pma.fr.ith.hu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:64:6b:7d:8b:8a:8d:7c:56:ce:d0:ec:1f:8d:38:46:91:05 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pma.fr.ith.hu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:64:6b:7d:8b:8a:8d:7c:56:ce:d0:ec:1f:8d:38:46:91:05
Serial Number (int): 295507973750263098175739143551870252257541
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:56:a0:3d:62:c1:78:61:68:22:97:72:a7:e0:aa:54:55:65:d8:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): df:9b:76:1e:d2:b3:9e:68:ee:64:e4:17:b9:f1:31:69:cc:4c:a5:06
Fingerprint (sha256): de:e1:9d:1c:87:0e:11:a4:56:db:6a:10:ff:82:ec:15:11:43:05:96:eb:75:38:04:c5:87:d6:39:9e:be:7e:63

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pma.fr.ith.hu

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pma.fr.ith.hu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

k.ith.hu
l.ith.hu
n.ith.hu
netdata.seed.itnetsolution.com
pma.fr.ith.hu
s.ith.hu
seed.ith.hu
seed.itnetsolution.com

Other certificates including the domain name ith.hu

(limited to 100 certificates)
itnetsolutionltd.co.uk
mail.ith.hu
pfa.ith.hu
pma.fr.ith.hu
ith.hu
ith.hu
ldap.ith.hu
ldap.ith.hu
beggerplate.com
ldap.ith.hu
beggerplate.com
pma.fr.ith.hu
ldap.ith.hu
beggerplate.com
itnetsolutionltd.co.uk
ldap.ith.hu
ith.hu
ith.hu
ith.hu
www.ith.hu
dyras.dev.ith.hu
ldap.ith.hu
ith.hu
pma.fr.ith.hu
ith.hu
ith.hu
dyras.dev.ith.hu
ith.hu
ith.hu
pma.fr.ith.hu
ith.hu
pma.fr.ith.hu
beggerplate.com
webmail.ith.hu
www.ith.hu
ldap.ith.hu
pma.fr.ith.hu
ldap.ith.hu
ldap.ith.hu
www.ith.hu
ldap.ith.hu
dyras.dev.ith.hu
ldap.ith.hu
ldap.ith.hu
ldap.ith.hu
ith.hu
directory.teknoir.ai
pma.fr.ith.hu
beggerplate.com
ith.hu
ldap.ith.hu
ith.hu
itnetsolutionltd.co.uk
ith.hu
www.ith.hu
ldap.ith.hu
ith.hu
pma.fr.ith.hu
itnetsolutionltd.co.uk
ldap.ith.hu
ldap.ith.hu
pma.fr.ith.hu
ith.hu
pma.fr.ith.hu
pma.fr.ith.hu
phpmyadmin.ith.hu
ith.hu

