aggregatparken.no
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d7:03:ea:5d:2b:fb:07:19:27:63:82:bc:4e:b0:8a:ea:3e was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=aggregatparken.no
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d7:03:ea:5d:2b:fb:07:19:27:63:82:bc:4e:b0:8a:ea:3eSerial Number (int): 334502771254483354928231393112239618320958
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 6a:be:ff:ca:19:31:1a:12:bc:2d:82:48:be:69:f2:97:16:a5:a4:ee
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 4f:63:e1:84:ca:a2:7c:72:1d:ee:12:05:a2:06:7a:e2:c1:ae:02:d6
Fingerprint (sha256): 00:df:76:ba:d3:fe:4e:b6:fb:c6:ac:48:4d:70:64:60:bd:09:ca:7b:ba:3b:8e:9d:b1:15:72:c6:ae:c3:bc:49
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate aggregatparken.no
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aggregatparken.no
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aggregatparken.no
www.aggregatparken.no
www.aggregatparken.no
Other certificates including the domain name aggregatparken.no
(limited to 100 certificates)
Certificate
The complete raw certificate details for aggregatparken.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgISA9cD6l0r+wcZJ2OCvE6wiuo+MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MDIwNTE3MjlaFw0x ODA5MzAwNTE3MjlaMBwxGjAYBgNVBAMTEWFnZ3JlZ2F0cGFya2VuLm5vMIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzrUnYeBgGkC7zMgbB4fmPC1HHs79 gXTmqb7KmVH7riKsuDy+y7YLz9plN9LrAOIvSr5jQf+U0S1BXcyqutlXMkI52jkW 3UqFXrlHJ7pVXxLZx4B5+mj3U0QGk8ttxpsEPAvKtdcHDMchs9Y9q+gRv3onAd/D TrcQG0pAOgs4+N2KtCjEiZsVm0y3dQSqjfngZuxvGLSztGtRoTJwyZ4h24YH0yQ1 WStTbj2Op8+ewLdefUTCxjORMpg6eRmqljVm+80WWcB0A5km9wXn5BH23djd10aP 3XSBqRuy2jDYv1I6Ujs6MeoEFaATI2/W4tChQD1eRhRUJxdgYTnFeRGW3o3L6xgI cqwwA3j5JZluYEqt1SUV/75BtSiPgE3wVM0kn6RjB58lA77QcQnujubWx7N4+fBe GonBtp7WWMAd9S2f4LtvjX+mTpVatuSKkAx3WDvNdHxRVelI5vvKOTxc+Sf2aagk vUiiu9A+6cHPVUtG5Sl9FVBaSOGiWGGU6e1416REX4Tya4H5ixBKIAHchrn8Q14o +cgGE7PeLccc7EfTqpC96/EpUjmwyXnGvc38siydxgzLpcWrDGEqu4MHST63W+16 TORuJgOERlI0n3525piQAnlQHjGt3BoXQCeRDJfTAwwwIi4SjGhYDnSTJ2zP4y6u A9DsDf/0yL3sMJUCAwEAAaOCAzEwggMtMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU ar7/yhkxGhK8LYJIvmnylxalpO4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl 7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p bnQteDMubGV0c2VuY3J5cHQub3JnLzAzBgNVHREELDAqghFhZ2dyZWdhdHBhcmtl bi5ub4IVd3d3LmFnZ3JlZ2F0cGFya2VuLm5vMIH+BgNVHSAEgfYwgfMwCAYGZ4EM AQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0 ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5k IG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kg Zm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEF BgorBgEEAdZ5AgQCBIH2BIHzAPEAdgDbdK/uyynssf7KPnFtLOW5qrs294Rxg8dd nU83th+/ZAAAAWRZo5KiAAAEAwBHMEUCIQDzmEmMbG41fti04VUNDYOGWJJkXbqq 5tEifnxOSdeB4wIgR+TKZEIs874V598z6DQ8N1w4UwXgkblPsBgtIk5XON0AdwAp PFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWRZo5LnAAAEAwBIMEYC IQCgL9Id2akttO6iwH5l29KJKpuEWxMjkBZYtgnRePDNXwIhAL5Letfjvq5K7JjK vgbWn/djWV6PusiQuazObuMCv/KSMA0GCSqGSIb3DQEBCwUAA4IBAQAAb96nY0bg DTyP8fW2/sWc8jGVdhtgsiZQAYsuqcUKhXHy6fZ/CLkiIapiSmNYKgoN3kIRshuY vqALLIcThjZPO69Wnd6QAmJC4GBoLB5LTT/iwBuYcb0u8xsNdvqw1XxW3CSq0jHV 3rrjnyzKCSnO9t3Kx9E7KnVnaes0Z+ZCIPmjkkf3zYhP09/6IJVf7LalFZdOv6ad