ropeglider.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:24:bc:6d:a7:c0:3f:3e:f6:a5:d7:b0:8a:79:18:ea:54:9b was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ropeglider.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:24:bc:6d:a7:c0:3f:3e:f6:a5:d7:b0:8a:79:18:ea:54:9bSerial Number (int): 273837487230393453791219294022725695853723
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 3e:23:92:e2:8e:b6:d8:75:79:fc:40:4f:22:b1:7c:f5:28:6b:20:72
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 0e:49:31:73:d4:f7:cc:1b:13:a0:1f:fe:f6:a0:9f:43:15:9d:07:2a
Fingerprint (sha256): 75:5c:31:91:a5:98:1f:c1:18:5c:0b:f9:39:8a:28:e4:6f:10:63:e8:b3:e2:a6:a9:ca:77:41:bd:31:58:f0:65
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ropeglider.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ropeglider.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ropeglider.ch
www.ropeglider.ch
www.ropeglider.ch
Other certificates including the domain name ropeglider.ch
(limited to 100 certificates)
Certificate
The complete raw certificate details for ropeglider.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgISAyS8bafAPz72pdewinkY6lSbMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MTcwOTE0MDZaFw0x ODA4MTUwOTE0MDZaMBgxFjAUBgNVBAMTDXJvcGVnbGlkZXIuY2gwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDGM8FSCK2022W2EmQOZpQLiZBoR0+t/hfJ /QPYEhLsVuphKNn5WqHoQNrn4Fgd7D77vGO4vvO3my4wu84UzKOpD/6MEA27HbfE bvVYlr4UYKIeSGbzHaiKnWVYc3qhQBA0mDnxDm9Zoll5OKYtTwb3pTA2PJpTT3M7 zyTJhX1u7pEaenvbzGqMS7VP6AagXD8bd+5g422BS8lwCMjlEUscUgnOaFqGNzbb m83OQk5Rmnh157/2EZ5axbk1KXMWwQGhxyoUH+OQRSuP4/Q/qKFzS96skaAUpAxB xfb0nm+XsLIM5cYJZFHvlAzduhDE7fPcKyqb6Vn8gtXs8EiL1fAHeJN/Y8u/6Oi+ mMV+AMoiXOBCLJkVXZmawJYlbIiWf+AkS1nW0G7APudT23Htygpr0Z9ToG8/CblX d7YmywYSqV/uh7zUyE2KdO/v6axj+9U4kNSPBmuhceFjm8KCPwPeQ3q1jeNaHuZY UMQ0BmRUQiFgZvBHY2UKvAz1gqXRzyRKljVhLbrjbcpHNN47vVG4xmXSyxlGFLVv sFJFl956HM2t+BHnbPkx1zgHZi3oor8t6Hv/CKbIZKMduLH3lK+Gd8hxDkF6m1rN Y2ZM7qZ9KG5FBmL+PbB7el6suRkJ6Zxu/IMZgy9COkxoBFwWh/8phPvdq9QhTU+G oLxA2NyN0QIDAQABo4IDKDCCAyQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ+I5Li jrbYdXn8QE8isXz1KGsgcjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDXJvcGVnbGlkZXIuY2iCEXd3 dy5yb3BlZ2xpZGVyLmNoMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEE AYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBi ZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNj b3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0 cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEEBgorBgEEAdZ5AgQC BIH1BIHyAPAAdgDbdK/uyynssf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWNt l6uWAAAEAwBHMEUCICWVew3XdAFQu1i4vhmJgvsRlrlPGoH0TcX0CKp8S4USAiEA t8Dm6YERElh2XUR6wBXLYXZWO4VF0s4uXDHijgtP8akAdgApPFGWVMg5ZbqqUPxY B9S3b79Yeily3KTDDPTlRUf0eAAAAWNtl6urAAAEAwBHMEUCIQDKnjzbWlUme8t+ YJifga7AUsRnI7f2nSqwqhh7akWVawIgaxbQtjNo+q6O67CBCJy65nJJagFQ5yAo Y9w2Fs2Tr2EwDQYJKoZIhvcNAQELBQADggEBADinhNhy2UIaPd7TFEeY6FvXFVWU IIPZKy52WsPEe03n5DHXj8OjGREfB95lk2W5CGHNJKy0AKZ+BFMy+Q4ez3TusaBK iMnfGlzTiUvHOIsnWqn/tZLSuZYG0nGwyXCSfhMzl1ywXcpJqtMKRq/PdMtFXxDV 3TAzmNh1mj4QfRECeh6vycje+0eRNHM5BGz2w8X5HKnrZEmMNAQzTEhzAq7jsRAC wfPE6tEhdVjhYWU0SkDTjVu8fAGG0GXcoXfZp+0UT5wSXdgb88LwpU3TEa63EPBk