itvmedia.org
Issued by R3
About this certificate
This digital certificate with serial number 03:92:ed:6b:c6:8f:59:f9:cc:a7:df:3b:d5:45:6f:bc:15:c6 was issued on by Let's Encrypt.
With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=itvmedia.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:92:ed:6b:c6:8f:59:f9:cc:a7:df:3b:d5:45:6f:bc:15:c6Serial Number (int): 311333670003777218811392028650948766995910
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 58:02:36:4a:32:8d:c4:89:a2:3c:f5:40:25:12:5d:34:02:6e:3d:73
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): e4:d0:e3:db:55:0e:f6:09:56:97:09:ef:4c:a5:50:2e:a3:6c:59:8c
Fingerprint (sha256): 73:18:1c:fa:0a:04:51:87:5c:ef:0f:ea:70:4b:51:bb:7a:57:60:4d:9f:80:6b:07:92:09:1d:1b:fd:58:78:86
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate itvmedia.org
15
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for itvmedia.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
americastrails.com
arbitragereport.com
backroad4x4.com
caferondo.com.enerpactoolgroup.fi
canstocktrade.com.eraseodors.com
hempgi.com
itvmedia.org
kalawaocounty.com
lawobserver.com
mylifeonawebsite.com
personalshopphair.com.internationalhomeschoolday.com
piankatank.com
planetltc.com
privatenetworkmarketing.net.denverwomen.org
www.jesusisthesonofgod.net
arbitragereport.com
backroad4x4.com
caferondo.com.enerpactoolgroup.fi
canstocktrade.com.eraseodors.com
hempgi.com
itvmedia.org
kalawaocounty.com
lawobserver.com
mylifeonawebsite.com
personalshopphair.com.internationalhomeschoolday.com
piankatank.com
planetltc.com
privatenetworkmarketing.net.denverwomen.org
www.jesusisthesonofgod.net
Other certificates including the domain name itvmedia.org
(limited to 100 certificates)
itvmedia.org
itvmedia.org
feminisedcannabisseeds.com.baselfashionevent.live
itvmedia.org
jqsvy.site
itvmedia.org
flirtingdate.com.itvmedia.org
elizabethkeogh.ca
itvmedia.org
itvmedia.org
philandsharri.ca
boothlaw.llc
itvmedia.org
wordpressinsight.com
omeia.de
apply.truffle.vc
itvmedia.org
itvmedia.org
itvmedia.org
dailyjokes.us
mandiriinternetbisnis.com
itvmedia.org
feminisedcannabisseeds.com.baselfashionevent.live
itvmedia.org
jqsvy.site
itvmedia.org
flirtingdate.com.itvmedia.org
elizabethkeogh.ca
itvmedia.org
itvmedia.org
philandsharri.ca
boothlaw.llc
itvmedia.org
wordpressinsight.com
omeia.de
apply.truffle.vc
itvmedia.org
itvmedia.org
itvmedia.org
dailyjokes.us
mandiriinternetbisnis.com
Certificate
The complete raw certificate details for itvmedia.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgISA5Lta8aPWfnMp9871UVvvBXGMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTAwOTQ1NThaFw0yNDAzMDkwOTQ1NTdaMBcxFTATBgNVBAMT DGl0dm1lZGlhLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANrB M8HzqW5/cXojAXVtbew+cR4IHdrJ2UBaclt6fGtC7rai+L3XzxCedHQktwJd3WOB 6IGBclqisU/XwU8JPdDBb7uMjqIL6UxeJCrvFyVr3zB6+RLiSftDf50g+xneDjHP Fg8PtXrxxwC0NyOTXRSasPq0FRfm67w4LT7V/el4mLgYVYUD0bMb6hTOpWgZucaw DLT7zDH/Z1mNgEJ+g0I096xF0YA3t01TvG9JzHBkriUXoSnMMpXMDWIUiP5sTEkN plO8QkRif2JTNc4rY2gSeu4AqWXddfAw9P+3y0d65KrRiSN8odB76quw8OMm/LP+ BfqC8KrRCc6dNdl7wmMCAwEAAaOCA3cwggNzMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUWAI2SjKNxImiPPVAJRJdNAJuPXMwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w ggF+BgNVHREEggF1MIIBcYISYW1lcmljYXN0cmFpbHMuY29tghNhcmJpdHJhZ2Vy ZXBvcnQuY29tgg9iYWNrcm9hZDR4NC5jb22CIWNhZmVyb25kby5jb20uZW5lcnBh Y3Rvb2xncm91cC5maYIgY2Fuc3RvY2t0cmFkZS5jb20uZXJhc2VvZG9ycy5jb22C CmhlbXBnaS5jb22CDGl0dm1lZGlhLm9yZ4IRa2FsYXdhb2NvdW50eS5jb22CD2xh d29ic2VydmVyLmNvbYIUbXlsaWZlb25hd2Vic2l0ZS5jb22CNHBlcnNvbmFsc2hv cHBoYWlyLmNvbS5pbnRlcm5hdGlvbmFsaG9tZXNjaG9vbGRheS5jb22CDnBpYW5r YXRhbmsuY29tgg1wbGFuZXRsdGMuY29tgitwcml2YXRlbmV0d29ya21hcmtldGlu Zy5uZXQuZGVudmVyd29tZW4ub3Jnghp3d3cuamVzdXNpc3RoZXNvbm9mZ29kLm5l dDATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2 AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjFNVdUoAAAQDAEcw RQIgUf+yfAJIGHkthQBvboHSzLhWhzshM67ZV3OWpMbn2EwCIQC134huzvPrB4Hl lOgKOR6VLCl1TmmMROxMmiaBZRsEcwB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9 AA0tcm/h+tQXAAABjFNVdUoAAAQDAEcwRQIhAIVbZyLd8j3GfiJcvK7Twsc8QFno 82YsZp8p+IRdTtJLAiB5OSHlRunp+PRcSiC7TbFDIkWXYAVsrE73PH6FEMd9XTAN BgkqhkiG9w0BAQsFAAOCAQEAirYfvwAgPvKe4oe1kFdgEc6zB73iemn5xvdcZ6uM uvHL9jGY9ASkeiIo0e2tKFrHAj1S1EO0T9ANspUV7jV6aU1yURdNkqh2Vq4JQtGJ 1dZ4ljFyWl5S3A/x+/nsE4VeXxOGXxA5pl3CYO+t65JlU+Z4OqsP0Q15MVor0EfD p3yN00nm0EMcJ/ulZNhyiXpmEjXT5xjwEWzTMhYJt7TxUl0PgERSuLlCgdnbMaDT iYWkyOvhobDeHK+z+BTx8n0jRFXMFgk+I53uUnxpOqX7U97QAfJiGbFoCIGBSVVp ADIn+r5SWvKrfzuJx4ru7JH8e0aw2v2ugqcpUlj9JoMzVw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sEzwfOpbn9xeiMBdW1t 7D5xHggd2snZQFpyW3p8a0LutqL4vdfPEJ50dCS3Al3dY4HogYFyWqKxT9fBTwk9 0MFvu4yOogvpTF4kKu8XJWvfMHr5EuJJ+0N/nSD7Gd4OMc8WDw+1evHHALQ3I5Nd FJqw+rQVF+brvDgtPtX96XiYuBhVhQPRsxvqFM6laBm5xrAMtPvMMf9nWY2AQn6D QjT3rEXRgDe3TVO8b0nMcGSuJRehKcwylcwNYhSI/mxMSQ2mU7xCRGJ/YlM1zitj aBJ67gCpZd118DD0/7fLR3rkqtGJI3yh0Hvqq7Dw4yb8s/4F+oLwqtEJzp012XvC YwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 311333670003777218811392028650948766995910 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 09:45:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 09:45:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itvmedia.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27615222027500002637028635817720529279770547857947584320348481524303616673222545534266989411941718154309126297451845766565935972144358388952638414450940038759692374116389555464383468305342852125673413695770036555437264010169767529540404551951669703022551409950036125302172257291195135916500760867822885566343753430943461160315409450442835288608424808544231855650368966555881410013230624545532375614691496133225302617023804073748177024785258110560714220591821785356508257375290879126820598470216960954204595206087682906449133378229101452842913545571873049565251630606627238919746544855345885803064406281559426201272931 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5802364a328dc489a23cf54025125d34026e3d73 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (373 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americastrails.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragereport.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backroad4x4.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caferondo.com.enerpactoolgroup.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canstocktrade.com.eraseodors.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempgi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itvmedia.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalawaocounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawobserver.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylifeonawebsite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalshopphair.com.internationalhomeschoolday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piankatank.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetltc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatenetworkmarketing.net.denverwomen.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jesusisthesonofgod.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c5355754a0000040300473045022051ffb27c024818792d85006f6e81d2ccb856873b2133aed9577396a4c6e7d84c022100b5df886ecef3eb0781e594e80a391e952c29754e698c44ec4c9a2681651b04730076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c5355754a0000040300473045022100855b6722ddf23dc67e225cbcaed3c2c73c4059e8f3662c669f29f8845d4ed24b0220793921e546e9e9f8f45c4a20bb4db14322459760056cac4ef73c7e8510c77d5d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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