ikshop.lv
Issued by cPanel, Inc. Certification Authority
About this certificate
This digital certificate with serial number 96:2c:ec:b5:77:91:5e:e0:7c:51:63:d0:b2:55:0c:b3 was issued on by cPanel, Inc..
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ikshop.lv
cPanel, Inc.
Organization:
cPanel, Inc.
State / Province:
TX
Locality: Houston
Country: US
Locality: Houston
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 96:2c:ec:b5:77:91:5e:e0:7c:51:63:d0:b2:55:0c:b3Serial Number (int): 199617461455481248683353854411279764659
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: c5:ad:90:cc:22:c4:06:85:f9:31:3e:53:cd:35:89:27:f1:61:1a:c4
AuthorityKeyId: 7e:03:5a:65:41:6b:a7:7e:0a:e1:b8:9d:08:ea:1d:8e:1d:6a:c7:65
Fingerprint (sha1): 53:c8:7f:4a:8a:fb:34:8d:23:fa:f7:56:55:79:86:47:bd:26:b4:73
Fingerprint (sha256): 24:d7:46:e6:16:66:67:35:27:6e:d3:9f:43:26:19:4b:19:e2:09:a2:eb:95:ad:da:6c:b4:5f:a7:31:f6:03:ab
Issuing Certificate URL: http://crt.comodoca.com/cPanelIncCertificationAuthority.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCRL Distribution Point: http://crl.comodoca.com/cPanelIncCertificationAuthority.crl
Check the revocation status for certificate ikshop.lv
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ikshop.lv
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ikshop.lv
ikshop.liwax.area.lv
mail.ikshop.lv
webdisk.ikshop.lv
www.ikshop.liwax.area.lv
www.ikshop.lv
ikshop.liwax.area.lv
mail.ikshop.lv
webdisk.ikshop.lv
www.ikshop.liwax.area.lv
www.ikshop.lv
Other certificates including the domain name ikshop.lv
(limited to 100 certificates)
autopartner.ikshop.lv
ikshop.lv
ikshop.lv
*.liwax.area.lv
ikshop.lv
autopartner.ikshop.lv
cloud.ikshop.lv
ikshop.lv
ikshop.lv
autopartner.ikshop.lv
autopartner.ikshop.lv
cloud.ikshop.lv
shop.ikshop.lv
cloud.ikshop.lv
*.liwax.area.lv
ikshop.lv
autopartner.ikshop.lv
shop.ikshop.lv
shop.ikshop.lv
ikshop.lv
ikshop.lv
ikshop.lv
cloud.ikshop.lv
cloud.ikshop.lv
shop.ikshop.lv
shop.ikshop.lv
ikshop.lv
shop.ikshop.lv
ikshop.lv
ikshop.lv
ikshop.lv
ikshop.lv
ikshop.lv
ikshop.lv
ikshop.lv
matiem.lv
ikshop.lv
shop.ikshop.lv
autopartner.ikshop.lv
cloud.ikshop.lv
ikshop.lv
ikshop.lv
*.liwax.area.lv
ikshop.lv
autopartner.ikshop.lv
cloud.ikshop.lv
ikshop.lv
ikshop.lv
autopartner.ikshop.lv
autopartner.ikshop.lv
cloud.ikshop.lv
shop.ikshop.lv
cloud.ikshop.lv
*.liwax.area.lv
ikshop.lv
autopartner.ikshop.lv
shop.ikshop.lv
shop.ikshop.lv
ikshop.lv
ikshop.lv
ikshop.lv
cloud.ikshop.lv
cloud.ikshop.lv
shop.ikshop.lv
shop.ikshop.lv
ikshop.lv
shop.ikshop.lv
ikshop.lv
ikshop.lv
ikshop.lv
ikshop.lv
ikshop.lv
ikshop.lv
ikshop.lv
matiem.lv
ikshop.lv
shop.ikshop.lv
autopartner.ikshop.lv
cloud.ikshop.lv
Certificate
The complete raw certificate details for ikshop.lv in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIRAJYs7LV3kV7gfFFj0LJVDLMwDQYJKoZIhvcNAQELBQAw cjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAlRYMRAwDgYDVQQHEwdIb3VzdG9uMRUw EwYDVQQKEwxjUGFuZWwsIEluYy4xLTArBgNVBAMTJGNQYW5lbCwgSW5jLiBDZXJ0 aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xNzA2MjcwMDAwMDBaFw0xNzA5MjUyMzU5 NTlaMBQxEjAQBgNVBAMTCWlrc2hvcC5sdjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKTnsFsfx3Wr2mMUOgOh0r25Cbf2YBsPA4E+jKDbZOWrSGrhq7E3 yE87wX0Ef3L4qx4vKvXn9urbSnhmlmaQkY3YEVgNpHgMatDb39T2HlW88JtKI9iO 9sH7qj/88YQkb5jCJKMU9SpuQ1f23+sqZHRoRuTqd4fe6BsV+oKC026lIfnesKhr CbwdZnysQyyvj2CG68kvIdy1MNp8IcfGE3L3Fv9pIsgpT/+4hH2L3q6ArjV4Qkvn xSSW81VfRIQ7yKMS7rudvwMYZ60y9pr84r9dHgL+UaLWw484DCuTw1BW7QHdzexM 3urQKAlK4ff/S2uqM0M0goDykBa1kx+6vhsCAwEAAaOCAhcwggITMB8GA1UdIwQY