shopping.fitforfun.de

Issued by Encryption Everywhere DV TLS CA - G1

About this certificate

This digital certificate with serial number 0e:b3:3b:54:75:b5:2c:b7:f1:b7:a8:09:b4:8a:84:b2 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shopping.fitforfun.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:b3:3b:54:75:b5:2c:b7:f1:b7:a8:09:b4:8a:84:b2
Serial Number (int): 19539816432427595912664235950547305650
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c7:81:3f:fd:72:5a:ca:3c:e8:da:a6:09:0f:75:4c:d8:ae:5c:82:94
AuthorityKeyId: 55:74:4f:b2:72:4f:f5:60:ba:50:d1:d7:e6:51:5c:9a:01:87:1a:d7

Fingerprint (sha1): 74:a6:d0:11:b1:94:aa:19:ce:21:dc:63:88:a1:90:26:a4:3c:13:03
Fingerprint (sha256): 34:cc:56:83:00:6d:3d:42:3d:81:a8:8a:56:cb:98:7d:30:c1:fc:86:b9:84:a8:9c:3c:2b:48:79:f8:29:d9:4b

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate shopping.fitforfun.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shopping.fitforfun.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shopping.fitforfun.de
www.shopping.fitforfun.de

Other certificates including the domain name fitforfun.de

(limited to 100 certificates)
branded-stories.fitforfun.de
x.bunte.de
community.fitforfun.de
bf-tools.net
bf-tools.net
mms.burda-forward.de
promo.fitforfun.de
consent.planetradio.co.uk
shopping.fitforfun.de
*.fitforfun.de
kzsicw.fitforfun.de
bf-tools.net
tags.fitforfun.de
bf-tools.net
bf-tools.net
ssl.1.damoh.fitforfun.de
bf-tools.net
branded-stories.fitforfun.de
branded-story.fitforfun.de
*.sandbox-sp.fitforfun.de
cmp.bestcheck.de
tags.fitforfun.de
community.fitforfun.de
data-f06c8efc81.fitforfun.de
branded-story.fitforfun.de
cmp.bestcheck.de
shop.fitforfun.de
bf-tools.net
mms.burda-forward.de
cmp.bestcheck.de
cmp.bestcheck.de
damoh.fitforfun.de
*.sp.fitforfun.de
mms.chip.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
mms.chip.de
a.tfag.de
ssl.1.damoh.fitforfun.de
ssl.1.damoh.fitforfun.de
cmp.bestcheck.de
cmp.bestcheck.de
cmp.bestcheck.de
kzsicw.fitforfun.de
mms.chip.de
*.fitforfun.de
tags.fitforfun.de
tags.fitforfun.de
tags.fitforfun.de
cmp.bestcheck.de
cmp.bestcheck.de
kzsicw.fitforfun.de
data-f06c8efc81.fitforfun.de
bf-tools.net
cmp.bestcheck.de
cmp.bestcheck.de
*.fitforfun.de
ssl.1.damoh.fitforfun.de
cmp.bestcheck.de
bf-tools.net
shopping.fitforfun.de
shopping.fitforfun.de
community.fitforfun.de
mms.burda-forward.de
mms.burda-forward.de
ssl.1.damoh.fitforfun.de
branded-stories.fitforfun.de
cmp.bestcheck.de
bf-tools.net
branded-story.fitforfun.de
branded-stories.fitforfun.de
z.fitforfun.de
bf-tools.net
*.sp.fitforfun.de
shopping.fitforfun.de
mms.burda-forward.de
x.bunte.de
branded-stories.fitforfun.de
rt.fitforfun.de
bf-tools.net
bf-tools.net
bf-tools.net
cmp.bestcheck.de
cmp.bestcheck.de
bf-tools.net
blackfriday.fitforfun.de
blackfriday.fitforfun.de
mms.burda-forward.de
a.tfag.de
cmp.bestcheck.de
ivwbox.fitforfun.de
mms.burda-forward.de
bf-tools.net
cmp.bestcheck.de
kzsicw.fitforfun.de
a.tfag.de
a.tfag.de
data-ba3ff52f53.fitforfun.de

