brandcenter.rotoplas.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ba:11:37:01:ce:a1:8b:cb:90:5b:4a:ce:d8:ba:45:d9:9f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brandcenter.rotoplas.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:11:37:01:ce:a1:8b:cb:90:5b:4a:ce:d8:ba:45:d9:9f
Serial Number (int): 324652260531484264299581901811755140897183
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:56:79:ed:74:0e:cf:4e:c1:2e:ba:91:0c:d2:13:b5:6c:65:0e:27
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 86:a9:78:c2:7c:cd:20:f9:4a:92:89:e3:3c:2a:1c:9b:14:5e:01:a1
Fingerprint (sha256): 6f:82:06:45:76:e7:73:14:eb:bd:92:54:38:4a:03:ea:0e:d2:9f:4b:be:20:b3:36:29:71:fc:fa:3f:35:f3:78

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate brandcenter.rotoplas.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brandcenter.rotoplas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brandcenter.rotoplas.com

Other certificates including the domain name rotoplas.com

(limited to 100 certificates)
my.rotoplas.com
techstop.ats-inc.com
wdpro.rotoplas.com
helpdesk.edmontonstatebank.com
service.upperlinehealth.com
rotoplas.com
brandcenter.rotoplas.com
rotoplas.com
brandcenter.rotoplas.com
rotoplas.com
helpdesk.grandronde.org
brandcenter.rotoplas.com
rotoplas.com
wdqas.rotoplas.com
helpdesk.edmontonstatebank.com
sd.rotoplas.com
kiosko.rotoplas.com
service.upperlinehealth.com
brandcenter.rotoplas.com
brandcenter.rotoplas.com
rotoplas.com
brandcenter.rotoplas.com
brandcenter.rotoplas.com
my.rotoplas.com
purificadores.rotoplas.com
help.yonkerscontractingco.com
purificadores.rotoplas.com
techstop.ats-inc.com
service.upperlinehealth.com
purificadores.rotoplas.com
help.oaklandfl.gov
capacitacion.rotoplas.com
techstop.ats-inc.com
helpdesk.northstarcasinoresort.com
kiosko.rotoplas.com
service.upperlinehealth.com
wdpro.rotoplas.com
help.yonkerscontractingco.com
service.upperlinehealth.com
rotoplas.com
brandcenter.rotoplas.com
helpdesk.edmontonstatebank.com
rotoplas.com
helpdesk.grandronde.org
service.upperlinehealth.com
sap32.aadds.rotoplas.com
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
helpdesk.grandronde.org
brandcenter.rotoplas.com
service.upperlinehealth.com
rotoplas.com
rotoplas.com
rotoplas.com
purificadores.rotoplas.com
brandcenter.rotoplas.com
sd.rotoplas.com
brandcenter.rotoplas.com
sap32.aadds.rotoplas.com
my.rotoplas.com
helpdesk.grandronde.org
wdqas.rotoplas.com
brandcenter.rotoplas.com
tiempos.rotoplas.com
service.upperlinehealth.com
capacitacion.rotoplas.com
sd.rotoplas.com
service.upperlinehealth.com
rotoplas.com
kiosko.rotoplas.com
brandcenter.rotoplas.com
sap33.aadds.rotoplas.com
service.upperlinehealth.com
sd.rotoplas.com
techstop.ats-inc.com
helpdesk.northstarcasinoresort.com
capacitacion.rotoplas.com
*.rotoplas.com
service.upperlinehealth.com
sap33.aadds.rotoplas.com
help.oaklandfl.gov
inversionistas.rotoplas.com
capacitacion.rotoplas.com
service.upperlinehealth.com
service.upperlinehealth.com
help.yonkerscontractingco.com
wdpro.rotoplas.com
lumira.rotoplas.com
service.upperlinehealth.com
rotoplas.com
helpdesk.edmontonstatebank.com
help.oaklandfl.gov
help.oaklandfl.gov
rotoplas.com
service.upperlinehealth.com
purificadores.rotoplas.com
service.upperlinehealth.com
service.upperlinehealth.com

