host.ing.rs
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d1:09:7d:8f:eb:8c:30:56:4c:1e:bf:a4:b4:83:6e:90:f4 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=host.ing.rs
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d1:09:7d:8f:eb:8c:30:56:4c:1e:bf:a4:b4:83:6e:90:f4Serial Number (int): 332468487489872837750409697554211145683188
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 65:08:b0:92:ae:2c:6f:9f:ec:aa:89:e0:62:4b:0a:ec:2c:38:02:2b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 2d:33:50:3b:73:73:a1:e5:51:38:b0:06:ef:30:5c:97:0f:a6:67:60
Fingerprint (sha256): 59:fb:cb:ff:ae:f5:da:36:df:50:13:84:21:88:c3:06:e0:22:61:09:05:30:5d:1b:a5:04:3a:d7:49:53:0c:5f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate host.ing.rs
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for host.ing.rs
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
host.ing.rs
www.host.ing.rs
www.host.ing.rs
Other certificates including the domain name ing.rs
(limited to 100 certificates)
panel.ing.rs
base.ing.rs
ing.rs
panel.ing.rs
ing.rs
ing.rs
ing.rs
ing.rs
ing.rs
ing.rs
ing.rs
ing.rs
host.ing.rs
ing.rs
sni.cloudflaressl.com
host.ing.rs
www.ing.rs
ing.rs
ing.rs
ing.rs
ing.rs
scar.ing.rs
ing.rs
ing.rs
ing.rs
panel.ing.rs
panel.ing.rs
ing.rs
ing.rs
scar.ing.rs
panel.ing.rs
sni.cloudflaressl.com
ing.rs
scar.ing.rs
panel.ing.rs
ing.rs
host.ing.rs
ing.rs
ing.rs
ing.rs
ing.rs
panel.ing.rs
base.ing.rs
ing.rs
panel.ing.rs
ing.rs
ing.rs
ing.rs
ing.rs
ing.rs
ing.rs
ing.rs
ing.rs
host.ing.rs
ing.rs
sni.cloudflaressl.com
host.ing.rs
www.ing.rs
ing.rs
ing.rs
ing.rs
ing.rs
scar.ing.rs
ing.rs
ing.rs
ing.rs
panel.ing.rs
panel.ing.rs
ing.rs
ing.rs
scar.ing.rs
panel.ing.rs
sni.cloudflaressl.com
ing.rs
scar.ing.rs
panel.ing.rs
ing.rs
host.ing.rs
ing.rs
ing.rs
ing.rs
ing.rs
panel.ing.rs
Certificate
The complete raw certificate details for host.ing.rs in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgISA9EJfY/rjDBWTB6/pLSDbpD0MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTEwMTAwNTZaFw0y MDA0MTAwMTAwNTZaMBYxFDASBgNVBAMTC2hvc3QuaW5nLnJzMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEAzL/n6NgUUJswaNAQw7EXKnl2CklwSb6tVWrL Hwwq0BMfSkYbnwtcs5YlfZCWNi5DaWQm/Wh3tjhMOOk0rvFIJax+t55sdBiXetN/ Ev8baeyRD/o4y2q9hBWIC1FAMx3FpJeQCMp/uW+DrElgFt/iUDm2UlxE0l95rNn1 ReYp4xxCXiRjOQ0r5Xpg2vpTIyBDyVBNbYBMVPj0Ulf2jvRl188GRqZq/Q2/CKN/ 5aQolZan03W3Y64AWroFUM0nohIQW0SRHg+Z2tUca77VUoUaJR0O+LEfJTQ/V+FO gwi14rUfAaqq1vGq+hN6NEeNylMcrv4v3B12m2QbxBQV3IMk99SMFWhXfkM032UQ devb8bt5u7mTmc1mKvGMo+J1K2X8QI9XLcoWtLKynCwhwqU9a835ZvXkEJ+/De1W 1Bn7rE/C0IUKCzQ3cW4HeCxQ+QgXFMj0rMvez38cAZffLsVo+W7atJJyiUc4YxaO nhzd+qrRuSIevqT427ZQYrJE3MlOvRBUeiOnEvwTIWvtgPd0jIX0CMbOD/P2gU9+ 4uRF9ge5YeQttxaLWBGB9yxzXz750CeKkRjCJSpe8vc/5ouA1hrkQ5GoxcMZltuq 24c1fvy4O7LD3nUKVFogw6WZ5umQEyUXI5IAh0omdxm39ltqq64WP7i7Pgg+P/pY w4D3WtcCAwEAAaOCAnEwggJtMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUZQiwkq4s b5/sqongYksK7Cw4AiswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzAnBgNVHREEIDAeggtob3N0LmluZy5yc4IPd3d3Lmhv c3QuaW5nLnJzMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYB BAHWeQIEAgSB9QSB8gDwAHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+L kF4AAAFvklU6ZwAABAMARjBEAiBCBG7lPYJQXs+Z72yMrmBeetcJCia1EjOcG1Zj KrDr6wIgPaqhLKoNKV1G0axRUl0Hyupg2W1CJY/6KRqNJICI7SkAdwBep3P531bA 57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW+SVTxzAAAEAwBIMEYCIQCXPndB UnRjCMZocdzQ9cg+SCK7zQ2ybxxpIMGIYKa/OwIhAMCG5CpivhawZGndUCZuYRMP