DV SSL/TLS Certificate for *.nalaurum.it

Certificate is witin its validity period

Issued by Actalis S.p.A. (Actalis Domain Validation Server CA G3)

About the *.nalaurum.it DV SSL/TLS Certificate

This certificate with serial number 0c:76:d6:d9:68:58:34:b1:04:b6:2e:0c:9f:76:bd:a2 for *.nalaurum.it was issued on by Actalis S.p.A..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.nalaurum.it provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 0c:76:d6:d9:68:58:34:b1:04:b6:2e:0c:9f:76:bd:a2
Serial Number (int): 16567784639185622509860560037580553634
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: 1e:84:db:f6:98:3d:11:f6:b7:2d:db:65:75:ec:52:95:d6:8d:a8:89
Authority Key Identifier: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (SHA-1): e4:5b:7d:f2:97:f9:ff:65:96:01:69:cb:ca:36:31:15:d1:b6:66:b0
Fingerprint (SHA-256): 18:93:51:f8:4b:49:1c:b1:08:6a:5d:40:7d:c0:e9:9d:50:99:a2:df:9c:95:06:57:9f:23:34:75:66:87:8a:d8

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation Information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.nalaurum.it
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.nalaurum.it

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.nalaurum.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHbzCCBVegAwIBAgIQDHbW2WhYNLEEti4Mn3a9ojANBgkqhkiG9w0BAQsFADCB
hDELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl
IFNhbiBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMS8wLQYDVQQDDCZB
Y3RhbGlzIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBHMzAeFw0yNTAyMTQw
NDA0MThaFw0yNjAzMTcwNDA0MTdaMBgxFjAUBgNVBAMMDSoubmFsYXVydW0uaXQw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY4aF5agpUIBNtj/GCX5/H
TiiqQDkW1tPX4Gfugd7wShm47DNAMMsnqcYA+XuUccQgq17BF3jvyXwd1lL7EchV
X4DRZ5z2Q8CtLJTVt+oKWwqL9z7voepj1MfbCraDUrIoQ8RtaC/nKz8uekzxoEph
AKYdxq1VNNZe9fRPSfRBCaGCtZf/p2zd1ZO7CISYX6gYUoBOCRzuJGB/wLxlDieN
yWq0q9gqfqDNv6xnqUUbna+345Uk0Y+2AlSZJqTtjLm+badcC5Za2+I/HAZqXMrs
ubXkZ80oMNz9MtMBiy3M2gIbFiDiJcfvVqyNdMyXTywJ42GGBoV1YogtO8weOrh9
AgMBAAGjggNGMIIDQjAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFEKDbYB8CYRn
/YBXq/Em9XfIIoJxMH0GCCsGAQUFBwEBBHEwbzA6BggrBgEFBQcwAoYuaHR0cDov
L2NhY2VydC5hY3RhbGlzLml0L2NlcnRzL2FjdGFsaXMtYXV0ZHZnMzAxBggrBgEF
BQcwAYYlaHR0cDovL29jc3AwNi5hY3RhbGlzLml0L1ZBL0FVVEhEVi1HMzAlBgNV
HREEHjAcgg0qLm5hbGF1cnVtLml0ggtuYWxhdXJ1bS5pdDBRBgNVHSAESjBIMDwG
BiuBHwEXATAyMDAGCCsGAQUFBwIBFiRodHRwczovL3d3dy5hY3RhbGlzLml0L2Fy
ZWEtZG93bmxvYWQwCAYGZ4EMAQIBMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF
BQcDATBIBgNVHR8EQTA/MD2gO6A5hjdodHRwOi8vY3JsMDYuYWN0YWxpcy5pdC9S
ZXBvc2l0b3J5L0FVVEhEVi1HMy9nZXRMYXN0Q1JMMB0GA1UdDgQWBBQehNv2mD0R
9rct22V17FKV1o2oiTAOBgNVHQ8BAf8EBAMCBaAwggF+BgorBgEEAdZ5AgQCBIIB
bgSCAWoBaAB1AJaXZL9VWJet90OHaDcIQnfp8DrV9qTzNm5GpD8PyqnGAAABlQKq
