taxsat.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:dc:62:d9:b4:03:3a:2d:dc:bd:d8:4c:7c:c9:24:36:cd:38 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=taxsat.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:dc:62:d9:b4:03:3a:2d:dc:bd:d8:4c:7c:c9:24:36:cd:38Serial Number (int): 336330373240981844434451713178649482415416
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d8:d1:b0:73:56:86:e6:37:25:7c:a8:28:df:ac:be:1c:f0:b7:ce:24
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b6:ae:bc:fd:d3:22:e8:19:4e:22:98:1f:06:d3:a7:ac:be:60:d9:60
Fingerprint (sha256): 05:ea:95:10:2c:28:69:27:66:a1:7d:79:98:56:eb:0a:f5:7a:ee:4d:94:b2:a1:0d:e3:bf:d3:d8:35:9f:58:35
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate taxsat.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for taxsat.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
taxsat.com
www.taxsat.com
www.taxsat.com
Other certificates including the domain name taxsat.com
(limited to 100 certificates)
www.fatwestie.com
taxsat.com
spilaktier.dk
alpha.courseplan.io
www.direct-law.co.kr
blog.aleoyakas.co.uk
app.jrft-dev.com
joybit.org
kogobe.com
www.royinfosoft.com
www.hellohoustontx.org
www.kraftwerk9.com
www.ackee.agency
timy.pointer2.com
www.bci.lu
enoram.market
app.desideroo.it
www.cscalcaterra.com
isa-wsts-ficci.framez.sg
www.taxsat.com
getamplify.org
www.moonland.co.za
doc-scanner.rizhwan.com
sports.calm-health.com
shivkalikajyotish.in
services.taxsat.com
www.thatistheinternet.com
console-dev.chipfy.io
www.chu.mn
www.podscript.fyi
codinghub.pk
go.sherpaapp.co
oswa.app
scalab.com
battlestrat.com
bills.lu
re3aya247.eng-menna.cf
challengerapp.be
thedm.app
canahimoveis.com.br
www.gendereq.com
taxsat.com
rent.listwithlingo.com
taxsat.com
www.kroozeo.com
manage.wolfactive.net
themes.mlc.jolanrensen.nl
lagerlogic.com
taxsat.com
app.acomenu.com
www.betamaker.co
service.taxsat.com
services.taxsat.com
alpha.courseplan.io
prod.huddleapp.com.au
admin.da.taxsat.com
service.taxsat.com
crashcoursegame.app
midguard-online.de
tbmuzeum.hu
taxsat.com
api.choyce.app
app.sohermaquinas.com.br
www.ntinfo.co.kr
web-dev.push-ex.kr
service.taxsat.com
www.ntinfo.co.kr
www.ffocus.app
paylinks.app
jnalmeidas.com.br
yellowusacab.com
joybit.org
c.geekings.net
da.taxsat.com
taxsat.com
spilaktier.dk
alpha.courseplan.io
www.direct-law.co.kr
blog.aleoyakas.co.uk
app.jrft-dev.com
joybit.org
kogobe.com
www.royinfosoft.com
www.hellohoustontx.org
www.kraftwerk9.com
www.ackee.agency
timy.pointer2.com
www.bci.lu
enoram.market
app.desideroo.it
www.cscalcaterra.com
isa-wsts-ficci.framez.sg
www.taxsat.com
getamplify.org
www.moonland.co.za
doc-scanner.rizhwan.com
sports.calm-health.com
shivkalikajyotish.in
services.taxsat.com
www.thatistheinternet.com
console-dev.chipfy.io
www.chu.mn
www.podscript.fyi
codinghub.pk
go.sherpaapp.co
oswa.app
scalab.com
battlestrat.com
bills.lu
re3aya247.eng-menna.cf
challengerapp.be
thedm.app
canahimoveis.com.br
www.gendereq.com
taxsat.com
rent.listwithlingo.com
taxsat.com
www.kroozeo.com
manage.wolfactive.net
themes.mlc.jolanrensen.nl
lagerlogic.com
taxsat.com
app.acomenu.com
www.betamaker.co
service.taxsat.com
services.taxsat.com
alpha.courseplan.io
prod.huddleapp.com.au
admin.da.taxsat.com
service.taxsat.com
crashcoursegame.app
midguard-online.de
tbmuzeum.hu
taxsat.com
api.choyce.app
app.sohermaquinas.com.br
www.ntinfo.co.kr
web-dev.push-ex.kr
service.taxsat.com
www.ntinfo.co.kr
www.ffocus.app
paylinks.app
jnalmeidas.com.br
yellowusacab.com
joybit.org
c.geekings.net
da.taxsat.com
Certificate
