san1.klmonline.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c1:8e:fc:0c:08:50:78:c3:c6:77:cc:1a:a8:5e:3a:b9:4f was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san1.klmonline.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c1:8e:fc:0c:08:50:78:c3:c6:77:cc:1a:a8:5e:3a:b9:4f
Serial Number (int): 327201413689279317559158500968749845887311
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:c9:1f:74:40:37:42:ae:cf:2b:2c:2c:d6:b0:e1:1f:43:15:c8:f1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 69:6c:65:3c:f2:06:49:09:e9:47:c1:4c:62:35:10:ef:2a:f1:69:e5
Fingerprint (sha256): bd:c7:52:49:bf:ea:2e:ef:e8:ec:43:a8:8b:c2:83:b8:6c:43:de:7a:c4:8f:a1:3d:6c:a3:42:5e:35:3b:af:27

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san1.klmonline.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san1.klmonline.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog-origin.klm.com
blog.klm.com
brand.klm.com
campaigndesigner.klm.com
experience.klm.com
farefeed.klm.com
fightblue.klm.com
flightbundlebusiness.klm.com
flyresponsibly.klm.com
jijenklm.nl
librodereclamaciones.klm.com
livedeals.klm.com
livedeals.klm.nl
livestreammachine.klm.com
lwcdn.klm.com
offers.klm.com
paapi.klm.com
packassistant.klm.com
passport-cms.klm.com
passport.klm.com
photocompetition.klm.com
play-cms.klm.com
play-origin.klm.com
promotions.klm.com
quoidenouveau.flyingblue.com
reasons.klm.com
reizen-met-kinderen.klm.com
san1.klmonline.com
schiphol-service.klm.com
specialoffers.flyingblue.com
travel-with-kids.klm.com
voyager-avec-enfants.klm.com
wannagives.klm.com
wbc.klm.com
weetenwin-cms.klm.com
weetenwin.klm.com
werelddealwekker.klm.com
winwith.klm.com
www.jijenklm.nl

Other certificates including the domain name klmonline.com

(limited to 100 certificates)
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
cmt.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
cmt.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
cmt.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
cmt.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
cmt.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com
san1.klmonline.com

Certificate

The complete raw certificate details for san1.klmonline.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxxMdDleCsWTeHv/6tUb
aZTw5vIShTq/zF0YRZs7dtqvsHiepZSJ2yRMYaRL2Pg2urAs2zUi6pOm38KxnDfX
hkhcdxurMSQY04S0fbs15njIc7Y61idHg147iRpwcFkG4J7Typ7RFSBnIWseE7Ji
xttXhbQD7w9r5sKMejaAI5m9ZAUgF1pUEIN1EItv7znUM3DGDI/pZU1IQwbVPbyJ
+JG4VSldCPLVdUv20CEL0K2xI5hyBQIzDAs4C8fQR7TAeHlCs7K7rmkTqiYGfion
Vh83z+Grq1PQqGZYt/DIL9tbyyPQWaSBC7yJNLcfkj450Mc1ssRRbTYs/wo5vuI1
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327201413689279317559158500968749845887311
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-19 15:16:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-17 15:16:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san1.klmonline.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23620517612292634676070428618058863575729841764362392378162794849894873847495732710760218919824377455820925405442671512002582510879860238391944221617227388037269844197126922792330202696952347645080526148335953588516419477659965933007573790496688672404135917544506181963984441431401143613521610911527734274988454953541706068788645864581713244230651875761912572497256470556562401039147979390047439050958340678569669551420665371135637869253109886257645076836516891945520424110982869392750498462904319524436903681818626109261349767491009582988878719580825509280591662541836158780778156221043178480398761778999500472464721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3cc91f74403742aecf2b2c2cd6b0e11f4315c8f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (835 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog-origin.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaigndesigner.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farefeed.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightblue.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightbundlebusiness.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyresponsibly.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jijenklm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'librodereclamaciones.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livedeals.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livedeals.klm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livestreammachine.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lwcdn.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paapi.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'packassistant.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport-cms.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocompetition.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play-cms.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play-origin.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promotions.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quoidenouveau.flyingblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reasons.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reizen-met-kinderen.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san1.klmonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schiphol-service.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specialoffers.flyingblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel-with-kids.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voyager-avec-enfants.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wannagives.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbc.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weetenwin-cms.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weetenwin.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werelddealwekker.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winwith.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jijenklm.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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