Certificate

The complete raw certificate details for pma.fr.ith.hu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgISA2RrfYuKjXxWztDsH404RpEFMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjYxNDU0MjlaFw0y
MDA1MjYxNDU0MjlaMBgxFjAUBgNVBAMTDXBtYS5mci5pdGguaHUwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVyJ+YieymwpJ5JQ+DShG8DCvv96Xlw1Ah
1gTXfCv72jj5NQddVyew3+T7xfMMr1r0D9vkBxlgGdlYv/7VpCBLRxN2hdRpFFas
98vyKy6lmU+GbvEm34R68c9tn+xASxcizgbMGpJRssNJTd0CkOzGyN80AnyM587+
R6GXgmHgpqwHMQEiklYtpsAlUtFqh8NiwVOgg9Wu8dw0sdk9FuQWt3XvYiOZ6XyQ
fk3COkESFtZ4Qqpjdku2TeiTnrJrZZQl1jvIQoLT/GZKA95m1BfSyi8heH0qsPqQ
4oGLBmDxnNzSjf+P6gdJVirNJ2ieHCW1YP29KFrPutgwia8iiuSZAgMBAAGjggLQ
MIICzDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDxWoD1iwXhhaCKXcqfgqlRVZdh0
MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw
YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y
ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y
Zy8wgYUGA1UdEQR+MHyCCGsuaXRoLmh1gghsLml0aC5odYIIbi5pdGguaHWCHm5l
dGRhdGEuc2VlZC5pdG5ldHNvbHV0aW9uLmNvbYINcG1hLmZyLml0aC5odYIIcy5p
dGguaHWCC3NlZWQuaXRoLmh1ghZzZWVkLml0bmV0c29sdXRpb24uY29tMEwGA1Ud
IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw
AHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFwgjTkuQAABAMA
RzBFAiEA1HuQqSsPelrvBelPtGvfuMs80JPYKI+0Yi8prD6bwdICIF2QIR6zOnH1
skm/ViPKsTwkJ5lRxtyjlX30pCIaPxm7AHYAsh4FzIuizYogTodm+Su5iiUgZ2va
+nDnsklTLe+LkF4AAAFwgjTkmgAABAMARzBFAiAaiABF0mlQNSHf+7AtjxiBNIAt
1nOkDPovjz5oPPgyyAIhAL1sLp5E3MqbQGOVhtFFWWGGWmJ2rRcnX9fA7hnXucBS
MA0GCSqGSIb3DQEBCwUAA4IBAQCWKRNQ30YAtm9zXNTHkQ1/JjcKNu53fwt2LAdY
fFBCqOlbDVbUA04OkcuPh/6YfJ8bQfkLsk3L7fzskt6ar5jTD79YOxyjdg0RLMQD
BG0kVc8WdSMoVpbiD8jrnxRZ9ANnBVtGUvpeqzI5PhgZdfHPnxkIGeyXMDXKlkeZ
9EakfkwsTi5jrZzNONiZu8Oeu3aBxXfR4T5rIdHUBnppLeF0KoU+Nvqtr0aiDRVT
cYzy9BvzIjWuh8PiTc/0ozNoBd4x16aJHGbC9Nk7OaENtjBiIh39bUcs51j9YZE7
c1BAsFHNoUPqN9jdz9ObFPoxb8V5cyrbdC3W6BiZJSPKL+Mu
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcifmInspsKSeSUPg0oR
vAwr7/el5cNQIdYE13wr+9o4+TUHXVcnsN/k+8XzDK9a9A/b5AcZYBnZWL/+1aQg
S0cTdoXUaRRWrPfL8isupZlPhm7xJt+EevHPbZ/sQEsXIs4GzBqSUbLDSU3dApDs
xsjfNAJ8jOfO/kehl4Jh4KasBzEBIpJWLabAJVLRaofDYsFToIPVrvHcNLHZPRbk
Frd172Ijmel8kH5NwjpBEhbWeEKqY3ZLtk3ok56ya2WUJdY7yEKC0/xmSgPeZtQX
0sovIXh9KrD6kOKBiwZg8Zzc0o3/j+oHSVYqzSdonhwltWD9vShaz7rYMImvIork
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295507973750263098175739143551870252257541
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 14:54:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-26 14:54:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pma.fr.ith.hu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18908438536201606453913531157987986007477219001050575294822306199349121450775517844514423656889997839108545242603434046546029576220795394763362502236512524918672258736291659089284530912368419887633475987895947094886924921262655815858199901453917726407340001611203980118166490562052799746790290902241222702375388928988295588701902147931868192802797394229585208965079937746781955891658487702900262176112921580236549469043514926247749166386367537068931605086392092539136330846615724563374087119058944073407026406029181389521826027661055068379832592472443374774884437394683715761135464199131361596441584278770977117758617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c56a03d62c1786168229772a7e0aa545565d874
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k.ith.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.ith.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'n.ith.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netdata.seed.itnetsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pma.fr.ith.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.ith.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seed.ith.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seed.itnetsolution.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001708234e4b90000040300473045022100d47b90a92b0f7a5aef05e94fb46bdfb8cb3cd093d8288fb4622f29ac3e9bc1d202205d90211eb33a71f5b249bf5623cab13c24279951c6dca3957df4a4221a3f19bb007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001708234e49a000004030047304502201a880045d269503521dffbb02d8f188134802dd673a40cfa2f8f3e683cf832c8022100bd6c2e9e44dcca9b40639586d1455961865a6276ad17275fd7c0ee19d7b9c052
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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