*.blog.freedcamp.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0c:4b:d5:43:86:1d:e4:16:95:77:bb:ed:b9:36:40:9c was issued on by Amazon.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.blog.freedcamp.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:4b:d5:43:86:1d:e4:16:95:77:bb:ed:b9:36:40:9cSerial Number (int): 16344483716848696089482202499499049116
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 9b:03:0c:cb:ae:1d:a2:b0:c9:78:59:44:41:a2:76:c5:ed:dd:cd:0a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 1b:a8:c6:a4:ef:cd:6a:36:83:0c:0b:c5:3e:58:12:65:b3:59:c7:fa
Fingerprint (sha256): 19:79:7e:90:24:4e:0c:f9:c4:cc:7c:d9:22:6e:58:a2:ab:18:e5:98:7d:10:0a:7c:51:e0:fa:d9:4f:a4:5c:8e
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.blog.freedcamp.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.blog.freedcamp.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.blog.freedcamp.com
blog.freedcamp.com
news.freedcamp.com
*.news.freedcamp.com
blog.freedcamp.com
news.freedcamp.com
*.news.freedcamp.com
Other certificates including the domain name freedcamp.com
(limited to 100 certificates)
freedcamp.com
aws.freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
*.freedcamp.com
*.blog.freedcamp.com
freedcamp.com
freedcamp.com
*.blog.freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
pt.freedcamp.com
freedcamp.com
aws.freedcamp.com
*.blog.freedcamp.com
freedcamp.com
aws.freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
*.blog.freedcamp.com
freedcamp.com
FREEDCAMP.COM
freedcamp.com
freedcamp.com
freedcamp.com
*.blog.freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
*.freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
*.cloud07.io
freedcamp.com
freedcamp.com
pt.freedcamp.com
*.cloud07.io
freedcamp.com
freedcamp.com
freedcamp.com
FREEDCAMP.COM
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
aws.freedcamp.com
freedcamp.com
aws.freedcamp.com
freedcamp.com
*.freedcamp.com
freedcamp.com
freedcamp.com
*.freedcamp.com
test.freedcamp.com
*.freedcamp.com
*.freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
p.freedcamp.com
freedcamp.com
freedcamp.com
*.freedcamp.com
freedcamp.com
freedcamp.com
*.freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
test.freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
aws.freedcamp.com
freedcamp.com
freedcamp.com
aws.freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
*.freedcamp.com
*.blog.freedcamp.com
freedcamp.com
freedcamp.com
*.blog.freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
pt.freedcamp.com
freedcamp.com
aws.freedcamp.com
*.blog.freedcamp.com
freedcamp.com
aws.freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
*.blog.freedcamp.com
freedcamp.com
FREEDCAMP.COM
freedcamp.com
freedcamp.com
freedcamp.com
*.blog.freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
*.freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
*.cloud07.io
freedcamp.com
freedcamp.com
pt.freedcamp.com
*.cloud07.io
freedcamp.com
freedcamp.com
freedcamp.com
FREEDCAMP.COM
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
aws.freedcamp.com
freedcamp.com
aws.freedcamp.com
freedcamp.com
*.freedcamp.com
freedcamp.com
freedcamp.com
*.freedcamp.com
test.freedcamp.com
*.freedcamp.com
*.freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
p.freedcamp.com
freedcamp.com
freedcamp.com
*.freedcamp.com
freedcamp.com
freedcamp.com
*.freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
test.freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
aws.freedcamp.com
freedcamp.com
freedcamp.com
Certificate
The complete raw certificate details for *.blog.freedcamp.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEmjCCA4KgAwIBAgIQDEvVQ4Yd5BaVd7vtuTZAnDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xNzEwMDUwMDAwMDBaFw0xODExMDUx MjAwMDBaMB8xHTAbBgNVBAMMFCouYmxvZy5mcmVlZGNhbXAuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSSy2nSc69HrOA8+lj7OjScg/StOGxiC X2DpWZcni9O0MAN8Qx+BWI+3Lfj6y9yZ6bnvrUqWOnT6Vsfc031Fl8Gu4kVq9XYs uXpLteo2eRRghH8eO0BE20clUuXP1NEuHKTly5O8PhvSLZ+/sI7emTjAVtqxBe6b zvzgYwlkOHpeHhL1jPy4iFJl5yglV4KXN2FnDrAE1guEHN8uASF4s84gPfi0/BEj A0wVQm2/R/ccRXTi9Er9G1eLZkHDek1sMf2hk0OadFtWBGADhEFUY7zMlKjwxLaW U92eTS+nsRIV87e7UoaJV/ZDnjW5mQxA3rWw/u0uPvF5vtECKTJvIQIDAQABo4IB qTCCAaUwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYE FJsDDMuuHaKwyXhZREGidsXt3c0KMF0GA1UdEQRWMFSCFCouYmxvZy5mcmVlZGNh bXAuY29tghJibG9nLmZyZWVkY2FtcC5jb22CEm5ld3MuZnJlZWRjYW1wLmNvbYIU Ki5uZXdzLmZyZWVkY2FtcC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3Js LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwEwYDVR0gBAwwCjAIBgZn gQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5z Y2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2Nh MWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMA0GCSqG SIb3DQEBCwUAA4IBAQAi39f5yT/B5rr9oaZ8aNs5bx8Bjs6fNOFIEwhjKuWGS7ZR lRMMcQkUzx6r7cIlAQrU17LXr3oWW5qhtSaWh8qSfEwYSdmus2qkaebRnm5vHDjZ abm1K93VA3mdnb7uUpnYbxaK91KrhvBAqYULfOZJHhS1/MS+xNZsdx4cJuqwLSyE eaDAR1/9euiUXNhb4hqbVflNGWp7GGvpLaCfNjApOke8T/NpX/ouJYGvbeFge84h ncJuIjNm2qJyRvpdVHET/uocA7/RYTDa+cJEmL4SAJ9qWlUrwj70gnjPNeq++Gvr ClVayNeFz7Ap2VVTe0ZNh29V2I/TSdegHPRtC+1V -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSSy2nSc69HrOA8+lj7O jScg/StOGxiCX2DpWZcni9O0MAN8Qx+BWI+3Lfj6y9yZ6bnvrUqWOnT6Vsfc031F l8Gu4kVq9XYsuXpLteo2eRRghH8eO0BE20clUuXP1NEuHKTly5O8PhvSLZ+/sI7e mTjAVtqxBe6bzvzgYwlkOHpeHhL1jPy4iFJl5yglV4KXN2FnDrAE1guEHN8uASF4 s84gPfi0/BEjA0wVQm2/R/ccRXTi9Er9G1eLZkHDek1sMf2hk0OadFtWBGADhEFU Y7zMlKjwxLaWU92eTS+nsRIV87e7UoaJV/ZDnjW5mQxA3rWw/u0uPvF5vtECKTJv IQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16344483716848696089482202499499049116 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-05 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.blog.freedcamp.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24382089635202285422405095185212854840657444130771904734150962792536997228343618126486656199134860453339376734518089315437216800872410359433121646765778244968574716240801298517232525767181583657266597621248890378859332926373472175876474404191540277685780426993105733535126791592815066858232857973307465400299004047217738149837456311679725293586636336740052645912753908388501572193119805683049151590360533694221207717531271274108178839291457319573626188709852443129356143380007986216724081909833556943819022550215270015579380231944635291606523914865117839590397774220801304821884346467898136805684018277146785890856737 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9b030ccbae1da2b0c978594441a276c5edddcd0a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blog.freedcamp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.freedcamp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.freedcamp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news.freedcamp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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