dashboard.kiwischools.co.nz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:35:97:37:b4:79:16:7b:9b:29:92:05:3c:25:3f:bc:bc:47 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dashboard.kiwischools.co.nz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:35:97:37:b4:79:16:7b:9b:29:92:05:3c:25:3f:bc:bc:47Serial Number (int): 279572825906208514638110783329158825819207
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 9b:3b:fd:16:6d:90:66:13:cf:e9:18:ab:60:22:87:ff:f3:55:c3:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f6:03:de:d1:50:03:1c:ec:de:8d:68:0f:e9:6a:80:ea:8f:25:78:39
Fingerprint (sha256): 6d:57:ea:e3:05:3d:da:64:8c:65:d4:27:83:7d:cd:0d:3e:6d:00:2d:66:8e:21:4d:0f:eb:00:c8:5f:27:ee:04
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate dashboard.kiwischools.co.nz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dashboard.kiwischools.co.nz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dashboard.kiwischools.co.nz
portal.kiwischools.co.nz
portal.kiwischools.co.nz
Other certificates including the domain name kiwischools.co.nz
(limited to 100 certificates)
beta.kiwischools.co.nz
dashboard.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
www.kiwischools.co.nz
mailer.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
kiwischools.co.nz
kiwischools.co.nz
support.kiwischools.co.nz
kiwischools.co.nz
kiwischools.co.nz
kiwischools.com
portal.kiwischools.co.nz
mailer.kiwischools.co.nz
dashboard.kiwischools.co.nz
mailer.kiwischools.co.nz
dashboard.kiwischools.co.nz
kiwischools.co.nz
support.kiwischools.co.nz
dashboard.kiwischools.co.nz
kiwischools.com
dashboard.kiwischools.co.nz
kiwischools.com
kiwischools.com
mailer.kiwischools.co.nz
kiwischools.co.nz
mailer.kiwischools.co.nz
gitlab.kiwischools.co.nz
kiwischools.com
kiwischools.com
mailer.kiwischools.co.nz
kiwischools.co.nz
mailer.kiwischools.co.nz
beta.kiwischools.co.nz
kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
kiwischools.com
images.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
kiwischools.com
mailer.kiwischools.co.nz
cdn.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
www.kiwischools.co.nz
kiwischools.com
images.kiwischools.co.nz
kiwischools.co.nz
cdn.kiwischools.co.nz
kiwischools.com
www.kiwischools.co.nz
kiwischools.com
beta.kiwischools.co.nz
dashboard.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
www.kiwischools.co.nz
mailer.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
kiwischools.co.nz
kiwischools.co.nz
support.kiwischools.co.nz
kiwischools.co.nz
kiwischools.co.nz
kiwischools.com
portal.kiwischools.co.nz
mailer.kiwischools.co.nz
dashboard.kiwischools.co.nz
mailer.kiwischools.co.nz
dashboard.kiwischools.co.nz
kiwischools.co.nz
support.kiwischools.co.nz
dashboard.kiwischools.co.nz
kiwischools.com
dashboard.kiwischools.co.nz
kiwischools.com
kiwischools.com
mailer.kiwischools.co.nz
kiwischools.co.nz
mailer.kiwischools.co.nz
gitlab.kiwischools.co.nz
kiwischools.com
kiwischools.com
mailer.kiwischools.co.nz
kiwischools.co.nz
mailer.kiwischools.co.nz
beta.kiwischools.co.nz
kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
kiwischools.com
images.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
kiwischools.com
mailer.kiwischools.co.nz
cdn.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
www.kiwischools.co.nz
kiwischools.com
images.kiwischools.co.nz
kiwischools.co.nz
cdn.kiwischools.co.nz
kiwischools.com
www.kiwischools.co.nz
kiwischools.com
beta.kiwischools.co.nz
Certificate
