identity.wellsfargoprotection.com

Issued by WellsSecure Certification Authority 01 G2

About this certificate


This digital certificate with serial number 5b:48:d2:c8:00:00:00:00:1a:c0 was issued on by Wells Fargo .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Wells Fargo and Company

Organization: Wells Fargo and Company
Organization unit: Wells Fargo Insurance
State / Province: California
Locality: San Francisco
Country: US

Wells Fargo

Organization: Wells Fargo
Organization unit: WellsSecure Certification Authorities
State / Province: California
Locality: San Francisco
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 5b:48:d2:c8:00:00:00:00:1a:c0
Serial Number (int): 431078703904188109167296
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: c2:b6:ff:db:6d:0a:1d:fc:15:9f:ea:da:b2:c8:bb:80:9a:b3:9a:59
AuthorityKeyId: 59:9a:01:e5:e7:c3:e6:f3:25:78:f1:5a:d9:a8:e9:f1:72:94:8e:30

Fingerprint (sha1): 36:69:d5:66:5d:e2:3e:b1:3f:44:c4:47:c3:d1:61:f2:24:6d:db:91
Fingerprint (sha256): 8b:47:de:35:b6:29:55:3f:ce:c3:1f:ee:ec:82:23:b3:ae:2a:4d:89:9f:a5:99:8a:1f:c3:ef:f7:a0:2c:fe:8c

Issuing Certificate URL: http://crl.pki.wellsfargo.com/wf_wsca_01_G2.crt

Revocation information

OCSP Server: http://validator.wellsfargo.com/
CRL Distribution Point: http://crl.pki.wellsfargo.com/wsca01G2.crl

Check the revocation status for the current certificate on identity.wellsfargoprotection.com
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