MBaAFH4DWmVBa6d+CuG4nQjqHY4dasdlMB0GA1UdDgQWBBTFrZDMIsQGhfkxPlPN NYkn8WEaxDAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwTwYDVR0gBEgwRjA6BgsrBgEEAbIxAQICNDAr MCkGCCsGAQUFBwIBFh1odHRwczovL3NlY3VyZS5jb21vZG8uY29tL0NQUzAIBgZn gQwBAgEwTAYDVR0fBEUwQzBBoD+gPYY7aHR0cDovL2NybC5jb21vZG9jYS5jb20v Y1BhbmVsSW5jQ2VydGlmaWNhdGlvbkF1dGhvcml0eS5jcmwwfQYIKwYBBQUHAQEE cTBvMEcGCCsGAQUFBzAChjtodHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9jUGFuZWxJ bmNDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNydDAkBggrBgEFBQcwAYYYaHR0cDov L29jc3AuY29tb2RvY2EuY29tMHYGA1UdEQRvMG2CCWlrc2hvcC5sdoIUaWtzaG9w Lmxpd2F4LmFyZWEubHaCDm1haWwuaWtzaG9wLmx2ghF3ZWJkaXNrLmlrc2hvcC5s doIYd3d3Lmlrc2hvcC5saXdheC5hcmVhLmx2gg13d3cuaWtzaG9wLmx2MA0GCSqG SIb3DQEBCwUAA4IBAQANAffxDVx4wMk687ud6P1R+GtDK3HvVzPWlePe4wleabJ4 5j8HanMBw1CdVpHqRj5oyXkX9P4iJZO4qD8Lyio6q+D+VoEr7VdrCvlbPnoXHimC XJZGm5u2MtpTeSSw3IcR89FqWeOTZwRi3xOiSHAMj4BimCEG/U7EFNT+zMwD/SSY 5oVjhvon6Q6ZHQ8edmUU4n8wwpQDYabdOpT6rYRcUXG0FfN8w24pWbTNe4GAzuNy bUxolbMkzrvr6j5H5to6IQD++vSnChGHBtRtigw+klU2fpg23WyqanqK+RgDegfZ ViZ+RG+NTWlyZYQtU/pJ9oXsxGeTAcoErbY9pyCl -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOewWx/HdavaYxQ6A6HS vbkJt/ZgGw8DgT6MoNtk5atIauGrsTfITzvBfQR/cvirHi8q9ef26ttKeGaWZpCR jdgRWA2keAxq0Nvf1PYeVbzwm0oj2I72wfuqP/zxhCRvmMIkoxT1Km5DV/bf6ypk dGhG5Op3h97oGxX6goLTbqUh+d6wqGsJvB1mfKxDLK+PYIbryS8h3LUw2nwhx8YT cvcW/2kiyClP/7iEfYveroCuNXhCS+fFJJbzVV9EhDvIoxLuu52/AxhnrTL2mvzi v10eAv5RotbDjzgMK5PDUFbtAd3N7Eze6tAoCUrh9/9La6ozQzSCgPKQFrWTH7q+ GwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 199617461455481248683353854411279764659 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TX' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Houston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cPanel, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cPanel, Inc. Certification Authority' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ikshop.lv' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20817332064469223536500474553297114432517722810647919226138002177354740410280179364616203812230339409832738085319190930962832913762024147816830523660415733131713561502937919334633463453649803250598996183044058446670711195608847345297652965350082233486776551893438164953378370525871314094987803861364283817681679893045574312406869865500194874867293236425169160838723415885467682349828104381150708767383607976632102039926075221165547819925727139213080121178538118214346823983539896200241448633866704984912250481239179073347953157460599947503442611852685818074184670487444191888534961580300635890868134211524263728037403 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7e035a65416ba77e0ae1b89d08ea1d8e1d6ac765 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c5ad90cc22c40685f9313e53cd358927f1611ac4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.52 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/cPanelIncCertificationAuthority.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/cPanelIncCertificationAuthority.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikshop.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikshop.liwax.area.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ikshop.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ikshop.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikshop.liwax.area.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikshop.lv' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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