freenome.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:36:fc:ca:11:cd:19:1b:75:b0:aa:8a:8d:4a:34:87:77:bf was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=freenome.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:36:fc:ca:11:cd:19:1b:75:b0:aa:8a:8d:4a:34:87:77:bfSerial Number (int): 280048120268965146701567693726452690679743
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5a:ea:f3:3c:30:b8:08:6d:7c:ae:51:d6:c7:12:0f:e2:98:b7:29:82
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 42:c7:71:d5:9d:ed:53:39:1a:1a:30:3d:e3:e2:b6:05:4b:8e:79:33
Fingerprint (sha256): 78:19:63:a0:7e:3d:c9:f2:b0:4a:b3:1f:f5:d8:a2:97:be:74:25:85:de:11:ef:f0:6b:54:c0:e8:79:54:d6:5f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate freenome.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for freenome.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
freenome.com
Other certificates including the domain name freenome.com
(limited to 100 certificates)
www.freenome.com
freenome.com
www.mayatechnology.co.uk
ahll.test.emr.studio
www.freenome.com
www.freenome.com
freenome.com
freenome.com
freenome.com
freenome.com
freenome.com
risingstar.blackmint.io
www.freenome.com
freenome.com
freenome.com
freenome.com
www.freenome.com
www.freenome.com
www.freenome.com
krishgpssolutions.com
www.freenome.com
earthlingrescuealliance.com
freenome.com
www.freenome.com
www.freenome.com
lasergeek.ru
freenome.com
www.desystem.net
training.freenome.com
freenome.com
freenome.com
freenome.com
freenome.com
freenome.com
incidentally-login.emerging-response.com
damishael.com
www.freenome.com
careers.freenome.com
www.freenome.com
www.freenome.com
chornous.net
freenome.com
freenome.com
share.impactwrap.dev
michelin.inreport.uz
freenome.com
www.freenome.com
freenome.com
freenome.com
vivaleisure.jlonetouch.com.au
solvarea.speakylink.com
www.freenome.com
freenome.com
www.freenome.com
freenome.com
freenome.com
freenome.com
tls.automattic.com
freenome.com
www.freenome.com
deep.reezytech.com
www.alexdupuis.com
freenome.com
www.ramazanbalak.com
www.freenome.com
momofactoryus.com
www.freenome.com
urabereiji.com
digitalexp.tech
www.freenome.com
freenome.com
www.freenome.com
freenome.com
cdn.taskgram.com
freenome.com
freenome.com
freenome.com
www.freenome.com
freenome.com
www.freenome.com
www.freenome.com
www.freenome.com
zaiseki.artpro.co.jp
www.freenome.com
freenome.com
swatantra.globalgarner.com
operations.cognite.com
srba.fyi
freenome.com
www.freenome.com
www.freenome.com
acutemalnutrition.org
freenome.com
freenome.com
www.freenome.com
freenome.com
freenome.com
www.freenome.com
porcaosteakhouse.com.br
freenome.com
freenome.com
www.mayatechnology.co.uk
ahll.test.emr.studio
www.freenome.com
www.freenome.com
freenome.com
freenome.com
freenome.com
freenome.com
freenome.com
risingstar.blackmint.io
www.freenome.com
freenome.com
freenome.com
freenome.com
www.freenome.com
www.freenome.com
www.freenome.com
krishgpssolutions.com
www.freenome.com
earthlingrescuealliance.com
freenome.com
www.freenome.com
www.freenome.com
lasergeek.ru
freenome.com
www.desystem.net
training.freenome.com
freenome.com
freenome.com
freenome.com
freenome.com
freenome.com
incidentally-login.emerging-response.com
damishael.com
www.freenome.com
careers.freenome.com
www.freenome.com
www.freenome.com
chornous.net
freenome.com
freenome.com
share.impactwrap.dev
michelin.inreport.uz
freenome.com
www.freenome.com
freenome.com
freenome.com
vivaleisure.jlonetouch.com.au
solvarea.speakylink.com
www.freenome.com
freenome.com
www.freenome.com
freenome.com
freenome.com
freenome.com
tls.automattic.com
freenome.com
www.freenome.com
deep.reezytech.com
www.alexdupuis.com
freenome.com
www.ramazanbalak.com
www.freenome.com
momofactoryus.com
www.freenome.com
urabereiji.com
digitalexp.tech
www.freenome.com
freenome.com
www.freenome.com
freenome.com
cdn.taskgram.com
freenome.com
freenome.com
freenome.com
www.freenome.com
freenome.com
www.freenome.com
www.freenome.com
www.freenome.com
zaiseki.artpro.co.jp
www.freenome.com
freenome.com