identity.wellsfargoprotection.com
identity.wellsfargoprotection.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIKW0jSyAAAAAAawDANBgkqhkiG9w0BAQsFADCBhzELMAkG A1UEBhMCVVMxFDASBgNVBAoTC1dlbGxzIEZhcmdvMS4wLAYDVQQLEyVXZWxsc1Nl Y3VyZSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0aWVzMTIwMAYDVQQDEylXZWxsc1Nl Y3VyZSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAwMSBHMjAeFw0xNTA4MTMxODU1 NTBaFw0xNjA4MTIxODU1NTBaMIGoMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2Fs aWZvcm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEgMB4GA1UEChMXV2VsbHMg RmFyZ28gYW5kIENvbXBhbnkxHjAcBgNVBAsTFVdlbGxzIEZhcmdvIEluc3VyYW5j ZTEqMCgGA1UEAxMhaWRlbnRpdHkud2VsbHNmYXJnb3Byb3RlY3Rpb24uY29tMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXKh8L2LLlY69n7Ve7UFehWK t66DF/qJsqqHi40HFdTaN7Z03B+7XVLCoeV0bJWtW6ctMzgej+MmfL1FTJe+XTlW afbC0k9AKw/rFcgh7ameN8/we9ijS5jobcMQGemqo7r4VzBFWs8ixYH3IqpV5TmH pfd5AF716UTwbr99LwJ1C1HzDWMjJmvWgMe3MHIyJ1kWuKVdUiUSWh46nVHNychq IyeS10bmyAUZqOBhq+nbj+vMIO3f4tiRbg+qL80zdHJRVJSyOU+nlJgXrkRy/x0p iOsX4mYTaHM2LZxXe5CxlLr/OneW8JmoaWAGYTOUVH6y2ULV/3ygJpkS18LmlwID AQABo4ICFTCCAhEwHQYDVR0OBBYEFMK2/9ttCh38FZ/q2rLIu4Cas5pZMB8GA1Ud IwQYMBaAFFmaAeXnw+bzJXjxWtmo6fFylI4wMDsGA1UdHwQ0MDIwMKAuoCyGKmh0 dHA6Ly9jcmwucGtpLndlbGxzZmFyZ28uY29tL3dzY2EwMUcyLmNybDB5BggrBgEF BQcBAQRtMGswOwYIKwYBBQUHMAKGL2h0dHA6Ly9jcmwucGtpLndlbGxzZmFyZ28u Y29tL3dmX3dzY2FfMDFfRzIuY3J0MCwGCCsGAQUFBzABhiBodHRwOi8vdmFsaWRh dG9yLndlbGxzZmFyZ28uY29tLzAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIE sDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwgYgGA1UdIASBgDB+MDgG CmCGSAGG+3uDdAYwKjAoBggrBgEFBQcCARYcaHR0cDovL3d3dy53ZWxsc2Zhcmdv LmNvbS9jcDBCBgtghkgBhvt7g3QAADAzMDEGCCsGAQUFBwIBFiVodHRwczovL3d3 dy53ZWxsc2ZhcmdvLmNvbS9yZXBvc2l0b3J5ME8GA1UdEQRIMEaCIWlkZW50aXR5 LndlbGxzZmFyZ29wcm90ZWN0aW9uLmNvbYIhaWRlbnRpdHkud2VsbHNmYXJnb3By b3RlY3Rpb24uY29tMA0GCSqGSIb3DQEBCwUAA4IBAQAv0AjKmCgZXNs4uxJbvC7+ g336ieEmBNcn95kYjwIHsVA10zMJ3ej3oca0raTOoJnrYgXQJ649mQM/FXNcl0Qz TmXOjNj05igdlbJJbATvFLPb+CsNcCoOFxh8fqzy+Z3KUBYDz3AHflF3d+C0hzIB Em9x6ttq7FfLrwlURIpjQWxCobI8V0LWQAqgfpG9D9qp9+/UbdmNd4cm57/++3PG kBrETj+PVou2bcKJ9p5iuH5eUzjU86YQPsm5vSZOGVwsEmU5TP8u1htBdO2qKr27 li7cggnkIDRA/fwnEeP91wPv5+dPAT20025rq1kCOkInW8DDMhtcTQygVRvzYk6K -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXKh8L2LLlY69n7Ve7UF ehWKt66DF/qJsqqHi40HFdTaN7Z03B+7XVLCoeV0bJWtW6ctMzgej+MmfL1FTJe+ XTlWafbC0k9AKw/rFcgh7ameN8/we9ijS5jobcMQGemqo7r4VzBFWs8ixYH3IqpV 5TmHpfd5AF716UTwbr99LwJ1C1HzDWMjJmvWgMe3MHIyJ1kWuKVdUiUSWh46nVHN ychqIyeS10bmyAUZqOBhq+nbj+vMIO3f4tiRbg+qL80zdHJRVJSyOU+nlJgXrkRy /x0piOsX4mYTaHM2LZxXe5CxlLr/OneW8JmoaWAGYTOUVH6y2ULV/3ygJpkS18Lm lwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 431078703904188109167296 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WellsSecure Certification Authorities' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WellsSecure Certification Authority 01 G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-13 18:55:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-12 18:55:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo and Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo Insurance' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'identity.wellsfargoprotection.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25430426730012914928439224494903442328178527940437211510843620892555593838583749320691277518926310194288020071663717032216438111099698298887522130652787592163600818336050162397719051601864265047964904089315899734346468903895975508229504556986125403593015199346138484143586286594166635981397210779005851237026328397617849210184055417408046811432689327713952440554792817556533611634053638306385907882489317369792009666258723691536477447428133820984125689426240433751625790580036363816087943110003696249852311151396998986944639084490314177062733128776711499978577138303121702939911259640896550066011895997815384059340439 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c2b6ffdb6d0a1dfc159feadab2c8bb809ab39a59 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 599a01e5e7c3e6f32578f15ad9a8e9f172948e30 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.wellsfargo.com/wsca01G2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.wellsfargo.com/wf_wsca_01_G2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://validator.wellsfargo.com/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114171.500.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wellsfargo.com/cp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114171.500.0.0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.wellsfargo.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.wellsfargoprotection.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.wellsfargoprotection.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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