obov.ddj.co.za

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 01:a2:a3:bc:5f:5c:83:0c:fd:d0:c7:5f:29:e7:22:0e was issued on by SSL Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=obov.ddj.co.za

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:a2:a3:bc:5f:5c:83:0c:fd:d0:c7:5f:29:e7:22:0e
Serial Number (int): 2173701044040421830792167973091484174
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ab:4d:06:3c:15:74:c7:b3:a8:bf:ed:0b:6c:b5:a6:09:85:eb:6c:e6
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 8f:b8:1c:f4:ce:b5:14:cd:f6:e8:1f:9a:6c:75:5e:a7:73:72:62:91
Fingerprint (sha256): c2:da:ff:63:e8:86:ff:17:81:c1:94:f3:18:85:24:d4:23:41:d9:b5:f4:d8:a3:92:e3:b4:96:f3:ae:96:0f:d9

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate obov.ddj.co.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for obov.ddj.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

obov.ddj.co.za

Other certificates including the domain name ddj.co.za

(limited to 100 certificates)
kuaq.ddj.co.za
unga.ddj.co.za
plbxf.ddj.co.za
www.ddj.co.za
sbff.ddj.co.za
jyxx.ddj.co.za
pwkb.ddj.co.za
ddj.co.za
www.ddj.co.za
www.ddj.co.za
www.ddj.co.za
pdau.ddj.co.za
zjqd.ddj.co.za
ddj.co.za
www.ddj.co.za
vecv.ddj.co.za
wavh.ddj.co.za
qhvz.ddj.co.za
ddj.co.za
ddj.co.za
ddj.co.za
www.ddj.co.za
www.ddj.co.za
gahg.ddj.co.za
ddj.co.za
ddj.co.za
www.ddj.co.za
ddj.co.za
ddj.co.za
nhjl.ddj.co.za
gfdcd.ddj.co.za
www.ddj.co.za
ddj.co.za
fday.ddj.co.za
ddj.co.za
tmos.ddj.co.za
obov.ddj.co.za
www.ddj.co.za
ddj.co.za
qfyp.ddj.co.za
ddj.co.za
ddj.co.za

