www.cedarcounty.iowa.gov

Issued by R3

About this certificate

This digital certificate with serial number 04:44:d3:33:ed:96:c3:dd:30:5d:e5:2d:2f:6b:ab:f1:1e:ef was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cedarcounty.iowa.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:44:d3:33:ed:96:c3:dd:30:5d:e5:2d:2f:6b:ab:f1:1e:ef
Serial Number (int): 371869081410791122047909320180648008294127
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 35:5d:ec:0a:b1:9d:78:3d:0f:0b:56:56:56:7f:86:62:1e:d4:50:1a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): aa:a4:d8:d3:a0:2f:76:46:43:87:8a:e0:2a:ea:1a:ae:df:0c:34:c3
Fingerprint (sha256): 01:4c:d6:ad:fc:17:33:49:5e:c8:86:5e:ec:a7:6a:63:61:34:d7:de:d0:d6:73:61:47:8c:f0:f6:ff:f3:43:f1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.cedarcounty.iowa.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cedarcounty.iowa.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cedarcounty.iowa.gov
www.cedarcounty.iowa.gov

Other certificates including the domain name iowa.gov

(limited to 100 certificates)
pottawattamiecounty.iowa.gov
mitchellcountyelections.iowa.gov
pocahontascountyiowa.gov
www.greenecounty.iowa.gov
earlychildhood.iowa.gov
ssl7.revizesites.com
elections101.iowa.gov
ssl8.revizesites.com
idacounty.iowa.gov
iris.iowa.gov
iowa.gov
www.cedarcounty.iowa.gov
incapsula.com
hsemdpreparedness.iowa.gov
pagecounty.iowa.gov
dhs.iowa.gov
delawarecounty.iowa.gov
harrisoncounty.iowa.gov
ssl3.revizesites.com
www.floodrisk.iowa.gov
fs.wdm.iowa.gov
ssl3.revizesites.com
login.iowa.gov
etranscript.iowa.gov
incapsula.com
incapsula.com
www.crawfordcounty.iowa.gov
norwalk.iowa.gov
incapsula.com
ileatraining.iowa.gov
incapsula.com
forms.cabarruscounty.us
dia.iowa.gov
clarkecountyiowa.org
san-f2.granicusgovaccess.net
ltgovernor.iowa.gov
hd.alborgdx.com
vaapp.iowa.gov
claycounty.iowa.gov
incapsula.com
ssl8.revizesites.com
www.wapellocounty.iowa.gov
googlehelp.iowa.gov
va.iowa.gov
lucascountyelections.iowa.gov
ssl8.revizesites.com
commerce.iowa.gov
www.idr.iowa.gov
filings.iowa.gov
incapsula.com
ssl3.revizesites.com
www.plb.iowa.gov
incapsula.com
datapro.plb.iowa.gov
incapsula.com
crawfordcounty.iowa.gov
ltgovernor.iowa.gov
efs.iowa.gov
www.muscatinecountyiowa.gov
monroecounty.iowa.gov
incapsula.com
howardcounty.iowa.gov
idol.iowa.gov
ssl8.revizesites.com
fayettecounty.iowa.gov
vaapp.iowa.gov
yourlifeiowa.org
incapsula.com
www.admissions.iastate.edu
entaa.iowa.gov
www.pocahontas-county.com
yourlifeiowa.com
train-qa.iowa.gov
incapsula.com
claycounty.iowa.gov
incapsula.com
mail.norwalk.iowa.gov
incapsula.com
*.iowa.gov
incapsula.com
city-budget-explorer.iowa.gov
earlychildhood.iowa.gov
terracehill.iowa.gov
madisoncounty.iowa.gov
vpn2.iowa.gov
ssl7.revizesites.com
incapsula.com
san-d2.granicusgovaccess.net
emmetcounty.iowa.gov
ssl7.revizesites.com
incapsula.com
butlercoiowa.org
incapsula.com
guestaccess.iwd.iowa.gov
iowanewbornscreening.iowa.gov
ssl1.revizesites.com
dia.iowa.gov
san-e2.granicusgovaccess.net
desktop.iwd.iowa.gov
san-f2.granicusgovaccess.net

