gatekeeper.greenhead.ac.uk

- Greenhead College -

Issued by TERENA SSL CA

About this certificate

This digital certificate with serial number 7a:b6:c3:30:24:e9:6f:2b:35:af:d7:bd:9b:02:42:72 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Greenhead College

Organization: Greenhead College
Organization unit: Network Management
State / Province: West Yorkshire
Locality: Huddersfield
Country: GB

TERENA

Organization: TERENA
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:b6:c3:30:24:e9:6f:2b:35:af:d7:bd:9b:02:42:72
Serial Number (int): 163114772398261252932374658476442534514
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: a5:6d:6b:e9:d4:6e:25:ff:8f:00:5e:3e:e0:ba:90:b2:4c:34:bb:34
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): 24:f8:2a:3d:fa:ad:d8:c6:fe:29:79:9c:bf:c2:0b:3a:4c:f0:55:2b
Fingerprint (sha256): ec:71:2f:e7:6e:9b:14:23:be:68:ea:77:cc:64:6d:41:85:6e:8b:bd:4e:83:ca:19:7a:ef:cf:4a:85:ee:16:67

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for certificate gatekeeper.greenhead.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gatekeeper.greenhead.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gatekeeper.greenhead.ac.uk

Other certificates including the domain name greenhead.ac.uk

(limited to 100 certificates)
fortinet.greenhead.ac.uk
cedar.greenhead.ac.uk
gatekeeper.greenhead.ac.uk
Moondoor.academic.greenhead.ac.uk
www.greenhead.ac.uk
exams.greenhead.ac.uk
*.greenhead.ac.uk
svn.dev.greenhead.ac.uk
*.dev.greenhead.ac.uk
*.mx.greenhead.ac.uk
moodle.greenhead.ac.uk
exams.greenhead.ac.uk
viper.greenhead.ac.uk
gmis.greenhead.ac.uk
xibo.greenhead.ac.uk
www.greenhead.ac.uk
library.greenhead.ac.uk
viper.greenhead.ac.uk
greenhead.ac.uk
moodle.greenhead.ac.uk
Parallels.greenhead.ac.uk
cas.greenhead.ac.uk
cas.greenhead.ac.uk
webmail.greenhead.ac.uk
assets.greenhead.ac.uk
exams.greenhead.ac.uk
greenhead.ac.uk
mail.greenhead.ac.uk
netman.greenhead.ac.uk
www.greenhead.ac.uk
www.greenhead.ac.uk
viper.greenhead.ac.uk
jira.dev.greenhead.ac.uk
mail.greenhead.ac.uk
www.greenhead.ac.uk
cedar.greenhead.ac.uk
netman.greenhead.ac.uk
www.greenhead.ac.uk
*.dev.greenhead.ac.uk
exams.greenhead.ac.uk
webmail.greenhead.ac.uk
cedar.greenhead.ac.uk
www.greenhead.ac.uk
gmis.greenhead.ac.uk
www.greenhead.ac.uk
netman.greenhead.ac.uk
assets.greenhead.ac.uk
gatekeeper.greenhead.ac.uk
jira.dev.greenhead.ac.uk
netman.greenhead.ac.uk
mail.greenhead.ac.uk
mail.greenhead.ac.uk
pholden.dev.greenhead.ac.uk
cedar.greenhead.ac.uk
www.greenhead.ac.uk
gcintranet.greenhead.ac.uk
greenhead.ac.uk
exams.greenhead.ac.uk
gatekeeper.greenhead.ac.uk
moodle.greenhead.ac.uk
autodiscover.greenhead.ac.uk
moodle.greenhead.ac.uk
svn.dev.greenhead.ac.uk

