swoca.net

- Southwest Ohio Computer Association -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:05:2e:84:79:f8:05:83:37:a3:46:da:65:87:85:08:e1 was issued on by GlobalSign nv-sa.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Southwest Ohio Computer Association

Organization: Southwest Ohio Computer Association
Organization unit: TSS
State / Province: Ohio
Locality: Hamilton
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:05:2e:84:79:f8:05:83:37:a3:46:da:65:87:85:08:e1
Serial Number (int): 1492145066620891013761300702997665460586721
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 2e:15:32:cc:bd:36:e9:67:ef:1f:01:ea:b2:91:b4:1a:7d:f5:24:7b
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): c3:72:b6:d7:35:05:86:88:b4:51:cd:27:7b:2d:e4:58:8c:98:b7:ef
Fingerprint (sha256): 68:53:c9:23:49:ba:5a:62:d4:3f:26:95:9a:eb:17:ef:aa:e8:c4:20:9d:92:94:51:09:c0:31:c3:89:41:52:7c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate swoca.net

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for swoca.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

swoca.net
autodiscover.carlisleindians.org
autodiscover.clinton-massie.k12.oh.us
autodiscover.madisonmohawks.org
autodiscover.psarrows.com
autodiscover.rossrams.com
autodiscover.tcnschools.com
autodiscover.warrencountyesc.com
exchange01.dsl.swoca.net
exmb1001.dsl.swoca.net
excas1001.dsl.swoca.net
exmail.swoca.net
autodiscover.swoca.net

Other certificates including the domain name swoca.net

(limited to 100 certificates)
staging.swoca.net
swoca.net
swoca.net
pdexpress.swoca.net
*.swoca.net
swoca.net
butlertech.campus.swoca.net
emisweb.swoca.net
tec.swoca.net
pdexpress.swoca.net
pdexpress.swoca.net
uspsweb.swoca.net
*.usbpmbt.swoca.net
uspsweb.swoca.net
emis-r2.swoca.net
staging.swoca.net
swoca.net
tec.swoca.net
*.swoca.net
butlertech.campus.swoca.net
*.formshare.swoca.net
infohio.swoca.net
infohio.swoca.net
swoca.net
swoca.net
butlertech.campus.swoca.net
*.swoca.net
infohio.swoca.net
emis-rdatacoll.swoca.net
www.swoca.net
pdexpress.swoca.net
support.swoca.net
support.swoca.net
www.swoca.net
VPN01.SWOCA.NET
*.usbpm.swoca.net
butlertech.campus.swoca.net
www.swoca.net
swoca.net
*.swoca.net
emis-datacoll.swoca.net
dc03.dsl.swoca.net
webmail.swoca.net
swoca.net
swoca.net
adss.swoca.net
emisweb.swoca.net
emis-r2.swoca.net
weba.swoca.net
VPN01.SWOCA.NET
www.swoca.net
pdexpress.swoca.net
*.formshare.swoca.net
www.swoca.net
VPN01.SWOCA.NET
VPN01.SWOCA.NET
swoca.net
webmail.swoca.net
dc1.dsl.swoca.net
SW-Unity-Cluster.swoca.net
emis-zis.swoca.net
pdexpress.swoca.net
swoca.net
emis-rdatacoll.swoca.net
tec.swoca.net
exmail.swoca.net
peoplewerks.swoca.net
*.fiscal.swoca.net
infohio.swoca.net
SW-Unity-Cluster.swoca.net
www.swoca.net
staging.swoca.net
*.formshare.swoca.net
swoca.net
support.swoca.net
*.usbpmbt.swoca.net
pdexpress.swoca.net
butlertech.campus.swoca.net
SW-Cluster.swoca.net
*.usbpm.swoca.net
exmail.swoca.net
mybutlertech.usbpm.swoca.net
*.swoca.net
emis-rdatacoll.swoca.net
support.swoca.net
weba.swoca.net
swoca.net
specialservices.swoca.net
usasdw.swoca.net
VPN01.SWOCA.NET
emis-datacoll.swoca.net
tec.swoca.net
uspsweb.swoca.net
pdexpress.swoca.net
webapp.swoca.net
swoca.net
dasl-c.swoca.net
www.swoca.net
swoca.net
*.dsl.swoca.net

Certificate

The complete raw certificate details for swoca.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfKOUg6XCqXBZFqiuO1K
NGno6Jrz0EgjcPmtuq9lpfzsJgWegBdE8BjZbYwfFt55yPLkxuohOhh2PZ+4+dFe
wMebU41nV91HcuXUERC0S70OFYCLE8xfOKXYWpPMsz8LeNCjjwtbplA575Qe6hmi
8FA11iPrBfXnGsTcuFBpY2q9Vy02mOvhj47Ula4glhHosDiiMm8tQzWCfd3nJNXJ
ShGxFNV7Cl8mx+z5u5L7Z74d6BqAjbbZjroZ+Wu+e4ujqKFjYc37l2XGW5aFb8xV
+4gHTmGx33ORz+YQ/NsDV4MZoCsQq2fChNhoF3NZ3buvJO+7AuYvncEJA7f8JdrK
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492145066620891013761300702997665460586721
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-02 19:47:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-05 21:32:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamilton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TSS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Southwest Ohio Computer Association'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'swoca.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24988554870006258099380197522842614586171141378803492376781288761665562024527498072911584593071080346910325799683809724529971486359405766318221053535699429889663405868460398764302804158063475335568345395755012326037068786697162565005261436236836374013226045626512259463230074460466979825171255787052984453374026186460466994362723577520721759569016092584415190910467096552193974739832276392983444208152612595069021815022163084504375779825207185825445088575970431155825791527449665882883595831643242227067535550106764032919482687158143996683004762799703517500853814955330053810430254670922266664738064910158465536281153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (355 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swoca.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.carlisleindians.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.clinton-massie.k12.oh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.madisonmohawks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.psarrows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.rossrams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tcnschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.warrencountyesc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange01.dsl.swoca.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exmb1001.dsl.swoca.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excas1001.dsl.swoca.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exmail.swoca.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.swoca.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e1532ccbd36e967ef1f01eab291b41a7df5247b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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