ofresidents.com.canwebuild.org
Issued by R3
About this certificate
This digital certificate with serial number 04:3e:f6:97:e6:71:ca:67:3b:54:a7:73:f6:28:80:e6:19:8c was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ofresidents.com.canwebuild.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:3e:f6:97:e6:71:ca:67:3b:54:a7:73:f6:28:80:e6:19:8cSerial Number (int): 369874429273897531360451683229281764645260
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: a9:16:aa:c4:fc:83:0b:b6:1b:df:52:74:74:3a:fd:34:82:ef:fc:29
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 99:c2:a8:84:bb:17:3a:e4:75:cb:38:53:7f:ed:44:9d:c4:62:d3:20
Fingerprint (sha256): 74:81:60:63:0e:1e:8f:fd:39:1d:42:bf:e6:38:fc:dc:b5:00:85:48:1c:46:cd:7e:a4:44:86:2e:66:c3:57:dd
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ofresidents.com.canwebuild.org
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ofresidents.com.canwebuild.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
adfalert.org
firestudios.com
forsalebyownerads.com
imhumanright.org
kingofthevalley.com
mckinney.realbrilliance.net
ofresidents.com.canwebuild.org
otherrealm.studio.privatepleasuretraxxx.com
tikaer.com
translate4vip.com.neygen.com
trivial.net
firestudios.com
forsalebyownerads.com
imhumanright.org
kingofthevalley.com
mckinney.realbrilliance.net
ofresidents.com.canwebuild.org
otherrealm.studio.privatepleasuretraxxx.com
tikaer.com
translate4vip.com.neygen.com
trivial.net
Other certificates including the domain name canwebuild.org
(limited to 100 certificates)
hiro.media
34755625397.ca
vertera.ca
canwebuild.org
dominiospremium.ca
grocer.cc
grocer.cc
www.canwebuild.org
vertera.ca
www.canwebuild.org
biblecourse.ca
mechanicforhire.ca
canwebuild.org
34755625397.ca
www.canwebuild.org
canwebuild.org
grocer.cc
www.canwebuild.org
grocer.cc
grocer.cc
www.canwebuild.org
canwebuild.org
34755625397.ca
5272653.ca
jimmy.cc
vertera.ca
zapmedia.org.zapmedia.org
allanblock.asia
caribooranch.ca
vertera.ca
ofresidents.com.canwebuild.org
mcsglobal.store
dominiospremium.ca
fatherflanagan.ie
grocer.cc
34755625397.ca
canwebuild.org
hava.camera
vertera.ca
radiator.cc
prothena.org
leaselock.ca
travelsky.co.za
grocer.cc
34755625397.ca
34755625397.ca
grocer.cc
mna.vc
leaselock.ca
canwebuild.org
grocer.cc
go.oton.club
canwebuild.org
grocer.cc
solarmicrofarm.com.trueamericanmedia.org
myautoloan.world
canwebuild.org
allanblock.on.ca
34755625397.ca
vertera.ca
canwebuild.org
dominiospremium.ca
grocer.cc
grocer.cc
www.canwebuild.org
vertera.ca
www.canwebuild.org
biblecourse.ca
mechanicforhire.ca
canwebuild.org
34755625397.ca
www.canwebuild.org
canwebuild.org
grocer.cc
www.canwebuild.org
grocer.cc
grocer.cc
www.canwebuild.org
canwebuild.org
34755625397.ca
5272653.ca
jimmy.cc
vertera.ca
zapmedia.org.zapmedia.org
allanblock.asia
caribooranch.ca
vertera.ca
ofresidents.com.canwebuild.org
mcsglobal.store
dominiospremium.ca
fatherflanagan.ie
grocer.cc
34755625397.ca
canwebuild.org
hava.camera
vertera.ca
radiator.cc
prothena.org
leaselock.ca
travelsky.co.za
grocer.cc
34755625397.ca
34755625397.ca
grocer.cc
mna.vc
leaselock.ca
canwebuild.org
grocer.cc
go.oton.club
canwebuild.org
grocer.cc
solarmicrofarm.com.trueamericanmedia.org
myautoloan.world
canwebuild.org
allanblock.on.ca
Certificate
The complete raw certificate details for ofresidents.com.canwebuild.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgISBD72l+Zxymc7VKdz9iiA5hmMMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA4MjIxNTI5NTRaFw0yMzExMjAxNTI5NTNaMCkxJzAlBgNVBAMT Hm9mcmVzaWRlbnRzLmNvbS5jYW53ZWJ1aWxkLm9yZzCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAMEXnlnefB05KpSqz5hlKOqTMzOiE4ypPoDExLpFrAHM iVZ4ywPnIQItQhWSrInUA+TRWcpwjCXp7J1QUola1xvymhxsLkBqX/u4xmi5q9D7 KKj8/xOtB7+ELnsxcA6COLgraY+QsjbJHKF0UI/JcB4HwCTE6rjwUDUqNSWvQSOq RVG88lbOPoNKNFz7ApSBiKdYN9G0W9XuTZicYpGsQ93VCp8uP+65w+QDAVjB2qlN FHX0IubJ668mTIyl96GhEK/+nk7nR5KfbN1LexZjYFmYty6jqYFgKTf7ZE+s2zmo jOekcNOwx9nDtGdqRd+MYkOGi+w6njIgV3COPT+qBwUCAwEAAaOCAwQwggMAMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUqRaqxPyDC7Yb31J0dDr9NILv/CkwHwYDVR0j BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6 Ly9yMy5pLmxlbmNyLm9yZy8wggEKBgNVHREEggEBMIH+ggxhZGZhbGVydC5vcmeC D2ZpcmVzdHVkaW9zLmNvbYIVZm9yc2FsZWJ5b3duZXJhZHMuY29tghBpbWh1bWFu cmlnaHQub3JnghNraW5nb2Z0aGV2YWxsZXkuY29tghttY2tpbm5leS5yZWFsYnJp bGxpYW5jZS5uZXSCHm9mcmVzaWRlbnRzLmNvbS5jYW53ZWJ1aWxkLm9yZ4Irb3Ro ZXJyZWFsbS5zdHVkaW8ucHJpdmF0ZXBsZWFzdXJldHJheHh4LmNvbYIKdGlrYWVy LmNvbYIcdHJhbnNsYXRlNHZpcC5jb20ubmV5Z2VuLmNvbYILdHJpdmlhbC5uZXQw EwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwC3 Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYoeFM0pAAAEAwBIMEYC IQCu53vAUri72iNMqyT+/d+La/AsQCUTHoPofSrlvGZjpAIhAO+xufwDixJPNpDx Yg+j0+gfk0PqGSFvl4ayOF0+3KWPAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwk yoWGNOvcgooAAAGKHhTNZwAABAMARzBFAiEAgkVjyaNV4mJbA9tl34e5fovLG7dq yT3B2JIjFE6whO4CIFrJPoJJ6fkGuRtS0dC996uv7voFve37BFMz8q71gVS9MA0G CSqGSIb3DQEBCwUAA4IBAQCNE/YcQEwHEGOMnFbZ3dXLD7kMkChT8sqdQC9u97ff l8Ans4NvC8J23DqCfrCgf/vIWiCuWsmykKC+4+u9U2oh90x5spzVpxQ1i0l7YtzA F05cShC/2xZHlZrlNaYEIKkh5qGYZNnUl5m4BlyfgKls0RyvJ0SmsN115RajobrF QAE7O4D/j4R6kM5GioOl6PnhzFLKqBjA2YdUcML9LeezsZT740ejShv/TXnAv/x2 mLEurM98HZulqrRaEvqdPc9nl26iM0unBXdiyZWoOSKfXxcKgNreyE+SX3BB6WKl Kmlyhkq33tmbng10hNXPqQP2c5eqHg/zcdKMxdpUOcRa -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwReeWd58HTkqlKrPmGUo 6pMzM6ITjKk+gMTEukWsAcyJVnjLA+chAi1CFZKsidQD5NFZynCMJensnVBSiVrX G/KaHGwuQGpf+7jGaLmr0PsoqPz/E60Hv4QuezFwDoI4uCtpj5CyNskcoXRQj8lw HgfAJMTquPBQNSo1Ja9BI6pFUbzyVs4+g0o0XPsClIGIp1g30bRb1e5NmJxikaxD 3dUKny4/7rnD5AMBWMHaqU0UdfQi5snrryZMjKX3oaEQr/6eTudHkp9s3Ut7FmNg WZi3LqOpgWApN/tkT6zbOaiM56Rw07DH2cO0Z2pF34xiQ4aL7DqeMiBXcI49P6oH BQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 369874429273897531360451683229281764645260 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-22 15:29:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 15:29:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ofresidents.com.canwebuild.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24375639603870463978652595747068757233920231471509437911721530449877474814318489762946520284810106478506385766882216763848455980524164856190325766133075040448191143950349518904348110760717048313199745070396439494743886274890778407075053222925809518685070757535760036661799219975907927011196253154607068929721086847097627275171746832532180273444976588566545466741096432123514133858298586362417415249796291218471407238903693980404717584149983734066223614535087869124984765998916890266239166998976449281649905215318382252370982796294993506530466638463708283642245090366023491832937895005216418661593294395075722671163141 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a916aac4fc830bb61bdf5274743afd3482effc29 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (257 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfalert.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firestudios.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forsalebyownerads.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imhumanright.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingofthevalley.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckinney.realbrilliance.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofresidents.com.canwebuild.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otherrealm.studio.privatepleasuretraxxx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tikaer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translate4vip.com.neygen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trivial.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a1e14cd290000040300483046022100aee77bc052b8bbda234cab24fefddf8b6bf02c4025131e83e87d2ae5bc6663a4022100efb1b9fc038b124f3690f1620fa3d3e81f9343ea19216f9786b2385d3edca58f007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a1e14cd670000040300473045022100824563c9a355e2625b03db65df87b97e8bcb1bb76ac93dc1d89223144eb084ee02205ac93e8249e9f906b91b52d1d0bdf7abafeefa05bdedfb045333f2aef58154bd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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