*.lifestories.world
Issued by Actalis Domain Validation Server CA G2
About this certificate
This digital certificate with serial number 57:da:33:bb:c9:38:d3:2e:2d:e5:43:f8:c7:0f:7d:69 was issued on by Actalis S.p.A./03358520967.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.lifestories.world,OU=Domain Control Validated by Actalis S.p.A.
Actalis S.p.A./03358520967
Organization:
Actalis S.p.A./03358520967
State / Province:
Bergamo
Locality: Ponte San Pietro
Country: IT
Locality: Ponte San Pietro
Country: IT
This certificate has expire since
Certificate Details
Serial Number (hex): 57:da:33:bb:c9:38:d3:2e:2d:e5:43:f8:c7:0f:7d:69Serial Number (int): 116775805629279633859447628917082389865
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: ca:43:ec:ec:41:5d:5c:4b:72:f1:49:b1:e7:b5:b7:1e:47:16:ff:d9
AuthorityKeyId: d5:40:08:f7:96:22:4e:19:b3:da:e5:61:93:ba:ba:b7:3e:eb:b9:cd
Fingerprint (sha1): 9e:3c:7e:66:d3:19:61:b3:2f:b5:fc:3a:a8:19:31:67:df:46:83:2d
Fingerprint (sha256): 68:a1:f6:02:92:3d:4c:59:6c:59:77:ca:a9:67:0f:da:82:ac:b1:40:27:0c:c0:c5:20:0d:59:26:8b:4d:83:b9
Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg2
Revocation information
OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G2CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G2/getLastCRL
Check the revocation status for certificate *.lifestories.world
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.lifestories.world
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.lifestories.world
lifestories.world
lifestories.world
Other certificates including the domain name lifestories.world
(limited to 100 certificates)
Certificate
The complete raw certificate details for *.lifestories.world in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIQV9ozu8k40y4t5UP4xw99aTANBgkqhkiG9w0BAQsFADCB kDELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl IFNhbiBQaWV0cm8xIzAhBgNVBAoMGkFjdGFsaXMgUy5wLkEuLzAzMzU4NTIwOTY3 MS8wLQYDVQQDDCZBY3RhbGlzIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBH MjAeFw0xOTA1MTUxMDE1MDJaFw0yMDA1MTUxMDE1MDJaMFMxMzAxBgNVBAsMKkRv bWFpbiBDb250cm9sIFZhbGlkYXRlZCBieSBBY3RhbGlzIFMucC5BLjEcMBoGA1UE AwwTKi5saWZlc3Rvcmllcy53b3JsZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAMDe2nclvlSbtx3DW7zLr7+cIPLJcCtjAVzuTBTXH04WZEWQiNjB9IWj JgFhh7qoVECPXwFlYvkA6bSWsvjx9Lqxj5T4tNvxvrwGO9McE/8Q1vv2fs0cfSns AvxgJxMJ3Gs2YEUs81kayBJzUzZb3JrQYYnddVp35dwj4DvQo2O9wsBeMZaVAjVz YmMbJOmXCrnyJ2EDeQKw6Z+kYasrLp3++/b98loVjMnx3aRszDrAI8+avUJGw3pQ e19jNTcV2IQuJ67xfBeWl9zmydM015VE0TVy3sG0dD3dwQ0H9NJzNRFPBU4E8u4/ B/rpXNK2Lb7UUkrjDA7QowR0pJdJFtECAwEAAaOCAtgwggLUMAwGA1UdEwEB/wQC MAAwHwYDVR0jBBgwFoAU1UAI95YiThmz2uVhk7q6tz7ruc0wfQYIKwYBBQUHAQEE cTBvMDoGCCsGAQUFBzAChi5odHRwOi8vY2FjZXJ0LmFjdGFsaXMuaXQvY2VydHMv YWN0YWxpcy1hdXRkdmcyMDEGCCsGAQUFBzABhiVodHRwOi8vb2NzcDA2LmFjdGFs aXMuaXQvVkEvQVVUSERWLUcyMDEGA1UdEQQqMCiCEyoubGlmZXN0b3JpZXMud29y bGSCEWxpZmVzdG9yaWVzLndvcmxkMFEGA1UdIARKMEgwPAYGK4EfARcBMDIwMAYI KwYBBQUHAgEWJGh0dHBzOi8vd3d3LmFjdGFsaXMuaXQvYXJlYS1kb3dubG9hZDAI BgZngQwBAgEwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMEgGA1UdHwRB MD8wPaA7oDmGN2h0dHA6Ly9jcmwwNi5hY3RhbGlzLml0L1JlcG9zaXRvcnkvQVVU SERWLUcyL2dldExhc3RDUkwwHQYDVR0OBBYEFMpD7OxBXVxLcvFJsee1tx5HFv/Z