*.terranco.com
Issued by RapidSSL SHA256 CA
About this certificate
This digital certificate with serial number 77:94:5a:19:cc:f9:d8:3e:af:1a:5e:e9:d8:51:21:46 was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=*.terranco.com
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 77:94:5a:19:cc:f9:d8:3e:af:1a:5e:e9:d8:51:21:46Serial Number (int): 158948418894473520591636519483497062726
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f
Fingerprint (sha1): 27:1d:5c:48:7d:a0:e4:6a:73:53:8d:ae:87:26:16:e6:3c:fd:a5:40
Fingerprint (sha256): 5f:cf:91:9e:70:fe:42:73:f8:81:3b:8c:9c:30:a7:04:72:da:8a:ae:0f:37:27:f1:52:4f:49:b6:43:c3:b6:bb
Issuing Certificate URL: http://gp.symcb.com/gp.crt
Revocation information
OCSP Server: http://gp.symcd.comCRL Distribution Point: http://gp.symcb.com/gp.crl
Check the revocation status for certificate *.terranco.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.terranco.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.terranco.com
terranco.com
terranco.com
Other certificates including the domain name terranco.com
(limited to 100 certificates)
helpdesk.kiifb.org
helpdesk.kiifb.org
*.terranco.com
helpdesk.kiifb.org
*.terranco.com
quantum.church
*.terranco.com
*.terranco.com
www.support.permassist.com.au
support.chostar.co.uk
terranco.com
helpdesk.kiifb.org
okdata.com
fmfic.com
mccysorg.okdata.com
support.myf.io
helpdesk.kiifb.org
helpdesk.kiifb.org
straightbytes.okdata.com
webdisk.terrasoba.com
*.terranco.com
terranco.com
terranco.com
helpdesk.kiifb.org
terranco.com
webdisk.fmfic.com
cpanel.fmfic.com
helpdesk.kiifb.org
helpdesk.kiifb.org
fmfic.com
helpdesk.kiifb.org
helpdesk.kiifb.org
support.dyork.io
support.terranco.com
quantum.church
helpdesk.kiifb.org
*.terranco.com
helpdesk.kiifb.org
terranco.com
helpdesk.kiifb.org
www.terranco.com
*.terranco.com
helpdesk.kiifb.org
*.terranco.com
helpdesk.kiifb.org
*.terranco.com
quantum.church
*.terranco.com
*.terranco.com
www.support.permassist.com.au
support.chostar.co.uk
terranco.com
helpdesk.kiifb.org
okdata.com
fmfic.com
mccysorg.okdata.com
support.myf.io
helpdesk.kiifb.org
helpdesk.kiifb.org
straightbytes.okdata.com
webdisk.terrasoba.com
*.terranco.com
terranco.com
terranco.com
helpdesk.kiifb.org
terranco.com
webdisk.fmfic.com
cpanel.fmfic.com
helpdesk.kiifb.org
helpdesk.kiifb.org
fmfic.com
helpdesk.kiifb.org
helpdesk.kiifb.org
support.dyork.io
support.terranco.com
quantum.church
helpdesk.kiifb.org
*.terranco.com
helpdesk.kiifb.org
terranco.com
helpdesk.kiifb.org
www.terranco.com
*.terranco.com
Certificate
The complete raw certificate details for *.terranco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgIQd5RaGcz52D6vGl7p2FEhRjANBgkqhkiG9w0BAQsFADBC MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE2MTEwOTAwMDAwMFoXDTE4MTIwOTIzNTk1 OVowGTEXMBUGA1UEAwwOKi50ZXJyYW5jby5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs3l5h4et+vBQYoOmR2+xScOThOjmV138SnDTU+QjuVWxy yvEi7He7kPOIhmdXiLbPA08XPTsoN/ijTRpS8U1/AY6cV+dUBUM43ZfXbyKUGZHu eSgAOFPL+5szxbFazfcBiiczMKCpuLtYDfT7caaeAlffJJVUrqulU4/tR4hLpXhR RKoCXtcIdH35ibRUUWQZFdhDitEFiuwOUuyhi7shA7iRuWbUTBqwsdrkmGxvCH6G Dt9LovDPjbIv4Z2CNZynrm89ceFVqcjBoA97tkAp2NdPg2H6I72sb0yuxKxhVDuz hg3SWjx0O5LYliYmgepN68TIa8Bi04wOzuxFLgrtAgMBAAGjggMAMIIC/DAnBgNV HREEIDAegg4qLnRlcnJhbmNvLmNvbYIMdGVycmFuY28uY29tMAkGA1UdEwQCMAAw KwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2dwLnN5bWNiLmNvbS9ncC5jcmwwbwYD