www.vyvai.com.ar
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:aa:ea:82:65:3f:91:6f:97:11:38:b3:ff:6f:d9:35:39:ac was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.vyvai.com.ar
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:aa:ea:82:65:3f:91:6f:97:11:38:b3:ff:6f:d9:35:39:acSerial Number (int): 319496576575005313008299039386208411400620
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ba:5b:a9:0b:c8:e1:80:ba:e3:be:97:b8:5f:11:bd:4d:25:b1:d4:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ae:b6:f4:50:26:3b:bb:f4:12:9b:56:08:ee:e5:34:d4:d7:92:4c:cd
Fingerprint (sha256): 2c:0c:9a:9e:00:2c:e5:69:99:2b:d3:6d:68:b7:56:51:23:91:b9:7a:39:d8:04:e9:1f:f9:05:0a:87:34:af:1a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.vyvai.com.ar
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.vyvai.com.ar
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.vyvai.com.ar
Other certificates including the domain name vyvai.com.ar
(limited to 100 certificates)
vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
www.vyvai.com.ar
vyvai.com.ar
www.vyvai.com.ar
www.vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
www.vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
mail.vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
www.vyvai.com.ar
vyvai.com.ar
www.vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
www.vyvai.com.ar
vyvai.com.ar
www.vyvai.com.ar
www.vyvai.com.ar
www.vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
www.vyvai.com.ar
vyvai.com.ar
www.vyvai.com.ar
www.vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
www.vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
mail.vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
www.vyvai.com.ar
vyvai.com.ar
www.vyvai.com.ar
vyvai.com.ar
vyvai.com.ar
www.vyvai.com.ar
vyvai.com.ar
www.vyvai.com.ar
www.vyvai.com.ar
www.vyvai.com.ar
vyvai.com.ar
Certificate
The complete raw certificate details for www.vyvai.com.ar in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgISA6rqgmU/kW+XETiz/2/ZNTmsMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjIwNzQwMTVaFw0y MDAxMjAwNzQwMTVaMBsxGTAXBgNVBAMTEHd3dy52eXZhaS5jb20uYXIwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDRBJzSnreXBIx8DMi6V1cVlBq4OuN1 Slf2KceglZs5XPQs7FqnA35eEEd46fqjnxv5SPoPoY8fRnOE1djiuz2FL/QAvV+K 8TsFpq4ea4NVp7sSuEIJjBUglZ01UVRe4PZjA7nAN/tt7l0/M302FIHtpzCBvbmK +LY6lqDaRww7QoZEFuegVv+4oaR6R4ltnvctRek5aoHoYg81s/TVM4BQApLq19aQ DF+VDEO6i0V3ZoEVMR1EC7yER7ejbGjSaJkXMbRKRR6skEBBPRU+mh8/HFnpWMYL 7LO1uvguC5T9EOrDpQDyge6FUF256gzpa4/6vLunsoXz7tzl8wR8DAGtqg/Dv4j6 WlrN5+5e6ZOP2AxOQZ6adxNhqobIs5tHP3BFFwC6uGGrvN7vPOgRVB6sIKfnzTQS LxAVETprlDk/u/rGDq5o6WoWOn+mWMBGGfV2nExccC9m50ex2jK7cK3l1CLfTNBy C/Nva78ffjY3kFgIDaH0A6q9+32fDKpk+96A2wlTQ3gVeW8AkP+MCd+p+m+uYJhM 5mwYrfzyc/OnJHnZiLIHiorqxC22LoKn3C2C2reEDGEzCcydI3DC6BNN0/dvZcRw yOo1smGnIXfDa/SWwc5LjoXLy96wf1lUzrdxuPRQogQ3aSK6QUbBTm0bGKr/JLp5 K9XxbG04oKWdqwIDAQABo4ICZTCCAmEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS6 W6kLyOGAuuO+l7hfEb1NJbHUNDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHd3dy52eXZhaS5jb20u YXIwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC BIH1BIHyAPAAdwBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW3y n7TsAAAEAwBIMEYCIQCOAUNsg58OYrQaGzBXWwJ9DDDZPQki6uV8gO5sRQ6ZxgIh AOmhL/vPpgJAmiZszaqdqzfWx45M61dFRSU6HD4gc0DRAHUAB7dcG+V9aP/xsMYd IxXHuuZXfFeUt2ruvGE6GmnTohwAAAFt8p+1AAAABAMARjBEAiAbel7SA4lt5fxA q/PKsHd+pN1vyHuJ/XDEL6ub3vH1zQIgTi2NH+9P5n8ljGsrAW+zqVYHGCsg5NSW