autaborek.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:94:5e:ff:07:8d:70:b6:f1:4e:3a:93:68:af:69:d0:6e:83 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=autaborek.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:94:5e:ff:07:8d:70:b6:f1:4e:3a:93:68:af:69:d0:6e:83Serial Number (int): 311824919720065262630754887867969634856579
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5a:29:7d:9a:28:77:92:be:5f:f9:77:b8:56:f9:6d:cb:b4:ab:60:24
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5f:13:e5:49:20:61:55:cc:29:ff:be:40:42:aa:44:3f:5c:70:4d:f5
Fingerprint (sha256): 6a:45:53:1b:46:ee:10:19:b1:15:16:3e:db:7e:f2:a9:84:72:45:48:1b:8e:97:33:9b:8b:02:0c:8f:87:80:38
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate autaborek.cz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for autaborek.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autaborek.cz
www.autaborek.cz
www.autaborek.cz
Other certificates including the domain name autaborek.cz
(limited to 100 certificates)
autaborek.cz
www.nissan-dealers.cz
autaborek.cz
autaborek.cz
autolinhart.cz
www.nissan-dealers.cz
autaborek.cz
autaborek.cz
autaborek.cz
autaborek.cz
autolinhart.cz
autaborek.cz
autaborek.cz
autaborek.cz
autolinhart.cz
autaborek.cz
www.nissan-dealers.cz
autaborek.cz
autolinhart.cz
autolinhart.cz
autolinhart.cz
autaborek.cz
autaborek.cz
autaborek.cz
autaborek.cz
autolinhart.cz
autaborek.cz
www.nissan-dealers.cz
autaborek.cz
autaborek.cz
autaborek.cz
autaborek.cz
autaborek.cz
autolinhart.cz
autaborek.cz
www.nissan-dealers.cz
autaborek.cz
autaborek.cz
autolinhart.cz
www.nissan-dealers.cz
autaborek.cz
autaborek.cz
autaborek.cz
autaborek.cz
autolinhart.cz
autaborek.cz
autaborek.cz
autaborek.cz
autolinhart.cz
autaborek.cz
www.nissan-dealers.cz
autaborek.cz
autolinhart.cz
autolinhart.cz
autolinhart.cz
autaborek.cz
autaborek.cz
autaborek.cz
autaborek.cz
autolinhart.cz
autaborek.cz
www.nissan-dealers.cz
autaborek.cz
autaborek.cz
autaborek.cz
autaborek.cz
autaborek.cz
autolinhart.cz
autaborek.cz
Certificate
The complete raw certificate details for autaborek.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgISA5Re/weNcLbxTjqTaK9p0G6DMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTcxNTUzNTRaFw0y MDAxMTUxNTUzNTRaMBcxFTATBgNVBAMTDGF1dGFib3Jlay5jejCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAJt9cqFFxjzVGFpOab6IM+CwJXpxsYCUIDwi aZmZ8tEbvxDemlhmKPxO9CZVtPnT0IWa+fba8aqTNuwik45bKElrTlOZHKySz7e8 LSp2WwE9rxGx9x3w5/SufQ1aQU3Zlnr6aZKMg2L8XQmp2ZGCdoGA+YY9X7yoFvwK u3C4k7Lm901itoOoGfscn0QD9QjLqHsvM6ndSGPcPlSzZmYDKGRsIb7W0KtaeT0u vzo7Sv7DFwSJCVziS61eOsAd12IH77mRAsr2NScDWQW33m+QWpPcOpLoncJJiOcS Va2Ho0rMtui68JZKHEflo62Swws1rR+PXICRNxFD6AWZVXP8EZ8LGPyuV/CBIgTd wtS2hTsytyVXPGcCScIexd/Btx6QTkVPWUlieKNQx+WQF7qQ2/kACWG37V3E5hQF pqzdQ3DSVf5wQ+K2yzeY3HmweQIT/+mMerp7YXbhRGNz8i+6q7iaeeAOeKkAJLPr oImKklkenQXbc9g+zN4FLzo9FArxLLFrNhCpO6FVhQDofL/DqkqcxF93AX9YpfjM HTv+fFYyRpyIzCMXPkWSCUe8kXyS6Rg9nZ0g1ofoqD6DiOEv3O3FdEOYeXi/6XL3 OegJGLQmO0nHbloRUqqZ58fBvb/A9mPPt0ctiU9UPzxu22QMTrbIvufLXYMd2GDM +T5ci7q1AgMBAAGjggJyMIICbjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFopfZoo d5K+X/l3uFb5bcu0q2AkMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIMYXV0YWJvcmVrLmN6ghB3d3cu YXV0YWJvcmVrLmN6MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYK KwYBBAHWeQIEAgSB9ASB8QDvAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz0 5UVH9HgAAAFt2qPbWQAABAMARzBFAiA4gqpQuaGOvGk12qhNXQFxdPvenx3fy3GI uVTAO0FTLwIhAInBYgRglMZKL8ogFC59Rd+ZgAUjChnj/8Q+QvkjmcxUAHUAXqdz +d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFt2qPdYwAABAMARjBEAiA9 