www.matisa.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:24:70:1d:ec:ae:c2:ed:e4:84:b1:25:b9:e9:e2:a1:32:e9 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.matisa.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:24:70:1d:ec:ae:c2:ed:e4:84:b1:25:b9:e9:e2:a1:32:e9
Serial Number (int): 360848337848826273784691635181236015674089
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0a:ab:12:7c:17:d5:68:1c:4c:0d:81:22:d8:4b:a2:31:2a:d7:a9:1b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9b:b2:0c:0e:0f:91:6f:ca:27:a7:46:b1:52:cf:e3:ec:25:b9:3e:ae
Fingerprint (sha256): a9:81:ed:83:f1:16:d8:bc:c0:35:33:1e:26:11:52:64:1d:06:c2:de:77:d5:6b:99:f2:27:98:32:75:f4:99:11

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.matisa.ch

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.matisa.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

matisa.ch
www.matisa.ch
www.matisa.com
www.matisa.com.au
www.matisa.eu
www.matisa.swiss
www.matisadobrasil.com.br

Other certificates including the domain name matisa.ch

(limited to 100 certificates)
customerportal.uk.rlb.com
service.littlegarth.org
helpdesk.matisa.ch
customerportal.uk.rlb.com
support.homeinstead.ie
service.littlegarth.org
*.matisa.ch
www.matisa.ch
itservicedesk.poundland.co.uk
www.matisa.ch
support.sodra.com
connect19.ca
connect19.ca
customerportal.uk.rlb.com
customerportal.uk.rlb.com
helpdesk.matisa.ch
servicedesk.am-labor.de
support.homeinstead.ie
servicedesk.christs.cam.ac.uk
customerportal.uk.rlb.com
customerportal.uk.rlb.com
itservicedesk.poundland.co.uk
helpdesk.acrotec.ch
servicedesk.christs.cam.ac.uk
remote.matisa.ch
www.matisa.ch
customerportal.uk.rlb.com
support.homeinstead.ie
itservicedesk.poundland.co.uk
servicedesk.christs.cam.ac.uk
service.littlegarth.org
vpn.matisa.ch
customerportal.uk.rlb.com
customerportal.uk.rlb.com
helpdesk.acrotec.ch
customerportal.uk.rlb.com
servicedesk.synergyretailsupport.co.uk
connect19.ca
servicedesk.christs.cam.ac.uk
customerportal.uk.rlb.com
helpdesk.matisa.ch
mail.matisa.ch
servicedesk.ecm.software
helpdesk.acrotec.ch
customerportal.uk.rlb.com
servicedesk.am-labor.de
helpdesk.matisa.ch
servicedesk.synergyretailsupport.co.uk
helpdesk.acrotec.ch
helpdesk.acrotec.ch
connect19.ca
support.homeinstead.ie
customerportal.uk.rlb.com
ftp-doc.matisa.ch
*.matisa.ch
helpdesk.acrotec.ch
support.sodra.com
www.matisa.ch
vpn.matisa.ch
servicedesk.ecm.software
support.sodra.com
servicedesk.tpos.co.uk
www.matisa.ch
itservicedesk.poundland.co.uk
customerportal.uk.rlb.com
support.homeinstead.ie
customerportal.uk.rlb.com
connect19.ca
cattsupport.matisa.ch
connect19.ca
customerportal.uk.rlb.com
*.matisa.ch
www.matisa.ch
*.matisa.ch
servicedesk.synergyretailsupport.co.uk
customerportal.uk.rlb.com
connect19.ca
*.matisa.ch
support.homeinstead.ie
connect19.ca
www.matisa.ch
soporte.klz.rf.gd
customerportal.uk.rlb.com
helpdesk.acrotec.ch
connect19.ca
connect19.ca
servicedesk.tpos.co.uk
servicedesk.tpos.co.uk
servicedesk.tpos.co.uk
servicedesk.am-labor.de
connect19.ca
support.sodra.com
servicedesk.am-labor.de
webmail.matisa.ch
helpdesk.acrotec.ch
customerportal.uk.rlb.com
customerportal.uk.rlb.com

