redmine.engined.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:1c:d5:71:fa:1d:55:0d:1c:e6:80:4c:0b:7b:28:78:d4:ec was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=redmine.engined.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1c:d5:71:fa:1d:55:0d:1c:e6:80:4c:0b:7b:28:78:d4:ecSerial Number (int): 271148481434640558137476720897720820749548
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5f:f4:d4:ff:db:ba:bd:be:91:bc:36:2e:c4:68:c0:44:bb:72:3d:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c6:c7:ef:bd:e5:36:54:f8:26:46:dd:fe:e0:a6:46:07:1d:a4:e6:25
Fingerprint (sha256): 75:bc:6d:4b:a2:d5:19:15:8e:7f:58:4e:2d:22:3a:15:b2:a0:11:b9:89:ba:80:b8:cb:82:bb:b6:e8:36:75:e1
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate redmine.engined.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for redmine.engined.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
redmine.engined.net
redmine.freya.sk
redmine.freya.sk
Other certificates including the domain name engined.net
(limited to 100 certificates)
engined.net
redmine.engined.net
*.engined.net
engined.net
*.engined.net
redmine.engined.net
munin.engined.net
redmine.engined.net
redmine.engined.net
redmine.engined.net
munin.engined.net
munin.engined.net
redmine.engined.net
redmine.engined.net
redmine.engined.net
munin.engined.net
engined.net
munin.engined.net
redmine.engined.net
redmine.engined.net
munin.engined.net
munin.engined.net
engined.net
engined.net
redmine.engined.net
munin.engined.net
engined.net
engined.net
bauernpflaster.h1.engined.net
munin.engined.net
engined.net
munin.engined.net
engined.net
engined.net
engined.net
redmine.engined.net
redmine.engined.net
engined.net
redmine.engined.net
*.engined.net
engined.net
*.engined.net
redmine.engined.net
munin.engined.net
redmine.engined.net
redmine.engined.net
redmine.engined.net
munin.engined.net
munin.engined.net
redmine.engined.net
redmine.engined.net
redmine.engined.net
munin.engined.net
engined.net
munin.engined.net
redmine.engined.net
redmine.engined.net
munin.engined.net
munin.engined.net
engined.net
engined.net
redmine.engined.net
munin.engined.net
engined.net
engined.net
bauernpflaster.h1.engined.net
munin.engined.net
engined.net
munin.engined.net
engined.net
engined.net
engined.net
redmine.engined.net
redmine.engined.net
engined.net
Certificate
The complete raw certificate details for redmine.engined.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGcTCCBVmgAwIBAgISAxzVcfodVQ0c5oBMC3soeNTsMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMTEyMjAwMzdaFw0x OTA1MTIyMjAwMzdaMB4xHDAaBgNVBAMTE3JlZG1pbmUuZW5naW5lZC5uZXQwggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC11bM4Tc2N0ampeVJ0TEGKS4qX KuK9kgDIVWEc3V5BOs5qsp7IWi7OafIlM3zpCVvtKcfoS9rQvamkl+7DJKVpAn8Q y3IbpLYHVl2hM9D/5NNp+dv2jLQGWSlZnW/DAK4bPptzh3pi4fqOuT7a/pvEXl1b Scc+a9e+1nZQEyvnR9fRtreI/Vyv7EvUu/Td74vWTpctW162AjCdVNOuFAWpHxQm +i4DwmIIdPKZ5dsevIPuPhcDF2a2lyOttr3Bs+wVIq0gpFFCUKg55P3ZvQduUtVY sJvTW8Wgzi8i38P0qaE7+ZQZyu2DOy/DWMusgsKf6UhsUANR+wrmzNX3dg77jgum 7GzjSfe5XpkiHr1RumqkfIlFFRAot2hZ9e3Nd2qEmCv40QB7Q2gv28gIsVDm0lEg VH1inh+2jf9gysrV/MMXykS4XqmbtaWGcDSzKAYg7pzP6CVBvSl9VGiSIzFQpsWR 3JLQifW2TG/TgNorrCUd25a/V8EAYL8G5/s5FUgbpIHrEjp4xi5TKT2dSlhb1qxP ONUrG9wzmIThhIdCC6jx636OvYIPn8xtUw3atwyy8RjLIjYPAjcN24fjcN4IiFJX glCxHqfCw2l4AE6dDIBi9bujIGFfJmyZKZ/uzZ6E8+159oQxE8NfCjdiPV3BB/BH ywqVJbBVpwJ4UtaMdQIDAQABo4ICezCCAncwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBRf9NT/27q9vpG8Ni7EaMBEu3I9dDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMDAGA1UdEQQpMCeCE3JlZG1pbmUuZW5n aW5lZC5uZXSCEHJlZG1pbmUuZnJleWEuc2swTAYDVR0gBEUwQzAIBgZngQwBAgEw NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j cnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgB0ftqDMa0zEJEhnM4l