stmk.gv.at
wis.stmk.gv.at
bergapp.stmk.gv.at
webmail.stmk.gv.at
sterztest.stmk.gv.at
modestest.stmk.gv.at
literatur.stmk.gv.at
literatur.stmk.gv.at
pallast.stmk.gv.at
jobs.stmk.gv.at
moa.stmk.gv.at
rsa.stmk.gv.at
moa.stmk.gv.at
gis.stmk.gv.at
egovtest.stmk.gv.at
auth.stmk.gv.at
lyncrp.stmk.gv.at
xm.stmk.gv.at
nstest.stmk.gv.at
service.stmk.gv.at
pallast2.stmk.gv.at
egovtest.stmk.gv.at
pvp.stmk.gv.at
as.stmk.gv.at
xm.stmk.gv.at
pi.stmk.gv.at

Certificate

The complete raw certificate details for citrix-ag.stmk.gv.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZmBmdu4R3/Zg0L9Qdx0
6AeBSD7+CfDFhKJNu9zNMXwE3ujCI02N+VKO5vR19MJUj5YJVnYyt4sMCQNGJGOG
HO9JkwAOP+BV71eF944/N3gfS6IKn8Y0LFO5hu+qGJvyDGHPA+P/mx7JsIacglKB
SwVXjrKiw2EhuOC9yt7B4tU3nQLg8+UTOaQFxyQErWmqfPoUu/k+o13DEyGtZ4l3
jxuV+a6/+TrTHBEs/AOgwnWTyltk25Qdbs/qFWDEBbtGzKq7J9GWp6Kqifkiv11l
FrxvJ7pkbZ05Z/jT0TNQbnuEFLxplEoTPor2EZ/Lbv3wuKQYSxNvCTeHoeCD+oFI
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 209984677765652381272150306121117481794
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '8010'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Steiermark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Graz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hofgasse 15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Amt der Steiermärkischen Landesregierung'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citrix-ag.stmk.gv.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22419876734067405290354363763270009262135067694803294586261079448288036136494751737832382164662951522432960162803367054107946640597661079148418406474314026194683849217639536768855522940234418727079768934376676963384830554872718945949876661672617805649425115307362403721960130941925192443689964175759819496008439528677052303970682707582059711887967440712210433499001996184809075860936513464228848211058489562028808804188226373052549186076507956547217264631219383314762024312597055972503509592576424435007931822093283872321426877527413837642008960738295997215788364749470953804545294377800033254300315624172214584166511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							551696d3ca1c340fe569d4d1f8d64327d6902767
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix-ag.stmk.gv.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citrix-ag.stmk.gv.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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