safe.4cforchildren.org

Issued by Network Solutions DV Server CA

About this certificate

This digital certificate with serial number 43:c7:29:83:52:d0:73:97:50:be:bc:d8:1e:28:b2:ce was issued on by Network Solutions L.L.C..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=safe.4cforchildren.org,OU=Domain Control Validated+OU=nsProtect Secure Xpress

Network Solutions L.L.C.

Organization: Network Solutions L.L.C.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 43:c7:29:83:52:d0:73:97:50:be:bc:d8:1e:28:b2:ce
Serial Number (int): 90092384775750606509000567447985107662
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c3:5e:3d:f0:ff:46:fd:b9:07:e8:b9:6f:96:4a:a9:8d:e4:8a:44:6b
AuthorityKeyId: 58:d8:25:92:a4:55:5a:6e:d9:a3:d1:a3:7c:0c:aa:04:21:71:2e:60

Fingerprint (sha1): d3:07:71:b5:00:ac:ff:ca:f5:2f:1b:c5:27:72:8a:b6:11:c1:ce:e5
Fingerprint (sha256): f8:89:96:5e:c6:b0:2b:e0:09:2a:94:7f:6c:b8:8c:b5:e7:c1:9c:85:fe:26:76:e4:16:3d:71:f2:a1:c9:14:ce

Issuing Certificate URL: http://www.netsolssl.com/NetworkSolutionsDVServerCA.crt

Revocation information

OCSP Server: http://ocsp.netsolssl.com
CRL Distribution Point: http://crl.netsolssl.com/NetworkSolutionsDVServerCA.crl

Check the revocation status for certificate safe.4cforchildren.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for safe.4cforchildren.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

safe.4cforchildren.org

Other certificates including the domain name 4cforchildren.org

(limited to 100 certificates)
www.4cforchildren.org
4cforchildren.org
4cforchildren.org
tls.automattic.com
tls.automattic.com
ed.4cforchildren.org
tls.automattic.com
4cforchildren.org
4cforchildren.org
ed.4cforchildren.org
www.4cforchildren.org
tls.automattic.com
www.4cforchildren.org
afc.4cforchildren.org
tls.automattic.com
tls.automattic.com
ed.4cforchildren.org
www.4cforchildren.org
gala.4cforchildren.org
tls.automattic.com
tls.automattic.com
forms.4cforchildren.org
*.4cforchildren.org
tls.automattic.com
ts.4cforchildren.org
secure.4cforchildren.org
www.4cforchildren.org
tls.automattic.com
tls.automattic.com
tls.automattic.com
4cforchildren.org
*.4cforchildren.org
safe.4cforchildren.org
tls.automattic.com
afc.4cforchildren.org
mail.4cforchildren.org
ed.4cforchildren.org
afc.4cforchildren.org
forms.4cforchildren.org
tls.automattic.com
forms.4cforchildren.org
forms.4cforchildren.org
secure.4cforchildren.org
ed.4cforchildren.org
tls.automattic.com
ed.4cforchildren.org
tls.automattic.com
4amprayer.com
4cforchildren.org
afc.4cforchildren.org
tls.automattic.com
tls.automattic.com
4cforchildren.org
tls.automattic.com
tls.automattic.com
forms.4cforchildren.org
4cforchildren.org
tls.automattic.com
mail.4cforchildren.org
tls.automattic.com
www.4cforchildren.org
secure.4cforchildren.org
secure.4cforchildren.org
forms.4cforchildren.org
tls.automattic.com
4cforchildren.org
afc.4cforchildren.org
gala.4cforchildren.org
secure.4cforchildren.org
tls.automattic.com
ed.4cforchildren.org
4cforchildren.org
mail.4cforchildren.org
forms.4cforchildren.org
secure.4cforchildren.org
mail.4cforchildren.org
4cforchildren.org
secure.4cforchildren.org
secure.4cforchildren.org
tls.automattic.com
safe.4cforchildren.org
tls.automattic.com

