pbl.dl.psnc.pl

- Instytut Chemii Bioorganicznej Polskiej Akademii Nauk -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0d:25:a5:25:13:17:6a:ff:56:21:73:8b:5a:68:97:95 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Instytut Chemii Bioorganicznej Polskiej Akademii Nauk

Organization: Instytut Chemii Bioorganicznej Polskiej Akademii Nauk
Organization unit: Poznańskie Centrum Superkomputerowo-Sieciowe, DISU
Locality: Poznań
Country: PL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:25:a5:25:13:17:6a:ff:56:21:73:8b:5a:68:97:95
Serial Number (int): 17475428463904836284835546964379080597
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9a:7f:c1:74:c1:7d:b4:67:c6:c1:2b:eb:48:06:ca:48:32:0e:b4:8b
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): a1:1d:a4:04:c7:5e:35:a3:90:0c:82:4e:e2:ac:29:0d:77:91:e4:d6
Fingerprint (sha256): 69:6d:18:69:c3:43:d2:5c:bf:da:4b:dc:ee:47:47:e7:f3:62:0d:6a:ec:be:9a:6b:2e:5f:7b:5d:d6:d0:fd:4a

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate pbl.dl.psnc.pl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pbl.dl.psnc.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pbl.dl.psnc.pl

Other certificates including the domain name psnc.pl

(limited to 100 certificates)
pracelab-sso.apps.paas.psnc.pl
eurocase2017.psnc.pl
lonicera.man.poznan.pl
www.pcss.pl
conference4me.psnc.pl
test-vm5.vph.psnc.pl
nogalia.man.poznan.pl
indico.conference4me.psnc.pl
helps.psnc.pl
indico.conference4me.psnc.pl
box.psnc.pl
demo.dl.psnc.pl
indico2.conference4me.psnc.pl
pbl-test.dl.psnc.pl
pbl.dl.psnc.pl
www.pogoda.man.poznan.pl
hicss.psnc.pl
meet.psnc.pl
demo.storage.psnc.pl
nagios.paas.psnc.pl
pay.psnc.pl
futurelabs.psnc.pl
registry-console.apps.paas.psnc.pl
indico.conference4me.psnc.pl
nogalia.man.poznan.pl
*.apps.paas.psnc.pl
docs.psnc.pl
support.pcss.pl
indico.conference4me.psnc.pl
dynafed1.indigo.psnc.pl
box.psnc.pl
waitsafe-mqtt.apps.paas-dev.psnc.pl
rotha.dlibra.psnc.pl
box.everest.psnc.pl
pbl.dl.psnc.pl
box.psnc.pl
support.pcss.pl
indico2.conference4me.psnc.pl
pogoda.man.poznan.pl
box.psnc.pl
lta-download.lofar.psnc.pl
lib.psnc.pl
dynafed3.indigo.psnc.pl
nogalia.man.poznan.pl
dl.psnc.pl
docs.psnc.pl
indico.conference4me.psnc.pl
support.pcss.pl
dingo.psnc.pl
mir.dlibra.psnc.pl
mail.mic.psnc.pl
cdn.classroom.psnc.pl
eurocase2017.psnc.pl
sentry.apps.psnc.pl
dingo.psnc.pl
vuln-mgmt.security.psnc.pl
lonicera.man.poznan.pl
edusafe.psnc.pl
www.pcss.pl
indico2.conference4me.psnc.pl
indico.conference4me.psnc.pl
*.apps.paas.psnc.pl
conference4me.psnc.pl
docs.psnc.pl
indico.conference4me.psnc.pl
net-assets-mgmt.security.psnc.pl
box.psnc.pl
conference4me.psnc.pl
iiif.ecloud.psnc.pl
ci.nds.psnc.pl
box.everest.psnc.pl
dl.psnc.pl
dynafed2.indigo.psnc.pl
box.psnc.pl
lonicera.man.poznan.pl
oneprovider.indigo.psnc.pl
repokb.dlibra.psnc.pl
meet.psnc.pl
nogalia.man.poznan.pl
scenemanagement.test.ksi.apps.psnc.pl
qcg-monitoring.man.poznan.pl
nds.psnc.pl
box.psnc.pl
repository2.netradio.psnc.pl
dingo.psnc.pl
box.psnc.pl
login.nebi.psnc.pl
pbl.dlibra.psnc.pl
pbl.dl.psnc.pl
psnc.pl
lonicera.man.poznan.pl
siem.security.psnc.pl
demo.dl.psnc.pl
meet.psnc.pl
weekly.psnc.pl
indico.conference4me.psnc.pl
helps.psnc.pl
*.apps.paas-dev.psnc.pl
sso.everest.psnc.pl
indico.conference4me.psnc.pl

Certificate

The complete raw certificate details for pbl.dl.psnc.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17475428463904836284835546964379080597
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Poznań'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Instytut Chemii Bioorganicznej Polskiej Akademii Nauk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Poznańskie Centrum Superkomputerowo-Sieciowe, DISU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pbl.dl.psnc.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 773081045138031685848029220371414064061710641821583504815448104552371226440445008802349515279055650077731285985265614063957843970280531176991810551308112173468011580000551916001139035834759298480430625021146966401575107583174879670356414249275052548293014087152072859312401218623650487644814641804540037917488546499512954396735839280715576036795944392305815975109694151461182429521299426122653077084056645219355004602642167909189775291222204118701408917295351006143871864062339312349322485728318670982383705338941693539110707693090338622703758548915852349187792038204553498614988057318198531515289105911774050780184672697965472966481708696730790310939934365551420441582986342037116071612304995934606207119627111562763209926374143317324648178423869337386580469234219984773291006177305693041763129108616703466043158096301656582852148488443505367170446426585549361358760427848814621194866485690945840968461835847303571488629868866779617339427666821307363792862218577836235666057206076510744635327751592965826705416084493316805269204183043425977086567722640139096136928190012128703355067204733989435838784254080059096254330801833878333237758693928133182261894979307212303648928024980367753703040214475512461085365405191431312521023497603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a7fc174c17db467c6c12beb4806ca48320eb48b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbl.dl.psnc.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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