group.rwe
- RWE AG -
Issued by GlobalSign RSA OV SSL CA 2018
About this certificate
This digital certificate with serial number 42:ef:e3:c6:8f:5f:a1:2b:cc:55:8c:7c was issued on by GlobalSign nv-sa.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)
RWE AG
Organization:
RWE AG
State / Province:
Nordrhein-Westfalen
Locality: Essen
Country: DE
Locality: Essen
Country: DE
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 42:ef:e3:c6:8f:5f:a1:2b:cc:55:8c:7cSerial Number (int): 20716019559074762192240086140
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 45:d4:06:23:06:3a:6e:3c:5a:8a:a7:83:f5:85:93:c0:f5:3a:2e:d2
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb
Fingerprint (sha1): 92:f6:15:e0:f7:ba:e8:f7:45:fb:d4:84:5c:82:de:1c:87:4b:b1:5a
Fingerprint (sha256): 6c:22:68:92:30:a4:59:de:cb:d3:6c:a8:ff:70:e2:9c:ae:25:2c:d1:9f:3a:c2:8b:76:2d:bf:94:c4:3e:d2:da
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018Check the revocation status for certificate group.rwe
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for group.rwe
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
group.rwe
rwe.com
www.rwe.com
www.group.rwe
rwe.com
www.rwe.com
www.group.rwe
Other certificates including the domain name group.rwe
(limited to 100 certificates)
Certificate
The complete raw certificate details for group.rwe in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIMQu/jxo9foSvMVYx8MA0GCSqGSIb3DQEBCwUAMFAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMTA0MTIxNDExMDNaFw0y MjA1MTQxNDExMDNaMGAxCzAJBgNVBAYTAkRFMRwwGgYDVQQIExNOb3JkcmhlaW4t V2VzdGZhbGVuMQ4wDAYDVQQHEwVFc3NlbjEPMA0GA1UEChMGUldFIEFHMRIwEAYD VQQDEwlncm91cC5yd2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1 b3NcjDF6R87VDvqJI5EAlfc3OJOTX/5zrb5b7djuCyCsP79Iwh+0DI9CPQM4Jbe9 IMyOG7AiTQjwtqejhGmzatmjRDXWDbTBLa8j73/GmXtMEFMxEWLryzT32oDX4cdT JbtjEvR+irmIFAkE8z0+fXB3/8FEST1k4uuUNqWlEXt/VYv38N5ldhq+BFFzL6ZU 7yXHqwsuO3w6hd2qxfML9Tl4B6lO7OkWedf/oOEDlPoEbWOF554Fk7/mh1JAFjRd 0Jo5M24Ex2tmkXCebvN7IvZlezV6l7I9AmkZ5UwVh2M1GizvSEmnrIEePJugxk5X aqc+VpOiPWmT6Rr+2UERAgMBAAGjggMlMIIDITAOBgNVHQ8BAf8EBAMCBaAwgY4G CCsGAQUFBwEBBIGBMH8wRAYIKwYBBQUHMAKGOGh0dHA6Ly9zZWN1cmUuZ2xvYmFs c2lnbi5jb20vY2FjZXJ0L2dzcnNhb3Zzc2xjYTIwMTguY3J0MDcGCCsGAQUFBzAB hitodHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9nc3JzYW92c3NsY2EyMDE4MFYG A1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3 Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAJBgNVHRMEAjAA MDkGA1UdEQQyMDCCCWdyb3VwLnJ3ZYIHcndlLmNvbYILd3d3LnJ3ZS5jb22CDXd3 dy5ncm91cC5yd2UwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1Ud IwQYMBaAFPjvf/LNeGeo3m+PJI2I8YcDArPrMB0GA1UdDgQWBBRF1AYjBjpuPFqK p4P1hZPA9Tou0jCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYAb1N2rDHwMRnY mQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAF4xmvqAgAABAMARzBFAiB+kO2jtcGf nt1BZy6t4tra5LJljteE7Cl5UfERkyfkwQIhAKdeazCaw/9IW3uiVkNAnIJ/cKp3 gSUdtqQxHtqEDWp1AHcAKXm+8J45OSHwVnOfY6V35b5XfZxgCvj5TV0mXCVdx4QA AAF4xmvrLQAABAMASDBGAiEA4WzeTx4z9pJwLQ5qeAwxAdrqiMOkmab8FiAP7Qte kZwCIQCwyWbCTHdEloPNbP7h9f7d+GKTBPg9rg6eW8w5ca49LgB2AFWB1MIWkDYB SuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABeMZr6y4AAAQDAEcwRQIgLUBj7tSH Jd/wr+tEC2nO1+xpsRb2YzlSsqL4wFn5Vw8CIQCyiCXgNrNzjdt6Kd8YKLtJhCXA 8Tzz153jVJ79kUmDjDANBgkqhkiG9w0BAQsFAAOCAQEAaf5eKvG/D0mBcazP4l7c qzqpyRbl7bxJLzK9aFFMMKw8JOvQry4pcnX48LSHC5LJ2GbCbzzqhjYNG2OEt/IY 3vkM75H1aejDTuhhtqa5vROH5xEBvCWgAeHhlFPokWTmkL+z08LuhzjZcoUIxJpO 48gZrFNt2h6EED3UBlrBSj6L81PHgnS3yp+n4KOz0w9FzMRNTUj05NZOy7QQE4Le SRpd9iIK1gLsYXP9hbjnriJwY3I4FVrjsKtSTCs6btJe5RICiLrLLvHGhbnUV8JM dBiESnpyqlk2kXLqGeA1EsbBKlcSL211t9bSggfWXRtP7ZzyM/izMg+9i91tUNsK Ug== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW9zXIwxekfO1Q76iSOR AJX3NziTk1/+c62+W+3Y7gsgrD+/SMIftAyPQj0DOCW3vSDMjhuwIk0I8Lano4Rp s2rZo0Q11g20wS2vI+9/xpl7TBBTMRFi68s099qA1+HHUyW7YxL0foq5iBQJBPM9 Pn1wd//BREk9ZOLrlDalpRF7f1WL9/DeZXYavgRRcy+mVO8lx6sLLjt8OoXdqsXz C/U5eAepTuzpFnnX/6DhA5T6BG1jheeeBZO/5odSQBY0XdCaOTNuBMdrZpFwnm7z eyL2ZXs1epeyPQJpGeVMFYdjNRos70hJp6yBHjyboMZOV2qnPlaToj1pk+ka/tlB EQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20716019559074762192240086140 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-12 14:11:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-14 14:11:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RWE AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'group.rwe' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22904091553286601296542529648117399521689870871600595901156498396908064252725297380646741179962057154904681846238050073729441336905634793805151942422427191171420311568828739724086526710965195534953675721759549629327658763590176337231207632572113349671173667081615264185923061253379611633810186942752498027621823629384238894656666790946801412726834408832751971994908360367345986693197774754745790560551505582224953005069291992180723228514982518103494726722190164386373107192257572118504471169082434743761627954264299836305394622459574173884042233074565957257399842734472566849148862696876637413593694509264294595084561 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'group.rwe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rwe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rwe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.group.rwe' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 45d40623063a6e3c5a8aa783f58593c0f53a2ed2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 01690076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000178c66bea02000004030047304502207e90eda3b5c19f9edd41672eade2dadae4b2658ed784ec297951f1119327e4c1022100a75e6b309ac3ff485b7ba25643409c827f70aa7781251db6a4311eda840d6a750077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000178c66beb2d0000040300483046022100e16cde4f1e33f692702d0e6a780c3101daea88c3a499a6fc16200fed0b5e919c022100b0c966c24c77449683cd6cfee1f5feddf8629304f83dae0e9e5bcc3971ae3d2e0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000178c66beb2e000004030047304502202d4063eed48725dff0afeb440b69ced7ec69b116f6633952b2a2f8c059f9570f022100b28825e036b3738ddb7a29df1828bb498425c0f13cf3d79de3549efd9149838c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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