icann.jobs
Issued by R3
About this certificate
This digital certificate with serial number 03:8a:eb:32:d5:04:9f:cf:cb:ce:5c:75:c1:98:01:da:3c:ce was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=icann.jobs
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:8a:eb:32:d5:04:9f:cf:cb:ce:5c:75:c1:98:01:da:3c:ceSerial Number (int): 308608456944742247423847415008273966447822
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 39:76:60:1a:3d:75:20:3a:e2:7c:c2:1b:37:c0:7a:cf:b1:94:1e:4a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 85:0f:ea:84:9e:fc:d0:6f:5f:ef:e5:4d:9c:af:51:37:63:1c:69:3c
Fingerprint (sha256): 72:92:d6:e8:e1:1c:be:54:a8:5e:62:ed:e5:4b:5b:89:9c:7f:42:15:54:86:9d:a9:4d:e9:ff:61:d6:23:69:c0
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate icann.jobs
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for icann.jobs
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
iana.jobs
icann.jobs
icann.mobi
me.icann.org
public.icann.org
www.iana.jobs
www.icann.jobs
www.icann.mobi
icann.jobs
icann.mobi
me.icann.org
public.icann.org
www.iana.jobs
www.icann.jobs
www.icann.mobi
Other certificates including the domain name icann.jobs
(limited to 100 certificates)
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
Certificate
The complete raw certificate details for icann.jobs in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISA4rrMtUEn8/Lzlx1wZgB2jzOMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjAzMjUwODI4MzRaFw0yMjA2MjMwODI4MzNaMBUxEzARBgNVBAMT CmljYW5uLmpvYnMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDbIfQl b2C40myHBImEJ/TIGuihl2V+bAOCjeZDa/w/ig14dJzznfcmf/osG7BP6NA3Ji3j sEF9nJB+tEUAT9eOYeeT1f4qNUUJYfts4XuLXh5M6hAWWXnkxEvQ7guDf8Co06L4 6h5sY5z5bYHEFJe64Wcex6kNKIuAtctS0RYdFBd5YhmcqoN6lUPgiDboljNk2Rkm I6SOuPA2IIkvLK42ptpsmiuh28OstTWI5xX1753grH1ZdMuheHNRMNlR9TU7f2Uy X8HZpp7G9wUQHaeGh+ovGXCROSICHsvKulFDC/igJp65zTaubmkuN3f7WT0cuWBB 0B096zD2WsaJ7mCETznXoQ3ZvM8rIUlKGlclCTGzkjoLUbS8e69KZu0wWtFh2Wgc 0YvyMQrL0HzqR/JpP2rdZ1aWpotsjCQl4ioS3CL/17TfLdeALWELvitg93BCiUtq hD8Ydrcw/uF4u8/sVAe79bdXMJ4TLq0ABBOG5yttyRQaNO1VoduO49tOUdp3wkFN hLawUf7DORRVLAt6hIWnV+nA+J8IpkpHAtXe00FNGrIp+WJ48e/c365NsHUNbQDU lD+mRG/jFcw4nRQl6FyIlkPW4cXQ3/lHpq9vzgxtUZw6TpOWWuIYqHxotGdb6u+p oyCiFzdSE1U9adCaOUOfk+sfGo9OXANBRbiVZQIDAQABo4IBuDCCAbQwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBQ5dmAaPXUgOuJ8whs3wHrPsZQeSjAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzB7BgNVHREEdDBygglpYW5hLmpvYnOCCmljYW5uLmpvYnOC CmljYW5uLm1vYmmCDG1lLmljYW5uLm9yZ4IQcHVibGljLmljYW5uLm9yZ4INd3d3 LmlhbmEuam9ic4IOd3d3LmljYW5uLmpvYnOCDnd3dy5pY2Fubi5tb2JpMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G CSqGSIb3DQEBCwUAA4IBAQAkbWSVgCOmj0tcj5pzbSQfZUNlcZm/XQpM1F1EUmdA aKMLmWrXw9YC0WPXrmrodJx6Fm4I/zPw0euHvzlqMic0neYHlTyWOmlFXDYq06Hd l+1NLYDifYYX3CcGwiNzSQj23SMrTl8edQ4B+9nbsEEEQkJ0EyJGHkRMLMozzwsc iVG0hZqO3UYlKBTL7TZ274sEnWbJVm0QMmK1IeNYc2uA7/obB4L1+XfGPyEqTEpa yYdpAdaq3RaKDi7IEXXRBkVikFzK/aJNwkoYAP0Xs/Y+5Kdt/RCPvCmThrYsKEIs 8uzgfsvzvnG4Ns+W9GcZFJBCoVcTjNTqTHXdwzFekl4J -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2yH0JW9guNJshwSJhCf0 yBrooZdlfmwDgo3mQ2v8P4oNeHSc8533Jn/6LBuwT+jQNyYt47BBfZyQfrRFAE/X jmHnk9X+KjVFCWH7bOF7i14eTOoQFll55MRL0O4Lg3/AqNOi+OoebGOc+W2BxBSX uuFnHsepDSiLgLXLUtEWHRQXeWIZnKqDepVD4Ig26JYzZNkZJiOkjrjwNiCJLyyu NqbabJorodvDrLU1iOcV9e+d4Kx9WXTLoXhzUTDZUfU1O39lMl/B2aaexvcFEB2n hofqLxlwkTkiAh7LyrpRQwv4oCaeuc02rm5pLjd3+1k9HLlgQdAdPesw9lrGie5g hE8516EN2bzPKyFJShpXJQkxs5I6C1G0vHuvSmbtMFrRYdloHNGL8jEKy9B86kfy aT9q3WdWlqaLbIwkJeIqEtwi/9e03y3XgC1hC74rYPdwQolLaoQ/GHa3MP7heLvP 7FQHu/W3VzCeEy6tAAQThucrbckUGjTtVaHbjuPbTlHad8JBTYS2sFH+wzkUVSwL eoSFp1fpwPifCKZKRwLV3tNBTRqyKfliePHv3N+uTbB1DW0A1JQ/pkRv4xXMOJ0U JehciJZD1uHF0N/5R6avb84MbVGcOk6TllriGKh8aLRnW+rvqaMgohc3UhNVPWnQ mjlDn5PrHxqPTlwDQUW4lWUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 308608456944742247423847415008273966447822 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-25 08:28:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-23 08:28:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'icann.jobs' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 893983140721978558214827566923678008442203834721349105105989668078480398227739907423614055214091825063149251429635169020485608445133747709215529485427685136969623552676102839003687295923666711515926818789987577022139780852967534389690226626518100643347505395305802944037387875858656137869151502388294013551727817300994792188889122560244284745504705437949982347749441214265502143819950346157352563228037387016584999636218255185228811935641293040946229372530709147183775404281736821453483358117943241487968673104586496592333224134743849418341748326035498809729032092162056955656206518553811683049538370675318535881854503421555361393387435572355081552887237296089387763706849593960178406932939099336523447059904920603274872788199752620168684936818910687513789472519905076291504829170540852007025983306306431349965574092442292858222613215484756651515420982246151519839831435889708117710575940670046726809675630609085449558586020744279908663416440225282429190653736754898029093739200540921353486566454486520302025678284226203948216756819181381686538697248023946446518101859183774577560364155418556629969038954886735807728282147106519273220475270184542230326789271808148027240945140014957446846720962839602750966472884692236973533189150053 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3976601a3d75203ae27cc21b37c07acfb1941e4a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iana.jobs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icann.jobs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icann.mobi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.icann.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.icann.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iana.jobs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icann.jobs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icann.mobi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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