Certificate

The complete raw certificate details for safe.4cforchildren.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIQQ8cpg1LQc5dQvrzYHiiyzjANBgkqhkiG9w0BAQUFADBZ
MQswCQYDVQQGEwJVUzEhMB8GA1UEChMYTmV0d29yayBTb2x1dGlvbnMgTC5MLkMu
MScwJQYDVQQDEx5OZXR3b3JrIFNvbHV0aW9ucyBEViBTZXJ2ZXIgQ0EwHhcNMTIx
MjEwMDAwMDAwWhcNMTUxMjAyMjM1OTU5WjBmMSEwHwYDVQQLExhEb21haW4gQ29u
dHJvbCBWYWxpZGF0ZWQxIDAeBgNVBAsTF25zUHJvdGVjdCBTZWN1cmUgWHByZXNz
MR8wHQYDVQQDExZzYWZlLjRjZm9yY2hpbGRyZW4ub3JnMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEApedUBN9HPvx7n+oCMBYljQlcnwSAuK8k4D4P/xKt
OVau7umdss9pEOdpQ+DlaFjdCX//9SJAT1OSJAcxtefmbBVcsNOrgzuglFjzyv7+
oaReuY2GaApB9bycoIzW/r4D2XvDEoLV8K3FcsJwWEU6u0uSlOXH8sX7gBqbrNUc
N5calpfIbml2O3aEOJCAROT67e8vTLCckLePIRNdlL4Nqg3qUn2T6SZlllKshDOo
iscR2g3IoLRVee1+7tVjFDRCUUkIwgwKpBh2SRemENy0Rg5MNoPPhTWh9sEtyV3M
FnI9uaIqRDOqApun9nWfp4WtWRnYVnXvwMIyd6n0E99pSwIDAQABo4IB4TCCAd0w
HwYDVR0jBBgwFoAUWNglkqRVWm7Zo9GjfAyqBCFxLmAwHQYDVR0OBBYEFMNePfD/
Rv25B+i5b5ZKqY3kikRrMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHSAEbjBsMGAGDCsGAQQB
hg4BAgEJATBQME4GCCsGAQUFBwIBFkJodHRwOi8vd3d3Lm5ldHdvcmtzb2x1dGlv
bnMuY29tL2xlZ2FsL1NTTC1sZWdhbC1yZXBvc2l0b3J5LWNwcy5qc3AwCAYGZ4EM
AQIBMEgGA1UdHwRBMD8wPaA7oDmGN2h0dHA6Ly9jcmwubmV0c29sc3NsLmNvbS9O
ZXR3b3JrU29sdXRpb25zRFZTZXJ2ZXJDQS5jcmwwegYIKwYBBQUHAQEEbjBsMEMG
CCsGAQUFBzAChjdodHRwOi8vd3d3Lm5ldHNvbHNzbC5jb20vTmV0d29ya1NvbHV0
aW9uc0RWU2VydmVyQ0EuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC5uZXRz
b2xzc2wuY29tMCEGA1UdEQQaMBiCFnNhZmUuNGNmb3JjaGlsZHJlbi5vcmcwDQYJ
KoZIhvcNAQEFBQADggEBAEEpnxAwFRBX689n2bkSAQZpjK6AZ+VfYWPOyd8Oo2ks
0gMVrYkUEP8Fux1ubGnDkGwuDYbY0zmUCtVD0apscMGjV8O4l+CS97F6er3lSyuT
DqSnDIqUzlEW3cZrmpV61YIW3gTILtUtR6awfm9FO9UZFZkedVXTGIX0RmqrUC3z
vzs8dOUO55+Nr1VV1UN53X7+TPda+nbOUPYT5d8K4IHJdDUrM0BlzEN7N4EwZE76
AqIFsr2hKPdv1fSx7aySa46Z2a64LwS9NjWKyD/kIGjAUKE7qzJhSr88zDzWqp63
2q1zkfyG880WwY8C4BxK7uU6BvSF6psg+78L17rrkss=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApedUBN9HPvx7n+oCMBYl
jQlcnwSAuK8k4D4P/xKtOVau7umdss9pEOdpQ+DlaFjdCX//9SJAT1OSJAcxtefm
bBVcsNOrgzuglFjzyv7+oaReuY2GaApB9bycoIzW/r4D2XvDEoLV8K3FcsJwWEU6
u0uSlOXH8sX7gBqbrNUcN5calpfIbml2O3aEOJCAROT67e8vTLCckLePIRNdlL4N
qg3qUn2T6SZlllKshDOoiscR2g3IoLRVee1+7tVjFDRCUUkIwgwKpBh2SRemENy0
Rg5MNoPPhTWh9sEtyV3MFnI9uaIqRDOqApun9nWfp4WtWRnYVnXvwMIyd6n0E99p
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 90092384775750606509000567447985107662
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions L.L.C.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-12-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nsProtect Secure Xpress'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'safe.4cforchildren.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20943392506024610531477232451211141903634538178511684561477933001760807091273538152469242726647846682942316511233834606454947485154844146522271216804967655071276226566465150685172540699576865331857556958825320408350257976091538657053027691033923825392457545156802784027091673945355757148403331430960138797935810230582747457936322118849113359844612193396176038292878154193642694968284718990715141856396891709824352423767079916147232690280126071793988444976630855950385258184736823627061153840024201000251314534876772048559710200473937747608649807657667119801728624659847812583283831964921491642269154667331400354457931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 58d82592a4555a6ed9a3d1a37c0caa0421712e60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c35e3df0ff46fdb907e8b96f964aa98de48a446b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.782.1.2.1.9.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.networksolutions.com/legal/SSL-legal-repository-cps.jsp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.netsolssl.com/NetworkSolutionsDVServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.netsolssl.com/NetworkSolutionsDVServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.netsolssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safe.4cforchildren.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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