uat.systems.orbis.app
Issued by Amazon
About this certificate
This digital certificate with serial number 0d:58:94:8a:ed:9b:23:aa:13:3f:e2:df:62:d2:d3:c8 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=uat.systems.orbis.app
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:58:94:8a:ed:9b:23:aa:13:3f:e2:df:62:d2:d3:c8Serial Number (int): 17739898872398237844621026000247116744
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: ba:05:76:51:cf:25:cf:06:06:0d:20:56:b5:06:10:f1:a8:26:90:9c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 8b:84:8f:a0:61:1f:48:2c:b6:6d:df:51:ed:e8:7a:52:b5:d8:68:40
Fingerprint (sha256): 0e:91:42:4f:86:02:27:f9:5b:5a:f3:f2:be:9e:08:93:87:14:f5:b6:8d:88:d8:6d:71:f6:a5:35:29:d0:b2:4e
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate uat.systems.orbis.app
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for uat.systems.orbis.app
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
uat.systems.orbis.app
*.uat.systems.orbis.app
*.uat.systems.orbis.app
Other certificates including the domain name orbis.app
(limited to 100 certificates)
*.core.orbis.app
*.service.ims-uat.orbis.com
uat.systems.orbis.app
*.service.ims-dev.orbis.com
*.core.orbis.app
*.ops-dev.orbis.app
triggerdashboard.uat.cst.orbis.app
*.core.orbis.app
*.service.ims.orbis.com
*.core.orbis.app
*.ops-dev.orbis.app
splunk.orbis.app
*.ops-dev.orbis.app
reportcontentmanager.uat.cst.orbis.app
*.core.orbis.app
suppressor.uat.cst.orbis.app
opsdata2.orbis.app
*.service.ims.orbis.com
sphinx-api.uat.cst.orbis.app
uat.coresystemscontent.core.orbis.app
quantwebtools.orbis.com
*.service.ims-sbx.orbis.com
minitools.uat.cst.orbis.app
*.core.orbis.app
*.service.ims-uat.orbis.com
*.core.orbis.app
ims-sbx.orbis.app
ims-test.orbis.app
service.ims-uat.orbis.com
systems.orbis.app
*.ops.orbis.app
service.ims-uat.orbis.com
lark.uat.cst.orbis.app
crmdataapi.uat.cst.orbis.app
*.core.orbis.app
*.core.orbis.app
*.service.ims-uat.orbis.com
*.systems.ss.orbis.app
uat.systems.ss.orbis.app
*.service.ims-dev.orbis.com
sphinx.uat.cst.orbis.app
*.service.ims-uat.orbis.com
*.core.orbis.app
goose.uat.cst.orbis.app
*.core.orbis.app
*.ops-dev.orbis.app
deliverycentre.uat.cst.orbis.app
quantwebtools.orbis.com
*.service.ims-sbx.orbis.com
*.core.orbis.app
*.core.orbis.app
vaulteddata.uat.cst.orbis.app
away.orbis.app
*.ops-dev.orbis.app
*.ops-dev.orbis.app
*.service.ims.orbis.com
*.service.ims.orbis.com
*.service.ims-uat.orbis.com
uat.systems.orbis.app
*.service.ims-dev.orbis.com
*.core.orbis.app
*.ops-dev.orbis.app
triggerdashboard.uat.cst.orbis.app
*.core.orbis.app
*.service.ims.orbis.com
*.core.orbis.app
*.ops-dev.orbis.app
splunk.orbis.app
*.ops-dev.orbis.app
reportcontentmanager.uat.cst.orbis.app
*.core.orbis.app
suppressor.uat.cst.orbis.app
opsdata2.orbis.app
*.service.ims.orbis.com
sphinx-api.uat.cst.orbis.app
uat.coresystemscontent.core.orbis.app
quantwebtools.orbis.com
*.service.ims-sbx.orbis.com
minitools.uat.cst.orbis.app
*.core.orbis.app
*.service.ims-uat.orbis.com
*.core.orbis.app
ims-sbx.orbis.app
ims-test.orbis.app
service.ims-uat.orbis.com
systems.orbis.app
*.ops.orbis.app
service.ims-uat.orbis.com
lark.uat.cst.orbis.app
crmdataapi.uat.cst.orbis.app
*.core.orbis.app
*.core.orbis.app
*.service.ims-uat.orbis.com
*.systems.ss.orbis.app
uat.systems.ss.orbis.app
*.service.ims-dev.orbis.com
sphinx.uat.cst.orbis.app
*.service.ims-uat.orbis.com
*.core.orbis.app
goose.uat.cst.orbis.app
*.core.orbis.app
*.ops-dev.orbis.app