Certificate

The complete raw certificate details for brandcenter.rotoplas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgISA7oRNwHOoYvLkFtKzti6RdmfMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTYwNTAwMTFaFw0y
MDA1MTYwNTAwMTFaMCMxITAfBgNVBAMTGGJyYW5kY2VudGVyLnJvdG9wbGFzLmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMtZiDd4M4eyz7EvlLD9
k9XqErh8AqsK1pfk1jGk6Qhrt5sF1qoVGVcdLwTTJGviZ/G+8cHVaJnYERgePGlm
wLhfxu/7UD2/Q6M3b8ZIRFx4MCGrPrKKfzEnundCRdzEnNbs+xvBtbqVOeyxnlOe
O+55Vq8vydiW15mKNAiVRADk17wqKIQ3CQfkJF2LQ9XSYwWH2EmPXHJktWC4hawG
bWN4oJ/NQEVDXmqr8ZY2OQYaNDazD6sO+TWY1Hn7js/+UyrWGrFtj56WvHrvAnb3
k5lX6Pj7qwYEQ6Sr8JTE88AgMJubdne8heBFp+hXv+jydrovGkFtBy/cmzxjb0wp
CjMCAwEAAaOCAm4wggJqMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUTVZ57XQOz07B
LrqRDNITtWxlDicwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzAjBgNVHREEHDAaghhicmFuZGNlbnRlci5yb3RvcGxhcy5j
b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC
BIH2BIHzAPEAdwBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXBM
lTRvAAAEAwBIMEYCIQChqVkFsuve3VWvBFtrk/mCvgGLFGOp8/RFtAZjnS9mkwIh
AJn4RDyvBJjn1CIBzVwezMEZPvPgLmrbmWGm1llpq7ZGAHYAB7dcG+V9aP/xsMYd
IxXHuuZXfFeUt2ruvGE6GmnTohwAAAFwTJU0lAAABAMARzBFAiBl+x1voSe5BbH/
gBxIV6N5FKVhRLPtHv/xnb/O/xUW+gIhAK1wJ9BKZvYS4LaKsTfFy7H1B9NwOCn/
ldet014zAMnQMA0GCSqGSIb3DQEBCwUAA4IBAQBvr8gQIw9q8i3blNn68v351EjI
7zhvNUYZbDMiavQMG1bi7OR1sRRCbinLN2eMfnGkAe+B26P2lTbGgQYwqYAnXAVO
zBNs0gXWJBgrn6yTOSCTs/ErV1vShuGYkv2xpvImDnVGYKH8IIsXYeywF08M1CiV
zv/fru6SX31zljn57+z8v0v1g5PABiHFUs7JjhfANbgTfm6RTTO7WdOrm9FwRfrm
JCkhDvvsMVcxdxy6wPhSlihiR893tel0dC8AiugB4q3djRO3L0rtgK1YUQbyXVuY
Y2j5KioQVDAbmpuSBnhylSLl9XYCpFSWEp+iy4EfOgOjR/nV0ZwmZqoxDd9w
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1mIN3gzh7LPsS+UsP2T
1eoSuHwCqwrWl+TWMaTpCGu3mwXWqhUZVx0vBNMka+Jn8b7xwdVomdgRGB48aWbA
uF/G7/tQPb9DozdvxkhEXHgwIas+sop/MSe6d0JF3MSc1uz7G8G1upU57LGeU547
7nlWry/J2JbXmYo0CJVEAOTXvCoohDcJB+QkXYtD1dJjBYfYSY9ccmS1YLiFrAZt
Y3ign81ARUNeaqvxljY5Bho0NrMPqw75NZjUefuOz/5TKtYasW2Pnpa8eu8CdveT
mVfo+PurBgRDpKvwlMTzwCAwm5t2d7yF4EWn6Fe/6PJ2ui8aQW0HL9ybPGNvTCkK
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324652260531484264299581901811755140897183
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 05:00:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 05:00:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brandcenter.rotoplas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25670525830333866820569838590519390658480401497020049230315739430663900886135067420852027655996495269327016697128943157144488427180127055473730290542362291545570209187357716887083724033653600533691446416799746614607729401342290434311718221632240655776140337277139161797355359693037898864196315053244611458887506052979792406568893235039147749002640100190694829309322548436845237787418697433763026785771484610505168721722964199572126908285332961016793002995170193700528162941074160835135311785995920124406153209934163430005418412717623513510353359251577052394087269223181869346691248799564516586865272516894671436843571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d5679ed740ecf4ec12eba910cd213b56c650e27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandcenter.rotoplas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001704c95346f0000040300483046022100a1a95905b2ebdedd55af045b6b93f982be018b1463a9f3f445b406639d2f669302210099f8443caf0498e7d42201cd5c1eccc1193ef3e02e6adb9961a6d65969abb64600760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001704c9534940000040300473045022065fb1d6fa127b905b1ff801c4857a37914a56144b3ed1efff19dbfceff1516fa022100ad7027d04a66f612e0b68ab137c5cbb1f507d3703829ff95d7add35e3300c9d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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