canibuild.ai
Issued by R3
About this certificate
This digital certificate with serial number 03:84:bf:1f:50:8f:d0:bd:64:f9:f3:87:4d:ac:4f:d8:b8:fd was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=canibuild.ai
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:84:bf:1f:50:8f:d0:bd:64:f9:f3:87:4d:ac:4f:d8:b8:fdSerial Number (int): 306508175371229148005961875054550545119485
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d3:47:09:e0:42:1c:56:0a:a4:0d:bd:23:c0:02:a0:f6:af:c4:d3:2f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 48:37:bb:9c:fa:76:25:c3:52:98:7a:3d:97:2c:4f:a4:a0:1e:e5:fe
Fingerprint (sha256): 59:2e:4d:29:75:f4:ea:78:51:db:23:a7:cb:e9:9a:37:a1:36:e3:86:77:1e:30:e4:b6:53:97:32:44:b6:b5:19
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate canibuild.ai
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for canibuild.ai
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bitcoinfees.info
canibuild.ai
doktor-ohne-rezept.buzz.228.cool.quemadodeguines.com
fortworthmom.blog.thebisexual.com
louisehart.com
northpadreislandrealestate.com
pens-pencils.com
radioactive-financial.com.drunkdrivingcarinsurance.com
theglockswitch.com
treasurytrust.com
unionjackracing.co.uk
canibuild.ai
doktor-ohne-rezept.buzz.228.cool.quemadodeguines.com
fortworthmom.blog.thebisexual.com
louisehart.com
northpadreislandrealestate.com
pens-pencils.com
radioactive-financial.com.drunkdrivingcarinsurance.com
theglockswitch.com
treasurytrust.com
unionjackracing.co.uk
Other certificates including the domain name canibuild.ai
(limited to 100 certificates)
kiesza.ca
daddy.vc
kiesza.ca
www.working.dog
canibuild.ai
couples4christ.world
maxler.world
canibuild.ai
kiesza.ca
katalyst.me
usc.mba
zinnia.ltd
usc.mba
registry.bible
grocer.cc
usc.mba
www.canibuild.ai
canibuild.ai
sculpit.moda
equa.life
sculpit.moda
sculpit.moda
sculpit.media
cars101.life
sculpit.moda
playgolf.club
playgolf.club
goldenoldies.ca
goldenoldies.ca
jenksamericatoastmasters.club
or.cosfacts.org
usc.mba
ranchogabriela.org
privateschoolfortworth.org
kiesza.ca
sa-rugby.co.za
usc.mba
zinnia.engineering
usc.mba
usc.mba
kiesza.ca
mfe.me
sculpit.moda
playgolf.club
playgolf.club
sculpit.moda
musicbingo.ca
tri-cap.org
daddy.vc
kiesza.ca
www.working.dog
canibuild.ai
couples4christ.world
maxler.world
canibuild.ai
kiesza.ca
katalyst.me
usc.mba
zinnia.ltd
usc.mba
registry.bible
grocer.cc
usc.mba
www.canibuild.ai
canibuild.ai
sculpit.moda
equa.life
sculpit.moda
sculpit.moda
sculpit.media
cars101.life
sculpit.moda
playgolf.club
playgolf.club
goldenoldies.ca
goldenoldies.ca
jenksamericatoastmasters.club
or.cosfacts.org
usc.mba
ranchogabriela.org
privateschoolfortworth.org
kiesza.ca
sa-rugby.co.za
usc.mba
zinnia.engineering
usc.mba
usc.mba
kiesza.ca
mfe.me
sculpit.moda
playgolf.club
playgolf.club
sculpit.moda
musicbingo.ca
tri-cap.org
Certificate
The complete raw certificate details for canibuild.ai in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGDjCCBPagAwIBAgISA4S/H1CP0L1k+fOHTaxP2Lj9MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMTAwNzIzMDVaFw0yNDA0MDkwNzIzMDRaMBcxFTATBgNVBAMT DGNhbmlidWlsZC5haTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALs9 xonbFua/yeyYjVqI9b2RyWUpX+0PdivosmuQKvRbiSHJRurodsBDZPsY3cLVTdY7 +2p6Vh/dtPZZEYuO1GiqfkoS5CK64rn6r4H7/+RErsaY8eUIl8KImZv79wXPhFAs 1pHlPD4I1HJkQr/xV4KZonXqz3vhsMSVkMNeO26V/7tNicW3AMaw+Bbrr/HPygMd R77fKIvJriMC90+RX0Wqn3KbNYETGSxCmbfa/p3kVgmRhgei6ALsCmnH5+hjkZD4 lVFgu4f2ePtVaZFDs590UXoqhxbh0MTIf1UKYH4SbixllOJUAqKxNCPwKNJMrmRy 3evC92zFqai8mICCfAkCAwEAAaOCAzcwggMzMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQU00cJ4EIcVgqkDb0jwAKg9q/E0y8wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w ggE+BgNVHREEggE1MIIBMYIQYml0Y29pbmZlZXMuaW5mb4IMY2FuaWJ1aWxkLmFp gjRkb2t0b3Itb2huZS1yZXplcHQuYnV6ei4yMjguY29vbC5xdWVtYWRvZGVndWlu ZXMuY29tgiFmb3J0d29ydGhtb20uYmxvZy50aGViaXNleHVhbC5jb22CDmxvdWlz