bizwatt.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0a:65:f9:fd:87:4f:00:6a:6e:f0:74:63:b5:5b:92:75 was issued on by Amazon.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bizwatt.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:65:f9:fd:87:4f:00:6a:6e:f0:74:63:b5:5b:92:75Serial Number (int): 13821772347153585123312653870279922293
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: dd:25:7c:9a:69:8d:79:d7:d4:c0:25:8b:be:5c:52:be:63:06:ed:ed
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 48:14:e4:c5:ef:13:b8:52:f2:6d:8e:4d:44:dd:62:5a:9c:cf:26:ff
Fingerprint (sha256): 49:95:24:96:15:5e:83:f8:38:f5:73:6a:94:fd:93:e8:1c:b3:40:b3:ea:d4:12:da:77:43:2c:d2:5c:f9:32:b6
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate bizwatt.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bizwatt.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bizwatt.com
www.bizwatt.com
qfactor.bizwatt.com
qfdev.bizwatt.com
core7.bizwatt.com
www.bizwatt.com
qfactor.bizwatt.com
qfdev.bizwatt.com
core7.bizwatt.com
Other certificates including the domain name bizwatt.com
(limited to 100 certificates)
support.hookseo.com
helpdesk.verowave.com
helpdesk.verowave.com
bizwatt.com
bizwatt.com
www.support3d.nl
bizwatt.com
helpdesk.verowave.com
bizwatt.com
support.bizwatt.com
support.hookseo.com
support.itelcom.org
new.bizwatt.com
qfactor.bizwatt.com
assistance.follosoft.com
*.bizwatt.com
desk.link4.co
bizwatt.com
support.cyrillcase.com
bizwatt.com
bizwatt.com
bizwatt.com
helpdesk.verowave.com
support.hookseo.com
bizwatt.com
www.support.templogic.biz
core7.bizwatt.com
qfactor.bizwatt.com
bizwatt.com
helpdesk.verowave.com
new.bizwatt.com
support.firstpagelife.com
bizwatt.com
support.hsbintel.com
bizwatt.com
support.atklass.com
bizwatt.com
bizwatt.com
bizwatt.com
assistance.follosoft.com
helpdesk.verowave.com
helpdesk.verowave.com
bizwatt.com
bizwatt.com
www.support3d.nl
bizwatt.com
helpdesk.verowave.com
bizwatt.com
support.bizwatt.com
support.hookseo.com
support.itelcom.org
new.bizwatt.com
qfactor.bizwatt.com
assistance.follosoft.com
*.bizwatt.com
desk.link4.co
bizwatt.com
support.cyrillcase.com
bizwatt.com
bizwatt.com
bizwatt.com
helpdesk.verowave.com
support.hookseo.com
bizwatt.com
www.support.templogic.biz
core7.bizwatt.com
qfactor.bizwatt.com
bizwatt.com
helpdesk.verowave.com
new.bizwatt.com
support.firstpagelife.com
bizwatt.com
support.hsbintel.com
bizwatt.com
support.atklass.com
bizwatt.com
bizwatt.com
bizwatt.com
assistance.follosoft.com
Certificate
The complete raw certificate details for bizwatt.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgIQCmX5/YdPAGpu8HRjtVuSdTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA4MjQwMDAwMDBaFw0yMDA5MjQx MjAwMDBaMBYxFDASBgNVBAMTC2JpendhdHQuY29tMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAxZrvIjfK+usRujlK+VpZBY+MeMtvG3CTN+HN16T17g/9 okDZd4uuSVC743c5vu7kDBh2gtrc12ftz0N3JsPC3DgAmMMkumVTgcR7O28Fhu8L DNkl98uvogB/8OogV9Dq/T3DFAsZMsGib2gBhVxF/b6vnO1gZO/kc3BDuTmbPKvO k1XnEgIqq2p7cqcCEJRJP/oR5EB7xXw4lY3trhFQc949dsnmdyd5cx7q1WzRno4n o7VDV/MOaTJq+QCagrODhmuAtx5QxklrayECklc6T3fzFR2KBNU47TqhwBHGByqP GDJVQHd+2xuXuwmnf95fjvlOaYFEPhoiEyWQ5WwlRQIDAQABo4ICwjCCAr4wHwYD VR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFN0lfJppjXnX 1MAli75cUr5jBu3tMGIGA1UdEQRbMFmCC2JpendhdHQuY29tgg93d3cuYml6d2F0 dC5jb22CE3FmYWN0b3IuYml6d2F0dC5jb22CEXFmZGV2LmJpendhdHQuY29tghFj