archbricktile.com
Issued by Sectigo RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number 67:2e:bc:14:89:33:3b:57:f8:90:74:87:1c:82:bf:62 was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=archbricktile.com
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 67:2e:bc:14:89:33:3b:57:f8:90:74:87:1c:82:bf:62Serial Number (int): 137153143941369055584055772060844212066
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 2e:ba:fc:2d:29:77:a1:98:96:60:aa:10:75:53:45:65:da:12:ac:94
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1
Fingerprint (sha1): 0f:54:3e:31:0d:be:de:f3:92:15:04:dd:33:94:40:c1:b9:5b:7d:d0
Fingerprint (sha256): 3b:ab:69:e8:cb:fa:d6:39:a9:f2:5d:20:d3:67:78:0f:26:10:b2:4e:66:67:03:45:b9:95:e2:f0:e7:49:8b:ea
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCheck the revocation status for certificate archbricktile.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for archbricktile.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
archbricktile.com
www.archbricktile.com
www.archbricktile.com
Other certificates including the domain name archbricktile.com
(limited to 100 certificates)
weekincardano.com
archbricktile.com
dev.presar.app
archbricktile.com
vtapp.zipsol.com.br
www.archbricktile.com
remote.archbricktile.com
archbricktile.com
ajaytech.co
archbricktile.com
uiidigest.com
archbricktile.com
www.archbricktile.com
acripbogota.org
www.archbricktile.com
www.zencoding.net
wishlisted.declanbyrd.co.uk
archbricktile.com
archbricktile.com
archbricktile.com
m.notfollow.me
archbricktile.com
remote.archbricktile.com
remote.archbricktile.com
www.daebreon.com
my.worksy.xyz
wish.kiuglobal.com
gabrielima.com
myroommate.app
censitec.com
apphaus.eu
archbricktile.com
archbricktile.com
archbricktile.com
archbricktile.com
www.jjmgrelhasdealuminio.com
gabrielima.com
www.evedesign.tk
remote.archbricktile.com
app.colombia-startup.com.co
archbricktile.com
www.peachtree-print.com
sharqya.com
remote.archbricktile.com
profile.youate.com
www.variedadesmauro.com
www.optionparent.com
www.archbricktile.com
archbricktile.com
archbricktile.com
dev.presar.app
archbricktile.com
vtapp.zipsol.com.br
www.archbricktile.com
remote.archbricktile.com
archbricktile.com
ajaytech.co
archbricktile.com
uiidigest.com
archbricktile.com
www.archbricktile.com
acripbogota.org
www.archbricktile.com
www.zencoding.net
wishlisted.declanbyrd.co.uk
archbricktile.com
archbricktile.com
archbricktile.com
m.notfollow.me
archbricktile.com
remote.archbricktile.com
remote.archbricktile.com
www.daebreon.com
my.worksy.xyz
wish.kiuglobal.com
gabrielima.com
myroommate.app
censitec.com
apphaus.eu
archbricktile.com
archbricktile.com
archbricktile.com
archbricktile.com
www.jjmgrelhasdealuminio.com
gabrielima.com
www.evedesign.tk
remote.archbricktile.com
app.colombia-startup.com.co
archbricktile.com
www.peachtree-print.com
sharqya.com
remote.archbricktile.com
profile.youate.com
www.variedadesmauro.com
www.optionparent.com
www.archbricktile.com
archbricktile.com
Certificate
