qasschool.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e0:6b:e2:cf:e6:41:08:ce:36:aa:0d:c7:3b:ce:b2:4f:be was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=qasschool.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e0:6b:e2:cf:e6:41:08:ce:36:aa:0d:c7:3b:ce:b2:4f:beSerial Number (int): 337703513056911363130149758890379159162814
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 25:79:53:85:49:d4:e1:19:20:12:67:ff:e7:24:43:c9:f7:cd:6b:9c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 09:ff:ec:ea:bf:53:89:e5:ef:52:54:e0:c5:79:a4:f7:93:86:fe:48
Fingerprint (sha256): 5d:a5:d6:a5:c4:36:87:7f:46:29:2d:c4:8a:e5:94:ab:2a:18:06:e2:e7:34:e5:4f:f4:cc:07:56:a9:ba:96:ad
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate qasschool.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for qasschool.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
qasschool.org
www.qasschool.org
www.qasschool.org
Other certificates including the domain name qasschool.org
(limited to 100 certificates)
cvhs.cvsd.org
www.walnuteagles.net
admin.aes.cvsd.org
www.qasschool.org
admin.bohs.bousd.us
nes.jeffersonschools.org
qasschool.org
www.qasschool.org
www.qasschool.org
admin.statesvilleroadelementaryschool.wearecms.com
admin.aes.cvsd.org
www.qasschool.org
www.qasschool.org
starmountacademyofexcellence.wearecms.com
qasschool.org
qasschool.org
www.qasschool.org
bohs.bousd.k12.ca.us
admin.bms.cvsd.org
www.ms366.org
admin.aes.cvsd.org
admin.myersparkhighschool.wearecms.com
www.gmcs.org
sphstigers.org
www.qasschool.org
qasschool.org
www.qasschool.org
qasschool.org
admin.bohs.bousd.us
our-lady-of-lourdes-school.org
www.qasschool.org
admin.bohs.bousd.us
admin.aes.cvsd.org
smithfieldelementaryschool.wearecms.com
www.qasschool.org
admin.reedycreekelementaryschool.wearecms.com
qasschool.org
qasschool.org
www.walnuteagles.net
admin.aes.cvsd.org
www.qasschool.org
admin.bohs.bousd.us
nes.jeffersonschools.org
qasschool.org
www.qasschool.org
www.qasschool.org
admin.statesvilleroadelementaryschool.wearecms.com
admin.aes.cvsd.org
www.qasschool.org
www.qasschool.org
starmountacademyofexcellence.wearecms.com
qasschool.org
qasschool.org
www.qasschool.org
bohs.bousd.k12.ca.us
admin.bms.cvsd.org
www.ms366.org
admin.aes.cvsd.org
admin.myersparkhighschool.wearecms.com
www.gmcs.org
sphstigers.org
www.qasschool.org
qasschool.org
www.qasschool.org
qasschool.org
admin.bohs.bousd.us
our-lady-of-lourdes-school.org
www.qasschool.org
admin.bohs.bousd.us
admin.aes.cvsd.org
smithfieldelementaryschool.wearecms.com
www.qasschool.org
admin.reedycreekelementaryschool.wearecms.com
qasschool.org
qasschool.org
Certificate
The complete raw certificate details for qasschool.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgISA+Br4s/mQQjONqoNxzvOsk++MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMTUwNzU3MjJaFw0x OTAxMTMwNzU3MjJaMBgxFjAUBgNVBAMTDXFhc3NjaG9vbC5vcmcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmyFcr16toZBq+j4NhaS7P9Vj3s03Djnnq /Mam4KIC3XcHc+5hflUDp0y25zxmoDz/Mv8Cg7V1of7nKO+aD+2onTv2o5AbEsF2 Lgiqz6WNHGu1ZWXIwMJuXx0KXpj1fbr2nLHXWCnY/HM7ekSAM/EZNZWkjH1cuwMm LtCZiNDHg2j3ob0SYdhgZomHyjVJtKJ5+R+xVDU0YkmzjgzBHRvCtj0R/xhpRmRu i8mO48Y1SJT5D68aJdXs7tR6YZhxP9HjZ1o/MZSPF1Wif8r6UHfamQIy3UrX49lK PzfEWXP3BEkhjR9sUxIkq0g7RdQQub7l6xQ85NqzMVIXcOvRxzZ3AgMBAAGjggMm MIIDIjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCV5U4VJ1OEZIBJn/+ckQ8n3zWuc MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wKwYDVR0RBCQwIoINcWFzc2Nob29sLm9yZ4IRd3d3LnFhc3NjaG9vbC5vcmcw gf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIw gZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5 IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhl IENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0 Lm9yZy9yZXBvc2l0b3J5LzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1AG9Tdqwx 8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABZnbxry8AAAQDAEYwRAIgDvhx a+pKfYTi5OFACI1vmQW6MZ+ktP9Qzag3lluRxZgCIHAuyL89Oi1g4a9eb6NVMijt SA+8N2CeO0dYwpcXg8aXAHUAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL 2I0AAAFmdvGuwgAABAMARjBEAiAQO76FKmnypWkHby8tnZVDTpAzXpqA7sb9yxhC YkHI9QIgEJ5egE4G1lelBB+NLw9evJH/yHRK6CHbpJftkhbuB5owDQYJKoZIhvcN AQELBQADggEBAFPvucE0ZnSZ363+1HQQdHpoaF4FD2LZ5Hd7bkBwR7WgIwj7HX0u dM/sa3iIGOJIS4arSVTu4szNFARwrINgm/d6pP9hFqNQaTOeeC66g19OhHhn5S8c /PXHHCDksim5dOGMwR8lVaoTV0UKYSyuw4r0NPV38lKyQnUHI2l+1Z5H42LPYX/y 6V33qqg+SBx4jjOhfDxRJ8UrsGqZ6OOen1betqNHSxZ2oYJGGg1tMg9JlNAeM4S+ J5ivMkGZjSZaKpF+9v6U/Q7KgXNKm5HfLngi3Nj1i5H+3pGpoBIN1Ftfhhioa2HC 9bffPe8/oEexngi/Bfiua4Q+KMuQ4C4aJ+o= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApshXK9eraGQavo+DYWku z/VY97NNw4556vzGpuCiAt13B3PuYX5VA6dMtuc8ZqA8/zL/AoO1daH+5yjvmg/t qJ079qOQGxLBdi4Iqs+ljRxrtWVlyMDCbl8dCl6Y9X269pyx11gp2PxzO3pEgDPx GTWVpIx9XLsDJi7QmYjQx4No96G9EmHYYGaJh8o1SbSiefkfsVQ1NGJJs44MwR0b wrY9Ef8YaUZkbovJjuPGNUiU+Q+vGiXV7O7UemGYcT/R42daPzGUjxdVon/K+lB3 2pkCMt1K1+PZSj83xFlz9wRJIY0fbFMSJKtIO0XUELm+5esUPOTaszFSF3Dr0cc2 dwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 337703513056911363130149758890379159162814 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-15 07:57:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-13 07:57:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qasschool.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21054350213207233113911101426930838225364329541808291685398403755172274735978177628012778706228636486072420147172421087007599204092513637363520786391078913017864121516311199615167404268689869573133948194101311165246315335879665778375695766892138352885785412140655860967130962933258229870367339058412133779980355260719980557086946767718463680904717650644028265779930199523930534159285354639669399224778839063389493559955670078050603428609930519170467506009842435751604392676078332870278542635636900415267871313533162193364329972419887516105081751345962760921020013439556256037607816580046711052756396506595596909885047 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2579538549d4e119201267ffe72443c9f7cd6b9c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qasschool.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qasschool.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016676f1af2f000004030046304402200ef8716bea4a7d84e2e4e140088d6f9905ba319fa4b4ff50cda837965b91c5980220702ec8bf3d3a2d60e1af5e6fa3553228ed480fbc37609e3b4758c2971783c69700750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016676f1aec200000403004630440220103bbe852a69f2a569076f2f2d9d95434e90335e9a80eec6fdcb18426241c8f50220109e5e804e06d657a5041f8d2f0f5ebc91ffc8744ae821dba497ed9216ee079a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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