MA4GA1UdDwEB/wQEAwIFoDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2APCVpFny ANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAABarsGIvkAAAQDAEcwRQIhAIFJ 1tgQbNroPiw/B9iPsmAY6EeBkP6V3vf8cLvbHzQHAiAgjggihlSrzY3M+oRW0kHD UbKLoBKPReqXtvzk93Gi0wB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6 qP3LAAABarsGIG8AAAQDAEcwRQIhAKc7REEDA1d1Me6WQw3kZj6PLtI9jXx/c8HJ SYyQIU6EAiACzIf1Dz1ZIVMEZUW3LrOErV2PeLskBvJzAg/HBbABcDANBgkqhkiG 9w0BAQsFAAOCAQEADzqn2dJz+fz5j7stqJyhJpWapSVLeglLU9HTpgfu1RnGlWLQ mnml6aXwuTqBBFLMtlbO53SIk0Xo04neisZJCLfwAZGBn9nYIAIoFU+4PKDMIJaO 0k346/1WOtst5JERp34KQVpc1D05qQ1tEFhu5JeKE/UEcIFmayacrE+9QKCtWSKe fU59XNDUTH9hz08djTRZD9V+8/8Ts46ij7q+UZD47T7gXIvw7LHef3+Ov3SwF3bt qDVGPmlyrYENZDlcTuQJotxeUHG7IRPrIMXmMOjTLM5B/GGFYB/VgU/pdUjHDOwm OZkY2Ch8PaWglJc8Pj93LJWOxgnYp9kPBAJx2Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN7adyW+VJu3HcNbvMuv v5wg8slwK2MBXO5MFNcfThZkRZCI2MH0haMmAWGHuqhUQI9fAWVi+QDptJay+PH0 urGPlPi02/G+vAY70xwT/xDW+/Z+zRx9KewC/GAnEwncazZgRSzzWRrIEnNTNlvc mtBhid11Wnfl3CPgO9CjY73CwF4xlpUCNXNiYxsk6ZcKufInYQN5ArDpn6Rhqysu nf779v3yWhWMyfHdpGzMOsAjz5q9QkbDelB7X2M1NxXYhC4nrvF8F5aX3ObJ0zTX lUTRNXLewbR0Pd3BDQf00nM1EU8FTgTy7j8H+ulc0rYtvtRSSuMMDtCjBHSkl0kW 0QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 116775805629279633859447628917082389865 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-15 10:15:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 10:15:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Domain Control Validated by Actalis S.p.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lifestories.world' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24347647651202125332392239934613600337101845710897111396405804982213718015167638499709790232015565658656919282345736660074272337146100005222123838898452645282966561342523972910603316030827538150442386368928273503539708787495452541459245821451121358207048053443322169854115291390393583829706094798406524031035617522951161850788934486468909000987350817289289506642351209685311305708952914034262159063143111106799831955386013048827449997452793032419786036210281913804237908600903880729160291780992014941514621215425433801463683041055437668255180559790713210239848806476497622003575945057048195223677003474797888245667537 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d54008f796224e19b3dae56193babab73eebb9cd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg2' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifestories.world' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifestories.world' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G2/getLastCRL' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ca43ecec415d5c4b72f149b1e7b5b71e4716ffd9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016abb0622f900000403004730450221008149d6d8106cdae83e2c3f07d88fb26018e8478190fe95def7fc70bbdb1f34070220208e08228654abcd8dccfa8456d241c351b28ba0128f45ea97b6fce4f771a2d3007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016abb06206f0000040300473045022100a73b44410303577531ee96430de4663e8f2ed23d8d7c7f73c1c9498c90214e84022002cc87f50f3d592153046545b72eb384ad5d8f78bb2406f273020fc705b00170 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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