Certificate

The complete raw certificate details for obov.ddj.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFzTCCA7WgAwIBAgIQAaKjvF9cgwz90MdfKeciDjANBgkqhkiG9w0BAQsFADBp
MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x
GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg
U1NMIHN1YkNBMB4XDTIzMDExNDEyNTAzMFoXDTIzMDQyODEyNTAyNFowGTEXMBUG
A1UEAwwOb2Jvdi5kZGouY28uemEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxCR8GmBxBzRwqojWsHexucJTfpMb0bXMXuAAqrzUW8WM99/xw/dSLBYsW
4JlO4x+VSf213DDYVHxpl0W/NnAeYTFM7nQzgAkb+EA7A5Ld+2ZO/Wv1hDRk/Zht
vPmPMYg8xiWW/5B4I/BJABVt/Q3RteexlSJ7ctss8CnkN8ft9+qMnTQWeRgpzM0/
EQ4ArUMfNE3cG/H2O4uyTIjnKCjnT8uwUnJSMVpy4GWKA/dYD8fXbjWJwk8qvpdS
VLouNO9VvYCthd6IEcD4ERr3+ISIj4ZtA6lY2H2oVswX7Xr4e2MqYl8Y1dlLdMc0
Z0j+Q9ZQlelrSxItKH0MVBKAgfmPAgMBAAGjggG/MIIBuzAMBgNVHRMBAf8EAjAA
MB8GA1UdIwQYMBaAFCYUfuDc16b34tQEJ99h8cLs5zLKMHIGCCsGAQUFBwEBBGYw
ZDBABggrBgEFBQcwAoY0aHR0cDovL2NlcnQuc3NsLmNvbS9TU0xjb20tU3ViQ0Et
U1NMLVJTQS00MDk2LVIxLmNlcjAgBggrBgEFBQcwAYYUaHR0cDovL29jc3BzLnNz
bC5jb20wGQYDVR0RBBIwEIIOb2Jvdi5kZGouY28uemEwUQYDVR0gBEowSDAIBgZn
gQwBAgEwPAYMKwYBBAGCqTABAwEBMCwwKgYIKwYBBQUHAgEWHmh0dHBzOi8vd3d3
LnNzbC5jb20vcmVwb3NpdG9yeTAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH
AwEwRQYDVR0fBD4wPDA6oDigNoY0aHR0cDovL2NybHMuc3NsLmNvbS9TU0xjb20t
U3ViQ0EtU1NMLVJTQS00MDk2LVIxLmNybDAdBgNVHQ4EFgQUq00GPBV0x7Oov+0L
bLWmCYXrbOYwDgYDVR0PAQH/BAQDAgWgMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G
CSqGSIb3DQEBCwUAA4ICAQAcIw3lQ3YOyhmu564v6zkQVsiptwE54gJdYbFueiLT
iBxW23PA5XwfJup62BB2lR545ljB6vgEmgiWgtuTDyo2fmqN9cgm8f6AnW6JSJGV
gSVO+YkI24Aw2ckFqzOk6SgXqaV9FvgnGn+QWafHm+GaJd+aEBLsgXZ0X0PnUzDz
hxD2y7QFtPwh+DC2WHJ2iL/aCFlsRnB6NDp2WgV98P0djVOw8WuY3+vjGNNgbUPy
56ytUOBPqqZziUChFROGTuiF8f9/RTcW/U3FFaDx6cZ11uNqRlTXq2POThherY8i
JR8wwkfHg7a2DQEuswnKFXuNs6h80vGQz70jvoiiakffVolMuRpiEkzHWfhqzCOC
dRvyBc6jJZuJEAL1YA7CNjHfpxP2DQfOEgYGl3ZWJKsSe08ABqQXD2pwYBVoDDW1
ewWLnxPSXr5BqYLkjFBmeYfJLh5KHLxoByuJTJkrQq+e0nDMe4i7OfmMRYkziXVl
bKh4FLRo0n+UV3huzx+n7dEt/ghl4AlHnL9yen0TUyfJWZ6C9H5aoBtjPxCBZY0S
pm3clJ+TfshHICH5dkBib/wGnHdWMatGF/WviI2NuYJBbmKaWKnjyFsiikRCESbN
Ru2VsHpPntthm6mD+T6fUX3IxG2e33wIvD5Sj/mNcKw8gg+vFj6D+GVGyoALniJ5
BQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQkfBpgcQc0cKqI1rB3s
bnCU36TG9G1zF7gAKq81FvFjPff8cP3UiwWLFuCZTuMflUn9tdww2FR8aZdFvzZw
HmExTO50M4AJG/hAOwOS3ftmTv1r9YQ0ZP2Ybbz5jzGIPMYllv+QeCPwSQAVbf0N
0bXnsZUie3LbLPAp5DfH7ffqjJ00FnkYKczNPxEOAK1DHzRN3Bvx9juLskyI5ygo
50/LsFJyUjFacuBligP3WA/H1241icJPKr6XUlS6LjTvVb2ArYXeiBHA+BEa9/iE
iI+GbQOpWNh9qFbMF+16+HtjKmJfGNXZS3THNGdI/kPWUJXpa0sSLSh9DFQSgIH5
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2173701044040421830792167973091484174
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-14 12:50:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-28 12:50:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'obov.ddj.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22348677807572205149409921695368065978766475754972153450297234986381001068204566375161905583749552497422533154108504140439578955154591128662227967891728073902464269264877716898022926521989928712794189278705359187858456123062535649542194399577991709323246321457027337453265834937549381758657833417948376771822437939790726130339567314339503932715451342780597329136268817411747618400002493528967408355685557746546046662168612146835799906324446635880698091090370133089663293007030915431673433313827676735195291598636991138024079922070387867044361660764148070687782542715193914654032936149882783347820726032312462202763663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obov.ddj.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab4d063c1574c7b3a8bfed0b6cb5a60985eb6ce6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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