KMlpQC+L+psBp8r2wmEB1ImUBohHsgPLjISzxMtl/RV9oa1XCR1EVUaFBI7N36c6 L+W1DiLlNwFCuQSQ4mByCkDrI8GOktOAVM7UWUwh7LkEhUHJBbF7yxWxX4eBWI2e gy3Byo+OL8J0 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzrUnYeBgGkC7zMgbB4fm PC1HHs79gXTmqb7KmVH7riKsuDy+y7YLz9plN9LrAOIvSr5jQf+U0S1BXcyqutlX MkI52jkW3UqFXrlHJ7pVXxLZx4B5+mj3U0QGk8ttxpsEPAvKtdcHDMchs9Y9q+gR v3onAd/DTrcQG0pAOgs4+N2KtCjEiZsVm0y3dQSqjfngZuxvGLSztGtRoTJwyZ4h 24YH0yQ1WStTbj2Op8+ewLdefUTCxjORMpg6eRmqljVm+80WWcB0A5km9wXn5BH2 3djd10aP3XSBqRuy2jDYv1I6Ujs6MeoEFaATI2/W4tChQD1eRhRUJxdgYTnFeRGW 3o3L6xgIcqwwA3j5JZluYEqt1SUV/75BtSiPgE3wVM0kn6RjB58lA77QcQnujubW x7N4+fBeGonBtp7WWMAd9S2f4LtvjX+mTpVatuSKkAx3WDvNdHxRVelI5vvKOTxc +Sf2aagkvUiiu9A+6cHPVUtG5Sl9FVBaSOGiWGGU6e1416REX4Tya4H5ixBKIAHc hrn8Q14o+cgGE7PeLccc7EfTqpC96/EpUjmwyXnGvc38siydxgzLpcWrDGEqu4MH ST63W+16TORuJgOERlI0n3525piQAnlQHjGt3BoXQCeRDJfTAwwwIi4SjGhYDnST J2zP4y6uA9DsDf/0yL3sMJUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 334502771254483354928231393112239618320958 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-02 05:17:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-30 05:17:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aggregatparken.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 843293565424019529918541873822487582881800031052302178367810996138847029688943221645585363450777670500391577743906344393765128743400339213342679755886283328481958715490448783534096712770520334671906771132400527361575628325274025764927632192107350071263172806270274891920987680238319175113044561750066488800942995701000921638155871586620555965664380570257909337818428343557873702739605344016009797908330556237054773829248258611872183886822670816648066323773764025107108845459382337457475728291862777105607643988344671890164874939279827495947531783113035227778852343552357383549093381924302984847112519344475403470018213881755242417784535906961536708897749885903402268459498393284580073627674448998661394896393276755895138746229011191205654197918144641508928991354719731743254328619031184313045468928447736897541770821099618717183928528359859652987241926105808047252145044499389712911241703261593861923209204660422204185945021255861703128987445594508747408954068847501139852585804645796141453712500866652839025907395272359015775381859100792088545333236295201627476610989593361349326184902512805286226553612185662819313801536233255478880846942297843615017390589351817009808424950339471798857379668371899963989513953884919302601004822677 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6abeffca19311a12bc2d8248be69f29716a5a4ee . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggregatparken.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aggregatparken.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016459a392a20000040300473045022100f398498c6c6e357ed8b4e1550d0d83865892645dbaaae6d1227e7c4e49d781e3022047e4ca64422cf3be15e7df33e8343c375c385305e091b94fb0182d224e5738dd007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016459a392e70000040300483046022100a02fd21dd9a92db4eea2c07e65dbd2892a9b845b1323901658b609d178f0cd5f022100be4b7ad7e3beae4aec98cabe06d69ff763595e8fbac890b9acce6ee302bff292 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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