divinea.com
Issued by R3
About this certificate
This digital certificate with serial number 04:f0:8a:93:42:34:26:cc:8f:4b:3b:62:c4:2d:32:4f:0a:92 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=divinea.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:f0:8a:93:42:34:26:cc:8f:4b:3b:62:c4:2d:32:4f:0a:92Serial Number (int): 430301109861893646847506221237561988156050
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 16:2e:1d:82:00:cb:22:5e:f8:27:44:51:55:3e:5d:4e:c9:fb:d3:40
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 5c:0d:5e:02:a5:4f:9e:e5:1e:d2:0c:92:e9:ed:fa:f8:74:0a:00:1e
Fingerprint (sha256): 5a:0c:19:b3:f5:bb:3b:a7:ae:e3:4f:82:9f:eb:42:a0:c8:7d:9c:11:c1:33:4d:5f:64:ec:d5:70:36:ad:bc:ed
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate divinea.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for divinea.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
divinea.com
www.divinea.com
www.divinea.com
Other certificates including the domain name divinea.com
(limited to 100 certificates)
enoturismovaltellina.divinea.com
promo.divinea.com
divinea.com
*.divinea.com
*.api.divinea.com
promo.divinea.com
divinea.com
regalaesperienza.divinea.com
enoturismovaltellina.divinea.com
divinea.com
applicationsoap.beezsocialerp.com
divinea.com
*.divinea.com
www.thestorybookcharactercompany.com
divinea.com
divinea.com
pocketlearning.de
divinea.com
api.divinea.com
www.apur.am
divinea.com
*.divinea.com
api.divinea.com
www.bradshawandson.net
api-dws.divinea.com
divinea.com
www.promo.divinea.com
divinea.com
widget.divinea.com
divinea.com
*.divinea.com
www.gaminc.net
divinea.com
www.stevemasson.co.uk
api.divinea.com
www.guide2copenhagen.com
smart-tasting.divinea.com
*.divinea.com
api.divinea.com
*.divinea.com
api-dws.divinea.com
isitblackfridayyet.app
link-producer.xtrea.mr
promo.divinea.com
*.divinea.com
api-staging.divinea.com
*.divinea.com
blog.divinea.com
www.divinea.com
*.api.divinea.com
promo.divinea.com
synthwave.app
promo.divinea.com
promo.divinea.com
divinea.com
divinea.com
divinea.com
*.divinea.com
divinea.com
*.divinea.com
regalaesperienza.divinea.com
openday.vu.edu.au
degustazionevino.divinea.com
api.divinea.com
nmbrs.pensioeninzichtelijk.nl
applicationsoap.beezsocialerp.com
promo.divinea.com
divinea.com
*.divinea.com
*.api.divinea.com
promo.divinea.com
divinea.com
regalaesperienza.divinea.com
enoturismovaltellina.divinea.com
divinea.com
applicationsoap.beezsocialerp.com
divinea.com
*.divinea.com
www.thestorybookcharactercompany.com
divinea.com
divinea.com
pocketlearning.de
divinea.com
api.divinea.com
www.apur.am
divinea.com
*.divinea.com
api.divinea.com
www.bradshawandson.net
api-dws.divinea.com
divinea.com
www.promo.divinea.com
divinea.com
widget.divinea.com
divinea.com
*.divinea.com
www.gaminc.net
divinea.com
www.stevemasson.co.uk
api.divinea.com
www.guide2copenhagen.com
smart-tasting.divinea.com
*.divinea.com
api.divinea.com
*.divinea.com
api-dws.divinea.com
isitblackfridayyet.app
link-producer.xtrea.mr
promo.divinea.com
*.divinea.com
api-staging.divinea.com
*.divinea.com
blog.divinea.com
www.divinea.com
*.api.divinea.com
promo.divinea.com
synthwave.app
promo.divinea.com
promo.divinea.com
divinea.com
divinea.com
divinea.com
*.divinea.com
divinea.com
*.divinea.com
regalaesperienza.divinea.com
openday.vu.edu.au
degustazionevino.divinea.com
api.divinea.com
nmbrs.pensioeninzichtelijk.nl
applicationsoap.beezsocialerp.com
Certificate
The complete raw certificate details for divinea.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgISBPCKk0I0JsyPSztixC0yTwqSMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA3MTkxODMxMjlaFw0yMzEwMTcxODMxMjhaMBYxFDASBgNVBAMT C2RpdmluZWEuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0GRX /srRkgzlHGXy+oDHCbrYFUDo+jZFOWUo+JJCkhB6AqCb/WyAppjKhbn7HFdTJ8ds WbEiQysZPiVaXS6opsPiIo63GfWIy7eIQ6HhQu3DhbRKEqsh5QLixU0BKXlOr6yd 7DR87nnNWKaTiwaQZ8oaQOLIObbeBLNszJUg2KIxMvpf4HpWjdFg5xetVqTL0188 6GOJwTDaz0rQUXUXZOSVAwcqQIPSS7YBb5ylyG+pWEtYfh4tKk9m8qx+/cqgFdyL ouQ+Yt9aFvubCvxPyrtdtgREh2sGys4n7+Vbv5eElGfmR9LHpv1NHefFZVzElYhz u96UyDE/B8lsCQZsYBhsOuPUCNUXc4IOv4knbLpiYqlOobNAmuHmR1nUF8HKj24D 6j5AfutmnSrVrTkOJFkurVpsbsAEvspOevoZ1WNFsd8Y2oDWJpdAM0srM3EAIq+e x9/sq8UUlcAZjo0hsyEEpNxma33OTG7x61EjwyRNtB0trqWORutqzDxuIBTCw5M/ Kid5Jt8ibq9EQRGvq/XFy+6YHdqCYCTTfWxR4TWq1UAXi5jkiuUWAJbnEu/qxTsP BAGXKwnZEpTxX341b5cBiZH2+3dDk/pDuCHk9rx+z6KbX2GJVz2bYJ6FRwK5vrSR m7dK21FgFhRDnXhpAY2b2WRFEU63T74tZ/6NT60CAwEAAaOCAh0wggIZMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUFi4dggDLIl74J0RRVT5dTsn700AwHwYDVR0jBBgw FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y My5pLmxlbmNyLm9yZy8wJwYDVR0RBCAwHoILZGl2aW5lYS5jb22CD3d3dy5kaXZp bmVhLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQE gfEA7wB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABiW+i1xwA AAQDAEcwRQIhAJU/2k/C+5IaA1/IAdexBHu3mYaysCuIwJrMBtFfbJdyAiAXDGDa rUilRPmfpFEvHNRPmlKEaChE8oouLta8xxoQDAB1AOg+0No+9QY1MudXKLyJa8kD 08vREWvs62nhd31tBr1uAAABiW+i1xEAAAQDAEYwRAIgWYeY8xXV46A3GFFN5orF R4rgJy0nRUGyuyn/I6xw6kwCIA1WAoRlOfrm7OVMf6k/brImGoHd+IfNc58ghHuc vl4AMA0GCSqGSIb3DQEBCwUAA4IBAQAuQ2kGzM4yAQ0SFuow2X9IIcBOopvj0kEj VaQrtbAL4W3+X6k2qEuUDHsJHV8heTaLLcUCzAFjr7xuJzUhH+n1XhIMW3aYcMbI EgDRWenoiDb+PdPlug/qLFVFlJxUENTmZujY96R/Fl68zoFK8Iw8dGFSrVQPswCT oTCk9CUK197mwe4nIYtWSq+uDnlu1TNpzQLasGnr6KSShFX5p89Fd9HUgr2XjTiE cLpHdonrje9yZZVtQHzJ1KJIYBt0DvA33oiIwYAg6vq0OeMNm4/4keZInKcV6Wl0 rBusgJrnAPLgVqkIOJKYQz9tjaMFcZxPTseQr18qF+IIyIoFKB0y -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0GRX/srRkgzlHGXy+oDH CbrYFUDo+jZFOWUo+JJCkhB6AqCb/WyAppjKhbn7HFdTJ8dsWbEiQysZPiVaXS6o psPiIo63GfWIy7eIQ6HhQu3DhbRKEqsh5QLixU0BKXlOr6yd7DR87nnNWKaTiwaQ Z8oaQOLIObbeBLNszJUg2KIxMvpf4HpWjdFg5xetVqTL01886GOJwTDaz0rQUXUX ZOSVAwcqQIPSS7YBb5ylyG+pWEtYfh4tKk9m8qx+/cqgFdyLouQ+Yt9aFvubCvxP yrtdtgREh2sGys4n7+Vbv5eElGfmR9LHpv1NHefFZVzElYhzu96UyDE/B8lsCQZs YBhsOuPUCNUXc4IOv4knbLpiYqlOobNAmuHmR1nUF8HKj24D6j5AfutmnSrVrTkO JFkurVpsbsAEvspOevoZ1WNFsd8Y2oDWJpdAM0srM3EAIq+ex9/sq8UUlcAZjo0h syEEpNxma33OTG7x61EjwyRNtB0trqWORutqzDxuIBTCw5M/Kid5Jt8ibq9EQRGv q/XFy+6YHdqCYCTTfWxR4TWq1UAXi5jkiuUWAJbnEu/qxTsPBAGXKwnZEpTxX341 b5cBiZH2+3dDk/pDuCHk9rx+z6KbX2GJVz2bYJ6FRwK5vrSRm7dK21FgFhRDnXhp AY2b2WRFEU63T74tZ/6NT60CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 430301109861893646847506221237561988156050 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-19 18:31:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 18:31:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'divinea.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 850165054856264851335856248199370768217668395010917155746598030509984750371598553153985006938518098442951422835287016307388037335269625625097396759566714169699644530436214276720168248759157198881772148328915330456883840569299250035370881205278727064506122223855915063421080355975046220870989467631407905957700988206424983630040369651161589647483757651009135975480251856476983536986796472923272164434824247125297981235449637207649334454815416257234685911309109897688178232234714964400242819379248697051198506677612063587653583553280663486783188644598019058543331361356870269937659447637536279599905213411543138880458490180122910732274412610038745577609902882806841068868945705096210868584046848101554935895623234015196749523149270935116731218840106880974087951564220412602184339045287297707420243085154852183818969677332611005872891294531352810674924903734332119134214103328885004876370683961578884295428142932366654368475208575282216617579067469481486546988119563996010802816686297669308168735185216359978166432430585726795911214575105618299373860619916460615001618459519987796141336827291309838059649046061637221856333102014677956199902726895905567872481825415674209706452060025402900362091416300551811319855322193776793060312436653 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 162e1d8200cb225ef8274451553e5d4ec9fbd340 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinea.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divinea.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001896fa2d71c0000040300473045022100953fda4fc2fb921a035fc801d7b1047bb79986b2b02b88c09acc06d15f6c97720220170c60daad48a544f99fa4512f1cd44f9a5284682844f28a2e2ed6bcc71a100c007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001896fa2d71100000403004630440220598798f315d5e3a03718514de68ac5478ae0272d274541b2bb29ff23ac70ea4c02200d5602846539fae6ece54c7fa93f6eb2261a81ddf887cd739f20847b9cbe5e00 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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