deliverycentre.uat.cst.orbis.app
quantwebtools.orbis.com
*.service.ims-sbx.orbis.com
*.core.orbis.app
*.core.orbis.app
vaulteddata.uat.cst.orbis.app
away.orbis.app
*.ops-dev.orbis.app
*.ops-dev.orbis.app
*.service.ims.orbis.com
*.service.ims.orbis.com
Certificate
The complete raw certificate details for uat.systems.orbis.app in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEmTCCA4GgAwIBAgIQDViUiu2bI6oTP+LfYtLTyDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAxMjkwMDAwMDBaFw0yMTAyMjgx MjAwMDBaMCAxHjAcBgNVBAMTFXVhdC5zeXN0ZW1zLm9yYmlzLmFwcDCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBANJHYjaCp92D5YPmQND+P2LoWE2NGMV6 Pwf4L/OJxj/x1GCEx1dj5k4/xTeI6A93tGFj25PdSfugTalKOPled2JxbVBL5Zz0 f/WvW7iT6FhcFGt0S0gYTANxpmHcIyJwP3sUJEggz4jla6owkvNXkqkAJHPZ6dvd KuloLYb8mTMMlsk8LPVQ2MT1D9DmZE0z95W8FGX6YUJIKsKNsKbwOKIHqFY+kCsD 90jnJjpH36cTC30f2e0+AvRqU3OgQDdSTp1HzQ+NV12ou0ZQ5sunExpKLCG/qjfv 7/DYAhfPFVkQQK0Od4wISp94mLT+27n69nymn+sKnz+gvx0AxDcvXk8CAwEAAaOC AacwggGjMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQW BBS6BXZRzyXPBgYNIFa1BhDxqCaQnDA5BgNVHREEMjAwghV1YXQuc3lzdGVtcy5v cmJpcy5hcHCCFyoudWF0LnN5c3RlbXMub3JiaXMuYXBwMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6g LIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAG A1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcw LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2 BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2Nh MWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI hvcNAQELBQADggEBAF0dMZITwU+YFcuB/wcuyL4x95Y9evo9woU3kFzQS9CUSSyd BkWB0rKSyLMTBrt83NXIbThfl5hpsu0Pga/83YMZ+aGoWbRMMJlIwgcvaOGB5IrS 8z1u6oIz+27zWRdwC8B3H2RQuTy4MmAWoN8V4sMrRXf1QG/fVH8LgFfbJe8jLOaY W7nh3r1hpUaDJh6vn1IKwN05Q3tiBA+S0y68LIAHjHb0udx1+hd+NHE1jgoNbD3s A7WqXggfyqOYW0KFieNSQvSbOhEypdjangdVVfRTgedRwKFIEn6g0yZavv5ollat 1eHEdwtP1ZMwoPEvwY9LjG02ZSseQtzVRNeFtjM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kdiNoKn3YPlg+ZA0P4/ YuhYTY0YxXo/B/gv84nGP/HUYITHV2PmTj/FN4joD3e0YWPbk91J+6BNqUo4+V53 YnFtUEvlnPR/9a9buJPoWFwUa3RLSBhMA3GmYdwjInA/exQkSCDPiOVrqjCS81eS qQAkc9np290q6WgthvyZMwyWyTws9VDYxPUP0OZkTTP3lbwUZfphQkgqwo2wpvA4 ogeoVj6QKwP3SOcmOkffpxMLfR/Z7T4C9GpTc6BAN1JOnUfND41XXai7RlDmy6cT GkosIb+qN+/v8NgCF88VWRBArQ53jAhKn3iYtP7bufr2fKaf6wqfP6C/HQDENy9e TwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17739898872398237844621026000247116744 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-28 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uat.systems.orbis.app' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26545244629801890900781652389614371254322881674257965541834523326216651911185785384065164016942736507233158528199855847483637547298021915875278262696315526262449955046384557273266497054341536812320258125858457869848097785356855044253128390451003668443397968913307775662526401444446048753736898438757046009287168803660858166292771361690793561448251170023416300070611806261229697657344524188727235653898534614659143799921576001401493920398687699129553702578953328340071512099046923429512591080240625244502815349341852346632166043186095243022694950468279162159597596140077257174754383265713159173016762552810832321797711 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ba057651cf25cf06060d2056b50610f1a826909c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.systems.orbis.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.systems.orbis.app' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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