identity.mycargill.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:bc:1b:02:05:21:02:52:ef:a1:3a:7e:a8:5a:88:2c was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=identity.mycargill.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:bc:1b:02:05:21:02:52:ef:a1:3a:7e:a8:5a:88:2c
Serial Number (int): 14268979552356660522619060327412303916
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6f:90:f3:fc:6c:33:f1:3f:66:1f:7d:44:34:80:e2:d2:8e:94:36:b7
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 2e:d3:89:09:a6:3f:80:1e:b5:81:d8:04:16:2b:30:2a:77:be:f8:30
Fingerprint (sha256): 33:14:96:d8:a2:01:08:0a:b5:42:52:f8:51:cf:b9:88:46:27:77:5f:9f:8c:4c:e3:34:94:6c:12:90:f0:ac:c5

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate identity.mycargill.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for identity.mycargill.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

identity.mycargill.com
identityservices.mycargill.com

Other certificates including the domain name mycargill.com

(limited to 100 certificates)
int.mycargill.com
cargillcustomer.stage.cglcloud.in
www.mycargill.com
stage.mycargill.com
int.mycargill.com
csbsui.cglcloud.com
sni.cloudflaressl.com
int.mycargill.com
sni.cloudflaressl.com
mycargill.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mycargill.com
cptnuswebsiteallmccxcrcii.stage.cglcloud.in
mycargill.com
int.mycargill.com
csbsui.cglcloud.com
sni.cloudflaressl.com
sni.cloudflaressl.com
identity.mycargill.com
sni.cloudflaressl.com
int.mycargill.com
mycargill.com
login-stage.mycargill.com
mycargill.com
int.mycargill.com
mycargill.com
stage.mycargill.com
sni.cloudflaressl.com
mycargill.com
int.mycargill.com
mycargill.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mycargill.com
stage.mycargill.com
int.mycargill.com
mycargill.com
www.mycargill.com
sni.cloudflaressl.com
identity.mycargill.com
stage.mycargill.com
mycargill.com
stage.mycargill.com
sni.cloudflaressl.com
www.mycargill.com
sni.cloudflaressl.com
mycargill.com
csbsui.cglcloud.com
www.mycargill.com
sni.cloudflaressl.com
login.mycargill.com
stage.mycargill.com
login-stage.mycargill.com
sni.cloudflaressl.com
mycargill.com
csbsui.cglcloud.com
cascsilos-override.stage.mycargill.com
stage.mycargill.com
sni.cloudflaressl.com
mycargill.com
sni.cloudflaressl.com
sni.cloudflaressl.com
int.mycargill.com
cptnuswebsiteallmccxcrcii.cglcloud.com
www.mycargill.com
mycargill.com
sni.cloudflaressl.com
www.mycargill.com
www.mycargill.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for identity.mycargill.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIQCrwbAgUhAlLvoTp+qFqILDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIyMTAyMTAwMDAwMFoXDTIzMTExOTIzNTk1OVowITEf
MB0GA1UEAxMWaWRlbnRpdHkubXljYXJnaWxsLmNvbTCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBAJETXZquTykxE2zJc0nCHFVCXB7SUCQJWn7sKFf+D+Ny
PaAHMsyNmJCjoMzI4AJrGf7wWyI2/YxOVbzWDy8xai2VPQMlzjs95wYDhP7SKcri
Pcx5av9qzbP5LsFq1rKgLErkob+ipyWJcjAVP2BSj9v0IrVd4uFISJvu5mW1K7uk
ZXfQ568xWkNOAfRQVaCxs2eFJf/OXb84PM71m0Q2YHX7A2cmz0wH3c1vp4DDCwxh
WOKJElZjzCvwKSABq/7pW5wLcilZVjsi44vWT0CBgF57LmqY2h8+40Oc+DS2n1Z3
TjmCLKZLO3J61WBbu9xf1pWsyUIPU/8/1nZvvIPEfKUCAwEAAaOCAxEwggMNMB8G
A1UdIwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBRvkPP8bDPx
P2YffUQ0gOLSjpQ2tzBBBgNVHREEOjA4ghZpZGVudGl0eS5teWNhcmdpbGwuY29t
gh5pZGVudGl0eXNlcnZpY2VzLm15Y2FyZ2lsbC5jb20wDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAs
hipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwEwYD
VR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFo
dHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0
dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMB
Af8EAjAAMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdwDoPtDaPvUGNTLnVyi8
iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYP6lsU5AAAEAwBIMEYCIQDhWwlkG3JnyAk3
Hk7Nm1fcqOUlmhOe4L7FBn/hZ+mFwgIhAK6S0PXD5U+VjixC2Zd3oD23lWnTgkB2
XLMckTTCwqzkAHYAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGD
+pbFKwAABAMARzBFAiBDYSEihsNIAxXZmRablRhIiWAyWSwCD0vqS2GJNteB3gIh
AN9v7BUHOpDazSyu0wyt6lxtq+9+GzAR/tI1GPVJ4mc5AHcAVYHUwhaQNgFK6gub
VzxT8MDkOHhwJQgXL6OqHQcT0wwAAAGD+pbGMAAABAMASDBGAiEA08kMkeZCLfH7
lyj+VcyZDkrdpAQXFT/iH05g+BZ/tYcCIQDbjGhQKoWgj5PWwPdo4BKRoSf7v86S
hiZQasTqwkWCnzANBgkqhkiG9w0BAQsFAAOCAQEAMIazr178e+FIx2X5E+X+bf4I
JzBuIDpSE2fLpcjzAdQ7n5rgxXNP9H76hbcB0LjtFQSJHfkZH7MlAE3Q2azmrx64
wN0n9KaGHCHGZ5w4We8NlozUHtV7TKGCTUtNH9whagP01cO7aZ/yWo8lX/Ksc5aM
B0kW64oSdhe0QxFF2ZcDqKFVXdROwnImqcWUv7usAp7f3GmT1tobJjA3P8rzS6Ro
zHnEzYBcE7nSvQgt0KmL9zyJm9CHTsJxrhVjYcnPRkFfiEGkF+IaKQTV38AT3lKV
G1p/2Kt2qp5IwdPU3YYIlhZdIgxb3LBYIgAvK9CXmp+CGHL5yMqn6txgBU4P+w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRNdmq5PKTETbMlzScIc
VUJcHtJQJAlafuwoV/4P43I9oAcyzI2YkKOgzMjgAmsZ/vBbIjb9jE5VvNYPLzFq
LZU9AyXOOz3nBgOE/tIpyuI9zHlq/2rNs/kuwWrWsqAsSuShv6KnJYlyMBU/YFKP
2/QitV3i4UhIm+7mZbUru6Rld9DnrzFaQ04B9FBVoLGzZ4Ul/85dvzg8zvWbRDZg
dfsDZybPTAfdzW+ngMMLDGFY4okSVmPMK/ApIAGr/ulbnAtyKVlWOyLji9ZPQIGA
XnsuapjaHz7jQ5z4NLafVndOOYIspks7cnrVYFu73F/WlazJQg9T/z/Wdm+8g8R8
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14268979552356660522619060327412303916
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'identity.mycargill.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18314103773815516819452768006163594154527698715840326209308255476520788921948856043451042876825694239716668521780804553667007407516607380109141204739688319758887113653668528655695094021526656744709501816096035679195040591969871101426361811817620387931641020147224938577332149356123335307819174712298032362004579109425400916986306470390328981830280241687648921361734041509772500842423606230308884376114213267904288374574149629156202250392670939970080521528564286018472807010749569274172480988257467055773876830344015759271545027714198058676966773762209121599653282775615068438174996850508408634906666254624042380459173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f90f3fc6c33f13f661f7d443480e2d28e9436b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.mycargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identityservices.mycargill.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000183fa96c5390000040300483046022100e15b09641b7267c809371e4ecd9b57dca8e5259a139ee0bec5067fe167e985c2022100ae92d0f5c3e54f958e2c42d99777a03db79569d38240765cb31c9134c2c2ace4007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183fa96c52b000004030047304502204361212286c3480315d999169b951848896032592c020f4bea4b618936d781de022100df6fec15073a90dacd2caed30cadea5c6dabef7e1b3011fed23518f549e267390077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000183fa96c6300000040300483046022100d3c90c91e6422df1fb9728fe55cc990e4adda40417153fe21f4e60f8167fb587022100db8c68502a85a08f93d6c0f768e01291a127fbbfce928626506ac4eac245829f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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