www.formontauto.hu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:81:6d:14:70:33:b6:9d:76:7b:e5:49:2b:82:57:7b:1a:02 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.formontauto.hu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:81:6d:14:70:33:b6:9d:76:7b:e5:49:2b:82:57:7b:1a:02Serial Number (int): 392490561033046803429850457231208323160578
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: d2:dc:02:89:f4:6d:c1:04:14:70:60:91:2d:24:35:1a:b4:aa:09:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 98:82:7e:2d:8e:b4:3a:d6:4b:78:e4:a4:23:0e:8b:b4:f1:e0:c0:c1
Fingerprint (sha256): 3f:15:43:ab:0e:79:3a:94:8f:04:3b:e8:4f:43:2e:b1:e7:86:4a:17:90:1c:dc:99:d2:fa:ca:2b:c6:1c:67:f5
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.formontauto.hu
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.formontauto.hu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
formont.hu.vhost.omnio.cz
formontauto.hu
www.formontauto.hu
formontauto.hu
www.formontauto.hu
Other certificates including the domain name formontauto.hu
(limited to 100 certificates)
www.formontauto.hu
www.formontauto.hu
www.formontauto.hu
www.formontauto.hu
formont.hu.vhost.omnio.cz
www.formontauto.hu
formont.hu.vhost.omnio.cz
www.formontauto.hu
www.formontauto.hu
www.formontauto.hu
www.formontauto.hu
www.formontauto.hu
formont.hu.vhost.omnio.cz
www.formontauto.hu
www.formontauto.hu
www.formontauto.hu
formont.hu.vhost.omnio.cz
formont.hu.vhost.omnio.cz
www.formontauto.hu
www.formontauto.hu
www.formontauto.hu
www.formontauto.hu
formont.hu.vhost.omnio.cz
www.formontauto.hu
formont.hu.vhost.omnio.cz
www.formontauto.hu
www.formontauto.hu
www.formontauto.hu
www.formontauto.hu
www.formontauto.hu
formont.hu.vhost.omnio.cz
www.formontauto.hu
www.formontauto.hu
www.formontauto.hu
formont.hu.vhost.omnio.cz
formont.hu.vhost.omnio.cz
www.formontauto.hu
Certificate
The complete raw certificate details for www.formontauto.hu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGiDCCBXCgAwIBAgISBIFtFHAztp12e+VJK4JXexoCMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjAxMTE2NDZaFw0y MDAzMTkxMTE2NDZaMB0xGzAZBgNVBAMTEnd3dy5mb3Jtb250YXV0by5odTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL2BfwDlOgRd4/kuwiFpNapwxyVD kYNvju3LKVeVX9HL/QTMxdxEycLdz20D55Q9ROdGEOH467SZKF262Lhj8aG0D94j WtYwGzG5CXOZmwWCyQQiCWfAI2R1fnD71KvuxarNEhkiwbOirJoV8WAmEE6ozr8F W4BFV0fDscjKu/0NIEgwHDPp+15JH9rQix+VOJYsJiGa4AITxhVqZZyeO0bnHagd G1m8reZ0LOOOt8VeUEDFc09XuNNWE9LebYGrd9gAn8QTGBgBeSKNbiZ+aumMedbm mM7Olm94B6CT6oMlnRfHngRmw9KOBE9Bm5SlCtmsO0OAmZjOQLqM0B8yn1Jw2cEN FzhwApeXbxX92fI3c42sIcND+dsvW1CXxdroUatkxAv55GDgZVT5rcGozWhsF13U /TkDCDNcCRB/sz4d8qNl63fGTwWGjA3iumspgl4zvodug8GbpdHXjphIJDDu+VfA HhcLXP4GeTVZnaJTcvEVgmMuiZnTLDA9NHlEtM9aOhWsFnUdVno6BucxvkVKxfrI icvez49/VSu14n1EfW1kUvcXGSn661pl8qCdgssjtx13vw92wkdP7M622RhTeb+3 IBHhrQ9Qf+DOD9LczpO/mS13xzqFUcMwoVXYI1V1CP8z9v/Wbbpk7TC9c+kg9Ts7 VbbgmONNQCQaSkD/AgMBAAGjggKTMIICjzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FNLcAon0bcEEFHBgkS0kNRq0qglBMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wSAYDVR0RBEEwP4IZZm9ybW9udC5odS52 aG9zdC5vbW5pby5jeoIOZm9ybW9udGF1dG8uaHWCEnd3dy5mb3Jtb250YXV0by5o dTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUF BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIE gfYEgfMA8QB3APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAABbyM9 IiYAAAQDAEgwRgIhAIbAt4nOCAbHZVvu5cUhmurk2Lt4pTgmRw+ZXs9/ImUzAiEA jIV8xtbKObsLDRTLdwKvUcfp6J6Fjinq7RELsrJI99QAdgCyHgXMi6LNiiBOh2b5 K7mKJSBna9r6cOeySVMt74uQXgAAAW8jPSIWAAAEAwBHMEUCIQD/7gy+xe3ggitt EbLm9ay8ZL7PXNjLfsf5pN8bG38UxQIgKV7cxZvNIm9OHtc7D3507M11J4SF1gNe