captego.com
Issued by R3
About this certificate
This digital certificate with serial number 04:19:a7:cf:10:55:40:4f:41:44:66:a4:c9:8f:6d:0e:e8:31 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=captego.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:19:a7:cf:10:55:40:4f:41:44:66:a4:c9:8f:6d:0e:e8:31Serial Number (int): 357179259112083096159297112148087348848689
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: f9:fa:cb:15:88:fe:ea:ea:f0:8c:07:05:de:aa:10:98:1e:3f:ef:83
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 17:40:4b:9a:04:9b:14:e7:bf:2b:9f:2d:4f:ec:06:b7:e5:b2:bb:82
Fingerprint (sha256): 27:ac:4a:28:a0:a4:0b:db:f4:dd:8a:a3:cd:4d:3b:e4:f4:e7:11:1f:0c:c8:97:5e:79:3b:12:f3:85:f6:89:d2
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate captego.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for captego.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
captego.com
Other certificates including the domain name captego.com
(limited to 100 certificates)
www.apizf.org
imgsizer.com
www.palpiteagora.com.br
admin.foreigner.guide
www.konabysushicorner.de
meetme.hapahapa.app
www.captego.com
app.messenger.wk.ingentics.com
www.simonschmidt.fr
tezaaa.com
captego.com
qincheng2.net
appslinks.semillaproyectos.com
appointohealth.com
mitaste.com
www.easycrypto.com.au
fruitsalad.party
sis.oakwoodfriends.org
www.identityswitcher.app
aashnapriyamvada.com
test-pheno.anuvabio.io
www.icenitrading.com
brianwool.com
www.hopa-hopa.pl
akarat.tn
konfigurator.m-tec.at
cornerstone.lifebrand.life
link.upstox.com
link.weareluna.app
setup-dev.captego.com
go.gaga-app.com
oblast-ses.ru
boekdrukken.com
residenciastransparentes.com
teamstatus.net
www.nerdwise.ca
captego.com
www.notinourscene.com
www.exdiv-watcher.com
www.pianolessonscardiff.com
www.greekcats.art
nepalaya.com.np
markenshop.dev
speedy.oubeid.com
riggedwheel.com
whatsthisflower.com
meergraph.com
www.conamer.io
commander.mazdasthyacinthe.com
app.schedulytic.com
exelt.net
quicklyupdate.co.za
desapandeyan.com
www.kcmixologist.com
coldcitywraps.com
wirepledge.com
madmad.digital
www.arpitjain.in
kemi-tornioairport.fi
app.clothes-friends.com
start.therobot.app
organizer.theticketing.in
www.imasimov.com
services-portal-uat.5inline.io
www.fusionbotsofficial.com
www.madrid-day-spa.com
setup.captego.com
captego.com
noticiasdopaysandu.tempoparalelo.com
portal.k9fit.co
redirect-app.heaveness.com
thetalab.io
staging.auth.futster.io
app.quickclientportal.com
lnr.com.ar
www.captego.com
quicklyupdate.co.za
covid19safe.es
armstrongcreek.otespresso.com.au
next-api-beatjump.opalastudios.com
supplement.ihack.co.jp
tea-minder.rodrigozevallos.es
www.emma.engineer
11520682.peerly.app
therounak.com
www.careerkraft.in
blog.leapfrogr.com
shipableja.com
qrapp.tastio.com
tl.ag
bfgm.hydrocode.de
www.butterfly.com.hk
www.betahackers.de
gtssecurityfreight.com
app.gosuite.es
app.quickclientportal.com
dashboard.tourbutler.app
might-ent.com
upliftfitness.jp
captego.com
imgsizer.com
www.palpiteagora.com.br
admin.foreigner.guide
www.konabysushicorner.de
meetme.hapahapa.app
www.captego.com
app.messenger.wk.ingentics.com
www.simonschmidt.fr
tezaaa.com
captego.com
qincheng2.net
appslinks.semillaproyectos.com
appointohealth.com
mitaste.com
www.easycrypto.com.au
fruitsalad.party
sis.oakwoodfriends.org
www.identityswitcher.app
aashnapriyamvada.com
test-pheno.anuvabio.io
www.icenitrading.com
brianwool.com
www.hopa-hopa.pl
akarat.tn
konfigurator.m-tec.at
cornerstone.lifebrand.life
link.upstox.com
link.weareluna.app
setup-dev.captego.com
go.gaga-app.com
oblast-ses.ru
boekdrukken.com
residenciastransparentes.com
teamstatus.net
www.nerdwise.ca
captego.com
www.notinourscene.com
www.exdiv-watcher.com
www.pianolessonscardiff.com
www.greekcats.art
nepalaya.com.np
markenshop.dev
speedy.oubeid.com
riggedwheel.com
whatsthisflower.com
meergraph.com
www.conamer.io
commander.mazdasthyacinthe.com
app.schedulytic.com
exelt.net
quicklyupdate.co.za
desapandeyan.com
www.kcmixologist.com
coldcitywraps.com
wirepledge.com
madmad.digital
www.arpitjain.in
kemi-tornioairport.fi
app.clothes-friends.com
start.therobot.app
organizer.theticketing.in
www.imasimov.com
services-portal-uat.5inline.io
www.fusionbotsofficial.com
www.madrid-day-spa.com
setup.captego.com
captego.com
noticiasdopaysandu.tempoparalelo.com
portal.k9fit.co