VR0gBGgwZjBkBgZngQwBAgEwWjAqBggrBgEFBQcCARYeaHR0cHM6Ly93d3cucmFw aWRzc2wuY29tL2xlZ2FsMCwGCCsGAQUFBwICMCAMHmh0dHBzOi8vd3d3LnJhcGlk c3NsLmNvbS9sZWdhbDAfBgNVHSMEGDAWgBSXwidQnsLJ7AyIMsh8reKmAU/abzAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcG CCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2dwLnN5bWNkLmNvbTAm BggrBgEFBQcwAoYaaHR0cDovL2dwLnN5bWNiLmNvbS9ncC5jcnQwggF9BgorBgEE AdZ5AgQCBIIBbQSCAWkBZwB1AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM22 7L7MAAABWEo4s1YAAAQDAEYwRAIgWrAAurPppFN9y9GQwPLhcnZqr3z5SuP+P4zq cLBBoj4CICe109SOGgIW/YAq9h/FYIxJNzWOpkwxnHm2gf2xUoDWAHYAaPaY+B9k gr46jO65KB1M/HFRXWeT1ETRCmesu09P+8QAAAFYSjizdgAABAMARzBFAiAamQ/z UF1CXyzqERLyINWzmgXaPzqbezPqyes6pAxaWgIhAPbID309Qd1kYrvtOqCugrYe 6fnP6BE+e2A7PJCWXIqzAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo /csAAAFYSji1VwAABAMARzBFAiBYK/2Q3BJY6NTZGqazKoNZ2JlbBp8I1OCRFAQf tfr4bQIhAN+kmKzElQntQsIibi/Ky+LKo7pGM8sb8tyiaQpZUi57MA0GCSqGSIb3 DQEBCwUAA4IBAQArQG8zRwclDM/t8o01v7/t4SlqgpiXiuJW2/dfewZUcvorXTY1 /nTf2j96PYviRtltIa09nnimt9A2B+njfsluui4awO7ryJNYBcBXfaoBC7bgpeSR 6NVUbxoJRI9Y5FH7D+pPjB7S5T9vA89HziWmloUSzRp7Nej/1GJWs4ITy+ZdEZBI nfSEGVIhjBXN6ZWXGs2btyMzXGnW0hKSMcI+0/pk5soL9jcRJ5DeOqr9DaFlKXhn WytCSvE5oYLsawWzEvySj/YBeMmEQ+zHT/R9DK5Hr93tu0ctamW2HfQPJJnoMfUG kJ/mxjTThfzC5oPZ2SU7L94IFO2DSd2RGucc -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN5eYeHrfrwUGKDpkdvs UnDk4To5ldd/Epw01PkI7lVscsrxIux3u5DziIZnV4i2zwNPFz07KDf4o00aUvFN fwGOnFfnVAVDON2X128ilBmR7nkoADhTy/ubM8WxWs33AYonMzCgqbi7WA30+3Gm ngJX3ySVVK6rpVOP7UeIS6V4UUSqAl7XCHR9+Ym0VFFkGRXYQ4rRBYrsDlLsoYu7 IQO4kblm1EwasLHa5Jhsbwh+hg7fS6Lwz42yL+GdgjWcp65vPXHhVanIwaAPe7ZA KdjXT4Nh+iO9rG9MrsSsYVQ7s4YN0lo8dDuS2JYmJoHqTevEyGvAYtOMDs7sRS4K 7QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 158948418894473520591636519483497062726 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.terranco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21822642537660578143791684090725543559382139602208802311379543646182960061052298697889555555293659092824669349930698444266906271806421567696103618702726782556280550973534375865118250537374694987237900206061565696576752997482120760129318199660345972844516236346072242139355728432401485216182800025357161261990113701994716702110605448573908314420808702775610605520369943895202519595916105472553139819361087069321304051828989827718228811413216642772394946176791132194519562305107636915778946016574289610171102263972923125106128581989827668503798739940408002185825452373155788770456978538179348551178964450328787689540333 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.terranco.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terranco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001584a38b356000004030046304402205ab000bab3e9a4537dcbd190c0f2e172766aaf7cf94ae3fe3f8cea70b041a23e022027b5d3d48e1a0216fd802af61fc5608c4937358ea64c319c79b681fdb15280d600760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001584a38b376000004030047304502201a990ff3505d425f2cea1112f220d5b39a05da3f3a9b7b33eac9eb3aa40c5a5a022100f6c80f7d3d41dd6462bbed3aa0ae82b61ee9f9cfe8113e7b603b3c90965c8ab3007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001584a38b55700000403004730450220582bfd90dc1258e8d4d91aa6b32a8359d8995b069f08d4e09114041fb5faf86d022100dfa498acc49509ed42c2226e2fcacbe2caa3ba4633cb1bf2dca2690a59522e7b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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