swatantra.globalgarner.com
operations.cognite.com
srba.fyi
freenome.com
www.freenome.com
www.freenome.com
acutemalnutrition.org
freenome.com
freenome.com
www.freenome.com
freenome.com
freenome.com
www.freenome.com
porcaosteakhouse.com.br
freenome.com
Certificate
The complete raw certificate details for freenome.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAzb8yhHNGRt1sKqKjUo0h3e/MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MTYwNjQyMDFaFw0x OTA4MTQwNjQyMDFaMBcxFTATBgNVBAMTDGZyZWVub21lLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAIAC55ofGtZGiyWFRbdVz5Ex6ysWzya21R4O 14zaWZXqzHo7jJeXJKE8Saz9wwrhmB8p3aIrMmGog5bf6hufb5GDKdg54eeze+5Y +frdQt/Rrq0oh0/VHeibuulzLUb6tO0olufIH+DZotsd5CTdwxoOJoHFEKmWUonq tWVZW1eGaN0VXmL/pm9MbUciW6IQDX0c6RSFLzxsdFELXa2wBo4N8hFLgonguRkj jLQNkbkzaulxJe78o8EW3O1ywtT2PY7c0YSUsDWHiPFhFyDsmCmAauuCUOrdk9Je ebsWHxZ1RLpa7mjN3W/dIub0xH+OKx4d1XYUG0R3hwj4rgWt2LcCAwEAAaOCAmAw ggJcMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUWurzPDC4CG18rlHWxxIP4pi3KYIw HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzAXBgNVHREEEDAOggxmcmVlbm9tZS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEw NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j cnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgBj8tvN6DvMLM8LcoQn V2szpI1hd4+9daY4scdoVEvYjQAAAWq/lz97AAAEAwBHMEUCICZkT+/KNsRprUDQ Q2QksawgJD9vIXtpscREmA5Pa8bjAiEAyiZbN5/VmMJq45yr3mF3rK4NRTQUm5IA 9hZdsjsMtb0AdQB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWq/ l0NCAAAEAwBGMEQCIC+9oz9s7sAmCTCV/jpb/EoLREelBfPFEhMTAU7SR/d2AiBm rsdGbmv78FEe5d6ZDIkFbbZzuBDb0Liny1e96NnfCjANBgkqhkiG9w0BAQsFAAOC AQEAbi5LLzzohaD6pntqNaHU6mIvbr55oCPS1bFKoWt9Ue6v1gInPV7XJ1Cs1+R3 Vb0G9tkV8IqF8h66gh2JqIUBqsfrANWm7JVRJiG9xcCrcZr4KXU//ucPGOpgUgh2 yyab71kK2DqGqZmqB8qvqFP7pwUjTvx0zYv6PutxIWbm3ABuKZbVcr0mW60883/5 4Ex7MuvUgtF9jwzO37Y0WCUbH/nynVVgn5xgZdDUrJOU/ihw002poGOLZ8/s7Q12 3/z1V7xDswBPSTtsMoIJ2VsWgQaTJNgAi+kDgRUPULCzUenV+qaSNHMgdxkp/uva roC7yd5aiFquhkJgvG2Inkpg0g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgALnmh8a1kaLJYVFt1XP kTHrKxbPJrbVHg7XjNpZlerMejuMl5ckoTxJrP3DCuGYHyndoisyYaiDlt/qG59v kYMp2Dnh57N77lj5+t1C39GurSiHT9Ud6Ju66XMtRvq07SiW58gf4Nmi2x3kJN3D Gg4mgcUQqZZSieq1ZVlbV4Zo3RVeYv+mb0xtRyJbohANfRzpFIUvPGx0UQtdrbAG jg3yEUuCieC5GSOMtA2RuTNq6XEl7vyjwRbc7XLC1PY9jtzRhJSwNYeI8WEXIOyY KYBq64JQ6t2T0l55uxYfFnVEulruaM3db90i5vTEf44rHh3VdhQbRHeHCPiuBa3Y twIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 280048120268965146701567693726452690679743 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 06:42:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-14 06:42:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'freenome.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16159935394370341274282744306790563605901377330351866847847899601673731010449598519311395541315676565282354080975279173171612529255500962345925269197390563565851038065752048685548896557042161047765985116656365011427554345139999786330628904634742410150197928436388680950354025158556085386544509515132401683469999966979060977788930190712277039856406749318306925664846824595361132069585990690120469991139459947054425445209870808308153810662923070005311858007781887317291572495013584428062845882798884831696395407843533289742925717652111323305453025651356099837684973637786467893234062630439711539122200810639536606271671 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5aeaf33c30b8086d7cae51d6c7120fe298b72982 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freenome.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016abf973f7b0000040300473045022026644fefca36c469ad40d0436424b1ac20243f6f217b69b1c444980e4f6bc6e3022100ca265b379fd598c26ae39cabde6177acae0d4534149b9200f6165db23b0cb5bd007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016abf974342000004030046304402202fbda33f6ceec026093095fe3a5bfc4a0b4447a505f3c5121313014ed247f776022066aec7466e6bfbf0511ee5de990c89056db673b810dbd0b8a7cb57bde8d9df0a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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