www.dsihk.sk

Issued by R3

About this certificate

This digital certificate with serial number 03:3f:35:c3:2c:73:56:1a:18:68:f6:f7:8d:dd:72:ae:40:5f was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.dsihk.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3f:35:c3:2c:73:56:1a:18:68:f6:f7:8d:dd:72:ae:40:5f
Serial Number (int): 282846109394527786478718659950956031918175
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2b:0d:87:80:b4:3a:36:8d:d1:62:0a:40:fb:ea:7e:4e:f4:c8:a2:31
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 27:ec:04:b1:8a:db:7c:16:9c:fe:e5:1e:67:39:56:4d:0a:cc:bf:2d
Fingerprint (sha256): 86:00:de:af:56:a7:f3:f2:ce:48:58:b8:e6:d5:66:2a:9f:d2:26:5a:ed:7a:cd:86:03:e8:98:8c:87:a0:be:b2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.dsihk.sk

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dsihk.sk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ahk.sk
slowakei.ahk.de
www.ahk.sk
www.dsihk.sk
www.slowakei.ahk.de

Other certificates including the domain name dsihk.sk

(limited to 100 certificates)
www.dsihk.sk
www.dsihk.sk
www.dsihk.sk
www.dsihk.sk
www.dsihk.sk
www.dsihk.sk
www.dsihk.sk
www.dsihk.sk
www.dsihk.sk
www.dsihk.sk
www.dsihk.sk
www.dsihk.sk
www.dsihk.sk
www.dsihk.sk
www.dsihk.sk
www.dsihk.sk
www.dsihk.sk
www.dsihk.sk