The complete raw certificate details for archbricktile.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIQZy68FIkzO1f4kHSHHIK/YjANBgkqhkiG9w0BAQsFADCB jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB MB4XDTIwMDEzMDAwMDAwMFoXDTIwMDQyOTIzNTk1OVowHDEaMBgGA1UEAxMRYXJj aGJyaWNrdGlsZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV V1sFbPASJS5ASyFVVL/juFujdPsAaUtQpbAx+0aKj9j+C5f0+HUtfXvhyHOWt5cV 4mS9GudAIVnlQ0S+9tH7InaiMMcfDbw8iORlOwX6DmiemwK6uZGwZaCvXc1EPGat PxIhPL/viTlZKwzWJkPuSh4S8QgdPXiGiczOizUczuL1JqJemzLKYwxqX/NEOgiK es92ZEHqxKFQdiS1SV1mNE4bpDA8WeZJwfkZ6dZLunoqjIsFQA86PidNRWaRbGdM 5aNBU6Jq12DHuksxjXTqI4IzhlMHK7lAR+bwi9I/uMXdC0ucagJc5g9+K8XbhEUs CUk33duvpkrrDbrOxeorAgMBAAGjggKQMIICjDAfBgNVHSMEGDAWgBSNjF7EVK2K 4Xfpm/mbBeG4AY1h4TAdBgNVHQ4EFgQULrr8LSl3oZiWYKoQdVNFZdoSrJQwDgYD VR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYBBAGyMQECAgcwJTAjBggrBgEFBQcC ARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQIBMIGEBggrBgEFBQcB AQR4MHYwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGln b1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwIwYIKwYBBQUH MAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMDMGA1UdEQQsMCqCEWFyY2hicmlj a3RpbGUuY29tghV3d3cuYXJjaGJyaWNrdGlsZS5jb20wggEEBgorBgEEAdZ5AgQC BIH1BIHyAPAAdgAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAW/z xwQTAAAEAwBHMEUCIBKi/6sf2zsJ1Tdo7Qv/0cIaQUEaO+/g4TQZGIOgkNTGAiEA n9kEQUl9CZE1z+uWc9DyPPCoLzd9Z1laN/2IBgRgnBkAdgBep3P531bA57U2SH3Q SeAyepGaDIShEhKEGHWWgXFFWAAAAW/zxwQCAAAEAwBHMEUCIElaANBdenaazFpA xoRV+EJ9EsttRROPe0dZbaIX4xhnAiEAg4VZZQXOwLmp9Dz0siuEqG7QC88Tz7tr i+aqUC4H2OgwDQYJKoZIhvcNAQELBQADggEBALyhNxDK+Lyoni0iUPkpLxgqw9BG ilUs22Jk5jtqrvp49Bjot/Ex3p5k1h0wAzDr0L0VWF1kIhyCcHCtJVDWBhxus+z7 CXlM/7gSu+oVQ85UQt9ecxt/6Jbuh6ZDhJqNUxmaUSURv0lO1ktgf5ftmL1Dqc11 tzIF06M1nHDRWsJO3J4sklGSIUIRVDGk9cyM0F8dlsxEEr+m15Es+JlAYeU/PbQS QaikSCcq8XUnuyRv7FrbnGBqTkPl6bv6KoU9zgDcfm/g9uqyI3I5lgKN7UKNqlLF AzBfDgt2dKBt1Kb1iOfgNj5SZHnZtbMjLnvRob9L+Rouw1XeICla2pYijFM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVdbBWzwEiUuQEshVVS/ 47hbo3T7AGlLUKWwMftGio/Y/guX9Ph1LX174chzlreXFeJkvRrnQCFZ5UNEvvbR +yJ2ojDHHw28PIjkZTsF+g5onpsCurmRsGWgr13NRDxmrT8SITy/74k5WSsM1iZD 7koeEvEIHT14honMzos1HM7i9SaiXpsyymMMal/zRDoIinrPdmRB6sShUHYktUld ZjROG6QwPFnmScH5GenWS7p6KoyLBUAPOj4nTUVmkWxnTOWjQVOiatdgx7pLMY10 6iOCM4ZTByu5QEfm8IvSP7jF3QtLnGoCXOYPfivF24RFLAlJN93br6ZK6w26zsXq KwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 137153143941369055584055772060844212066 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'archbricktile.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18852584067893610048325695867362446026664976289779588432921233846212219424707482620198197903896034149652984777284565213313691656628578677924894723489855464153282884124226751615979478165785453961321231051393617231605508785994301883117163203171075766876187104176168475142037007270765375230900157501847764268779697710845216710928494394334167010652270140439710121318170035995135022349253675282947815269260071198359937651297828217298220984540525203568504056941152085299047367058036321268246562022548669615893019882804930108050240054287431220520267732701378435507645828021386500382881466449223585085998147673499127842728491 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2ebafc2d2977a1989660aa1075534565da12ac94 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archbricktile.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archbricktile.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ff3c704130000040300473045022012a2ffab1fdb3b09d53768ed0bffd1c21a41411a3befe0e134191883a090d4c60221009fd90441497d099135cfeb9673d0f23cf0a82f377d67595a37fd880604609c190076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ff3c7040200000403004730450220495a00d05d7a769acc5a40c68455f8427d12cb6d45138f7b47596da217e318670221008385596505cec0b9a9f43cf4b22b84a86ed00bcf13cfbb6b8be6aa502e07d8e8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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