Mobile.engenoil.com

- Engen Petroleum Limited -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number c2:67:46:fa:ba:72:b2:40:00:00:00:00:50:ed:07:90 was issued on by Entrust, Inc..

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Engen Petroleum Limited

Organization: Engen Petroleum Limited
State / Province: Western Cape
Locality: Cape Town
Country: ZA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c2:67:46:fa:ba:72:b2:40:00:00:00:00:50:ed:07:90
Serial Number (int): 258406477392118521904123107534216955792
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 01:a3:a9:21:f6:3e:1c:1e:41:cc:04:9e:24:31:91:e9:62:cc:32:e0
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 48:90:6d:42:38:4b:4a:bb:e6:18:03:e2:32:1b:fd:db:77:56:b4:d6
Fingerprint (sha256): d9:6b:84:23:74:74:b1:f4:ce:e1:cc:e7:44:dc:78:90:6f:91:98:46:28:40:38:8e:30:f8:c4:5d:2b:65:c1:fe

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate Mobile.engenoil.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Mobile.engenoil.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Mobile.engenoil.com
Legacy.engen.co.za
Hybrid.engenoil.com
Autodiscover.engen.mw
Autodiscover.engen.mu
Autodiscover.engen.co.zw
Autodiscover.engenoil.com
Autodiscover.engen.co.mz
Autodiscover.engen.rw
Autodiscover.engen.co.tz
Autodiscover.engen.ga
Autodiscover.engen.co.ke
Autodiscover.engen.re
Autodiscover.engen.com.gh
Autodiscover.engen.co.zm

Other certificates including the domain name engenoil.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for Mobile.engenoil.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvE1NZ8TlMsjPm1fvlBoa
teGycIWziMuFDpgyQx+Bj4THfhu3W9En9MGE4iqREmllWEE/WZ4zrdMPh9DzxaSV
0bH0V2AhzzKMLDwQNfPuLhCqv3MsnS9VVQhLMRzLrqtgQnejSRRbXxoVCv7CI359
3wLdDEEeu0IZb2kpQUCw7FfeTP3eJd5Z8fO/8VW2Q5jTnBo5+z07CY39svSEwrr8
IOgCxQcDVR6WVdzJdjIiMs0y1IiTATBXXB8ToosbPAGppFN7luKid/t9kySv/L4z
AZ79Qq3qvWFCAYjQLBfkQ4sZjyx3mEPA+fMP9Ze1wKLmgM3mjl0rYL8DVtrqXd36
w865Or7y+waJ5R5RNju4HwzHJyUf4AAQ60wm68leySJKGSmjAwpML4pjrRNN+XLi
m6I/+qvPWL4uDAkKebyYVo07Hl0mRIS7nmegW/zVYqQkGSHMGC/1AgwqfY1aQt4t
/gZUEY1iI1QSJUQeyL4gPWNU2+wy2JcLCaT4uEfy3PVCsbagcitt1rxBpYa96im2
SQUYZYynI2oQiwjTSQEy+V+F9ZZq0qGhjejs7NxxGknA+1xWUux10gcMxw6NKGgB
6VgeuPk3OtqFB8+5zeF1C4lIczydhLfAAGMm4T0VAGxh86A0q8/lv9u4LW9wYb4h
ATL2hJPRXSMZR5UWTmzmGaECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 258406477392118521904123107534216955792
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-31 18:30:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-31 19:00:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Western Cape'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cape Town'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Engen Petroleum Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mobile.engenoil.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768204983746190860943841482416754366809194946488299862881009721242610904602720406968431263602790646354532733151641435709199807201289611216673524326937093834557187361094201744792601807931053212829703123987886621523822186148120467705469027134462622030891253403402905604769920479052723063405249840200337352779235083869767929382229159532254808297129442419799727840228271335519627790748709811767411272902360717057297015070500142383304805977095371424321954171649318487126635821057741346420803912681060656647494505787005311104784771917251436411041161644566574140797671934230324459255680775585732323805729182044369324504801958876759021475022348676627929474769021734326263650007404763696194576866526128783308196390697552467477214251166095810844395896922762577972721920518904912641329517567601549419427325239146573555717741531950000698681436300714376985241965759446404208192277597693866655928774556539479671368531874844254821510401087582336143563443673918357570451992099100025114031605069721704481595941669655500320273984179975662096708572895247244258330671033665273925481867074895670225828997932804184735945128204711835777080503952258309128935532161421519816393554173812313384155942380760628280732360569477725325659301977369742209925800925601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Mobile.engenoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Legacy.engen.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Hybrid.engenoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.engen.mw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.engen.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.engen.co.zw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.engenoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.engen.co.mz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.engen.rw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.engen.co.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.engen.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.engen.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.engen.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.engen.com.gh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.engen.co.zm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01a3a921f63e1c1e41cc049e243191e962cc32e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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