Certificate

The complete raw certificate details for www.matisa.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISBCRwHeyuwu3khLEluenioTLpMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMzAxODQ2MDFaFw0yNDAyMjgxODQ2MDBaMBgxFjAUBgNVBAMT
DXd3dy5tYXRpc2EuY2gwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy
Fur5+lLhwIDsENidgTWquTp6or2nxHNZYABnernlauFjujdh8D2Gsuesr96jv6NB
Zz7YKll1BeMzpVIDiWBiDEMwkhb8mDmCMJpX9J7jsjhwQPAtaZ18gaBKtxHgwpVN
cnP4DpaC4Oc8UUknUCO5aXM7er6Sm6/oNRUYyzEqB2Y7rMk/FsX2XEWCjoOPDlVs
HBKL4H4uenIypER+lQ1FYm6D9KFyEn+k7cpBheGUIfERxJrz8zaQJHHZVuMEuW2m
eyoCDU2SGc8gr/B8yduvLBxNzGv816jw0uZf/UBqU5rKxquxDd6jlSpZy/1hD6s2
E5MzZ3y/t3MiLeOm/q5TAgMBAAGjggJ7MIICdzAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFAqrEnwX1WgcTA2BIthLojEq16kbMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ
QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz
Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv
MIGCBgNVHREEezB5ggltYXRpc2EuY2iCDXd3dy5tYXRpc2EuY2iCDnd3dy5tYXRp
c2EuY29tghF3d3cubWF0aXNhLmNvbS5hdYINd3d3Lm1hdGlzYS5ldYIQd3d3Lm1h
dGlzYS5zd2lzc4IZd3d3Lm1hdGlzYWRvYnJhc2lsLmNvbS5icjATBgNVHSAEDDAK
MAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AEiw42vapkc0D+Vq
AvqdMOscUgHLVt0sgdm7v6s52IRzAAABjCHESiwAAAQDAEcwRQIgI7GF9QD5xogq
3jS8WMdWuIGN+yqxF/QzaxAdWrd++lYCIQCMqbKTvj86QzIATMYp80ddz8U7HAUt
T5usZnvABURBDwB3AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAAB
jCHESnUAAAQDAEgwRgIhAK0yrvJE56siLWaUnSRI1boBUL02gpLQKF+RgVSbxXpS
AiEA55vzXYfh/KHYwkRmlUV2nI0OE4fxmoWaxHdt3bRpNQ0wDQYJKoZIhvcNAQEL
BQADggEBAD7vUO+yCaaZtB4SAg/6jJFtFZHtZ5tXfsKhUwPLJ8wSbschhqnYBYsx
aee4OJZEhC2YGc+R6I4tZPJthsBqPvC038yNNoVvW3tchAsTCoU70+VRxNpx5B3S
ShJQr3jYxSREFdDQW/wT0Cz493rAVN9sLfSo2JxFTTcjHhCq++ar4gPWBoN70jHm
jd76sxxHFk9l/8yXnNdPIATKD2j6RO4BqxfLPNUk9BqyHvgikEGuKDZ9E+pUqvv+
quv1EeTFbJJB4dFRU7gRl/+vu5nxTgE5u+Ocz4p6GY/3BL+nhYXH/ELDjGQtVbXM
r0tBA9qhGvdkjrOD5fLj1PTXcbuwTI0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshbq+fpS4cCA7BDYnYE1
qrk6eqK9p8RzWWAAZ3q55WrhY7o3YfA9hrLnrK/eo7+jQWc+2CpZdQXjM6VSA4lg
YgxDMJIW/Jg5gjCaV/Se47I4cEDwLWmdfIGgSrcR4MKVTXJz+A6WguDnPFFJJ1Aj
uWlzO3q+kpuv6DUVGMsxKgdmO6zJPxbF9lxFgo6Djw5VbBwSi+B+LnpyMqREfpUN
RWJug/ShchJ/pO3KQYXhlCHxEcSa8/M2kCRx2VbjBLltpnsqAg1NkhnPIK/wfMnb
rywcTcxr/Neo8NLmX/1AalOaysarsQ3eo5UqWcv9YQ+rNhOTM2d8v7dzIi3jpv6u
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360848337848826273784691635181236015674089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 18:46:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 18:46:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.matisa.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22481719510240047412577282943184133026045388962582339153092382036578657192135619048727157717822374586661361814096060023644502937086039137606298418237811279732731583480065612689834082073390251689534029873003122711919811079903698738109674115725780015783914090370331583304070589181478211210621834241682782628618351714184683064404568727356507641458515245838241217059596083930196487435310992422995394439038135134327554226693290826264658165272696941833027301632619356906873979204368346975458119193026536380277350634324801773768355874645889926884162295872605439749680855722863371454532280455160001505829068631830765290565203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0aab127c17d5681c4c0d8122d84ba2312ad7a91b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matisa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matisa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matisa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matisa.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matisa.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matisadobrasil.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c21c44a2c0000040300473045022023b185f500f9c6882ade34bc58c756b8818dfb2ab117f4336b101d5ab77efa560221008ca9b293be3f3a4332004cc629f3475dcfc53b1c052d4f9bac667bc00544410f00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c21c44a750000040300483046022100ad32aef244e7ab222d66949d2448d5ba0150bd368292d0285f9181549bc57a52022100e79bf35d87e1fca1d8c244669545769c8d0e1387f19a859ac4776dddb469350d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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