The complete raw certificate details for taxsat.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgISA9xi2bQDOi3cvdhMfMkkNs04MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDUwMTQ5MjRaFw0y MDA2MDMwMTQ5MjRaMBUxEzARBgNVBAMTCnRheHNhdC5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQC9H0o2bDXr4Qg92WOufWyNNZ2VRDPsdqXy/hv9 fxWP6C/VrkHrZSDUMsxsJohYF2+8tiVR8uzoCdheXMcoOI5NGv17hIyJvJGYJHxk hCdL1TLuL88H+/HDSpwTVW2XSJFEjEJcoIc/DDhc0PQDko3/Q7SWeIreUgi57vLA xyRtyBXURLDSzmZ0Tzhf95NaAImAawMckTOwS80wp6MosgYl6K4z19NTE2kSTLJe 6j+24OlzOsFeuV0U+Ig9ncpwSvH26+LaYXKqz8tE0n5d6wWZQO9v1cpDttxIx2wc +5HMtLRzRga3/20C9hORdvuMvAJPoMy3wCeHjwc/oMvweehrAgMBAAGjggJvMIIC azAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNjRsHNWhuY3JXyoKN+svhzwt84kMB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w JQYDVR0RBB4wHIIKdGF4c2F0LmNvbYIOd3d3LnRheHNhdC5jb20wTAYDVR0gBEUw QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDw laRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAXComQKPAAAEAwBHMEUC IQCp07dtt0EESjv4876YZy/MF6poxD9Vp1D/V8+NltcjagIgO4/7QTP2P+9+Zj1q KT6T+Q5IJvp0iY/Io0wPzLac8zUAdgAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68 YToaadOiHAAAAXComQK6AAAEAwBHMEUCIQC06XELtgVLTeA++I80HzayLS3Zc8oV rBzVwcFvj+k8sQIgaqAO/cRDtm6Vpxsvg1plZBJsDLh+gF5+8VfCbZCjJHgwDQYJ KoZIhvcNAQELBQADggEBACmyHtw86QvziGnYYqmBYfn5RKQkPqqKGBGHXr9azT7u Iaoh6HrYL70f8d/fLfTxeT6+0NUXeNpJILsZKZA5otME95TfGVDiCP4/pktMErxD BNPyPVIGaALPbp+XdIRyMllLF20Gcfh+2TOHxi+iF8m8J2/vVEMPYMeYoixH53ah uVntkEqRjoaWL4YXffafoZ6VeP6kU+xhmAG7z4PNDG27x/xeXJR/KXLfNFxVTUPo NFLa3dPEkdsbxXMUlYc+5x3ntJmnNuqLc5yXmNVFvAHCIqmiaKhzQtSWyNFUxg+k HUsq3EwCuN0lt51XLuWNz8/EORpt6D+fcOzxCTvyrYk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR9KNmw16+EIPdljrn1s jTWdlUQz7Hal8v4b/X8Vj+gv1a5B62Ug1DLMbCaIWBdvvLYlUfLs6AnYXlzHKDiO TRr9e4SMibyRmCR8ZIQnS9Uy7i/PB/vxw0qcE1Vtl0iRRIxCXKCHPww4XND0A5KN /0O0lniK3lIIue7ywMckbcgV1ESw0s5mdE84X/eTWgCJgGsDHJEzsEvNMKejKLIG JeiuM9fTUxNpEkyyXuo/tuDpczrBXrldFPiIPZ3KcErx9uvi2mFyqs/LRNJ+XesF mUDvb9XKQ7bcSMdsHPuRzLS0c0YGt/9tAvYTkXb7jLwCT6DMt8Anh48HP6DL8Hno awIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 336330373240981844434451713178649482415416 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 01:49:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-03 01:49:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'taxsat.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23874469259855993686681985416298868392231075585327738644377673820180924276958403388750968745418900241196594529392454563301142625630087792878557394566497107360430625312989708550532148318935319960008474547540006748175122202993174314005434863062366163837502043551228349179556373064385707969479255281569825758795449373480456642907773599404812633071643631666118943375328422919301722435031781887165921997212036808359006355525785746061806508045038240204208605044149164870166462277920404934274119964381113098658060586241491153824409811527550564052411991328562505196082210180073839831471225755115402175558483380803954131200107 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d8d1b0735686e637257ca828dfacbe1cf0b7ce24 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxsat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taxsat.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170a899028f0000040300473045022100a9d3b76db741044a3bf8f3be98672fcc17aa68c43f55a750ff57cf8d96d7236a02203b8ffb4133f63fef7e663d6a293e93f90e4826fa74898fc8a34c0fccb69cf33500760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a89902ba0000040300473045022100b4e9710bb6054b4de03ef88f341f36b22d2dd973ca15ac1cd5c1c16f8fe93cb102206aa00efdc443b66e95a71b2f835a6564126c0cb87e805e7ef157c26d90a32478 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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