PBKBVbt0fW1uSlTsDfoqMA0GCSqGSIb3DQEBCwUAA4IBAQBqquxiyb9c9toN0hbq h8xUE6O9gTpN1kAThf/QWLGB/ILV5guiDaWI26WRuW5G75sbjwiGGhUiEum7INwR EA/aYUskt4KzibmuQgOTcmgnpDgG1YVn+aHcUdqbh4t5rUvDPkJietDvOFzcXwQV zrpSLqmPs8+m+leXZHdQgyp4oYir8h7UIbSIiE0lOpGeFfXRt10/UTzzcsvv8hn/ 7PY+YmeoZH5CLlL09qnxeJxmejZSHElMm62YP2M3onLBeNANHbEs08qn2vAoN0fs eRC8U2hkWGfDB77eC+ZuJY8f5T+Hohe7/8bPcAeN3fOuyCybrmZNo8N9G7kxUs6B Ciew -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzL/n6NgUUJswaNAQw7EX Knl2CklwSb6tVWrLHwwq0BMfSkYbnwtcs5YlfZCWNi5DaWQm/Wh3tjhMOOk0rvFI Jax+t55sdBiXetN/Ev8baeyRD/o4y2q9hBWIC1FAMx3FpJeQCMp/uW+DrElgFt/i UDm2UlxE0l95rNn1ReYp4xxCXiRjOQ0r5Xpg2vpTIyBDyVBNbYBMVPj0Ulf2jvRl 188GRqZq/Q2/CKN/5aQolZan03W3Y64AWroFUM0nohIQW0SRHg+Z2tUca77VUoUa JR0O+LEfJTQ/V+FOgwi14rUfAaqq1vGq+hN6NEeNylMcrv4v3B12m2QbxBQV3IMk 99SMFWhXfkM032UQdevb8bt5u7mTmc1mKvGMo+J1K2X8QI9XLcoWtLKynCwhwqU9 a835ZvXkEJ+/De1W1Bn7rE/C0IUKCzQ3cW4HeCxQ+QgXFMj0rMvez38cAZffLsVo +W7atJJyiUc4YxaOnhzd+qrRuSIevqT427ZQYrJE3MlOvRBUeiOnEvwTIWvtgPd0 jIX0CMbOD/P2gU9+4uRF9ge5YeQttxaLWBGB9yxzXz750CeKkRjCJSpe8vc/5ouA 1hrkQ5GoxcMZltuq24c1fvy4O7LD3nUKVFogw6WZ5umQEyUXI5IAh0omdxm39ltq q64WP7i7Pgg+P/pYw4D3WtcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 332468487489872837750409697554211145683188 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 01:00:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 01:00:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'host.ing.rs' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 835305623286110997314180295608126989471699990319074825053721101713005625090844322482067115928571972108091810297555534382605859016636095302416413275568951865864221758728666065729103469280312167671204342450062851350142083612983168501801925795972284279067276316204532464285158502842417144673161855306835000012119354300760865371853072049915447689228200122589881232535020188332374186175256841914607875629513676544115684550155930969510415687832459881766947868545745976860931254714069117645001928843210083271959766714930180189959984097361973981606090582445736604578784494115353929183287205210312294413205337083897369811150403898634007900531807719271846297199345323662937429115049080211469698747596732248536650221549562780237617063703214593056818524827356170589165755900908463201400954020113901829364208577217060181211369143612492560360472970100445353281783341937278394369892642243670941140587497303791897212265420955172017905816289312336836095595367605329460950498912877616633802378949106999477844199941509669010949094608050700831726548212428775990548122435972444081670091277225585152707221684337493819289669332583821927490457859344403849965004417708871506671470439676173893442773996123839249757695989604870261011075629405570625731296713431 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6508b092ae2c6f9fecaa89e0624b0aec2c38022b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.ing.rs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.host.ing.rs' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f92553a670000040300463044022042046ee53d82505ecf99ef6c8cae605e7ad7090a26b512339c1b56632ab0ebeb02203daaa12caa0d295d46d1ac51525d07caea60d96d42258ffa291a8d248088ed290077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f92553c730000040300483046022100973e774152746308c66871dcd0f5c83e4822bbcd0db26f1c6920c18860a6bf3b022100c086e42a62be16b06469dd50266e61130f3c128155bb747d6d6e4a54ec0dfa2a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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