redirect-app.heaveness.com
thetalab.io
staging.auth.futster.io
app.quickclientportal.com
lnr.com.ar
www.captego.com
quicklyupdate.co.za
covid19safe.es
armstrongcreek.otespresso.com.au
next-api-beatjump.opalastudios.com
supplement.ihack.co.jp
tea-minder.rodrigozevallos.es
www.emma.engineer
11520682.peerly.app
therounak.com
www.careerkraft.in
blog.leapfrogr.com
shipableja.com
qrapp.tastio.com
tl.ag
bfgm.hydrocode.de
www.butterfly.com.hk
www.betahackers.de
gtssecurityfreight.com
app.gosuite.es
app.quickclientportal.com
dashboard.tourbutler.app
might-ent.com
upliftfitness.jp
captego.com
Certificate
The complete raw certificate details for captego.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgISBBmnzxBVQE9BRGakyY9tDugxMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMjIxNjE0MjZaFw0yNDA2MjAxNjE0MjVaMBYxFDASBgNVBAMT C2NhcHRlZ28uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA565M xU27w4KB/2n2sP8xZFJ4PDmH5/WXgpza70GHoqdGy+oP9ONMdNTLNfig9dSqFkjG 7q1YcOlOpUhiPVv78BpBzdKHrRz5W1WSKswFeTuBVfgUNu5j3nhZm1h1bOke6HJD myvffwYYZ4uRuKxV+8fgEddJayo8pyhnNPGQXDqv8GZOS8s9PZZrKa6IXi6pXXqe 7kf2DTXRqMegNM1nscCsaqM6cXBdUqb9CSpMrikO6qR3VeZK2YQWaaoDfR2XGYb9 XwtGsgU1zR1XQsQNuavA2DWGium4yW7NLK/ZxGLeG/GL31SxRSgz/otSrMUTU3eQ s//Dh5AR8Za5AfpbfwIDAQABo4ICDDCCAggwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBT5+ssViP7q6vCMBwXeqhCYHj/vgzAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzAW BgNVHREEDzANggtjYXB0ZWdvLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMG CisGAQQB1nkCBAIEgfQEgfEA7wB1AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/ KIXs+GRuAAABjmcoIdEAAAQDAEYwRAIgEMElBSKYSo/8jN3dh7CPUyiUy+ZDcNjK 44KAgyJjqUcCIBqLDzxz/qtrriA6jHVYBa1WM5dryTwwgpf7kM3KtwW9AHYAdv+I Pwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGOZygp2wAABAMARzBFAiBi pEmebv4DTQb2MZLsWNcpjKmKenLtOKvGI0RlXS+icQIhAPEiGQGjYjEHCJ4rOWD4 o9czQaM/69cVmLI8cKwEitrLMA0GCSqGSIb3DQEBCwUAA4IBAQA3qm7WBm2hCp+h 35oTtrsfm3CDzpOJbjQ0VsL0nube393hfaXESOYuJ030HrCzZsG+V4C1Z9s4xP07 sfSKB9UEFBiPYI7ml0ZXH40mYwuAp9ygGsq4Dn3F1k0z7r6naE56gbBV9lD2Y1B7 p/q6qS5TwQGkDxNRIHfIlAVr9kaKKFshODKe3J4MxxezNxG2rGk65nX3Ck8UwVSB uUnDpZYxCk0s8h8Wu1d0TmLXTR19tsbYirTVySkLb01cT9pUHcaCvu/8jddHEq/G WinE/albWgvTMVMLYpMEuHgvNQN8vJMODo9WyoBJ+HcAjdyoulfnsfR20BMbHc/N a30jKFXM -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA565MxU27w4KB/2n2sP8x ZFJ4PDmH5/WXgpza70GHoqdGy+oP9ONMdNTLNfig9dSqFkjG7q1YcOlOpUhiPVv7 8BpBzdKHrRz5W1WSKswFeTuBVfgUNu5j3nhZm1h1bOke6HJDmyvffwYYZ4uRuKxV +8fgEddJayo8pyhnNPGQXDqv8GZOS8s9PZZrKa6IXi6pXXqe7kf2DTXRqMegNM1n scCsaqM6cXBdUqb9CSpMrikO6qR3VeZK2YQWaaoDfR2XGYb9XwtGsgU1zR1XQsQN uavA2DWGium4yW7NLK/ZxGLeG/GL31SxRSgz/otSrMUTU3eQs//Dh5AR8Za5Afpb fwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 357179259112083096159297112148087348848689 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 16:14:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 16:14:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'captego.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29246998924174308036722272347772048316279418132021668398796291686556361432346570160289260082997889907556924624906991433388148468346844236417782330272622043404481803988329966984441336178965161409583969842027408880224218490328822249621928402179724836478854577434645919122588271084968103038127612709315733879324701771190622903858807743598471523700510917090919152996277088918659567785263520101178524336421101395153350219629387468031793689153320341158571925419611602411116978619835277745378329092978497362702082250236063967483715663646714322255897956262654757432749162426924757374188069595367583794352645469333035343829887 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f9facb1588feeaeaf08c0705deaa10981e3fef83 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captego.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e672821d10000040300463044022010c1250522984a8ffc8cdddd87b08f532894cbe64370d8cae38280832263a94702201a8b0f3c73feab6bae203a8c755805ad5633976bc93c308297fb90cdcab705bd00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e672829db0000040300473045022062a4499e6efe034d06f63192ec58d7298ca98a7a72ed38abc62344655d2fa271022100f1221901a3623107089e2b3960f8a3d73341a33febd71598b23c70ac048adacb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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