Dii/nGwRX7YwDQYJKoZIhvcNAQELBQADggEBABj/kUGzv439wXXdUM3reIcwUGK2 6qZgGnJLLl+mQWAOPYEwageEP3FwRqxKkY9vWOxEBzapLbu9LhA1YGg3j+gYkuJr GOwdm/OqjJi98KkDetrakFJFjWRZw2VnC55rIrRUrMPSS5bGMXam0NRNO7l5YV2Y 1J4I8yTcdi0tII70uKZ/xdUJr0d1aqDBvE370Z6bX7iLGGKw4S4zfX9lGxlNtyby rhe687dIwABy/K7yBJR56mArpn8vCLo/4uk5G0OjcRCRM1RUlfa+oDa16ioHcecW XnxtbfFLyBzDXq/sl5+9hihFWtEWwYKnaY0SUVgABRLpL3YcW1JqCwLD/zY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvYF/AOU6BF3j+S7CIWk1 qnDHJUORg2+O7cspV5Vf0cv9BMzF3ETJwt3PbQPnlD1E50YQ4fjrtJkoXbrYuGPx obQP3iNa1jAbMbkJc5mbBYLJBCIJZ8AjZHV+cPvUq+7Fqs0SGSLBs6KsmhXxYCYQ TqjOvwVbgEVXR8OxyMq7/Q0gSDAcM+n7Xkkf2tCLH5U4liwmIZrgAhPGFWplnJ47 RucdqB0bWbyt5nQs4463xV5QQMVzT1e401YT0t5tgat32ACfxBMYGAF5Io1uJn5q 6Yx51uaYzs6Wb3gHoJPqgyWdF8eeBGbD0o4ET0GblKUK2aw7Q4CZmM5AuozQHzKf UnDZwQ0XOHACl5dvFf3Z8jdzjawhw0P52y9bUJfF2uhRq2TEC/nkYOBlVPmtwajN aGwXXdT9OQMIM1wJEH+zPh3yo2Xrd8ZPBYaMDeK6aymCXjO+h26DwZul0deOmEgk MO75V8AeFwtc/gZ5NVmdolNy8RWCYy6JmdMsMD00eUS0z1o6FawWdR1WejoG5zG+ RUrF+siJy97Pj39VK7XifUR9bWRS9xcZKfrrWmXyoJ2CyyO3HXe/D3bCR0/szrbZ GFN5v7cgEeGtD1B/4M4P0tzOk7+ZLXfHOoVRwzChVdgjVXUI/zP2/9ZtumTtML1z 6SD1OztVtuCY401AJBpKQP8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 392490561033046803429850457231208323160578 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-20 11:16:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 11:16:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.formontauto.hu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 773116393021581450665199327682961815538475844541659492152195714518954569143415440227708821572497670294250936599683019121714524487923543011672098114684538217535775195683583578453082825881365581327473539613187919858251270135865008487767370846465390188425783009820713562439086103645627504799303439762859403490754714655203178115475218898369563891138921032393854807873595613169141085271145956278604400365085886293077553343750318178589975173772860001610340378939026440947850164006377335626245084614463709910325016944117469672661674509801274988357153100933818736842134752997382230695191525746927513597602025195019543001355393238111675012285124569205254271100378927858935450561097597142138309242135018278117936906375102302982277006050944694832167762239736706376502800709926284459169071659721741407581973976855171018688036755604177625295302047543723940096176026277371792139875031408263514555165514092809163266700855616985702952047837442464632937698796774487817575137601709571451492338913354486192967172218881780571841843011116578659988162713392738598658189729617502082169628087646359970292131169330259294577855710932326168543813308203653262830061066925886902917057185166795353371533067738588547873984825829764760839647774550524184640046645503 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d2dc0289f46dc104147060912d24351ab4aa0941 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formont.hu.vhost.omnio.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formontauto.hu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.formontauto.hu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f233d2226000004030048304602210086c0b789ce0806c7655beee5c5219aeae4d8bb78a53826470f995ecf7f2265330221008c857cc6d6ca39bb0b0d14cb7702af51c7e9e89e858e29eaed110bb2b248f7d4007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f233d22160000040300473045022100ffee0cbec5ede0822b6d11b2e6f5acbc64becf5cd8cb7ec7f9a4df1b1b7f14c50220295edcc59bcd226f4e1ed73b0f7e74eccd75278485d6035e0e28bf9c6c115fb6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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