Certificate

The complete raw certificate details for www.cedarcounty.iowa.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgISBETTM+2Ww90wXeUtL2ur8R7vMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjExMTUwNDU5MDVaFw0yMzAyMTMwNDU5MDRaMCMxITAfBgNVBAMT
GHd3dy5jZWRhcmNvdW50eS5pb3dhLmdvdjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL+SGwpVUtQhO9VbfmWIpcpVQVbTpVg3D7UfK7qqWJhmSZdlgodu
t+ZF7niZGH7Fp6SIAyOC1CFgk5QDrzlaNglgwqGg+SYImQQapv/uwS+w2/fQgjcU
XRs3NJ9XPLf0eUxGUFrCRcAXAC2abWevnXZb3uztDOfJc51hVW64NKpQLz3JLufm
CQFX1fbApArPwnM4eChS79NQKcN3lOTkVVYPf7PR2BpoKSv2KPWNUPauii2H9iHe
1xWjZvrNH7jJQrXvsYwZbfaiIVpxIR9toVDy4BmOE66OjlRzhcbGShUpPoqoeT7y
U2XzbUe09eqQsoUDbOyY1ZRKHKhFDmf+KN0CAwEAAaOCAmkwggJlMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUNV3sCrGdeD0PC1ZWVn+GYh7UUBowHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wOQYDVR0RBDIwMIIUY2VkYXJjb3VudHkuaW93YS5nb3aCGHd3
dy5jZWRhcmNvdW50eS5pb3dhLmdvdjBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1AOg+0No+9QY1MudXKLyJa8kD
08vREWvs62nhd31tBr1uAAABhHnepqgAAAQDAEYwRAIgClYNny85eHmco3iYyx1K
e7WQSrXqhO4bIOsz8xKlEpICIDvA7A4L+Upy7Pxag3YcR9YOzwetsenFnKliHKRs
OnNQAHcAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAGEed6nQAAA
BAMASDBGAiEArmTBi1QbtLC5nNLaGhEaHDgtq1AxA7n3ref0xk3NJXwCIQCxn4Jg
b2wlYP5b7sbKqKSf40ryq0areBlQpMku3BCo1DANBgkqhkiG9w0BAQsFAAOCAQEA
SUraKZAJYrnhpXTSgvUtOJR3MoKRTvG/bVBAZzeoVvGK5mandnA+pY3eQFAMVZpX
RGT1wlOpJmGCdA59O0io5xqm4tXHdDKouUqZQAhS8YUh7scwDIbtL3Ksc6Pa90QZ
/XFThzt3LIBJT5o/+KRk5C7yompYD/5abxR62V73Y6UaTHCEPm/6HgDOZizwUo9Q
bWgh+/BghxgV++j/qJk7GoyneouWzBKmnMoIYU5Tt6SNLdrV/sVCetOKLcRhGg9y
dCn4BuvWPmcHxEPqwW/0vPgwESYMDjeUDZa3sndah3Xj0wErBK5HF2wnXrCyEEBm
YlApxxQAZOU75zPVKFqQmQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5IbClVS1CE71Vt+ZYil
ylVBVtOlWDcPtR8ruqpYmGZJl2WCh2635kXueJkYfsWnpIgDI4LUIWCTlAOvOVo2
CWDCoaD5JgiZBBqm/+7BL7Db99CCNxRdGzc0n1c8t/R5TEZQWsJFwBcALZptZ6+d
dlve7O0M58lznWFVbrg0qlAvPcku5+YJAVfV9sCkCs/Cczh4KFLv01Apw3eU5ORV
Vg9/s9HYGmgpK/Yo9Y1Q9q6KLYf2Id7XFaNm+s0fuMlCte+xjBlt9qIhWnEhH22h
UPLgGY4Tro6OVHOFxsZKFSk+iqh5PvJTZfNtR7T16pCyhQNs7JjVlEocqEUOZ/4o
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371869081410791122047909320180648008294127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-15 04:59:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-13 04:59:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cedarcounty.iowa.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24183563618148898894325370119792636018134967919291323837186742216496909694490946888030814163775727972465903230688985932770041257628191770007478603964899749244382929786926285566465511151017234395483349959338016776522153173322567937154774461808717108150216944279731642277290209469917310640585252442900127590250718902324904140262096834128722849034193428786783220543015988884575877622712775348018170415037402162985574533079103637838795392248236345271821811098323837961983758947556569984944308388363624646208766526791638420765372439342380046123257423627534831710294595688132176803014675828249588465093517357253820237621469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							355dec0ab19d783d0f0b5656567f86621ed4501a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cedarcounty.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cedarcounty.iowa.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018479dea6a8000004030046304402200a560d9f2f3978799ca37898cb1d4a7bb5904ab5ea84ee1b20eb33f312a5129202203bc0ec0e0bf94a72ecfc5a83761c47d60ecf07adb1e9c59ca9621ca46c3a73500077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000018479dea7400000040300483046022100ae64c18b541bb4b0b99cd2da1a111a1c382dab503103b9f7ade7f4c64dcd257c022100b19f82606f6c2560fe5beec6caa8a49fe34af2ab46ab781950a4c92edc10a8d4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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