astrafit.com
Issued by R10
About this certificate
This digital certificate with serial number 04:b0:80:fa:4e:e9:a9:5a:3e:c5:aa:ec:9b:af:2b:4f:30:03 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=astrafit.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:b0:80:fa:4e:e9:a9:5a:3e:c5:aa:ec:9b:af:2b:4f:30:03Serial Number (int): 408510281163341782111758852117037979742211
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: cb:3c:90:8f:83:94:82:cb:50:56:1a:d8:bf:f2:38:19:23:27:6e:02
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8
Fingerprint (sha1): 66:f7:8d:44:f1:76:c7:a3:ca:b9:25:f4:74:43:f1:45:93:4b:da:db
Fingerprint (sha256): 3e:38:d9:99:39:78:84:e8:17:85:d9:cb:50:32:7a:50:82:65:6a:cf:f3:4d:15:34:e9:25:c3:ab:87:0a:50:c7
Issuing Certificate URL: http://r10.i.lencr.org/
Revocation information
OCSP Server: http://r10.o.lencr.orgCheck the revocation status for certificate astrafit.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for astrafit.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
astrafit.com
www.astrafit.com
www.astrafit.com
Other certificates including the domain name astrafit.com
(limited to 100 certificates)
devsizer.astrafit.com
www.mypark.pro
devsizer.astrafit.com
register.spectreballistics.com
devapi.astrafit.com
tls.automattic.com
tls.automattic.com
www.sylvari.it
devapi.astrafit.com
astrafit.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
devapi.astrafit.com
tls.automattic.com
devsizer.astrafit.com
tls.automattic.com
*.astrafit.com
auth.astrafit.com
assistant2.astrafit.com
as-ta.net
tls.automattic.com
tls.automattic.com
astrafit.com
tls.automattic.com
www.astrafit.com
*.astrafit.com
devsizer.astrafit.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
www.astrafit.com
devapi.astrafit.com
astrafit.com
tls.automattic.com
astrafit.com
devsizer.astrafit.com
devapi.astrafit.com
tls.automattic.com
www.biometrical.no
astrafit.com
devapi.astrafit.com
devsizer.astrafit.com
diseasesovertime.com
tls.automattic.com
tls.automattic.com
www.astrafit.com
tls.automattic.com
astrafit.com
www.astrafit.com
devapi1.astrafit.com
tls.automattic.com
maguro.yokoe.me
www.astrafit.com
astrafit.com
www.astrafit.com
tls.automattic.com
devapi.astrafit.com
devsizer.astrafit.com
en.astrafit.com
astrafit.com
*.astrafit.com
astrafit.com
app.borbalo.ge
devsizer.astrafit.com
devapi.astrafit.com
astrafit.com
astrafit.com
devsizer.astrafit.com
dev.myhelm.io
devapi.astrafit.com
devapi.astrafit.com
www.astrafit.com
astoryofseasons.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
astrafit.com
devapi.astrafit.com
tls.automattic.com
astrafit.com
tls.automattic.com
devsizer.astrafit.com
astrafit.com
devwidget.astrafit.com
devsizer.astrafit.com
devapi.astrafit.com
tls.automattic.com
devapi.astrafit.com
tls.automattic.com
leadgeneratorbot.com
tls.automattic.com
app.borbalo.ge
astrafit.com
*.astrafit.com
www.astrafit.com
tls.automattic.com
tls.automattic.com
devsizer.astrafit.com
www.mypark.pro
devsizer.astrafit.com
register.spectreballistics.com
devapi.astrafit.com
tls.automattic.com
tls.automattic.com
www.sylvari.it
devapi.astrafit.com
astrafit.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
devapi.astrafit.com
tls.automattic.com
devsizer.astrafit.com
tls.automattic.com
*.astrafit.com
auth.astrafit.com
assistant2.astrafit.com
as-ta.net
tls.automattic.com
tls.automattic.com
astrafit.com
tls.automattic.com
www.astrafit.com
*.astrafit.com
devsizer.astrafit.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
www.astrafit.com
devapi.astrafit.com
astrafit.com
tls.automattic.com
astrafit.com
devsizer.astrafit.com
devapi.astrafit.com
tls.automattic.com
www.biometrical.no
astrafit.com
devapi.astrafit.com
devsizer.astrafit.com
diseasesovertime.com
tls.automattic.com
tls.automattic.com
www.astrafit.com
tls.automattic.com
astrafit.com
www.astrafit.com
devapi1.astrafit.com
tls.automattic.com
maguro.yokoe.me
www.astrafit.com
astrafit.com
www.astrafit.com
tls.automattic.com
devapi.astrafit.com
devsizer.astrafit.com
en.astrafit.com
astrafit.com
*.astrafit.com
astrafit.com
app.borbalo.ge
devsizer.astrafit.com
devapi.astrafit.com
astrafit.com
astrafit.com
devsizer.astrafit.com
dev.myhelm.io
devapi.astrafit.com
devapi.astrafit.com
www.astrafit.com
astoryofseasons.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
astrafit.com