CMlISgXiKSIto5GLLXtRCLD3maEpK+owdbDoVbFJMvJqoS6pdX0UWJU/Niw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxjPBUgittNtlthJkDmaU C4mQaEdPrf4Xyf0D2BIS7FbqYSjZ+Vqh6EDa5+BYHew++7xjuL7zt5suMLvOFMyj qQ/+jBANux23xG71WJa+FGCiHkhm8x2oip1lWHN6oUAQNJg58Q5vWaJZeTimLU8G 96UwNjyaU09zO88kyYV9bu6RGnp728xqjEu1T+gGoFw/G3fuYONtgUvJcAjI5RFL HFIJzmhahjc225vNzkJOUZp4dee/9hGeWsW5NSlzFsEBoccqFB/jkEUrj+P0P6ih c0verJGgFKQMQcX29J5vl7CyDOXGCWRR75QM3boQxO3z3Csqm+lZ/ILV7PBIi9Xw B3iTf2PLv+jovpjFfgDKIlzgQiyZFV2ZmsCWJWyIln/gJEtZ1tBuwD7nU9tx7coK a9GfU6BvPwm5V3e2JssGEqlf7oe81MhNinTv7+msY/vVOJDUjwZroXHhY5vCgj8D 3kN6tY3jWh7mWFDENAZkVEIhYGbwR2NlCrwM9YKl0c8kSpY1YS26423KRzTeO71R uMZl0ssZRhS1b7BSRZfeehzNrfgR52z5Mdc4B2Yt6KK/Leh7/wimyGSjHbix95Sv hnfIcQ5BeptazWNmTO6mfShuRQZi/j2we3perLkZCemcbvyDGYMvQjpMaARcFof/ KYT73avUIU1PhqC8QNjcjdECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 273837487230393453791219294022725695853723 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-17 09:14:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-15 09:14:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ropeglider.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808594301340153600276341290556080057186399701426366194190594925865562377422929645367126660825514781732878632130812683771295103989888389534752610564521770688166627766577274466804507567064195131230114378988997499733424881130049102328219559976874722965393109397570170957325525802553527739701068193673049772170913301944617608944172705099823608685752689996340975725094636332546810281048613343105358720642082912497009979389375269524147814294322773030063882657670246939103864473653014895587276050218350191062488782068896584644635764792431230908037423908169603354135546055432091241072128632281985369096932436349481319782252045426990252024257595311467909569165241043008891088379601293833026396164555974761298642194253321579847777787404135592103927033463127885382665243881972084164802832414097520524626961916497962633417685685787814910263177806281392873247156011338573958760227761546228037410197766259682247404985895454776381916972256037919281579924335299972067263076603603292456215672606580310106564328822813704631425031519400056047809094915882410441459722163856263226582666151778834755440168616136727538647861611107265661434281111550144772023888623682447055222067978737922410673233993521466886410758883843665615713798391062933816597750255057 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3e2392e28eb6d87579fc404f22b17cf5286b2072 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ropeglider.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ropeglider.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001636d97ab960000040300473045022025957b0dd7740150bb58b8be198982fb1196b94f1a81f44dc5f408aa7c4b8512022100b7c0e6e981111258765d447ac015cb6176563b8545d2ce2e5c31e28e0b4ff1a9007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001636d97abab0000040300473045022100ca9e3cdb5a55267bcb7e60989f81aec052c46723b7f69d2ab0aa187b6a45956b02206b16d0b63368faae8eebb081089cbae672496a0150e7202863dc3616cd93af61 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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