connect.whitewaterkennels.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f8:90:3e:97:14:29:ed:31:43:0c:72:47:bd:69:16:20:0c was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=connect.whitewaterkennels.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f8:90:3e:97:14:29:ed:31:43:0c:72:47:bd:69:16:20:0cSerial Number (int): 345918618609713124958941949212673021714444
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4d:89:7c:66:9c:2c:41:30:8f:c3:60:d2:26:03:70:96:08:a9:fb:12
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b1:a5:91:a7:03:eb:94:1c:ef:c8:e0:93:56:c8:d0:d6:e5:2d:bb:7f
Fingerprint (sha256): 3d:35:fa:30:bc:a5:73:a2:26:b2:90:73:53:59:06:b3:ef:ce:e3:0b:b7:1c:d2:5c:fc:dc:19:22:3f:25:e2:94
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate connect.whitewaterkennels.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for connect.whitewaterkennels.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
connect.alltres.com
connect.erconsult.com.au
connect.evexipel.com
connect.gobooffice.net
connect.ventureconceptgroup.com
connect.whitewaterkennels.com
connect.erconsult.com.au
connect.evexipel.com
connect.gobooffice.net
connect.ventureconceptgroup.com
connect.whitewaterkennels.com
Other certificates including the domain name whitewaterkennels.com
(limited to 100 certificates)
dmb.cifpb.com
clientpay.cndcoh.org
support.milcasastore.com
www.whitewaterkennels.com
billing.novamomentum.net
invoices.square28.com
www.whitewaterkennels.com
billing.novamomentum.net
connect.whitewaterkennels.com
whitewaterkennels.com
billing.diventuremarketing.com
my.ssdweb.in
billing.swyftlight.com
pay.avproglobal.com
billing.northerlycreative.com
whitewaterkennels.com
billing.clusterpos.com
ses.shivangtools.com
overviewbooks.logikos.com
whitewaterkennels.com
dealer.osgikenusa.com
billing.agilitypayments.com
ac.digisapi.com
acc.deogps.com
guest.letsseeit.com
evolucioni3.evolucioni3.com
connect.jsc-hokkaido.jp
www.whitewaterkennels.com
whitewaterkennels.com
billing.swyftlight.com
ketnoi.suatuoibavijsc.com
connect.legrid.ca
whitewaterkennels.com
connect.damianknowles.com
acc.deogps.com
support.goldenhouse.club
accounts.albastakiuae.com
billing.swyftlight.com
books.buildfloor.in
clientpay.cndcoh.org
support.milcasastore.com
www.whitewaterkennels.com
billing.novamomentum.net
invoices.square28.com
www.whitewaterkennels.com
billing.novamomentum.net
connect.whitewaterkennels.com
whitewaterkennels.com
billing.diventuremarketing.com
my.ssdweb.in
billing.swyftlight.com
pay.avproglobal.com
billing.northerlycreative.com
whitewaterkennels.com
billing.clusterpos.com
ses.shivangtools.com
overviewbooks.logikos.com
whitewaterkennels.com
dealer.osgikenusa.com
billing.agilitypayments.com
ac.digisapi.com
acc.deogps.com
guest.letsseeit.com
evolucioni3.evolucioni3.com
connect.jsc-hokkaido.jp
www.whitewaterkennels.com
whitewaterkennels.com
billing.swyftlight.com
ketnoi.suatuoibavijsc.com
connect.legrid.ca
whitewaterkennels.com
connect.damianknowles.com
acc.deogps.com
support.goldenhouse.club
accounts.albastakiuae.com
billing.swyftlight.com
books.buildfloor.in
Certificate
The complete raw certificate details for connect.whitewaterkennels.