devapi.astrafit.com
tls.automattic.com
astrafit.com
tls.automattic.com
devsizer.astrafit.com
astrafit.com
devwidget.astrafit.com
devsizer.astrafit.com
devapi.astrafit.com
tls.automattic.com
devapi.astrafit.com
tls.automattic.com
leadgeneratorbot.com
tls.automattic.com
app.borbalo.ge
astrafit.com
*.astrafit.com
www.astrafit.com
tls.automattic.com
tls.automattic.com
devsizer.astrafit.com
Certificate
The complete raw certificate details for astrafit.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE+zCCA+OgAwIBAgISBLCA+k7pqVo+xarsm68rTzADMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTAwHhcNMjQwNjI0MjMwMjMyWhcNMjQwOTIyMjMwMjMxWjAXMRUwEwYDVQQD Ewxhc3RyYWZpdC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx /4DC+8Gk2XylaBnnmWs7TaA4GZbTT+Ptc0BlaeMNyQHh+s7m5lUgPfkMm5a7Y4LT MGF5MoKLEZLk6tM9ojI46Mb2uznUpQhAwN7azYs1qe5T9jaRRc7VeT7C7acAQ3ru P1wol80s9xWZyGAnkNx5vFq6hzP8/X9XVXYq+uZD2j2toaW3qs+0nccGHJEuf0BT 2J7WfLMhf3DLHAuvO0GNprxfYsp9BXEfpIG1sc/wh7B5N7Pwn1osfMfA4Ar+Igbj ELZ0sgAR0WH0kVC2AgbnNBLXlEmXrHTMd4rLkmkzzB2ywoTaDkttZCregOi8w9Rw NFhnQQ0V1fgizHW4D5zzAgMBAAGjggIjMIICHzAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFMs8kI+DlILLUFYa2L/yOBkjJ24CMB8GA1UdIwQYMBaAFLu8w0el5LypxsOk cgwQjaI14cjoMFcGCCsGAQUFBwEBBEswSTAiBggrBgEFBQcwAYYWaHR0cDovL3Ix MC5vLmxlbmNyLm9yZzAjBggrBgEFBQcwAoYXaHR0cDovL3IxMC5pLmxlbmNyLm9y Zy8wKQYDVR0RBCIwIIIMYXN0cmFmaXQuY29tghB3d3cuYXN0cmFmaXQuY29tMBMG A1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAPxdL T9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGQTLOJ5QAABAMASDBGAiEA mISkEDLn5w8GXavwWqOmEMCfR7bmPc/kSydgxLQsIiUCIQDeG9IgyjINM6I3nPWZ P44ACfrZzaYBjrb42LdBLalQRQB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7 v6s52IRzAAABkEyziecAAAQDAEcwRQIhAP41M3qDHATkYAHsqGvRv4Cl9Y02xQ55 dXc50hhZ/yMUAiAi0NhRiCy0xETw2SRvVgcKk4HFbCg56OdLshphsiVErjANBgkq hkiG9w0BAQsFAAOCAQEALLLhLpNLyFZ9qfsStwjdn2PV14TXTLcWfX55f67pXRrH eOziqJgcWBDXGt4aYAbSSjdW4J5PL5uu90nC8Uww2PK/X3pGmeTIDbAh5Tn3xPPq fk53h4qZlx7W9WCGx+Bsr+ZSsTf/9JGQ+w+m/BDBB0qWso/opbZiT4Jq1fhHlrwf AirYw7KJwi+4MqSsGlNVHLCbXWPtGwHcIN1SKmTOKN0CKAkDLBkVzIK33kvieOaM nNT4HMPEeyxac6k5eMAxwZf/q2jWyKjIZmWQxu9ySCWPSzf8Z/9N7Gj3BFJWHRG1 1D2d8pNhMANEgndmlK+Wuhkw48ffXyYOHAOyUtpRrw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf+AwvvBpNl8pWgZ55lr O02gOBmW00/j7XNAZWnjDckB4frO5uZVID35DJuWu2OC0zBheTKCixGS5OrTPaIy OOjG9rs51KUIQMDe2s2LNanuU/Y2kUXO1Xk+wu2nAEN67j9cKJfNLPcVmchgJ5Dc ebxauocz/P1/V1V2KvrmQ9o9raGlt6rPtJ3HBhyRLn9AU9ie1nyzIX9wyxwLrztB jaa8X2LKfQVxH6SBtbHP8IeweTez8J9aLHzHwOAK/iIG4xC2dLIAEdFh9JFQtgIG 5zQS15RJl6x0zHeKy5JpM8wdssKE2g5LbWQq3oDovMPUcDRYZ0ENFdX4Isx1uA+c 8wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 408510281163341782111758852117037979742211 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 23:02:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-22 23:02:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'astrafit.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22470173191900238344219294143244184428733178610025860127018397191166919963373291240388746097067831587416602420905879432027987202656689828269945702185426579514793830700570439259071228315153078953015768546488120099712940876267576921554878171900659642131673187018109468101805665198126863076681145389698080528076636269985809158182516660813778237033033682434029529657557886886954899658016982505780835991345043253487486921162503588992116324495610126921415240346353495788344219374895095762169829442242907419611915180271296490694854730618201288808848050639490681456396985272045322747172029459917059528729334242134036573035763 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cb3c908f839482cb50561ad8bff2381923276e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrafit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astrafit.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e000001904cb389e500000403004830460221009884a41032e7e70f065dabf05aa3a610c09f47b6e63dcfe44b2760c4b42c2225022100de1bd220ca320d33a2379cf5993f8e0009fad9cda6018eb6f8d8b7412da9504500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001904cb389e70000040300473045022100fe35337a831c04e46001eca86bd1bf80a5f58d36c50e79757739d21859ff2314022022d0d851882cb4c444f0d9246f56070a9381c56c2839e8e74bb21a61b22544ae . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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