govocal.ai
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f6:cc:82:a5:a1:92:bf:1b:35:cb:6d:86:9e:dd:60:a5:27 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=govocal.ai
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f6:cc:82:a5:a1:92:bf:1b:35:cb:6d:86:9e:dd:60:a5:27Serial Number (int): 345318160926962068929609809612462245324071
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f0:5c:0f:2d:12:73:f6:f8:af:07:3a:c8:a5:01:7e:73:92:8b:6c:40
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d6:61:45:54:68:e5:8e:1c:e2:b6:13:cc:22:39:2d:07:da:dc:b3:85
Fingerprint (sha256): 52:88:f1:3e:93:11:dd:f3:5b:33:40:b4:6d:1a:d1:40:fe:23:d3:42:03:fe:f3:1d:a4:6e:be:cb:81:34:c6:82
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate govocal.ai
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for govocal.ai
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
govocal.ai
Other certificates including the domain name govocal.ai
(limited to 100 certificates)
web.teamhub.app
portal.govocal.ai
live.bizjump.co.za
www.productivitykeyboard.com
portal.govocal.ai
portal.govocal.ai
short.iamhrayr.com
www.conli.tv
govocal.ai
www.vegandetails.com
automate.hamblinsoft.com
portal.govocal.ai
mascara-admin.m1studio.co
portal.govocal.ai
podcasts.govocal.ai
portal.govocal.ai
vengage.staging.govocal.ai
static.govocal.ai
vengage.staging.govocal.ai
www.kubxy.com
govocal.ai
*.govocal.ai
voxmate.app
podcasts.govocal.ai
portal.govocal.ai
static.staging.govocal.ai
portal.govocal.ai
govocal.ai
portal.govocal.ai
helpdesk.ipam.inf.br
auth.winst360.com
govocal.ai
tsoauth.govocal.ai
govocal.ai
vengage.staging.govocal.ai
floriangyger.ch
live.bizjump.co.za
dashboard.billscart.com
multiri.de
hype.thrivex.io
lms.auribises.com
www.scenter.app
govocal.ai
www.micondocr.com
www.govocal.ai
*.govocal.ai
vengage.staging.govocal.ai
audiotag.app
vengage.staging.govocal.ai
roflbook.com
kube.ci
eventfinder.live
vengage.staging.govocal.ai
breed.markangelohernandez.com
portal.govocal.ai
granat.app
www.pensioenbijforehand.nl
labelerp.rcloudsoft.app
queues.live
login.auxetic.co
govocal.ai
arkmapshare.com
auth.winst360.com
vengage.staging.govocal.ai
www.vasocare.com
www.govocal.ai
unibit.ai
dashboard.billscart.com
app.vitab.co
govocal.ai
*.ts-va-dev.govocal.ai
govocal.ai
porkit.eiya.mx
dominocounter.app
labelerp.rcloudsoft.app
dashboard.beaconstac.com
mascara-admin.m1studio.co
podcasts.govocal.ai
as3.freedeals.online
portal.govocal.ai
live.bizjump.co.za
www.productivitykeyboard.com
portal.govocal.ai
portal.govocal.ai
short.iamhrayr.com
www.conli.tv
govocal.ai
www.vegandetails.com
automate.hamblinsoft.com
portal.govocal.ai
mascara-admin.m1studio.co
portal.govocal.ai
podcasts.govocal.ai
portal.govocal.ai
vengage.staging.govocal.ai
static.govocal.ai
vengage.staging.govocal.ai
www.kubxy.com
govocal.ai
*.govocal.ai
voxmate.app
podcasts.govocal.ai
portal.govocal.ai
static.staging.govocal.ai
portal.govocal.ai
govocal.ai
portal.govocal.ai
helpdesk.ipam.inf.br
auth.winst360.com
govocal.ai
tsoauth.govocal.ai
govocal.ai
vengage.staging.govocal.ai
floriangyger.ch
live.bizjump.co.za
dashboard.billscart.com
multiri.de
hype.thrivex.io
lms.auribises.com
www.scenter.app
govocal.ai
www.micondocr.com
www.govocal.ai
*.govocal.ai
vengage.staging.govocal.ai
audiotag.app
vengage.staging.govocal.ai
roflbook.com
kube.ci
eventfinder.live
vengage.staging.govocal.ai
breed.markangelohernandez.com
portal.govocal.ai
granat.app
www.pensioenbijforehand.nl
labelerp.rcloudsoft.app
queues.live
login.auxetic.co
govocal.ai
arkmapshare.com
auth.winst360.com
vengage.staging.govocal.ai
www.vasocare.com
www.govocal.ai
unibit.ai
dashboard.billscart.com
app.vitab.co
govocal.ai
*.ts-va-dev.govocal.ai
govocal.ai
porkit.eiya.mx
dominocounter.app
labelerp.rcloudsoft.app
dashboard.beaconstac.com