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgISA/iQPpcUKe0xQwxyR71pFiAMMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMDYwNTAwMzJaFw0y MDA0MDUwNTAwMzJaMCgxJjAkBgNVBAMTHWNvbm5lY3Qud2hpdGV3YXRlcmtlbm5l bHMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP87CT+MZD14 vTpbO9qWyCor5cWUOj/wRfRcqTMFP9EHNGR7CKaANL1idO1h33Clbsx+SvRP6GRu XeeVILjguaqozwjho0Vb1VGJWiZyaobdMQiDgkE02TrdNVHevP2iz9F7oteXPgNI Lvt9Divbz1SxsOJwIOylsWd0JbViw/Hj/516KF/9gqtLP3xJnqmVdF+pPmTIOqt2 slU5gTu0iKyu9wm3JtvmfbVpnXN/W/v2HDqNJJE+CbRkKZCI+E4FxgZvHQjMtvHF 0dh+HtFrHRYetrMM6UAK+g//DVLzVWDVDfMwMY8e8utjepeAlFTTBdQhAT/hBqMm U51/dmD/NwIDAQABo4IC8zCCAu8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRNiXxm nCxBMI/DYNImA3CWCKn7EjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMIGoBgNVHREEgaAwgZ2CE2Nvbm5lY3QuYWxsdHJl cy5jb22CGGNvbm5lY3QuZXJjb25zdWx0LmNvbS5hdYIUY29ubmVjdC5ldmV4aXBl bC5jb22CFmNvbm5lY3QuZ29ib29mZmljZS5uZXSCH2Nvbm5lY3QudmVudHVyZWNv bmNlcHRncm91cC5jb22CHWNvbm5lY3Qud2hpdGV3YXRlcmtlbm5lbHMuY29tMEwG A1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEW Gmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB 8gDwAHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFveXDL/QAA BAMASDBGAiEAmoPalTOvJQCFf0cd0f+Mjuv4yfpaIJnBdS91UJQXBDoCIQDNUwoL Kql0sPRI9ehLJs866VlP0C+idOX3USl9s5sOeAB1AG9Tdqwx8DEZ2JkApFEV/3cV HBHZAsEAKQaNsgiaN9kTAAABb3lwzcYAAAQDAEYwRAIgMtcUqLI63tTrUddUOebm a9HM+gNBmdJFrtcN7gxQ51wCIEvPs0ouD2hN8D7QJ+dc0LQqBOlPxhp5c7zkq8WE i2/WMA0GCSqGSIb3DQEBCwUAA4IBAQBX1tzo3PElZ9NGyb/yFgVwL6IuKwSvTJMU TmBS/KIcEITeixwd/FnfFVfy9/ASbcaLL12BQMQwExxm6tLm21jvtodoLSg/foW5 WBPQWOiAu/NCnzHnV+N+7oNcrTSEjFyGKV/XhQntKOGKzTLrTrtZKnPYhwozNckS 81ZhMda61mlQChD9Xy28DqZfLniJz0NvyHWfcP42m+bVj0EU+U7lCMPbZ+3C7rO7 QTYichkx1TjE4UrXgaQz4GeQF9hMjNdmBeadLDyYYYWlZsIrosy+1M17OH1/SKn/ zbuXBTMnL/b3KIFtDLwbCOc5uyfxgw4lqgF+dnKEqMU0TKqnrM1J -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP87CT+MZD14vTpbO9qW yCor5cWUOj/wRfRcqTMFP9EHNGR7CKaANL1idO1h33Clbsx+SvRP6GRuXeeVILjg uaqozwjho0Vb1VGJWiZyaobdMQiDgkE02TrdNVHevP2iz9F7oteXPgNILvt9Divb z1SxsOJwIOylsWd0JbViw/Hj/516KF/9gqtLP3xJnqmVdF+pPmTIOqt2slU5gTu0 iKyu9wm3JtvmfbVpnXN/W/v2HDqNJJE+CbRkKZCI+E4FxgZvHQjMtvHF0dh+HtFr HRYetrMM6UAK+g//DVLzVWDVDfMwMY8e8utjepeAlFTTBdQhAT/hBqMmU51/dmD/ NwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 345918618609713124958941949212673021714444 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 05:00:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-05 05:00:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connect.whitewaterkennels.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23353707018305757339177922038236059621945301997937050174157588089492662791140454831960623073648830503587352983385803798274414658261812581119098576293323312964960203578042536709326166189991719079544645371160148449472801289697413891760873811424545740557293629665205071809638041127372533067433167364080463106745997588075652367370613856947627236794082561334447429584841264699134311030504399763241486087541586988787560854329922718075991499187535596951157106516459557587752974539929108400272004636841637645946101212587914443702812673555527853539022493262163311437340530318403603449052197996259354263272940221132714805362487 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4d897c669c2c41308fc360d22603709608a9fb12 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.alltres.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.erconsult.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.evexipel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.gobooffice.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ventureconceptgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.whitewaterkennels.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f7970cbfd00000403004830460221009a83da9533af2500857f471dd1ff8c8eebf8c9fa5a2099c1752f75509417043a022100cd530a0b2aa974b0f448f5e84b26cf3ae9594fd02fa274e5f751297db39b0e780075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f7970cdc60000040300463044022032d714a8b23aded4eb51d75439e6e66bd1ccfa034199d245aed70dee0c50e75c02204bcfb34a2e0f684df03ed027e75cd0b42a04e94fc61a7973bce4abc5848b6fd6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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