stats.avidratings.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1f:c9:db:59:16:ad:a4:6c:68:27:a0:c6:62:06:f4:ff:b8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stats.avidratings.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1f:c9:db:59:16:ad:a4:6c:68:27:a0:c6:62:06:f4:ff:b8
Serial Number (int): 272153924916925833507723514424108174868408
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 58:dd:97:1e:e1:2c:70:7e:44:8e:c4:e0:ad:9e:b3:f2:1d:d6:cf:d7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 02:07:75:e9:0a:73:ce:4c:ff:47:23:0e:4f:27:e7:a7:d0:05:9e:ea
Fingerprint (sha256): 2e:7d:e7:e5:3a:f0:18:54:d4:14:a6:d5:1a:99:65:5e:27:70:8e:4a:80:d9:39:3b:74:5f:90:6c:fe:3f:b6:6d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stats.avidratings.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stats.avidratings.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stats.avidratings.com

Other certificates including the domain name avidratings.com

(limited to 100 certificates)
clients.avidratings.com
stats.avidratings.com
dev.gotourhd.com
stats.avidratings.com
productreview.rc.avidratings.com
gotour.api.avidratings.com
gotour.api.avidratings.com
avidratings.com
go.avidratings.com
gotour.api.avidratings.com
groove.ehlinks.com
groove.simondata.com
gotour.api.avidratings.com
stats.avidratings.com
gitlab.avidratings.com
*.avidratings.com
prod.20.slot.cdn.salesforce-communities.com
clients.rc.avidratings.com
prod.20.slot.cdn.salesforce-communities.com
survey.avidratings.com
dev.avidratings.com
prod.20.slot.cdn.salesforce-communities.com
ny-digocean-nagios01.avidratings.com
prod.20.slot.cdn.salesforce-communities.com
webmail.avidratings.com
avidratings.com
gitlab.avidratings.com
groove.robinpowered.com
avidratings.com
embed.dev.avidratings.com
lb02.avidratings.com
*.avidratings.com
avidratings.com
groove.swivl.com
groove.lyric.com
www.avidratings.com
wp.avidratings.com
gotour.api.dev.avidratings.com
gitlab.avidratings.com
groove.kiva.org
unsubscribe.dev.avidratings.com
prod.20.slot.cdn.salesforce-communities.com
dev.gotourhd.com
logos.avidratings.com
productreview.rc.avidratings.com
groove.ehlinks.com
gotour.api.dev.avidratings.com
prod.20.slot.cdn.salesforce-communities.com
productreview.avidratings.com
*.avidratings.com
groove.jebbit.com
prod.20.slot.cdn.salesforce-communities.com
ny-digocean-nagios01.avidratings.com
cdn.avidratings.com
productreview.dev.avidratings.com
logos.avidratings.com
gitlab.avidratings.com
groove.jebbit.com
cdn.avidratings.com
admin.avidratings.com
prod.20.slot.cdn.salesforce-communities.com
prod.20.slot.cdn.salesforce-communities.com
groove.adpearance.com
logo.avidratings.com
stats.avidratings.com
stats.avidratings.com
gotour.api.dev.avidratings.com
wba.avidratings.com
groove.cloudleaf.io
api.gotourhd.com
gitlab.avidratings.com
dev.gotourhd.com
api.avidratings.com
gitlab.avidratings.com
gotour.api.dev.avidratings.com
avidratings.com
*.avidratings.com
api.gotourhd.com
api.gotourhd.com
avidratings.com
www.avidratings.com
avidratings.com
prod.20.slot.cdn.salesforce-communities.com
groove.kiva.org
prod.20.slot.cdn.salesforce-communities.com
groove.trustarc.com
unsubscribe.avidratings.com
prod.20.slot.cdn.salesforce-communities.com
stats.avidratings.com
stats.avidratings.com
rc.clients.avidratings.com
api.dev.avidratings.com
prod.20.slot.cdn.salesforce-communities.com
prod.20.slot.cdn.salesforce-communities.com
rc.conduit.avidratings.com
prod.20.slot.cdn.salesforce-communities.com
prod.20.slot.cdn.salesforce-communities.com
branded.grooveapp.com
api.avidratings.com
groove.g2.com