Iq0AAAQDAEYwRAIgBheon0cRFspB1tiGs51I9+3waAg8923K0MHpsXIfqqYCIDRJ
74IZbx3jFU3ETTVHH6uxe8DZ7+dd4qNYs6r4dZkhAHcASZybad4dfOz8Nt7Nh2Sm
uFuvCoeAGdFVUvvp6ynd+MMAAAGVAqoi3gAABAMASDBGAiEArEAqREijyQdGE2uW
sDd6myl6PnWOaZ5hpLio4te3SecCIQDi1q+iXoaEzxyYx5VEPvFb+3a29kAt3Dz5
vBrB3CUGTgB2ACUvlMIrKelun0EacgcraVxbUv+XqQ0lQLv83FHsTe4LAAABlQKq
IsMAAAQDAEcwRQIgZZ1CsASqmSA85J5nPdTuBeeEBJACSKTybeyaoHhdiMECIQDM
zs/iFEPK5Z6AMiAvlIYIyCv/Tiog7H+mzLLT00GeWTANBgkqhkiG9w0BAQsFAAOC
AgEAV3C2OIWhn6q5t3p4V4mshENlyGK3HW5/r8aodp8rBgIJaYDEPE4eCwpZrZIF
zrjVdwVypdWswjcwgbced42sgyiIn6vjm6IPSO/EVJvYOWjYXa5aq4wENq4LTnM/
c6lm1zz3puUmqJ+HTBAG27r1yCtx813nz6yb/qCgKJck1CTKzUbOA9ARE0krTxTT
AXfyEjvLWLK9ESgeu1tYO3hkClpQ+joLtNzKpyFcgL+WsRb35IqkRwPQ/HN58GKj
DX2eeeiyieHXEPs6sw944qS3C94Cdhj4pcR6Z6taqNKmIHcU31an6WeV/gKeVd2P
WB1gM7P3/wVtAZhOXkwdI3M70FSEwFf6znrSMPF/OuPXB0Uzub397jf3KecpTTmg
x137Gx1mQylqVuziC+z8uS0wTN/6WX2M0tGps31yTnKvgsjXuNx3m/kdSTDTwyny
LVD497sFAIHxLAFrt9WAfhVNaTojnNqDmuj/5BsUe02MuxEp2gv8DAdz9Xrl3R/n
jMnArBFkXobg1zWlQyC9rC2KYwz5evNnmUwe491KCv4NcAsxq8i27A8Tmw0eEm7x
iDo5aHkmGIN7HYPVSRESDRV099ts9ToMpRDfN4voMXhg6QpFiBpQ+VVfC6oH2UZA
X4qBq55LnceKX1tc/n6RyMRB/hLa3jN4D3UTB+AyHgNdDkA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOGheWoKVCATbY/xgl+f
x04oqkA5FtbT1+Bn7oHe8EoZuOwzQDDLJ6nGAPl7lHHEIKtewRd478l8HdZS+xHI
VV+A0Wec9kPArSyU1bfqClsKi/c+76HqY9TH2wq2g1KyKEPEbWgv5ys/LnpM8aBK
YQCmHcatVTTWXvX0T0n0QQmhgrWX/6ds3dWTuwiEmF+oGFKATgkc7iRgf8C8ZQ4n
jclqtKvYKn6gzb+sZ6lFG52vt+OVJNGPtgJUmSak7Yy5vm2nXAuWWtviPxwGalzK
7Lm15GfNKDDc/TLTAYstzNoCGxYg4iXH71asjXTMl08sCeNhhgaFdWKILTvMHjq4
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16567784639185622509860560037580553634
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-14 04:04:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-03-17 04:04:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nalaurum.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19299485028863247757066411893507626129677282042367449890657954942959066236945116605604612716289177744129459533898749008518256500740840758373728219238078675845167112205503048568273490490973463301884374116765983740808422307249237023927648416812002601147915946863689501247452075191673254851249795427709427356578584179893794372953062351315679188101256044087443665888583938558717949965530758383142820229679742964780800809700474392132599879460676111521467183488996948834130256700668245943933366236932381419432600888709984374611653591410041619210321068397309541351816596895950106663739759868388282464870433987036875532712061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nalaurum.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nalaurum.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e84dbf6983d11f6b72ddb6575ec5295d68da889
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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