*.g-mms.com
- Google Inc -
Issued by Google Internet Authority G3
About this certificate
This digital certificate with serial number 7c:91:da:7a:21:7f:64:7e was issued on by Google Trust Services.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Google Inc
Organization:
Google Inc
State / Province:
California
Locality: Mountain View
Country: US
Locality: Mountain View
Country: US
Google Trust Services
Organization:
Google Trust Services
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 7c:91:da:7a:21:7f:64:7eSerial Number (int): 8976195750408971390
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: 2e:b9:e9:3a:af:1b:81:9b:29:cc:c1:6a:06:dd:26:bf:36:e1:0c:69
AuthorityKeyId: 77:c2:b8:50:9a:67:76:76:b1:2d:c2:86:d0:83:a0:7e:a6:7e:ba:4b
Fingerprint (sha1): 4f:cd:9c:4f:6f:2e:b1:d3:2d:2f:d0:b1:09:59:58:d8:15:8b:77:f5
Fingerprint (sha256): 2a:b8:a4:07:04:97:f0:44:6f:66:10:c8:3c:77:71:23:7b:b9:d2:15:2d:82:55:f1:ac:d6:df:d7:eb:b5:a3:b9
Issuing Certificate URL: http://pki.goog/gsr2/GTSGIAG3.crt
Revocation information
OCSP Server: http://ocsp.pki.goog/GTSGIAG3CRL Distribution Point: http://crl.pki.goog/GTSGIAG3.crl
Check the revocation status for certificate *.g-mms.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.g-mms.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Extended Key Usages
Server Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.g-mms.com
Other certificates including the domain name g-mms.com
(limited to 100 certificates)
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
Certificate
The complete raw certificate details for *.g-mms.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfDCCA2SgAwIBAgIIfJHaeiF/ZH4wDQYJKoZIhvcNAQELBQAwVDELMAkGA1UE BhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczElMCMGA1UEAxMc R29vZ2xlIEludGVybmV0IEF1dGhvcml0eSBHMzAeFw0xODA0MTAxOTIxMjBaFw0x ODA3MDMxODMzMDBaMGUxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlh MRYwFAYDVQQHDA1Nb3VudGFpbiBWaWV3MRMwEQYDVQQKDApHb29nbGUgSW5jMRQw EgYDVQQDDAsqLmctbW1zLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJkoiCgW3ScVanbBWk1qylVqGKN7HKMwF0exRrOBzldgxAxU0gJ6XyNlE/NW 83MumLdt5kQ9nnHtlgNcS+oLjieSl9oysJ1j04c6pFu+asHM92rHBcw/+rmXQ8fs yg1nD+2osdRNzh9iZEDCygXlgTSMKmlN0Rz+ia97o9VoOE29B2SiRr8uDJZFT7gu ffNS292eDCuPGBB0R37oZs3s+SS71f7yhsr0dRRlZ1+nFmBFuGwODdb14Ex2guxy 28EN136ueikgC15epltm/EOtf5W/6ljHi0lT/AtJ1O9AlEkXz41VKBv/dXZQwHbU X+Qw3DeqXuzYrFf+QMiy8wS4B7kCAwEAAaOCAT8wggE7MBMGA1UdJQQMMAoGCCsG AQUFBwMBMBYGA1UdEQQPMA2CCyouZy1tbXMuY29tMGgGCCsGAQUFBwEBBFwwWjAt BggrBgEFBQcwAoYhaHR0cDovL3BraS5nb29nL2dzcjIvR1RTR0lBRzMuY3J0MCkG CCsGAQUFBzABhh1odHRwOi8vb2NzcC5wa2kuZ29vZy9HVFNHSUFHMzAdBgNVHQ4E FgQULrnpOq8bgZspzMFqBt0mvzbhDGkwDAYDVR0TAQH/BAIwADAfBgNVHSMEGDAW gBR3wrhQmmd2drEtwobQg6B+pn66SzAhBgNVHSAEGjAYMAwGCisGAQQB1nkCBQMw CAYGZ4EMAQICMDEGA1UdHwQqMCgwJqAkoCKGIGh0dHA6Ly9jcmwucGtpLmdvb2cv R1RTR0lBRzMuY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQAorvw11WR5f9WAs3No3ViI JLm8kXOSWMXSOldyu0ByVTeEpXoqKiWxLgo24ms1G8bg6QywgIeIPw3gwBWxWa7R /RVZWaYELFaykMnD0gio2s8B/zu5Hs74YEAd74/K2NnR2CNuLvOWK4bLJxxGcXcQ M4zPjKOCCdVJKfmJx23/Y+fqG3fhqxy8MY8R+yrkafjsQ/bt96FUiS5lrBR5H+ID aVOdqAPhnDeQBqM7YJFuD+yrTsSSdJ/B7Z/ayLE35K/YnMa6SlIPhtHzPa3UyAow Vk02VKIrFRAj0RoAXvbpplOF30O2YNNWeH2tfmeEBYPspK10ZPn9mpPAbwiWChxE -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSiIKBbdJxVqdsFaTWrK VWoYo3scozAXR7FGs4HOV2DEDFTSAnpfI2UT81bzcy6Yt23mRD2ece2WA1xL6guO J5KX2jKwnWPThzqkW75qwcz3ascFzD/6uZdDx+zKDWcP7aix1E3OH2JkQMLKBeWB NIwqaU3RHP6Jr3uj1Wg4Tb0HZKJGvy4MlkVPuC5981Lb3Z4MK48YEHRHfuhmzez5 JLvV/vKGyvR1FGVnX6cWYEW4bA4N1vXgTHaC7HLbwQ3Xfq56KSALXl6mW2b8Q61/ lb/qWMeLSVP8C0nU70CUSRfPjVUoG/91dlDAdtRf5DDcN6pe7NisV/5AyLLzBLgH uQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8976195750408971390 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Internet Authority G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-10 19:21:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-03 18:33:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mountain View' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Google Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.g-mms.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19334447665744230783612258116113382439224037548173725239160776167457614397128835263401500765094553310025623805694183453091637854045122313991667702354717557654413575168320503777475127369465993646238006870755888874635709654035158151019648703104815165005876491358812439568860729881986303251532586831476353831496584500178458202010710306358130532418970519882556648601256322331314738764518847317903409133108826095077733595279818344202240675980240101119155425283223492455664785414321728390752693936684744875323871524774556989742676225784952046727052089617239230680934118950125340237680839737089048860949973580170774758033337 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.g-mms.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTSGIAG3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/GTSGIAG3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2eb9e93aaf1b819b29ccc16a06dd26bf36e10c69 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 77c2b8509a677676b12dc286d083a07ea67eba4b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTSGIAG3.crl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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