3J0uRruYIvjLjARBcIAy4zuceAVaWBRClVP1+DJbNwIgV0b6k2k/dVdT0TF8EAd5 JXvIPwg/DdKaRgBDHfSvQZowDQYJKoZIhvcNAQELBQADggEBAC3xvQEAUoq4vGRB cyM/+/fakkV+Z6fWQPHV2neJG1D/B5hAZ6ZyoZu8/YXuLX09TM9T/i0RMpfdFpF1 jsyEh/QvVd9HP6Rw2dRIsZgnX9JXIp8zEXMp5JAFm3DkxEq+1OEBUfmH/vCCIHhz KSeieFgsE7jYk46TvgP2oPMl/SigPHkwX7sDufB7Fo2zdGDT1s54pz2c4EZP8rmN MMJ5xte2E6sMZtFFxqfHV1pb25d+8S/rkXS3PjkKk+SHMy53OCB15WVzcv9hCVj9 2IK6AbJeZTl8X2wHIrZeQFo5TzigaxaFhnitCF65cdG2FL81asaZoMyEmbN2x1Qn PrkPonE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAm31yoUXGPNUYWk5pvogz 4LAlenGxgJQgPCJpmZny0Ru/EN6aWGYo/E70JlW0+dPQhZr59trxqpM27CKTjlso SWtOU5kcrJLPt7wtKnZbAT2vEbH3HfDn9K59DVpBTdmWevppkoyDYvxdCanZkYJ2 gYD5hj1fvKgW/Aq7cLiTsub3TWK2g6gZ+xyfRAP1CMuoey8zqd1IY9w+VLNmZgMo ZGwhvtbQq1p5PS6/OjtK/sMXBIkJXOJLrV46wB3XYgfvuZECyvY1JwNZBbfeb5Ba k9w6kuidwkmI5xJVrYejSsy26LrwlkocR+WjrZLDCzWtH49cgJE3EUPoBZlVc/wR nwsY/K5X8IEiBN3C1LaFOzK3JVc8ZwJJwh7F38G3HpBORU9ZSWJ4o1DH5ZAXupDb +QAJYbftXcTmFAWmrN1DcNJV/nBD4rbLN5jcebB5AhP/6Yx6unthduFEY3PyL7qr uJp54A54qQAks+ugiYqSWR6dBdtz2D7M3gUvOj0UCvEssWs2EKk7oVWFAOh8v8Oq SpzEX3cBf1il+MwdO/58VjJGnIjMIxc+RZIJR7yRfJLpGD2dnSDWh+ioPoOI4S/c 7cV0Q5h5eL/pcvc56AkYtCY7ScduWhFSqpnnx8G9v8D2Y8+3Ry2JT1Q/PG7bZAxO tsi+58tdgx3YYMz5PlyLurUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 311824919720065262630754887867969634856579 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 15:53:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 15:53:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'autaborek.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 634343980012991731666354077402402362141476837633754376005932147812111947856470540844099112417888412853845250396911916080733566346295135707740007593439776041561150952594090521517171131524703355996793891059014085979000921365520462014074643818785086463017506518572954055087005798499981271961110881233291830514290986093075883613147124811600965928156949896889539983465992820977860869167470337273251341502383924322111592471966864232545996657114714491315307228381286129084537355057306209873265445717781826068871172526679905506143031545285007950108507713613355667621294012416201992319983987171122210388347410510145180656916984792586159012991412041312281934963467601640739293052008335826811174389615858958053766899788951116528022404359780718623094997338457667362526794775456590647832986536899998263307393262632578698462359877331595171904774448630964260379340186639177995140604606900938719965280693724258950205638707717966260465251900135612959563663222353793938326138655443211290611993817307396665129080537174416920496132808123778901394539960493627757659978508129169141323926759372926682034703819621515808783590777168424167206953990501888224042394989921786282209138010901904450206355698809050502842117639598327432308163917257207344348978199221 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5a297d9a287792be5ff977b856f96dcbb4ab6024 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autaborek.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autaborek.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ddaa3db59000004030047304502203882aa50b9a18ebc6935daa84d5d017174fbde9f1ddfcb7188b954c03b41532f02210089c162046094c64a2fca20142e7d45df998005230a19e3ffc43e42f92399cc540075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ddaa3dd63000004030046304402203ddc9d2e46bb9822f8cb8c0441708032e33b9c78055a5814429553f5f8325b3702205746fa93693f755753d1317c100779257bc83f083f0dd29a4600431df4af419a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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