amypetris.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:30:9d:ad:31:0c:9f:cc:28:cb:fb:19:72:5d:25:93:64:c9 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=amypetris.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:30:9d:ad:31:0c:9f:cc:28:cb:fb:19:72:5d:25:93:64:c9Serial Number (int): 277879999465018807962528573203939723535561
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1b:28:b6:c7:24:a3:c5:a2:e1:09:1b:c4:80:cf:d7:af:15:58:7b:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e3:4a:63:80:ca:dc:83:c6:43:3e:2e:6c:e4:36:6c:02:93:d8:80:e9
Fingerprint (sha256): 2d:5f:a3:de:f9:85:74:ba:a1:60:08:f6:cf:75:4d:37:e3:91:73:78:69:68:ae:0a:31:bc:ce:84:a7:1f:2d:13
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate amypetris.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for amypetris.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
amypetris.com
www.amypetris.com
www.amypetris.com
Other certificates including the domain name amypetris.com
(limited to 100 certificates)
sni54795.cloudflaressl.com
amypetris.com
amypetris.com
amypetris.com
sni54795.cloudflaressl.com
amypetris.com
amypetris.com
www.amypetris.com
cdn.amypetris.com
sni54795.cloudflaressl.com
amypetris.com
cdn.amypetris.com
sni54795.cloudflaressl.com
cdn.amypetris.com
sni54795.cloudflaressl.com
amypetris.com
cdn.amypetris.com
amypetris.com
amypetris.com
sni54795.cloudflaressl.com
sni54795.cloudflaressl.com
amypetris.com
cdn.amypetris.com
amypetris.com
www.amypetris.com
sni54795.cloudflaressl.com
amypetris.com
amypetris.com
sni54795.cloudflaressl.com
amypetris.com
amypetris.com
amypetris.com
amypetris.com
amypetris.com
amypetris.com
sni54795.cloudflaressl.com
www.amypetris.com
amypetris.com
sni54795.cloudflaressl.com
amypetris.com
amypetris.com
amypetris.com
amypetris.com
sni54795.cloudflaressl.com
ssl2505.cloudflare.com
amypetris.com
amypetris.com
amypetris.com
sni54795.cloudflaressl.com
amypetris.com
amypetris.com
www.amypetris.com
cdn.amypetris.com
sni54795.cloudflaressl.com
amypetris.com
cdn.amypetris.com
sni54795.cloudflaressl.com
cdn.amypetris.com
sni54795.cloudflaressl.com
amypetris.com
cdn.amypetris.com
amypetris.com
amypetris.com
sni54795.cloudflaressl.com
sni54795.cloudflaressl.com
amypetris.com
cdn.amypetris.com
amypetris.com
www.amypetris.com
sni54795.cloudflaressl.com
amypetris.com
amypetris.com
sni54795.cloudflaressl.com
amypetris.com
amypetris.com
amypetris.com
amypetris.com
amypetris.com
amypetris.com
sni54795.cloudflaressl.com
www.amypetris.com
amypetris.com
sni54795.cloudflaressl.com
amypetris.com
amypetris.com
amypetris.com
amypetris.com
sni54795.cloudflaressl.com
ssl2505.cloudflare.com
Certificate
The complete raw certificate details for amypetris.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGEDCCBPigAwIBAgISAzCdrTEMn8woy/sZcl0lk2TJMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAxMzAwNDAwNTRaFw0x ODA0MzAwNDAwNTRaMBgxFjAUBgNVBAMTDWFteXBldHJpcy5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDlC+UwYeuLrLmI/hWAJxY1P2h8W/asbYCH m8YHkD1Cs71WjnkVsUj4ACV14tMH/rmY5s85hqRNhR27SyMWOLnE8hvQTBwlSkyo W4eNOF8TFJTTjI0JO1i8NH76D279iB+SZI3K0WYrSRZvSBiHtAH2j+IvrQ/buaKt yCcBUkYWKOWeTz5CYPYu3KHrysovQbF4npLsg38bq7L0osqpyCMvK2MQuWipzVEe 6IJl1ZGAGeoCLjP/372ER6bLKDMUzYyF4ZDdS9J+saGdKAmKKfu8QG/ZFe+452mt P8xnq+Dv7aLqJZiRIypgZn7U8XdXcuhnAizyNIGzaq3NSe/iHztyvWGKnd3s83LV aJ6IYg+M2jfI+ZSQ9lAVrfOl2Ewvv7yFuDZcUTKkEneO3eiqX7Zp/kG0EJhQyYlW rxuzjn+BTRu1S8otvUyvzn4KKM/OJadZcp8aTSeJwHK7CObzK/laf3Kzff8SyOO4 xiqforGua6PLdoywR8vHf6iwMUckDC50pJiTlxjeXhbZYmJB8pTHtZTZge7OqsBh SkMqFSOzVOsBJHL9SiOsuxX7geXreHw8YriEy5ygjS4EUgfsaC9AuEnJWsdf+frP 