greenpointcapital.com
Issued by R11
About this certificate
This digital certificate with serial number 04:11:7d:e7:5a:56:6a:ea:f4:7b:08:06:2d:7c:50:29:79:79 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=greenpointcapital.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:11:7d:e7:5a:56:6a:ea:f4:7b:08:06:2d:7c:50:29:79:79Serial Number (int): 354401298717007952253755005893340719315321
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: c3:11:05:ea:1f:81:fc:bb:d9:14:87:22:bf:50:21:60:a8:6d:ea:09
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9
Fingerprint (sha1): 09:b5:2c:99:9b:e7:c6:bd:68:b5:71:15:78:a7:07:da:d7:77:1e:40
Fingerprint (sha256): 80:0d:74:8c:e3:df:d6:90:c7:b1:0a:85:dd:83:c7:b0:8a:e0:0d:b1:fc:90:2b:73:5c:ed:89:0c:1a:5b:f3:f3
Issuing Certificate URL: http://r11.i.lencr.org/
Revocation information
OCSP Server: http://r11.o.lencr.orgCheck the revocation status for certificate greenpointcapital.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for greenpointcapital.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
greenpointcapital.com
Other certificates including the domain name greenpointcapital.com
(limited to 100 certificates)
greenpointcapital.com
chat.globalalarms.ae
forms.farsight24.com
chat.globalalarms.ae
greenpointcapital.com
connect.reseauquebecoisdesaeroports.ca
chat.globalalarms.ae
apply.mytgroup.net
greenpointcapital.com
jobs.greenpointcapital.com
greenpointcapital.com
greenpointcapital.com
chat.globalalarms.ae
apply.mytgroup.net
chat.globalalarms.ae
chat.globalalarms.ae
greenpointcapital.com
cliq.spertoconsulting.com
cliq.openlabpro.com
jobs.omniventuregroup.com
greenpointcapital.com
careers.vendeur-afrique.com
cliq.superbia.services
submissions.greenpointcapital.com
chat.globalalarms.ae
submissions.greenpointcapital.com
chat.netsuccessusa.com
cliq.resortscompanies.com
greenpointcapital.com
chat.globalalarms.ae
cliq.beerwahhideaway.com.au
remote.greenpointcapital.com
chat.globalalarms.ae
greenpointcapital.com
service.oneclickstartup.com
apply.mytgroup.net
richorscrewed.com
chat.identity-solutions.com.au
truconnect.truenergy.com
chat.globalalarms.ae
submissions.greenpointcapital.com
leadership.tazewellproud.com
apply.mytgroup.net
chat.globalalarms.ae
greenpointcapital.com
chat.waveform.gg
truconnect.truenergy.com
submissions.greenpointcapital.com
chat.jsproadvisor.com
forms.risccompass.net
chat.globalalarms.ae
forms.globedwise.com
chat.jsproadvisor.com
chat.globalalarms.ae
apply.mytgroup.net
apply.mytgroup.net
connect.mobix.fr
submissions.greenpointcapital.com
cliq.greenpointcapital.com
apply.mytgroup.net
greenpointcapital.com
cliq.getmeofficial.com
chat.somani.app
compostaggio-mantovaambiente.gph-web.it
greenpointcapital.com
chat.globalalarms.ae
intranet.cleverbridge.ch
chat.identity-solutions.com.au
chat.globalalarms.ae
truconnect.truenergy.com
careers.mohawkcomputers.com
submissions.greenpointcapital.com
chat.lcctv.pro
submissions.greenpointcapital.com
chat.mzecellular.com
careers.coure-tech.com
greenpointcapital.com
chat.globalalarms.ae
greenpointcapital.com
chat.globalalarms.ae
apply.mytgroup.net
submissions.greenpointcapital.com
private.galivingsuites.com
chat.globalalarms.ae