mascara-admin.m1studio.co
podcasts.govocal.ai
as3.freedeals.online
Certificate
The complete raw certificate details for govocal.ai in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISA/bMgqWhkr8bNctthp7dYKUnMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMTgxNjE0MjJaFw0x OTA2MTYxNjE0MjJaMBUxEzARBgNVBAMTCmdvdm9jYWwuYWkwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDGl4HwXJNAyJfLWP/DUGDEXsIkoRrmxZxk+Hdf 658ik24I8RW3kzdXNLr9AyVWU5DyJdaTVoaSMuaNnP9G2MPslzeo8QqQhharJXAU xKL3ADU2o+K3tCl0zFZOmcNGZvpi1sK2eNaXeXbifgVYd/psa/5fD8PVbM0//3Q3 W02A3150orjrZELM7WW0ZWD71r2Vz+1bUlr86j/OYIjSM47JoaK4hIsIUFZyJkLv 0eBfYJO0Oj81SO2czaE5aWRnqS4Gk+69SvGzc4B/Y6/ohMge1j2XCiVdk9MLcJje azMl3plwKjZzLN2alKRYeYqGvegfEGOgsbVDceissP2pRRMVAgMBAAGjggJfMIIC WzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPBcDy0Sc/b4rwc6yKUBfnOSi2xAMB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w FQYDVR0RBA4wDIIKZ292b2NhbC5haTBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0 Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AHR+2oMxrTMQkSGcziVPQnDC v/1eQiAIxjc1eeYQe8xWAAABaZHMC+AAAAQDAEcwRQIhAIyTa2VtYSPGGhBrD0xm ehP+HEe6X6Dj0aTR3aASE9LFAiBSUVjb6ZNNsoSZPXupeelgMzch0bQS6BDmj6o4 YlC8mgB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABaZHMDCkA AAQDAEcwRQIhAOjSnuF2gEF1uffpJv1AiYNOO+t9MYJlGONfz3CSt+DpAiByXHl7 2m4FiPgzovl0616LFb54VH8BksuG6abre9VzIzANBgkqhkiG9w0BAQsFAAOCAQEA P7N0POxgNpw6Jybt4Rk2UHjHnoR8Bd0Y48oONXoPZpvyUth3wU0AKBQvJVjEd1Kg Wz/B9yAR6sv1DQyPGI3nIvHSfybW1kYjp7E77h+YfNrfyzHxN3WpX3ywTz1wiM1P P48buTDtuO13d8nRIwf6Ecet0BgKJN6zXvQe3W15AtXDrU0efAt+q/S05aKZL8t0 JLqZGotCnLZ9NdzEhDfpdmDBXvLIJoJSCuGAbl2vZ/wZA3/51njTESfCjB+OnBCo MjnPkNPPQkrggjXQDAegvAVk6+51eQEB4+aJkLwrPLCmA62nDtf7Eof8QEY6y7Xp HVw+Htu5mWXgexWMgkbfHg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpeB8FyTQMiXy1j/w1Bg xF7CJKEa5sWcZPh3X+ufIpNuCPEVt5M3VzS6/QMlVlOQ8iXWk1aGkjLmjZz/RtjD 7Jc3qPEKkIYWqyVwFMSi9wA1NqPit7QpdMxWTpnDRmb6YtbCtnjWl3l24n4FWHf6 bGv+Xw/D1WzNP/90N1tNgN9edKK462RCzO1ltGVg+9a9lc/tW1Ja/Oo/zmCI0jOO yaGiuISLCFBWciZC79HgX2CTtDo/NUjtnM2hOWlkZ6kuBpPuvUrxs3OAf2Ov6ITI HtY9lwolXZPTC3CY3mszJd6ZcCo2cyzdmpSkWHmKhr3oHxBjoLG1Q3HorLD9qUUT FQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 345318160926962068929609809612462245324071 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-18 16:14:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-16 16:14:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'govocal.ai' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25069895552481906648770032201367737473917219004892409289915987189632088544510930358937332979017398751709234430123600574447998672163748870211250452991078014483244897448752781287911671036702065436715577793226101035877690230071301907422952726472954960785277602091465592109023855468494464083642029376684721067686601001313201677972198436925798486138979884870202543554893795052874818626829143649522281422587688409267824765181559861604882350822715676308694553730976505674644228696427669768093017422363855601140989141751906334762511394840126091322868074727433751906935401217104486340029216064188253657139071441621215625941781 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f05c0f2d1273f6f8af073ac8a5017e73928b6c40 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govocal.ai' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016991cc0be000000403004730450221008c936b656d6123c61a106b0f4c667a13fe1c47ba5fa0e3d1a4d1dda01213d2c50220525158dbe9934db284993d7ba979e960333721d1b412e810e68faa386250bc9a007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016991cc0c290000040300473045022100e8d29ee176804175b9f7e926fd4089834e3beb7d31826518e35fcf7092b7e0e90220725c797bda6e0588f833a2f974eb5e8b15be78547f0192cb86e9a6eb7bd57323 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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