*.tigo.com.py

- TELEFONICA CELULAR DEL PARAGUAY S.A. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 06:db:e5:3d:fc:b8:f1:14:76:8b:4e:04:66:3a:b8:93 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

TELEFONICA CELULAR DEL PARAGUAY S.A.

Organization: TELEFONICA CELULAR DEL PARAGUAY S.A.
Organization unit: Tecnologia
State / Province: Central
Locality: Fernando De La Mora
Country: PY

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:db:e5:3d:fc:b8:f1:14:76:8b:4e:04:66:3a:b8:93
Serial Number (int): 9117130569659575384310007229025269907
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9a:3c:5e:e7:fa:85:b3:b8:01:27:4f:9a:b5:0d:03:1f:69:ae:62:52
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): ea:e4:34:71:9a:82:c7:cd:0e:5f:1a:2c:87:ad:af:12:3d:ed:a7:df
Fingerprint (sha256): 44:22:bd:23:c0:95:b2:4f:a6:2b:fb:8f:d7:92:56:0b:f6:e8:9d:bf:0b:85:08:58:d6:81:c3:d7:37:82:f5:69

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.tigo.com.py

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.tigo.com.py

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tigo.com.py
tigo.com.py

Other certificates including the domain name tigo.com.py

(limited to 100 certificates)
activate.tigo.com.py
ayuda.tigo.com.py
app.mitienda.tigo.com.py
ayuda.tigo.com.py
secure.tigo.com.py
www.thismoment.com
ayuda.tigo.com.py
smartapps.tigo.com.py
ayuda.tigo.com.py
knowledge.tigo.com
ayuda.tigo.com.py
music.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
login.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
miscontactos.tigo.com.py
ayuda.tigo.com.py
www.thismoment.com
ayuda.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
login.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
music.tigo.com.py
knowledge.tigo.com
ayuda.tigo.com.py
knowledge.tigo.com
*.tigo.com.py
ayuda.tigo.com.py
login.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
secure.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
music.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
secure.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
miscontactos.tigo.com.py
soluciones.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
www.thismoment.com
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
login.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
knowledge.tigo.com
knowledge.tigo.com
secure.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
www.thismoment.com
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
soluciones.tigo.com.py

Certificate

The complete raw certificate details for *.tigo.com.py in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MyhXFDbu2OEm4gRom88
G1ayPE6j7BBuTG6GjvWLQg1lo5K+9fWXe9lRDppm8Trk7sKozi4mJrlpdwQfbxJl
6Ya1GHJeIyQ1oMn5Hknuesq2gR8hcl6n/H46TVAvGa7kVlsCvKLNwv+W92UAJEdM
RfWuWj4BXE7eStsNKoNAcdwPoAq4BURLPkTC9x3GGo8DyiyOtB8gvgrx8tpk3i38
k8HqQtHXRYhiZ+v5ct9ygbbeGd2KNSOcGKx6juoVDY6yl8GpDkfaTauUJsY19MDZ
4mkq8MkOK9P39AgNJqHX9/0oGgkpfp0w23vaJ8ZfZV3DjqBaL+JbVtg90OA+WFg8
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9117130569659575384310007229025269907
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Central'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fernando De La Mora'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TELEFONICA CELULAR DEL PARAGUAY S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tecnologia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.tigo.com.py'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26863427621925074138112252338537967052792044853991987677568578611803717285594600248619262795865090933205085342279115875369149016625225662630727841608171785891521788368998274976415949993120397217485944738699088587402406594745256215098407248097025188031708481545610140126114730615823670296007853914557619300103788792055463147382494678655397558057540201434563480422950567308873615360026877818040747049830742418887018027366820207101748561558119289418105720239141423102125241204703593722268137747222686219093963743263840786475835708259565138452478783597835280574409023196040520597735966503101292332973849841735294432853193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a3c5ee7fa85b3b801274f9ab50d031f69ae6252
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tigo.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigo.com.py'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000167a348e2b50000040300463044022006c352ec0582145a2d5a8c45a76d1d0f420ee3a3c368b390a19f215b91c3b68b02201cfe4affb39388a13d9bd3b1a4fec1adf029454b9427b71b68e1f1706375e9ca0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000167a348e38f0000040300473045022039069dc4427055fdb9b68fa6322b6a487271c74dff0654af07a28c2388efd13e022100bc9b4146c47b477e26574a1d3a9cc3cd4d20aad37902034e2c288a1d951bc74a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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