KVumFmnKW7IwDQYJKoZIhvcNAQELBQADggEBAAieAFTdnZof8z1VFjJ07s8KjRfx 2xpApdhxFA8hoLdDWNO+4LBydxuKMW7olzWXdJEEHo52dz7UEy2THekopbBTYRan GCuTGf0jv7w9+i0xCCwNlM9VDZ50mCuKsNvnbFDy1yrYtdkHgVyEw2W2GwZO4QoC pncArNOzZ2u4LhVW+mNnOfz3H8HcS47UUijDtCoHTZPtlzsaQZW7H4o8dWKl8VrN gda6nqsXw4osJ5tFX+PVckSeZaid7rqTdR0NWm73q1lxyujAypUID6QGPbhDefnV vUgLPxdHUE+tZfUnPvI1/LzDPyvABDKnmvTRmeloa/PCkX2v/B0wX9OVk/c= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0QSc0p63lwSMfAzIuldX FZQauDrjdUpX9inHoJWbOVz0LOxapwN+XhBHeOn6o58b+Uj6D6GPH0ZzhNXY4rs9 hS/0AL1fivE7BaauHmuDVae7ErhCCYwVIJWdNVFUXuD2YwO5wDf7be5dPzN9NhSB 7acwgb25ivi2Opag2kcMO0KGRBbnoFb/uKGkekeJbZ73LUXpOWqB6GIPNbP01TOA UAKS6tfWkAxflQxDuotFd2aBFTEdRAu8hEe3o2xo0miZFzG0SkUerJBAQT0VPpof PxxZ6VjGC+yztbr4LguU/RDqw6UA8oHuhVBdueoM6WuP+ry7p7KF8+7c5fMEfAwB raoPw7+I+lpazefuXumTj9gMTkGemncTYaqGyLObRz9wRRcAurhhq7ze7zzoEVQe rCCn5800Ei8QFRE6a5Q5P7v6xg6uaOlqFjp/pljARhn1dpxMXHAvZudHsdoyu3Ct 5dQi30zQcgvzb2u/H342N5BYCA2h9AOqvft9nwyqZPvegNsJU0N4FXlvAJD/jAnf qfpvrmCYTOZsGK388nPzpyR52YiyB4qK6sQtti6Cp9wtgtq3hAxhMwnMnSNwwugT TdP3b2XEcMjqNbJhpyF3w2v0lsHOS46Fy8vesH9ZVM63cbj0UKIEN2kiukFGwU5t Gxiq/yS6eSvV8WxtOKClnasCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 319496576575005313008299039386208411400620 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 07:40:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-20 07:40:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vyvai.com.ar' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 852719116937146155712341189939489792660467879800573870195300173274519971061780147163704920307880754126058341646487416820236080673783408369041212543284180735785636747848519377357389450741883798236702587486383236696653154760599238020264572939111774272590499397847716541036833261796183063944162562678723138132148546411696545844287875432544528055713009152604524652285278150326950476190740066980490661504539861752931949920549418623802163259368475851946710020778816698894797279701614894701295708520577142506619665137050372320695857713483055881041328802285572806377567360721649183889491736376583385805363382704189618869046826011206950148079597163958590632318997801452900769821244854081226254865715865933928371214095630722072126231669609396504022969694897682882976500704940694405689674828602842579136839096253981847112371387933445771397629490146584000259195304698244484141551921649211167953270376036188283049804240513987786756253339340421947809693080110220035054274748686627583964385797375809439056405148472754119333032709179028930268059962560314713855502580279148234548119436188291562235220963357387817553900665246058176506136669866497857964054426799360128152052860030611441118959922114757740655111696853729402815849216770759738668832103851 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ba5ba90bc8e180bae3be97b85f11bd4d25b1d434 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vyvai.com.ar' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016df29fb4ec00000403004830460221008e01436c839f0e62b41a1b30575b027d0c30d93d0922eae57c80ee6c450e99c6022100e9a12ffbcfa602409a266ccdaa9dab37d6c78e4ceb574545253a1c3e207340d100750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016df29fb500000004030046304402201b7a5ed203896de5fc40abf3cab0777ea4dd6fc87b89fd70c42fab9bdef1f5cd02204e2d8d1fef4fe67f258c6b2b016fb3a95607182b20e4d496295ba61669ca5bb2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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