Certificate

The complete raw certificate details for shopping.fitforfun.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIQDrM7VHW1LLfxt6gJtIqEsjANBgkqhkiG9w0BAQsFADBu
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS0wKwYDVQQDEyRFbmNyeXB0aW9uIEV2ZXJ5d2hlcmUg
RFYgVExTIENBIC0gRzEwHhcNMjIxMDI2MDAwMDAwWhcNMjMxMDI2MjM1OTU5WjAg
MR4wHAYDVQQDExVzaG9wcGluZy5maXRmb3JmdW4uZGUwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDIULQb4ihsSc6mKGZ3XRdd0yqbKIJAQYiGVJB+0rkH
iNZJ/AkIht3cznE3CscM9BLMmRXxfdq9GEytELcPX4CXAWKstPe+88ok2t2WfUD4
eAJw9/vATgCjcexZbjwMozAS5Bb83crRD4XYRJSuikpDWTf/rle08fxftubXwr6i
FDZyNtePXYxDb3in8EM+m+gZCn24dWCP0lbRfbHUepUYfkEfmniUfu2xtkuemE+8
nToiU8xBngljMNE9Uf9PHhltdH9PpVlhw1r2Th70RozKfqJuLBOskHUem2E2iQZ3
PJF4KejSNLBafsm2WrLRAdepaq3c6hmvZB7SZ7cx3J2HAgMBAAGjggMBMIIC/TAf
BgNVHSMEGDAWgBRVdE+yck/1YLpQ0dfmUVyaAYca1zAdBgNVHQ4EFgQUx4E//XJa
yjzo2qYJD3VM2K5cgpQwOwYDVR0RBDQwMoIVc2hvcHBpbmcuZml0Zm9yZnVuLmRl
ghl3d3cuc2hvcHBpbmcuZml0Zm9yZnVuLmRlMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPgYDVR0gBDcwNTAzBgZngQwBAgEw
KTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMIGABggr
BgEFBQcBAQR0MHIwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNv
bTBKBggrBgEFBQcwAoY+aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0VuY3J5
cHRpb25FdmVyeXdoZXJlRFZUTFNDQS1HMS5jcnQwCQYDVR0TBAIwADCCAX8GCisG
AQQB1nkCBAIEggFvBIIBawFpAHcA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3
fW0GvW4AAAGEFOmnTgAABAMASDBGAiEAszJsTg5eTiG3tvBMKbA8vlH559SZyMTF
65ER40ELd38CIQD065qJ7hQmjuHHCwFYrq5PP+XOvf7IO7SPxB0K5k/WfwB2ALNz
dwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55NqWaAAABhBTpp3wAAAQDAEcwRQIh
AMCusdKK5igLAxH8d898a0i7+vitRBN5/1ffYzwvZevhAiBhzOU31vupMyyUJ7uh
Uz71utASI8jtKQGUmCPwWwTjaAB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4d
CYEl7bSZAAABhBTppywAAAQDAEcwRQIgJeVu2/SCDlOp/OsiLlU9H6OwRAH81Fmq
aiyIm1IEyb8CIQDgxL86lz3MH/lcTxx4AkNH+YSW8YAQkkvIcb4TMV6I0TANBgkq
hkiG9w0BAQsFAAOCAQEApMHcum6WBvSTu953O3sPvUfZYBGUkvRNsmZE+nx9P+W2
esf62nRg1BnbdrW7JR7n6k//m+s7kjsLO3eFoj6K3GMR1umcFR4WKZl0p6B6yowD
eagw/U367patnyL5fONo6PKStHavdFspeMLHLY4NgcVZnIl9hRd/ByOQtZTciQSS
wMqo7UY9SkaLgZKZkihOVLsvwrJiWW5zOFcSaQyWZfgmba/htbfgmUWfQ4MW7OGe
RacuJWm4P7fVbbdnQVDTI2WrcGvPj54LEHkOTSekMaIKR6+65jzKkvbxDLXMgjtn
uYBjJcnu1dTmP8ZJRV5aNj2sQZwfKrEzUt4/1s/8dQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFC0G+IobEnOpihmd10X
XdMqmyiCQEGIhlSQftK5B4jWSfwJCIbd3M5xNwrHDPQSzJkV8X3avRhMrRC3D1+A
lwFirLT3vvPKJNrdln1A+HgCcPf7wE4Ao3HsWW48DKMwEuQW/N3K0Q+F2ESUropK
Q1k3/65XtPH8X7bm18K+ohQ2cjbXj12MQ294p/BDPpvoGQp9uHVgj9JW0X2x1HqV
GH5BH5p4lH7tsbZLnphPvJ06IlPMQZ4JYzDRPVH/Tx4ZbXR/T6VZYcNa9k4e9EaM
yn6ibiwTrJB1HpthNokGdzyReCno0jSwWn7Jtlqy0QHXqWqt3OoZr2Qe0me3Mdyd
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19539816432427595912664235950547305650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shopping.fitforfun.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25287457397179470809655029896085400083344266419443191811738938231754022326298359519239272219636884489243018510398313764025978452755846436559169017560709718799117969165219201413904203792543402413293525724546257736348994138967379515980299786711958946157981025434820816682430212379427099913650375785422320770123049591167700426169411760783177797010132121793638249632855980897900149621268559100448468717432547013377565793243888069536522927688057164350044323524106713271153396337815321179659411865594862159446178561881144836817526719330963952231741966189713922709528382591367859592915508741983098429343539637369449245089159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55744fb2724ff560ba50d1d7e6515c9a01871ad7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7813ffd725aca3ce8daa6090f754cd8ae5c8294
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopping.fitforfun.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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