T0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWjeynnDAAAEAwBHMEUCIEICYUaycBH0ylS8 kUMVLLYSIhghXfyoiS/2rnuCYMGMAiEA8R4p8lLhhO6gGXdbRNh4Vv9O/xF1fjyB +QTLtb79/BAAdwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWje ynoGAAAEAwBIMEYCIQDV04M5MyXHilZuXl7AbcVWwqH+1HI01b3liHawjm4OMQIh AL9Bx2VPwsijWzHI9Mh6OICuRr7llWciTPd23HmYyALzMA0GCSqGSIb3DQEBCwUA A4IBAQB5bJpTQHxZnINLBwYPOvvUHaD/rC8bpU+rQAZ6ZTtcpNRblJ7j64KNMpwp 8q1j2cL467EpCx0Fnypd9S7Damg7IJaImSn0D8687KgpH+qwn34eEi5GQfxFf3d1 5f87plIk/J5RRrfOkxV5w8ZzlTDRDethIYlzGRRgN93DGEwNJyHs/9fQfVcawo7g PHY76gnxuBLo2j9X8YNHiLj6TqoGf5xVWhesIsAL8X4y0CnFxG7EW3EZ0RXdj5Za NL9wwSVehepMZmir0czGKX/it6ioHD6Qx4Do9O+IZkj7SnMlyPXXzLnjeMVjjiOz 0qqn7e0oFMguUvhJPKf0H565IcG7 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtdWzOE3NjdGpqXlSdExB ikuKlyrivZIAyFVhHN1eQTrOarKeyFouzmnyJTN86Qlb7SnH6Eva0L2ppJfuwySl aQJ/EMtyG6S2B1ZdoTPQ/+TTafnb9oy0BlkpWZ1vwwCuGz6bc4d6YuH6jrk+2v6b xF5dW0nHPmvXvtZ2UBMr50fX0ba3iP1cr+xL1Lv03e+L1k6XLVtetgIwnVTTrhQF qR8UJvouA8JiCHTymeXbHryD7j4XAxdmtpcjrba9wbPsFSKtIKRRQlCoOeT92b0H blLVWLCb01vFoM4vIt/D9KmhO/mUGcrtgzsvw1jLrILCn+lIbFADUfsK5szV93YO +44Lpuxs40n3uV6ZIh69UbpqpHyJRRUQKLdoWfXtzXdqhJgr+NEAe0NoL9vICLFQ 5tJRIFR9Yp4fto3/YMrK1fzDF8pEuF6pm7WlhnA0sygGIO6cz+glQb0pfVRokiMx UKbFkdyS0In1tkxv04DaK6wlHduWv1fBAGC/Buf7ORVIG6SB6xI6eMYuUyk9nUpY W9asTzjVKxvcM5iE4YSHQguo8et+jr2CD5/MbVMN2rcMsvEYyyI2DwI3DduH43De CIhSV4JQsR6nwsNpeABOnQyAYvW7oyBhXyZsmSmf7s2ehPPtefaEMRPDXwo3Yj1d wQfwR8sKlSWwVacCeFLWjHUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 271148481434640558137476720897720820749548 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 22:00:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-12 22:00:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redmine.engined.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741821124182959261761964483464299178962797667557561501036439127533317839427761588708092056960259802800893977362782100274010609289288746446712384895082094433230989497039377624638229397119799199757940891686269105243911985408871979671681558650586432512492480320672539864053017899130662100761119002281271832204451431380170608958637240220724587010443316329715760730367121764519200366698069492649131772447637188119067718633081777249395070632828088403255687552794358940542702435197410344268260128521125897161134949206331913439972459161362879971437856017881983917521520681523222625819075287637214818057595365779807081655983755915567006211198229973695308311385743732708092719221983690129566659199254198711979467905836617135021254816589689732639059739098452460653851817144942424803924390452140010548887708122881377808449792263620657689800292734567549227818980356761681997072197504199043165033174992969940011370667809089338108890214581707049586885824514060551398869346563476440224733468007741354724262688443184752140932450209364175057523871402036106768837127653000141958207615463162856897246479891824256481951095722852377233542296167097145989383779342498984673171002115653147729549750294403312898059745447064279986776132443678745143960717921397 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5ff4d4ffdbbabdbe91bc362ec468c044bb723d74 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redmine.engined.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redmine.freya.sk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168deca79c30000040300473045022042026146b27011f4ca54bc9143152cb6122218215dfca8892ff6ae7b8260c18c022100f11e29f252e184eea019775b44d87856ff4eff11757e3c81f904cbb5befdfc10007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168deca7a060000040300483046022100d5d383393325c78a566e5e5ec06dc556c2a1fed47234d5bde58876b08e6e0e31022100bf41c7654fc2c8a35b31c8f4c87a3880ae46bee59567224cf776dc7998c802f3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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