www.botshelf.ai

Issued by R3

About this certificate

This digital certificate with serial number 03:4f:56:b0:47:8a:92:fc:90:76:7d:25:49:ec:6b:67:ea:20 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.botshelf.ai

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:56:b0:47:8a:92:fc:90:76:7d:25:49:ec:6b:67:ea:20
Serial Number (int): 288334393684949541877394686253030758148640
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 11:ae:d4:08:c5:b2:08:f1:97:30:4d:da:c9:2f:c0:c8:e2:ce:e3:1c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 19:e6:f7:28:8b:de:c5:ed:86:eb:c4:60:81:89:f4:1f:95:0e:52:41
Fingerprint (sha256): 52:bf:4f:3b:fd:f4:43:e0:65:ff:49:52:82:72:18:f0:d2:93:67:ca:78:10:29:5c:fa:a5:d5:52:ce:cd:38:b3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.botshelf.ai

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.botshelf.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dustinpadgett.com
foraux.com
gonzalescounty.com
gseit.co
hemptextiles.com
knotweedattorney.com
pressurewashstcloud.com
www.botshelf.ai

Other certificates including the domain name botshelf.ai

(limited to 100 certificates)
botshelf.ai
botshelf.ai
assets.dev.botshelf.ai
shadi.world
assets.dev.botshelf.ai
test.api.botshelf.ai
www.dev.botshelf.ai
www.dev.botshelf.ai
timehascome.ca
treasureacademy.org
assets.dev.botshelf.ai
app.test.botshelf.ai
jobs2.api.botshelf.ai
directus.playg.botshelf.ai
botshelf.ai
assets.dev.botshelf.ai
assets.dev.botshelf.ai
missionschurchorlando.org
theantimaskers.club
www.botshelf.ai
directus.dev.botshelf.ai
jobs.test.botshelf.ai
freedomprojectschool.org
test.botshelf.ai
directus.dev.botshelf.ai
us.playgcf.botshelf.ai
jobs2.api.botshelf.ai
assets.dev.botshelf.ai
assets.dev.botshelf.ai
principleofgoodness.org
directus.dev.botshelf.ai
assets.dev.botshelf.ai
www.botshelf.ai
botshelf.ai
www.prod.botshelf.ai
test.api.botshelf.ai
iam.app.dev.botshelf.ai
directus.dev.botshelf.ai
iam.app.dev.botshelf.ai
api.playg.botshelf.ai
jobs.api.botshelf.ai
api.botshelf.ai
directus.dev.botshelf.ai
directus.dev.botshelf.ai
jobs.api.botshelf.ai
jobs.api.botshelf.ai
assets.terraform.playground-tatooine.botshelf.ai
saprivateschool.org
directus.dev.botshelf.ai
assets.dev.botshelf.ai
api.playground-tatooine.botshelf.ai
www.prod.botshelf.ai
test.api.botshelf.ai
playground-tatooine.botshelf.ai
playground-tatooine.botshelf.ai
directus.dev.botshelf.ai
assets.dev.botshelf.ai
test.api.botshelf.ai
assets.dev.botshelf.ai
assets.dev.botshelf.ai
valoralgo.org
assets.dev.botshelf.ai
assets.dev.botshelf.ai
directus.dev.botshelf.ai
directus.dev.botshelf.ai
zinnia.consulting
directus.dev.botshelf.ai
directus.dev.botshelf.ai
directus.dev.botshelf.ai
wy.cosfacts.org
www.botshelf.ai
api.app.dev.botshelf.ai
assets.dev.botshelf.ai
directus.dev.botshelf.ai
assets.dev.botshelf.ai
survivalonpurpose.tv.masscorts.org
us.playgcf.botshelf.ai
us.playgcf.botshelf.ai
api.app.dev.botshelf.ai
jobs2.api.botshelf.ai
directus.dev.botshelf.ai
directus.dev.botshelf.ai
playground-tatooine.botshelf.ai
directus.dev.botshelf.ai
docs.botshelf.ai