Certificate

The complete raw certificate details for www.dsihk.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISAz81wyxzVhoYaPb3jd1yrkBfMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA2MDExNTE1MTRaFw0yMTA4MzAxNTE1MTRaMBcxFTATBgNVBAMT
DHd3dy5kc2loay5zazCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL1S
qfOOQSsZ6s55YTooQWZU/eRHYkpjfaVgoBs+1n+z9q4tBMzFMZEdurPpZ364O8xX
Cpa+NtmgJbfsz/Wk6hRxdYH+Exdu5HEIEHWhP8gWALf27Wxa+k60uHXElN3GNF4W
eAV5oUTGm3Ey/RkZedgU1uHfZIDniDAKvwF4OjulTGyv1ThwIsSWesKAMUPAPsDn
4Q25PyHv5VXrctLHdKyk9EXmy2EYoCa5yw9lP05mKGgxlsD4/FcBAX9yqr38hGhS
JEEa5bFWlpyGKnSem356AtwHaWj5fgiCZuFf+VAMQ1aLbmh+6bJEbal7OOOV181q
4y2AP+2X1Jc+MZNLoJQd6haHK7UCBqaSrHgHeeglPMfYKXPchWw6XiY+fdWg3CB1
IWSiGRLojfePWwM6wQtcb4G22vymqLlGx8Tj6DJsX+BEiLJKC/UNqiSsZkeW3+iZ
olTrFn8Ot7YvZGCpftTu7Qbk0Dol0KdB1tB0XHeL55X6o3W5jSLvPbctEN4pS+6Y
On2TyRb0y815FnExLjrV6e1WRHUBQRmmzSwglqUSOmb6ffYw1tzFfBDsT1GqIi3p
ctFjxJxqE6FlJCDCu1HMX0sZxhu8PhfdhoFYagCgUHNTQ3/b/n70MLE+iAAvSOHm
L1TMKqQ/yBMVddLfTgwxjMBDb0mW08UTzE3xNDgzAgMBAAGjggKBMIICfTAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFCsNh4C0OjaN0WIKQPvqfk70yKIxMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMFEGA1UdEQRKMEiCBmFoay5za4IPc2xvd2FrZWkuYWhr
LmRlggp3d3cuYWhrLnNrggx3d3cuZHNpaGsuc2uCE3d3dy5zbG93YWtlaS5haGsu
ZGUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgBElGUusO7Or8RAB9io/ijA2uaCvtjLMbU/0zOWtbaBqAAAAXnI
W5CLAAAEAwBHMEUCIQDDinSjeOGgiyLS0b/xY4sblWnXCL8rtDUjLGI1nGB0WgIg
CZN9BjJHGNBq7NwKJS+yHEVsvhQKAu8+LxGHyAi+mS0AdgD2XJQv0XcwIhRUGAgw
lFaO400TGTO/3wwvIAvMTvFk4wAAAXnIW5BzAAAEAwBHMEUCIQDPVkf7lXi8y+yU
Z03ISHPMg9pSTSoI3FMDEVxHCZMyxQIgdNAUdmdtKEp5uxo0kmPxZOYiHNpaS2+r
rQfxol+hqHAwDQYJKoZIhvcNAQELBQADggEBADuuQIqtBcb0GJ+h33PAVhfTKt1T
5Z89wv8QCe5EZi8LsEAA7x1RUHMokUzoZ7CRTn4MqEtOFbkQUitPJG3BvYJN/B7g
AMzISJKrQ9utwgwk28NDQkBjCFxqUyJrvtOLTYrjAiybDrdoBIG3JPtKUSJlTSk2
lJS853oadwAvpGyqjwWpUqglKaN6HTbynuAzuMZ5kG8jyVcSbZyMC+o9yDwphUSc
dYHLJBbsUDBnuV/KLgtmTYvIGSjAfqndG1RxZvU4KtjhmejOi5lRBGmNjG6dqiR8
qf89W6xfz2jQhqp5K9DbsvlHjfpKwNMM8TXT7GTP2ojaK7mf9cYRGDvqhZc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvVKp845BKxnqznlhOihB
ZlT95EdiSmN9pWCgGz7Wf7P2ri0EzMUxkR26s+lnfrg7zFcKlr422aAlt+zP9aTq
FHF1gf4TF27kcQgQdaE/yBYAt/btbFr6TrS4dcSU3cY0XhZ4BXmhRMabcTL9GRl5
2BTW4d9kgOeIMAq/AXg6O6VMbK/VOHAixJZ6woAxQ8A+wOfhDbk/Ie/lVety0sd0
rKT0RebLYRigJrnLD2U/TmYoaDGWwPj8VwEBf3KqvfyEaFIkQRrlsVaWnIYqdJ6b
fnoC3AdpaPl+CIJm4V/5UAxDVotuaH7pskRtqXs445XXzWrjLYA/7ZfUlz4xk0ug
lB3qFocrtQIGppKseAd56CU8x9gpc9yFbDpeJj591aDcIHUhZKIZEuiN949bAzrB
C1xvgbba/KaouUbHxOPoMmxf4ESIskoL9Q2qJKxmR5bf6JmiVOsWfw63ti9kYKl+
1O7tBuTQOiXQp0HW0HRcd4vnlfqjdbmNIu89ty0Q3ilL7pg6fZPJFvTLzXkWcTEu
OtXp7VZEdQFBGabNLCCWpRI6Zvp99jDW3MV8EOxPUaoiLely0WPEnGoToWUkIMK7
UcxfSxnGG7w+F92GgVhqAKBQc1NDf9v+fvQwsT6IAC9I4eYvVMwqpD/IExV10t9O
DDGMwENvSZbTxRPMTfE0ODMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282846109394527786478718659950956031918175
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-01 15:15:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-30 15:15:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dsihk.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772370069393118210011358672829702828748083447611489778173133595367419957479493480924454501889021209195696321558331537514058028425584841023765710386813993128791181270788446119547562925411982239811322856070414435522477761175797484588909825433677969505599646675058512434990270138615608307314080090950784612838231245133310645245805857191257623227656651934053486884411871336518413131136270873574503627489920396515311443837066764094827529309305412739465535358972419911983830791563893317478976336084721578422033505164175004935621676468595176004583888507975703598447667457593456298997946764386728244948778603436455863683209747213819640485910685963748497959099374235601150735223531081912629113393074850102998748800289077816223604349594383115149877059382115945710389468998461378583976276548654819467514936629396001743357451953387848299814697728165949468776217229978692225019725489946321929571385203384278350240907722469530178838220894309615732160685052637671300493206674986610343288047963182281666494990321934634845305844741879703152179137104144225408014270462287216585428589726936930497642300300483660183201591617656332055157800636684550769678686993717159825923491838896687405281885522717686018415666480838448266824476487862231738349992032307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b0d8780b43a368dd1620a40fbea7e4ef4c8a231
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahk.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slowakei.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahk.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsihk.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slowakei.ahk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000179c85b908b0000040300473045022100c38a74a378e1a08b22d2d1bff1638b1b9569d708bf2bb435232c62359c60745a022009937d06324718d06aecdc0a252fb21c456cbe140a02ef3e2f1187c808be992d007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000179c85b90730000040300473045022100cf5647fb9578bccbec94674dc84873cc83da524d2a08dc5303115c47099332c5022074d01476676d284a79bb1a349263f164e6221cda5a4b6fabad07f1a25fa1a870
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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