b3JlNy5iaXp3YXR0LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2Nh MWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG /WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRw Oi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6 Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8E AjAAMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA7ku9t3XOYLrhQmkfq+GeZqMP fl+wctiDAMR7iXqo/csAAAFsxJFxqAAABAMARzBFAiEAmQ6BK7ZY2M09iLsLYEji MgfvhWByLAm296gKh/AhBm0CIGa9DqJJKVtSVqZHN59VVqa3OUrT2fSINZT4uA+r 5G11AHUAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFsxJFx9gAA BAMARjBEAiBMqMxKCJU2PPd9KkvK1UihbHGajnonKjPkpNZ15P8d2AIgWTurBzIV m7i7uQgin3ccytY/tNJ91ShYxXlSsh/yMyQwDQYJKoZIhvcNAQELBQADggEBAECW mJC/+yY3UlcT/z/rwCwniq1SCi9MXQz0c6K/CjAG6mwhBOq7JpvicZKaw+YtsEtt DU9NoEQln8Pi9biS/k72Mm0/u6SyXZqlqwc9HtvXs3HLxR7XwzTmrV/g8N1w9mq9 4MVEJ7Mid0bRwinrMfwMf5r1/Zhtn+//q4aZ3Jxf4iK/6cdfq10kOb74A73eLict 4+zlkxus1ARo0cTQNWv/1p1yg5Ps8MKDwpulEXsYnKbFzG4DJbN/qkvPzSbF5md3 vDsFXa5dAak0w5cu58cFRjbAfmcPtLdQRmX109G1yLjG7VIUiO3h/YRlaSyc27pE ATI7Q3LuVpHIU2tj7f8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZrvIjfK+usRujlK+VpZ BY+MeMtvG3CTN+HN16T17g/9okDZd4uuSVC743c5vu7kDBh2gtrc12ftz0N3JsPC 3DgAmMMkumVTgcR7O28Fhu8LDNkl98uvogB/8OogV9Dq/T3DFAsZMsGib2gBhVxF /b6vnO1gZO/kc3BDuTmbPKvOk1XnEgIqq2p7cqcCEJRJP/oR5EB7xXw4lY3trhFQ c949dsnmdyd5cx7q1WzRno4no7VDV/MOaTJq+QCagrODhmuAtx5QxklrayECklc6 T3fzFR2KBNU47TqhwBHGByqPGDJVQHd+2xuXuwmnf95fjvlOaYFEPhoiEyWQ5Wwl RQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13821772347153585123312653870279922293 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-24 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bizwatt.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24945346938350236282166003430873390949520705389565051251559798573605299329168568045657445715849867023401947993935302498174865745083153803035112879878932193435278703827112418706247026222530570751276989653861401948065852704218404236565995753766388696272032029028160399096092370865474996942919080058298018221609890898944680095787984523708058101946878156995023368993243446751107836357797335378765506890713533473590301687570333810476755134007398383711030633927177141618973705242432810297833828443732478555546031553368929314998486268460495652677719140416315847677583530288182206317182329574736062992357507548791339743978821 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dd257c9a698d79d7d4c0258bbe5c52be6306eded . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizwatt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bizwatt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qfactor.bizwatt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qfdev.bizwatt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core7.bizwatt.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016cc49171a80000040300473045022100990e812bb658d8cd3d88bb0b6048e23207ef8560722c09b6f7a80a87f021066d022066bd0ea249295b5256a647379f5556a6b7394ad3d9f4883594f8b80fabe46d750075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016cc49171f6000004030046304402204ca8cc4a0895363cf77d2a4bcad548a16c719a8e7a272a33e4a4d675e4ff1dd80220593bab0732159bb8bbb908229f771ccad63fb4d27dd52858c57952b21ff23324 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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