0usfs6rpIVMWVpOLvMx05OQNRzDcBAGbIfws9t+LcndXpg8zWZjlxm6Gv220hMAT oaKKf9wjcwIDAQABo4ICIDCCAhwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQbKLbH JKPFouEJG8SAz9evFVh7MzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDWFteXBldHJpcy5jb22CEXd3 dy5hbXlwZXRyaXMuY29tMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEE AYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBi ZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNj b3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0 cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQAD ggEBADDT6Wpax6BCACVl4Oi6asZiSZ9v2s93Ww5pVfFZxvNqzCPWsG9XiRlb6btR /TKIJf/xbt2LmImggpEWXza9kMCHOSKCPJwOMHS1sGwwmeBQzr38CguMOgqkSCt9 TB12KnJOrV1rE6lj2brPB0H5R0a7jqY2mEoavWUKxACBmH/mDVl6NXwBfSIMhy9A D7D5evOS6e9Z2rLMEFppWQm8A0IICgArb31GOGVS4iPmCOK6WULRQS1t1HXTqb64 LdB9YjSHf35RSef7tibnNUopZ6TWOgimJQbwQxw3xpUlo3SkjqvDU1kVdN9r0mCs OKVbtM6WJKFpp2K7Zo5hoOf2uVQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5QvlMGHri6y5iP4VgCcW NT9ofFv2rG2Ah5vGB5A9QrO9Vo55FbFI+AAldeLTB/65mObPOYakTYUdu0sjFji5 xPIb0EwcJUpMqFuHjThfExSU04yNCTtYvDR++g9u/YgfkmSNytFmK0kWb0gYh7QB 9o/iL60P27mircgnAVJGFijlnk8+QmD2Ltyh68rKL0GxeJ6S7IN/G6uy9KLKqcgj LytjELloqc1RHuiCZdWRgBnqAi4z/9+9hEemyygzFM2MheGQ3UvSfrGhnSgJiin7 vEBv2RXvuOdprT/MZ6vg7+2i6iWYkSMqYGZ+1PF3V3LoZwIs8jSBs2qtzUnv4h87 cr1hip3d7PNy1WieiGIPjNo3yPmUkPZQFa3zpdhML7+8hbg2XFEypBJ3jt3oql+2 af5BtBCYUMmJVq8bs45/gU0btUvKLb1Mr85+CijPziWnWXKfGk0nicByuwjm8yv5 Wn9ys33/EsjjuMYqn6Kxrmujy3aMsEfLx3+osDFHJAwudKSYk5cY3l4W2WJiQfKU x7WU2YHuzqrAYUpDKhUjs1TrASRy/UojrLsV+4Hl63h8PGK4hMucoI0uBFIH7Ggv QLhJyVrHX/n6z9LrH7Oq6SFTFlaTi7zMdOTkDUcw3AQBmyH8LPbfi3J3V6YPM1mY 5cZuhr9ttITAE6Giin/cI3MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 277879999465018807962528573203939723535561 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-30 04:00:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-30 04:00:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'amypetris.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 934428055895700145818871080148900178552612320567634608592911197464131496829300856262559931635167066269691675238032449844542676641154742175722546352913879033751142423551017568050942686417013806519989310482971384041638337270956660794254864647974270934477243406614779817770229172900727990868040326945681178206625081282838519105391814950895712360304063609162560259088426571029010495694336354159110836101643824357662136997828180816512067600999517909175347297533575645283751619646287908133077501558317987450308229466597689831736850663136507593079866162375392223744705480327394352230668928399243811373899191628214848991386230767069300633913042931613549109920521455423977762703172900066709176895682790809549695874261139973444681663868149290837968069530979390953245914922119870707282958748347553051904628129371787559012975887615646608710307946037230164495475375722471386078646945415552393301628780964741479446178053759029623729090251129346615987251610075634332407308366136478917698601475906294137192555756764824416036717821376868433066868664273821487596400089661959282083454027939273432630757711608335321662799225661664496252483538734295200327363574978691101376577049870544688583742795691611575719424411417852577984855138088867116153900376947 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1b28b6c724a3c5a2e1091bc480cfd7af15587b33 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amypetris.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amypetris.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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