xr1demo.xcudo.app

Issued by R3

About this certificate

This digital certificate with serial number 04:89:c8:34:2b:e1:d8:09:a3:5c:39:e6:2a:04:f9:91:df:4b was issued on by Let's Encrypt.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xr1demo.xcudo.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:89:c8:34:2b:e1:d8:09:a3:5c:39:e6:2a:04:f9:91:df:4b
Serial Number (int): 395333944483839993003227464711773510295371
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 47:bd:28:07:52:0f:cd:4e:62:8e:4d:db:26:fe:6d:39:c8:82:cb:3f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e0:3e:15:96:0f:e4:14:1f:96:1b:a1:a4:6b:5b:2b:4a:1f:e9:57:88
Fingerprint (sha256): c0:69:85:60:7c:5e:40:32:21:07:d8:9c:98:e9:e8:58:96:f2:65:b1:c2:d0:39:6d:66:a5:9c:b3:73:34:94:5e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate xr1demo.xcudo.app

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xr1demo.xcudo.app

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afspraken.animaresearch.com
ai.bizworks.io
andco-app-qualiopi.secoiam.fr
app.deregiebehandelaars.nl
app.sustemic.com
app.vanlooprojects.be
ardent.domportal.care
atelierderamuntcho.kalyapp.fr
boucherieduclercq.kalyapp.fr
bride.naturalbrideboutique.com
camar-sesam.secoiam.fr
cloud.easydocs.ro
cofrigo.sunapps.fr
crm.dempseydyer.co.uk
defra.asset-360.co.uk
elite-cet.sunapps.fr
elite-clim.sunapps.fr
emjmetals.talentgreatness.com
enterprise.auto-vu.co.uk
explore.talentgreatness.com
ftdevelopment.sunapps.fr
governors.provide.org.uk
hdfe-sesam.secoiam.fr
hockey.ca2l.fr
iaea.qnetservices.co.uk
immo.erdbaron.com
jonkoping.fap360.se
klientenportal.nellykress.com
lacabanesensorielle.toosmart-formation.fr
larrea.kalyapp.fr
login.auto-vu.co.uk
migbaltic.talentgreatness.com
my.ca2l.fr
onergy-cet.sunapps.fr
partner.wattline.com
portal.hhts.health
portal.paix.io
portal.smarthypotheque.ch
portal.smoothcomms.com
portal.wealthonwheels.co.za
presentation.sunapps.fr
pvs.invirto.de
rainea.toosmart.app
ramery-sesam.secoiam.fr
reseller.tibo.tv
retailers.naturalbrideboutique.com
signup.globaluk.uk
sodm.sunapps.fr
spotlight.domportal.care
support.olf.ch
surveys.genesis-tec.com
td-sesam.secoiam.fr
tradesman.themobileappcompany.com
winners.domportal.care
www.fernoxtests.com
xr1demo.xcudo.app

Other certificates including the domain name xcudo.app

(limited to 100 certificates)
xr1demo.xcudo.app
xr1demo.xcudo.app

Certificate

The complete raw certificate details for xr1demo.xcudo.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEJNU74U02l7GESZ/mz+VxF/eLIPSC
bpk32XTj6BHMQcrBDzYH8qMBwpFj0KCnigY9aFi5uelIiQv8q6i4cr9FIw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 395333944483839993003227464711773510295371
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 05:11:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 05:11:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xr1demo.xcudo.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000424d53be14d3697b184499fe6cfe57117f78b20f4826e9937d974e3e811cc41cac10f3607f2a301c29163d0a0a78a063d6858b9b9e948890bfcaba8b872bf4523
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47bd2807520fcd4e628e4ddb26fe6d39c882cb3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1344 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afspraken.animaresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai.bizworks.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andco-app-qualiopi.secoiam.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.deregiebehandelaars.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sustemic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.vanlooprojects.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ardent.domportal.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atelierderamuntcho.kalyapp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boucherieduclercq.kalyapp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bride.naturalbrideboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camar-sesam.secoiam.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.easydocs.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cofrigo.sunapps.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.dempseydyer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defra.asset-360.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elite-cet.sunapps.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elite-clim.sunapps.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emjmetals.talentgreatness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprise.auto-vu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.talentgreatness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftdevelopment.sunapps.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governors.provide.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdfe-sesam.secoiam.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockey.ca2l.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iaea.qnetservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immo.erdbaron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonkoping.fap360.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klientenportal.nellykress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacabanesensorielle.toosmart-formation.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larrea.kalyapp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.auto-vu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migbaltic.talentgreatness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ca2l.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onergy-cet.sunapps.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.wattline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.hhts.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.paix.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.smarthypotheque.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.smoothcomms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.wealthonwheels.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presentation.sunapps.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pvs.invirto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rainea.toosmart.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramery-sesam.secoiam.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reseller.tibo.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.naturalbrideboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.globaluk.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodm.sunapps.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotlight.domportal.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.olf.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveys.genesis-tec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'td-sesam.secoiam.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradesman.themobileappcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winners.domportal.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fernoxtests.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xr1demo.xcudo.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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