id.standard.web.schibsted.media

Issued by Amazon

About this certificate

This digital certificate with serial number 01:03:29:18:9f:f9:59:d2:d3:1c:7e:89:0b:7c:18:f3 was issued on by Amazon.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=id.standard.web.schibsted.media

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:03:29:18:9f:f9:59:d2:d3:1c:7e:89:0b:7c:18:f3
Serial Number (int): 1345638416139733686944194869216418035
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: b9:2d:b0:b4:a6:42:a9:3a:a4:e3:e5:c7:cb:4d:0e:77:c5:06:02:79
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 0e:e8:10:5f:0c:5a:88:fe:cc:e4:95:83:39:aa:06:d1:af:d4:0d:48
Fingerprint (sha256): 3a:9b:d9:2c:50:1d:77:7f:75:9f:a3:5f:c3:ed:58:ef:e7:1c:ad:cb:94:a6:01:1c:1a:c1:5b:66:e4:87:fe:b8

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate id.standard.web.schibsted.media

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for id.standard.web.schibsted.media

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

id.standard.web.schibsted.media
id.ufo.schibsted.io
id.tori.fi
id.blocket.se
id.omniekonomi.se
id.styletime.no
id.nyss.no
id.profil.nabolag.no
id.omni.se
id.pro.another-example.com
id.aboutme.schibsted.com
id.midtnorskdebatt.no
id.opp.no
session-service.login.schibsted.fi
id.tekguide.se
id.steinkjer24.no
id.fplus.se
id.mn24.no
id.stepstone.se

Other certificates including the domain name schibsted.media

(limited to 100 certificates)
auth.dokumentbase.schibsted.media
b3.shared.global.fastly.net
b3.shared.global.fastly.net
g2.shared.global.fastly.net
user-permissions.privacy.schibsted.com
api.dokumentbase.schibsted.media
b3.shared.global.fastly.net
b3.shared.global.fastly.net
b3.shared.global.fastly.net
b3.shared.global.fastly.net
id.aboutme.schibsted.com
engage-cdn.schibsted.media
engage-https-proxy.schibsted.media
cdn.obituaries.schibsted.media
b3.shared.global.fastly.net
*.web-pre.schibsted.media
auth.api.plan3.se
engage-https-proxy.schibsted.media
g2.shared.global.fastly.net
g2.shared.global.fastly.net
engage-auth.schibsted.media
*.iris.schibsted.media
touchpoints.schibsted.media
cdn-yams.review.schibsted.media
b3.shared.global.fastly.net
lda.recsys.curate.schibsted.media
engage-cdn.schibsted.media
*.curate.schibsted.media
b3.shared.global.fastly.net
b3.shared.global.fastly.net
b3.shared.global.fastly.net
user-permissions.api.schibsted.media
engage-https-proxy.schibsted.media
g2.shared.global.fastly.net
b3.shared.global.fastly.net
id.standard.web.schibsted.media
cms.schibsted.media
cms.schibsted.media
cdn.obituaries.schibsted.media
id-pre.aftonbladet.dev
g2.shared.global.fastly.net
g2.shared.global.fastly.net
bt.web.schibsted.media
g2.shared.global.fastly.net
cms.schibsted.media
id-pre.aftonbladet.dev
b3.shared.global.fastly.net
g2.shared.global.fastly.net
b3.shared.global.fastly.net
engage-api.schibsted.media
b3.shared.global.fastly.net
*.curate.schibsted.media
engage.schibsted.media
g2.shared.global.fastly.net
b3.shared.global.fastly.net
b3.shared.global.fastly.net
b3.shared.global.fastly.net
engage.schibsted.media
g2.shared.global.fastly.net
pre.review.schibsted.media
cms.schibsted.media
b3.shared.global.fastly.net
*.rss-pro.schibsted.media
engage-https-proxy.schibsted.media
*.tek.review.schibsted.media
lightfm.recsys.curate.schibsted.media
engage-https-proxy.schibsted.media
images.stream.schibsted.media
b3.shared.global.fastly.net
engage-conversion-api.schibsted.media
g2.shared.global.fastly.net
bt.web.schibsted.media
b3.shared.global.fastly.net
auth.api.plan3.se
b3.shared.global.fastly.net
b3.shared.global.fastly.net
*.review.schibsted.media
engage-newsletter.schibsted.media
g2.shared.global.fastly.net
engage.schibsted.media
b3.shared.global.fastly.net
b3.shared.global.fastly.net
b3.shared.global.fastly.net
engage-newsletter.schibsted.media
*.pre.touchpoints.schibsted.media
b3.shared.global.fastly.net
b3.shared.global.fastly.net
engage.schibsted.media
*.iris.schibsted.media
g2.shared.global.fastly.net
g2.shared.global.fastly.net
*.iris-dev.schibsted.media
stream.schibsted.media
b3.shared.global.fastly.net
engage-auth.schibsted.media
*.adsinventory-pro-1.eks.schibsted.io
b3.shared.global.fastly.net
b3.shared.global.fastly.net
b3.shared.global.fastly.net
id.aboutme.schibsted.com

Certificate

The complete raw certificate details for id.standard.web.schibsted.media in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBrCS23RoIiOzivX+5KQ
x00KAUpfK3yLpzl0eLU9LgvDvoaFLVGjtD0e8IWugpY42c6QH5XTD2w0/mFXZkoM
uZx1nCjCk/GYz9wPbDz88EfiMpxzXocvyUXfKjzPzOxsrh1+xUlyon6yzakdKCHF
FDQRKdlwg5OlYobFrdflPuHCAG2ff+Z/RrWOH4pgMZ1IQtEivzwfuHHplqR7WmMd
7o7j50dJTwvFjGSASw0SHMAAAoVrqRtdOffHOuLL94hXHWIkr/MZIFcfAMVZG13B
HjE3myAIGGvnewpLkYy0ahSPoOIes/SDCCS2P6nH8+u2ktBie9dTKAmAtL7GbFS5
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1345638416139733686944194869216418035
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'id.standard.web.schibsted.media'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23745996670295561896657396029115319848050595457428121945597531268726434493400323967582605187789146556649934696804230542363410274171498989674507350985558897097027788580073954417956320045336894835639993478528779019445023376702700913747604762790592060121607827842078268343837491149048252013490165190081456236467685067867745422221253947410594367281223316096937057089715884112524882505341269013187713618983733623939636403686948618963891703796926477409246814961438663080803609245265177484153480911840966285660239415125422375371951009030778390045238860557384308795183488058015835885451714764775093438718122747047098421917981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b92db0b4a642a93aa4e3e5c7cb4d0e77c5060279
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.standard.web.schibsted.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.ufo.schibsted.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.tori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.blocket.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.omniekonomi.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.styletime.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.nyss.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.profil.nabolag.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.omni.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.pro.another-example.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.aboutme.schibsted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.midtnorskdebatt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.opp.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'session-service.login.schibsted.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.tekguide.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.steinkjer24.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.fplus.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.mn24.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.stepstone.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001766c07df580000040300483046022100eca1b0204be881d4dc1efc96cd44dbf497d3dccf88473d36bc91056742e44bce022100e8f8fa559c8bbbb8bf39fd2b2719b997f9d7d122ee7b0e264f3af486718ef7b10076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f02000001766c07dfc2000004030047304502205c75866c5da30a2853bce4c2450829d975c75344fb5ef6ae2bba463ea39b9ce0022100c1d5d60faabd4044e640d682d09b75fb8345cef7f0ef2a0f1df2e51bddaaffb8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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