ZWhhcnQuY29tgh5ub3J0aHBhZHJlaXNsYW5kcmVhbGVzdGF0ZS5jb22CEHBlbnMt cGVuY2lscy5jb22CNnJhZGlvYWN0aXZlLWZpbmFuY2lhbC5jb20uZHJ1bmtkcml2 aW5nY2FyaW5zdXJhbmNlLmNvbYISdGhlZ2xvY2tzd2l0Y2guY29tghF0cmVhc3Vy eXRydXN0LmNvbYIVdW5pb25qYWNrcmFjaW5nLmNvLnVrMBMGA1UdIAQMMAowCAYG Z4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYASLDja9qmRzQP5WoC+p0w 6xxSActW3SyB2bu/qznYhHMAAAGM8nfHIwAABAMARzBFAiEAqvpCw+cgnCwnxM1V oB9pWn1EWjJWbOuZXZ3rLtgOQ4MCIHbcU43z6/A6W0fjMgQh++BSiz4oRXJq+fBM PoOYCSQQAHYAKdA6G7Z0qnEc0wNbZVfBT4qni0/oOJRJ7KRT+US9JGgAAAGM8nfH 6wAABAMARzBFAiEAuy3Sb9mO3CmbTffzwSqhFEWoDCB/uJE+oMFI/DWiR9UCIEya Z45TOcuFdJmfQHBS3VFS5qgUB9F5JZnvBp5ZMUZQMA0GCSqGSIb3DQEBCwUAA4IB AQBw3OhECanCWUVNnNG7w/54G7UxVZ68nRhjy0A764Gp2CzPQHJJBZaOLYcYEtqm RV4ZnIcKnweExtysBOnHeY2u7w5JSJ0lwVO1W9/C4iVLgUzepWFqTFBOX4B6Xbdw DPc9zeNMyk+uA7TCRe+5MsTPJit3rb4M3/PXH5et+/EFezNMmP5WydmRRoBTCrHx 0yHkPOBBXxllAM7gzhZ+7hxHTDseJxYXyb1S52+Aue5RGMheQ78bVORWpCwM2RDy jTOcinqYZ8hBEuTOAwFcej5wpp7lc02wmSJmj/kkm+KerIb9v8GBmof+xm3Wg82Y IurLjLOOuSzBDtqLrCOxpdQW -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz3GidsW5r/J7JiNWoj1 vZHJZSlf7Q92K+iya5Aq9FuJIclG6uh2wENk+xjdwtVN1jv7anpWH9209lkRi47U aKp+ShLkIrriufqvgfv/5ESuxpjx5QiXwoiZm/v3Bc+EUCzWkeU8PgjUcmRCv/FX gpmiderPe+GwxJWQw147bpX/u02JxbcAxrD4Fuuv8c/KAx1Hvt8oi8muIwL3T5Ff Raqfcps1gRMZLEKZt9r+neRWCZGGB6LoAuwKacfn6GORkPiVUWC7h/Z4+1VpkUOz n3RReiqHFuHQxMh/VQpgfhJuLGWU4lQCorE0I/Ao0kyuZHLd68L3bMWpqLyYgIJ8 CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 306508175371229148005961875054550545119485 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 07:23:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 07:23:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canibuild.ai' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23637025683285085547100078522119426694581564926963672606596078386281276011575566582225452223465120654100526237395182311839978342163613775925371756081981544078190816642419869891431962624160822974150396398912525132797969729295158755094281855863130320831702963377009360157283655728545758206394113186868841081099000867805748412636801131300370248991447794592226991039868431884934730861411101078574625009916294400932828274913754526889918725333337753295924050686528608410724817597778425301236526875639118194961341701446701756689328917390346860877181327471256942068085200644673677421881603643968135675646850672143591673068553 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d34709e0421c560aa40dbd23c002a0f6afc4d32f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (309 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinfees.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canibuild.ai' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doktor-ohne-rezept.buzz.228.cool.quemadodeguines.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortworthmom.blog.thebisexual.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisehart.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northpadreislandrealestate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pens-pencils.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radioactive-financial.com.drunkdrivingcarinsurance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theglockswitch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treasurytrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unionjackracing.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cf277c7230000040300473045022100aafa42c3e7209c2c27c4cd55a01f695a7d445a32566ceb995d9deb2ed80e4383022076dc538df3ebf03a5b47e3320421fbe0528b3e2845726af9f04c3e839809241000760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018cf277c7eb0000040300473045022100bb2dd26fd98edc299b4df7f3c12aa11445a80c207fb8913ea0c148fc35a247d502204c9a678e5339cb8574999f407052dd5152e6a81407d1792599ef069e59314650 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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