acties.bicycling.nl

Issued by R3

About this certificate

This digital certificate with serial number 04:3c:5a:13:94:a1:62:46:46:94:a3:e8:ff:5b:92:41:bb:a9 was issued on by Let's Encrypt.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=acties.bicycling.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:3c:5a:13:94:a1:62:46:46:94:a3:e8:ff:5b:92:41:bb:a9
Serial Number (int): 368985817930141018978905588002998970334121
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 40:ea:20:81:ad:be:8a:a2:f1:cf:24:e2:a8:f4:15:66:51:61:13:d0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 49:ef:57:89:cf:8a:51:b3:98:d6:43:2f:27:20:57:44:0b:34:a5:13
Fingerprint (sha256): 6f:13:fb:f6:97:9d:9f:33:03:ff:7c:94:bc:e7:a4:cc:93:92:72:b6:1d:94:6a:b8:77:c4:c9:c7:44:d9:64:6d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate acties.bicycling.nl

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acties.bicycling.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acties.bicycling.nl
acties.cosmopolitan.nl
acties.designer-vintage.com
acties.elle.nl
acties.esquire.nl
acties.harpersbazaar.nl
acties.hearst.nl
acties.jan-magazine.nl
acties.menshealth.nl
acties.natgeoshop.nl
acties.quest.nl
acties.questjunior.nl
acties.quotenet.nl
acties.runnersweb.nl
acties.runnersworld.com
acties.womenshealthmag.nl
events.elle.nl
mensfinestshoppingday.nl
newsletter.hearst.nl
questjunior.live.aubergine-it.nl
questjunior.nl
tools.bicycling.nl
tools.elle.nl
tools.runnersworld.com
www.mensfinestshoppingday.nl
www.questjunior.nl

Other certificates including the domain name bicycling.nl

(limited to 100 certificates)
acties.bicycling.nl
dns-vetting1j.map.fastly.net
acties.bicycling.nl
dns-vetting1j.map.fastly.net
hearst-uk.map.fastly.net
acties.bicycling.nl
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
acties.bicycling.nl
acc.bicycling.nl
dns-vetting1j.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
actieabonnement.live.hearst.aubergine-it.nl
hearst-uk.map.fastly.net
actieabonnement.live.hearst.aubergine-it.nl
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
hearst-uk.map.fastly.net
acties.bicycling.nl
dns-vetting1j.map.fastly.net
hearst-uk.map.fastly.net
actieabonnement.live.hearst.aubergine-it.nl
dns-vetting1j.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
actieabonnement.live.hearst.aubergine-it.nl
dns-vetting1j.map.fastly.net
hearst.co.uk
actieabonnement.live.hearst.aubergine-it.nl
hearst-uk.map.fastly.net
abonnement.bicycling.nl
bicycling.nl
actieabonnement.live.hearst.aubergine-it.nl
hearst-uk.map.fastly.net
actieabonnement.live.hearst.aubergine-it.nl
hearst-uk.map.fastly.net
dns-vetting1j.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1j.map.fastly.net
kiosk.live.hearst.aubergine-it.nl
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
tracking.bicycling.nl
stg.weekbladpersmedia.nl
actieabonnement.live.hearst.aubergine-it.nl
abonnement.bicycling.nl
dns-vetting1j.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1j.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1j.map.fastly.net
hearst-uk.map.fastly.net
actieabonnement.live.hearst.aubergine-it.nl
bicycling.nl
hearst.co.uk
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
acc.weekbladpersmedia.nl
dns-vetting1j.map.fastly.net
acties.bicycling.nl
hearst-uk.map.fastly.net
dns-vetting1j.map.fastly.net
bicycling.nl
abonnement.bicycling.nl
dns-vetting1j.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1j.map.fastly.net
actieabonnement.live.hearst.aubergine-it.nl
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
abonnement.bicycling.nl
hearst-uk.map.fastly.net
hearst.co.uk
acc.bicycling.nl
actieabonnement.live.hearst.aubergine-it.nl
dns-vetting1j.map.fastly.net
actieabonnement.live.hearst.aubergine-it.nl
dns-vetting1j.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net

Certificate

The complete raw certificate details for acties.bicycling.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooY/UGqyqGRjZgTIZpPG
hn/Oln/Nv6jK14ggw3MbjHSutdqKSbJHOu6cZHTt2mR5e7eC1e9FcrnT2QbaGKMy
bDYOjZP/sD8VQx1KyjJnjEL9LCDBLFTGHEVDb2t4t+XS6aKdkLmo1EixzWMwtmVA
IMTXCt3CAiP/uP86u6nB+6xsQPM7HfsPeCId2rebq6QjMmoL9R5PFsw4qnwKT8M1
nejtZlwxXqKUK6N+fAsG7ePjNGjVblmX4MbTmv1x6QMnc9zxWThy74ScMZ33a+g1
V4+2iaZmMx05ixpmCHuoRz3RjuMytnVzX5bqs9W/1/Pytf0CgZVZT3P7YiBNV99k
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368985817930141018978905588002998970334121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 20:07:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 20:07:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acties.bicycling.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20516805225695420116534223610149428876690629355530085295955882177659306685868040144310801134788498358976870205041468960602898689855278885577371928695895516928472863143655018900240309993147900919980841157074421885995162108984549031763620159169820053186958679975693213382491307293584891762163090343830356536353813860134671023858255204052914256232488749752690238047609508445146752490701894190044065624814413068144162305028706101356995225634311601425468441042400029813194525379156113934056174851304144213036215707354395702507735254033282673128663752116927020994482599537761076800547911180552846426911354739270344052270207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40ea2081adbe8aa2f1cf24e2a8f41566516113d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (581 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acties.bicycling.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acties.cosmopolitan.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acties.designer-vintage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acties.elle.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acties.esquire.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acties.harpersbazaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acties.hearst.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acties.jan-magazine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acties.menshealth.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acties.natgeoshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acties.quest.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acties.questjunior.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acties.quotenet.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acties.runnersweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acties.runnersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acties.womenshealthmag.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.elle.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mensfinestshoppingday.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.hearst.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questjunior.live.aubergine-it.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questjunior.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.bicycling.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.elle.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.runnersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mensfinestshoppingday.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.questjunior.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018eba63698a00000403004730450220393e77d9bc9f5afbce06c1590407e9cb3e40cf604356753e0f7723463f69f99f022100a0fdbcb51ee339130ed99a438fb8422e275de9ebc104b70c460857e75cf7154e00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018eba6369bc0000040300473045022100887ce48e992560210ed74ceeebd02812ab3f8c9e979407063c666cba519666fd0220642a8345e9eb41bbc79fcae477b2708c1667758e8ddeef85b944c2659d57e923
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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