Certificate

The complete raw certificate details for gatekeeper.greenhead.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIQerbDMCTpbys1r9e9mwJCcjANBgkqhkiG9w0BAQUFADA2
MQswCQYDVQQGEwJOTDEPMA0GA1UEChMGVEVSRU5BMRYwFAYDVQQDEw1URVJFTkEg
U1NMIENBMB4XDTA5MTEyNDAwMDAwMFoXDTEyMTEyMzIzNTk1OVowgZsxCzAJBgNV
BAYTAkdCMRcwFQYDVQQIEw5XZXN0IFlvcmtzaGlyZTEVMBMGA1UEBxMMSHVkZGVy
c2ZpZWxkMRowGAYDVQQKExFHcmVlbmhlYWQgQ29sbGVnZTEbMBkGA1UECxMSTmV0
d29yayBNYW5hZ2VtZW50MSMwIQYDVQQDExpnYXRla2VlcGVyLmdyZWVuaGVhZC5h
Yy51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJtvZ3XczN5pLaC8
maxw5RdsCVHE2AE7T8ZOMAB1PnFkPxpk2iU2juglx7oSIIV7PTHfBYMeff3YGaY0
WE12KD/r1iYBvAhyPTnTMCugu/XX9o6ZeFY11CNCxUYWBRZTaacbC3pfQdXymEgs
vyB3eWQA0nmuZjDK2/3kzHWU1LZ2WkiHS+b8vDXZUZ1huptQRTjK8mcy0qivqXUV
R1QO+gK0tODKiq1O82eq5ZSBOJLrsbcsEpCYuJ0ItsZZT+UlcjH5bL0+3cYRdKnM
6DVcoZGLvwg1poc+EFfARk8WNjC2uqwXvcTTHpqJWwqwPaEvQYlazTJBeztTnD6S
S1cxo5ECAwEAAaOCAW0wggFpMB8GA1UdIwQYMBaAFAy9k2gM896ro0lrKzdXR+qQ
47ntMB0GA1UdDgQWBBSlbWvp1G4l/48AXj7gupCyTDS7NDAOBgNVHQ8BAf8EBAMC
BaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
GAYDVR0gBBEwDzANBgsrBgEEAbIxAQICHTA6BgNVHR8EMzAxMC+gLaArhilodHRw
Oi8vY3JsLnRjcy50ZXJlbmEub3JnL1RFUkVOQVNTTENBLmNybDBtBggrBgEFBQcB
AQRhMF8wNQYIKwYBBQUHMAKGKWh0dHA6Ly9jcnQudGNzLnRlcmVuYS5vcmcvVEVS
RU5BU1NMQ0EuY3J0MCYGCCsGAQUFBzABhhpodHRwOi8vb2NzcC50Y3MudGVyZW5h
Lm9yZzAlBgNVHREEHjAcghpnYXRla2VlcGVyLmdyZWVuaGVhZC5hYy51azANBgkq
hkiG9w0BAQUFAAOCAQEAG+tSeXrRutdcPuVbRL0LgbGx0zIp4bb4oVyRLIQGsc0k
HnEMb5CprGo6bV1vvfSadzth1rxAQXrYMRqJLQ7PZMUU1XRilv64fjfELfT3Z/AO
a/o6kArw4UoypeylkpzeOm7qO9k8hvFRGQLT6VGFqsucP2CvehSKMn7vYEAxn6hf
U10iJBHuxb2uumyrikQDwTfx6+4s5S8VFX5M46EYcvj6ztNfgukLPvLsaeUkioqa
/LdcBoo5tDbMERmKrgJsSHoVwnkImwFlGRTURwAHsqV0mUzi342cJu3eCEqhFWkm
mFuul3Hpdy5a9lrezBqSfT7cZB9CJ2Vbl8d3XIL5Bw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm29nddzM3mktoLyZrHDl
F2wJUcTYATtPxk4wAHU+cWQ/GmTaJTaO6CXHuhIghXs9Md8Fgx59/dgZpjRYTXYo
P+vWJgG8CHI9OdMwK6C79df2jpl4VjXUI0LFRhYFFlNppxsLel9B1fKYSCy/IHd5
ZADSea5mMMrb/eTMdZTUtnZaSIdL5vy8NdlRnWG6m1BFOMryZzLSqK+pdRVHVA76
ArS04MqKrU7zZ6rllIE4kuuxtywSkJi4nQi2xllP5SVyMflsvT7dxhF0qczoNVyh
kYu/CDWmhz4QV8BGTxY2MLa6rBe9xNMemolbCrA9oS9BiVrNMkF7O1OcPpJLVzGj
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 163114772398261252932374658476442534514
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-11-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-11-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Yorkshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Huddersfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greenhead College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Management'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gatekeeper.greenhead.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19621872699724017812696075268208736003298338742289513997159597005774552779694098187603758826736750635203948535088979472489714371155628217070431006837714793228242981467362224222573960382536221630760259168018478346818775818686320649512910180050761612819641695609675403285557573248588945261663136076588486135077548154841226018550100597831347735278483109933502106376544044544834061256464605148078044930222379264960376386905463129102205727720631765947796895880766054924768848743243407786908111513698468622746210690810518388523150752281514079792202663185178807533587678178640600409399302026144118900302222661121423644402577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a56d6be9d46e25ff8f005e3ee0ba90b24c34bb34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatekeeper.greenhead.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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