The complete raw certificate details for dashboard.kiwischools.co.nz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgISAzWXN7R5FnubKZIFPCU/vLxHMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MDYwNzMzNDJaFw0x OTA3MDUwNzMzNDJaMCYxJDAiBgNVBAMTG2Rhc2hib2FyZC5raXdpc2Nob29scy5j by5uejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLtrXt5SUpcie5H MoGn0Epn2KHz8pg3xVHDVS01UK+BzZTe1ciJmGVU/czUwL/QltTWq6wPE8vmrWNf Aw2hNCzawIugKAwiqiyDSkL7EcDswyXDoW+ntLT88I7A0RPqMGhUGq/yik6n0eG5 qUgAAXrfVe2IDGCYhYxCe5ZpsDzYfJOLm1Ex1SRqsZZ92VylG3TSbHYBalAsC7rD 9RXXmi9VyOwf6gOIwl392oJw5iBNrO3/6C8EgTdKqy4L7pBHOV8QcAlP0aNez2fL YPa6szAA+WvaYiA7YWlfUOqafS798SQtkDZ4dmgWJJEPPlZoZJ6K8wIlyt1SZ4i+ 6h1q960CAwEAAaOCAoowggKGMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUmzv9Fm2Q ZhPP6RirYCKH//NVw8AwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzBABgNVHREEOTA3ghtkYXNoYm9hcmQua2l3aXNjaG9v bHMuY28ubnqCGHBvcnRhbC5raXdpc2Nob29scy5jby5uejBMBgNVHSAERTBDMAgG BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3AOJpS64m 6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABafHIM40AAAQDAEgwRgIhAJUS vfsuvrHuVsEYvrTFfGpzwQuPqhZ6bPLR/SVJykI+AiEA3TvZME2hMjjYdsupBrOd rPTc1G6WnDiOsP9YhYBIOPQAdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTl RUf0eAAAAWnxyDQCAAAEAwBGMEQCIGavRJI1injpopT8szWyB8ZbbnErEKIC3l2E DjXi50boAiB6aXhBpxe5iwy+lkZG6E8CxnVAODqj4iwWX1x/FiEUBDANBgkqhkiG 9w0BAQsFAAOCAQEAnGqZ/YAUnMNBTZ5BevhczA7DMJB226kZrAlMQHZp/FCR9fgH TFD/73O0RMDRJrg2DnMsvEgrxJLSqohFLUdYuEC+LMWC8R0RWACcNkQDHJVtoHtC SMERDLtglD0gV85hjzKCCqu4z+fsnSAlKpnImk1oVGOcIz7stqC0CVxEDZ5E188b t9wZCXVvojiY2pXqWTZ8LMSLWTT1u15zTle8Yr89bXLNwrvlQb2KZ8OY0xmZnwtf 3out3dROa5LmSwGpPuuTClEVWa13GMQpyK7whCDcmePeSIN/L5teHBvZdFtOEOaQ GbFWFmf89y0kszhoLTTkXPqbVz/SbWiKMZ4R9w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu2te3lJSlyJ7kcygafQ SmfYofPymDfFUcNVLTVQr4HNlN7VyImYZVT9zNTAv9CW1NarrA8Ty+atY18DDaE0 LNrAi6AoDCKqLINKQvsRwOzDJcOhb6e0tPzwjsDRE+owaFQar/KKTqfR4bmpSAAB et9V7YgMYJiFjEJ7lmmwPNh8k4ubUTHVJGqxln3ZXKUbdNJsdgFqUCwLusP1Fdea L1XI7B/qA4jCXf3agnDmIE2s7f/oLwSBN0qrLgvukEc5XxBwCU/Ro17PZ8tg9rqz MAD5a9piIDthaV9Q6pp9Lv3xJC2QNnh2aBYkkQ8+VmhknorzAiXK3VJniL7qHWr3 rQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 279572825906208514638110783329158825819207 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-06 07:33:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-05 07:33:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dashboard.kiwischools.co.nz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22587621508946950630085156777032333222933822094867719430985019793583513724515889890914238553741228197777905788352259534413819304701324869904026225154798381077960586954688010939902591888943039047779969014113097267820524917757028369899955814619430461789491899507827483170753886501265907732810523669333842579124925916630318966639725936358592335284422973941115942555025892899283709939660798457803933854074008974465489346035530351415814983645658189709440083591976777878867932672719686041702117382834826825507878097093512196823325269435765515664616498773657501864925026905551940709731484263583201906847251931599493600573357 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9b3bfd166d906613cfe918ab602287fff355c3c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.kiwischools.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.kiwischools.co.nz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169f1c8338d00000403004830460221009512bdfb2ebeb1ee56c118beb4c57c6a73c10b8faa167a6cf2d1fd2549ca423e022100dd3bd9304da13238d876cba906b39dacf4dcd46e969c388eb0ff5885804838f4007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169f1c834020000040300463044022066af4492358a78e9a294fcb335b207c65b6e712b10a202de5d840e35e2e746e802207a697841a717b98b0cbe964646e84f02c67540383aa3e22c165f5c7f16211404 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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