Certificate

The complete raw certificate details for www.botshelf.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISA09WsEeKkvyQdn0lSexrZ+ogMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMjYxNzQ2NDZaFw0yNDA0MjUxNzQ2NDVaMBoxGDAWBgNVBAMT
D3d3dy5ib3RzaGVsZi5haTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMcNK2NQ30k+4k+hviENbt95RNWT60vn7dV4ORGxJ1UO8zs4LINag0p55baqaZnf
zH8Cz53Cq4p7UYmltFFlqdK7D09OLcxU3wKFd4Cd5knJ0orqCquqxKYuhYT2h4ft
G0TYryrGXJ3EKV2RwS+su8CzODQ6o95hikl5+0mSV2BEJ/60gC2VU3qSG9p+xkf8
QZr7O+dnZ/d+F/TDtBBkAECmnqeEFtBAgfrlcJ/QEpMSj1o4Ap58w9nTEhDhPqwQ
BEYU7BjDc4JxHInv/eQB2swk5hz8Xx/0bzRKB3EITaMe7VkGHzuVRVPlVK6fNmjk
x9+6jfvckdDBAmrkG+2pWd0CAwEAAaOCApIwggKOMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUEa7UCMWyCPGXME3ayS/AyOLO4xwwHwYDVR0jBBgwFoAUFC6zF7dYVsuu
UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
Zy8wgZoGA1UdEQSBkjCBj4IRZHVzdGlucGFkZ2V0dC5jb22CCmZvcmF1eC5jb22C
EmdvbnphbGVzY291bnR5LmNvbYIIZ3NlaXQuY2+CEGhlbXB0ZXh0aWxlcy5jb22C
FGtub3R3ZWVkYXR0b3JuZXkuY29tghdwcmVzc3VyZXdhc2hzdGNsb3VkLmNvbYIP
d3d3LmJvdHNoZWxmLmFpMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHW
eQIEAgSB9QSB8gDwAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsA
AAGNRxiJ2AAABAMASDBGAiEAl2dFHgbXFWcCet4/+BctzP6hwcrsVmlJIUKrGmSx
/+4CIQC/XkgevMOjoC3/vK3DOvxCpsdLupyr0+RLCHCXDK7QHQB1AKLiv9Ye3i8v
B6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABjUcYidsAAAQDAEYwRAIgEzUEJCFU
bCQivRTA75DzW0fiFe4qpzEzY8/EeygzzOgCIH2eUZwxrKXQ1LeA3/yU5HF1+8rP
YuuGf+B8kN9j0S/nMA0GCSqGSIb3DQEBCwUAA4IBAQBmd2IAknW2/ak+viGRj9BG
OYQaIjWDy/JfLAmIJUGPid05hU+RAdsLteY5jMB8X6BVfRd6/o9CrsDKwTb36vfJ
zYLFQBtOpjfAMIJf4HS63YoXc5uy7+flhxoy2CF5+OdIDl+Jyusihwlsl0UVYn+j
XPnFyAh8nRvxUJWjI73Gqu+UKI4VcxWPsclw7MYLsl/Uw5J46dt5lpmsWpfODtGO
c/vEQLtIc7dOpMxYLlCXz4dZV75RTR+UE/cuXxwXYc5zwqi8UnTNeGSDiskjLOZZ
PSUmKHNOyQTuqJ7re6J/Ifup927yvtyydggTYkNoJFLZqh1Vb/Em3edtgDnC0yTq
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw0rY1DfST7iT6G+IQ1u
33lE1ZPrS+ft1Xg5EbEnVQ7zOzgsg1qDSnnltqppmd/MfwLPncKrintRiaW0UWWp
0rsPT04tzFTfAoV3gJ3mScnSiuoKq6rEpi6FhPaHh+0bRNivKsZcncQpXZHBL6y7
wLM4NDqj3mGKSXn7SZJXYEQn/rSALZVTepIb2n7GR/xBmvs752dn934X9MO0EGQA
QKaep4QW0ECB+uVwn9ASkxKPWjgCnnzD2dMSEOE+rBAERhTsGMNzgnEcie/95AHa
zCTmHPxfH/RvNEoHcQhNox7tWQYfO5VFU+VUrp82aOTH37qN+9yR0MECauQb7alZ
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288334393684949541877394686253030758148640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 17:46:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 17:46:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.botshelf.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25127916802938959093764727611116402908406244754685838156574365369600589547221268151020048671092755276623756641913634051539254981855571428106311694505762971105817353823522097168320654123015507463237396089045014347195703819080640840949539087950968034041081269661576694684825184554803981965376941849633379952699655797351855730891981099165004513493618367802172118025144093123040623355132013605700272265546352182119088158481555373180137641399610823229273396207251355396980038017135299556625232879669433877440129461152369074041089727931620156565475238619270464863421285945584145776297140056097456519396707046577989894101469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11aed408c5b208f197304ddac92fc0c8e2cee31c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dustinpadgett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foraux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonzalescounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gseit.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemptextiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knotweedattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressurewashstcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.botshelf.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d471889d800000403004830460221009767451e06d71567027ade3ff8172dccfea1c1caec5669492142ab1a64b1ffee022100bf5e481ebcc3a3a02dffbcadc33afc42a6c74bba9cabd3e44b0870970caed01d007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d471889db000004030046304402201335042421546c2422bd14c0ef90f35b47e215ee2aa7313363cfc47b2833cce802207d9e519c31aca5d0d4b780dffc94e47175fbcacf62eb867fe07c90df63d12fe7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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