Certificate

The complete raw certificate details for stats.avidratings.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAx/J21kWraRsaCegxmIG9P+4MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMjgxMTU1MDZaFw0x
OTA1MjkxMTU1MDZaMCAxHjAcBgNVBAMTFXN0YXRzLmF2aWRyYXRpbmdzLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMdyaQca2IzTRi6tXmxm1nme
SFxdoHLGOeSEW5s1dk5n+F4oUcC0H+x2vYJxh97Nbp5RrI0jk5IIfmY+B5THrTXT
eSGJ5aXIGLMhoUvx+Bv6ElyElm4C6RDmm+mSSn3O0dTWIIzkKe+piSqUhe1xmd8T
YzeiSfQ1J/0ijoBE2OYqO7sgEACYCYekSr7Ef3h3vjNwMcEjDlTsyJEOfUXofb6e
9k83LvbPzEWGlVwoYrYiRB60a0wXn02yobUw7IzS5rX+8QeXA3gPRcPJtmsCnpeb
4qJZO7tkLRwNUjyLxqZBnNyPqt0WywHsE7FAsxdTWJCYP/wWhnCRn9yfKRAoxxEC
AwEAAaOCAmowggJmMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUWN2XHuEscH5EjsTg
rZ6z8h3Wz9cwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzAgBgNVHREEGTAXghVzdGF0cy5hdmlkcmF0aW5ncy5jb20wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy
APAAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWk0LDX+AAAE
AwBHMEUCIQCvAzrcmWdmJvX+IUION99jP4h6CHt+7O7R0lhr2hkVUwIgNgB9RIdh
2DUKY10u1L0YFXvD7E22OXK1lT6dVRl4CS8AdgApPFGWVMg5ZbqqUPxYB9S3b79Y
eily3KTDDPTlRUf0eAAAAWk0LDYCAAAEAwBHMEUCIQDfHesg49ez8wrbyhP1PbIw
LfaOiOwnYo6kgrpfGCrR7wIgaP1wW5rSnWksOdPwtXT8hWQEFHvFvyfgPBNLYiXN
9tswDQYJKoZIhvcNAQELBQADggEBAAv7FuKzFG35LHX7hBpXw6iCup/4ZlmWBk+x
2GdAN3K6F2gQIYMCL3EFu/8tafH4iJXrUi07dtW5R8XkHoQcuimmmeQk9ckD4g8q
c32jX4GKrKCKolCNSLcFO8ZgcjUCsV3t3xsksCS7bX/V6UTXA0ovlInuEukIuuWw
iezxq2zqUuUuegw03kpHpPT+525+3d/Ig2XI/bidbAMFIDDhWMQgIpk2g0p5nyjr
SWitMDS6nbjKpb1HPzRbYKoivqxlSC2LQ/W8yVzny8mHZ1bWtzSFB6nFlSoaTZCV
g5OKP8cV+bQJDWw4pgcmSeMYg4G7vQxdpe3gbxL+jXy8f/LwqNc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3JpBxrYjNNGLq1ebGbW
eZ5IXF2gcsY55IRbmzV2Tmf4XihRwLQf7Ha9gnGH3s1unlGsjSOTkgh+Zj4HlMet
NdN5IYnlpcgYsyGhS/H4G/oSXISWbgLpEOab6ZJKfc7R1NYgjOQp76mJKpSF7XGZ
3xNjN6JJ9DUn/SKOgETY5io7uyAQAJgJh6RKvsR/eHe+M3AxwSMOVOzIkQ59Reh9
vp72Tzcu9s/MRYaVXChitiJEHrRrTBefTbKhtTDsjNLmtf7xB5cDeA9Fw8m2awKe
l5violk7u2QtHA1SPIvGpkGc3I+q3RbLAewTsUCzF1NYkJg//BaGcJGf3J8pECjH
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272153924916925833507723514424108174868408
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-28 11:55:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-29 11:55:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stats.avidratings.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25177840492470691542459907232215717994178522776241003666230085502670363778366240049884544041841362315659879041741276904016818695037522488655292293740709820679664390784667186434300105331673728639344848765289414414447314145972787999234844481794153193557395924208679616411730662711925746009676530757505744273054154123810111270067286206483849590543937859132841044258799345125522015176193701459318025223550793295812410520508925883910372635547602381042694543062861606360651769107237232797951912486507063882955044717179308037825257290137988437835385106813026885378220085146668643088627156975896165899195133136673859177072401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58dd971ee12c707e448ec4e0ad9eb3f21dd6cfd7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.avidratings.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169342c35fe0000040300473045022100af033adc99676626f5fe21420e37df633f887a087b7eeceed1d2586bda191553022036007d448761d8350a635d2ed4bd18157bc3ec4db63972b5953e9d551978092f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169342c36020000040300473045022100df1deb20e3d7b3f30adbca13f53db2302df68e88ec27628ea482ba5f182ad1ef022068fd705b9ad29d692c39d3f0b574fc856404147bc5bf27e03c134b6225cdf6db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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