lifetimefitness.com

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate


This digital certificate with serial number 5a:e6:08:ba:22:54:9c:8e:1a:a6:5b:88:85:c3:07:0e was issued on by Symantec Corporation .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Life Time Fitness

Organization: Life Time Fitness
Organization unit: LTT
State / Province: Minnesota
Locality: Chanhassen
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
State / Province: Minnesota
Locality: Chanhassen
Country: US

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 5a:e6:08:ba:22:54:9c:8e:1a:a6:5b:88:85:c3:07:0e
Serial Number (int): 120824924904445275195737503809902151438
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): b3:3e:0c:80:40:c0:d4:c0:4d:42:ea:d0:96:3f:18:57:b8:3a:5f:d2
Fingerprint (sha256): 4e:d2:db:36:b1:41:3e:a2:9a:e2:ce:02:da:14:48:21:b1:4e:ae:94:df:fe:f1:13:86:36:08:1f:c5:40:05:80

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for the current certificate on lifetimefitness.com
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: lifetimefitness.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIF9DCCBNygAwIBAgIQWuYIuiJUnI4apluIhcMHDjANBgkqhkiG9w0BAQsFADB+ MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE1MDUwODAwMDAwMFoX DTE4MDUwODIzNTk1OVowfjELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCU1pbm5lc290 YTETMBEGA1UEBwwKQ2hhbmhhc3NlbjEaMBgGA1UECgwRTGlmZSBUaW1lIEZpdG5l c3MxDDAKBgNVBAsMA0xUVDEcMBoGA1UEAwwTbGlmZXRpbWVmaXRuZXNzLmNvbTCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKz7f0UugGORkflNDN5c4aIv oZXZz8+kuVRwiXqpUrCr1kP6s7TlzuvR8fjPKuIY5dwsvPiDhTNVY45gNessvxSf rOPYSuJ871xDMBaPV4QH77X6uh5nc/rIa2tviCGw+S8FVFhENitL5Ne2rCTsYK64 pjSYiDOacN+lbkm+Nq2uaUZAmHI2OnbI65xGErfInPl2NokvoOQvAQj0mSDWbIto A2gL6w2B2B/3h4RTNvt2IVkUUrRxfb6Trb9v9+uwRWhH1do7AfwuzNJSXW7q5MnP GeOw6RfStl1lK3lswxoKHvi2c2m5mYPlxZknh4miwM88udQM4SpMwWXtRXsK2xHP YVFEaB3Dddhp0FhHvOBmdmyqrghwoJ1XJtwhmBStbga+WU0oZ7mgc5NIhaEAHdwo hTGazWRF5eYQ55mZBQjRqP9VG38vU9XjVTfQYArji+xwo+goyMLXrko27lJQaW0r WfGe4S4hVUqArUpwN3Uu7SPE1OS/7SspwW70yVVDblcXXF3c18y1bj7+TP2Qmp8m gDcsKnoRgxFYO716ehFKroLx4yJaLV/9JvLdycIqq6C4ogVhJTNOGZrVvst2/szL 1FHcUkBX1czlwslGt5h6AlLteBw/K74m7C/MZdBRldNTLukbG3oGtUPn7t6AFMrj Owcs4+eJX4Zs86GbBmF/AgMBAAGjggFsMIIBaDAeBgNVHREEFzAVghNsaWZldGlt ZWZpdG5lc3MuY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjBlBgNVHSAEXjBcMFoGCmCGSAGG+EUBBzYw TDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUH AgIwGRoXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHwYDVR0jBBgwFoAUX2DPYZBV 34RDFIpgKrL1evRDGO8wKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3NzLnN5bWNi LmNvbS9zcy5jcmwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8v c3Muc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vc3Muc3ltY2IuY29tL3Nz LmNydDANBgkqhkiG9w0BAQsFAAOCAQEAUSBP8W0W6iC3o2xjIijRVylfJoelKeWT GtpIMSgBAEIKH4KfCEwoNrMonk9KeDi4rpar9cBXbsAAr4WtlD5chty7IETBIyf0 BFxROV8iaBtjCN2ThVXWu8QSsA8tpKSeGtqy6H8+ogDu43qcg7/ixqlJwDpfU1mY 9HSraZtNCD7gz05Wx8grXjy0aj8+xMqkMWer6aTulZAi8mwX+Rg+cnH10PO7MUf/ A9uuA1thzBnsSBczuYmHLzNfH2dRzUbBm7P2Bq86mnY9SpBP+DgW965jSM18f0GV UWTGz3V7oZ1B7VTuW+vJUzECLWymSWW6Xj6j4pjkSlRvIjyMmWhXCw== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArPt/RS6AY5GR+U0M3lzh oi+hldnPz6S5VHCJeqlSsKvWQ/qztOXO69Hx+M8q4hjl3Cy8+IOFM1VjjmA16yy/ FJ+s49hK4nzvXEMwFo9XhAfvtfq6Hmdz+shra2+IIbD5LwVUWEQ2K0vk17asJOxg rrimNJiIM5pw36VuSb42ra5pRkCYcjY6dsjrnEYSt8ic+XY2iS+g5C8BCPSZINZs i2gDaAvrDYHYH/eHhFM2+3YhWRRStHF9vpOtv2/367BFaEfV2jsB/C7M0lJdburk yc8Z47DpF9K2XWUreWzDGgoe+LZzabmZg+XFmSeHiaLAzzy51AzhKkzBZe1Fewrb Ec9hUURoHcN12GnQWEe84GZ2bKquCHCgnVcm3CGYFK1uBr5ZTShnuaBzk0iFoQAd 3CiFMZrNZEXl5hDnmZkFCNGo/1Ubfy9T1eNVN9BgCuOL7HCj6CjIwteuSjbuUlBp bStZ8Z7hLiFVSoCtSnA3dS7tI8TU5L/tKynBbvTJVUNuVxdcXdzXzLVuPv5M/ZCa nyaANywqehGDEVg7vXp6EUqugvHjIlotX/0m8t3JwiqroLiiBWElM04ZmtW+y3b+ zMvUUdxSQFfVzOXCyUa3mHoCUu14HD8rvibsL8xl0FGV01Mu6Rsbega1Q+fu3oAU yuM7Byzj54lfhmzzoZsGYX8CAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 120824924904445275195737503809902151438 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Minnesota' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Chanhassen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Life Time Fitness' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LTT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lifetimefitness.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 705706665846276484841738056918434218743792680882518129178916945780313220310782920991489281847905180397093440657140122698707277897462694724270766566344342663598403938628789212003219676573204718319607263816769649230583257181260747181103043728996583761437497026809815436176081377336620420156956178249209456255773134468564411641081097075459240263435436253435175771028600819431618560759206964897368879303888066103937397583816246394831565120175515017350504466927663160635961660299862994556592785522427895577989623460651366809751740584824499561006016470892406352215002442621403241089843967138958596029757365427055146316253746536586736006418700718957284084360867554677711480266595878839493223710017650504760374529777745546841083757631433757708208487315970688908108812586648819413424071817076908797816839631773169281930993515103638349153983521229418950583260852723555800978789308070087706131252199738191307125198320608962578717657398367780920854116904276181399545947672599359635586110075352345028532365600977281930969946686486958552601060160267585124771560580764088594777348466619349860932721473133076425994385828773930731909533860257991167883578176249326066635215657814133907225531790060410459596385472131165167666201734656987377348741849471 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifetimefitness.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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