forms.farsight24.com
chat.globalalarms.ae
greenpointcapital.com
connect.reseauquebecoisdesaeroports.ca
chat.globalalarms.ae
apply.mytgroup.net
greenpointcapital.com
jobs.greenpointcapital.com
greenpointcapital.com
greenpointcapital.com
chat.globalalarms.ae
apply.mytgroup.net
chat.globalalarms.ae
chat.globalalarms.ae
greenpointcapital.com
cliq.spertoconsulting.com
cliq.openlabpro.com
jobs.omniventuregroup.com
greenpointcapital.com
careers.vendeur-afrique.com
cliq.superbia.services
submissions.greenpointcapital.com
chat.globalalarms.ae
submissions.greenpointcapital.com
chat.netsuccessusa.com
cliq.resortscompanies.com
greenpointcapital.com
chat.globalalarms.ae
cliq.beerwahhideaway.com.au
remote.greenpointcapital.com
chat.globalalarms.ae
greenpointcapital.com
service.oneclickstartup.com
apply.mytgroup.net
richorscrewed.com
chat.identity-solutions.com.au
truconnect.truenergy.com
chat.globalalarms.ae
submissions.greenpointcapital.com
leadership.tazewellproud.com
apply.mytgroup.net
chat.globalalarms.ae
greenpointcapital.com
chat.waveform.gg
truconnect.truenergy.com
submissions.greenpointcapital.com
chat.jsproadvisor.com
forms.risccompass.net
chat.globalalarms.ae
forms.globedwise.com
chat.jsproadvisor.com
chat.globalalarms.ae
apply.mytgroup.net
apply.mytgroup.net
connect.mobix.fr
submissions.greenpointcapital.com
cliq.greenpointcapital.com
apply.mytgroup.net
greenpointcapital.com
cliq.getmeofficial.com
chat.somani.app
compostaggio-mantovaambiente.gph-web.it
greenpointcapital.com
chat.globalalarms.ae
intranet.cleverbridge.ch
chat.identity-solutions.com.au
chat.globalalarms.ae
truconnect.truenergy.com
careers.mohawkcomputers.com
submissions.greenpointcapital.com
chat.lcctv.pro
submissions.greenpointcapital.com
chat.mzecellular.com
careers.coure-tech.com
greenpointcapital.com
chat.globalalarms.ae
greenpointcapital.com
chat.globalalarms.ae
apply.mytgroup.net
submissions.greenpointcapital.com
private.galivingsuites.com
Certificate
The complete raw certificate details for greenpointcapital.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE+zCCA+OgAwIBAgISBBF951pWaur0ewgGLXxQKXl5MA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTEwHhcNMjQwNjEzMTMxNjIyWhcNMjQwOTExMTMxNjIxWjAgMR4wHAYDVQQD ExVncmVlbnBvaW50Y2FwaXRhbC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDFSiQqvmPFK46rUovzXE8Q/AxbiSLGkcoEX+nijd5ox9wN5l63mX72 EM1xPEgn4Dw+a6K707IZX3mZmKLb36hO5x7qS52JsNWSpaEDbMCsGAMtYyKB2/6v sRXOnBkK8WiN/i68mMq60lSpMKlcRZBfkycaQqDzG7pI+xL3TxIpecEE72CHxj7S H9xBcX/WQ/fqJ/3JIyqW4vOzNqrZhy5RwYT3XsiqWe2ujG5LI5FiUlrCisR7qFEt DLxl8+Yv0GV8j9T3RX6RhZSPu7xRhZfIr50LqoNV3ZNXzFOhfBwfP5PFKrnGDWsV 6W4tlMxKxaAc3wM7ytAtDcFbzRQ1DNd/AgMBAAGjggIaMIICFjAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFMMRBeofgfy72RSHIr9QIWCobeoJMB8GA1UdIwQYMBaAFMXP RqTq9MPAemyVxC2wXpIvJuO5MFcGCCsGAQUFBwEBBEswSTAiBggrBgEFBQcwAYYW aHR0cDovL3IxMS5vLmxlbmNyLm9yZzAjBggrBgEFBQcwAoYXaHR0cDovL3IxMS5p LmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVZ3JlZW5wb2ludGNhcGl0YWwuY29tMBMG A1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcA7s3Q ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGQEfTr7wAABAMASDBGAiEA 2HTNUdDsoxhnHfUl1caQj5JMVFpeHhsKG6O96718UFMCIQDgPFnjRzaZpaNjzaIn sudJJtyqSFtzeGrWzKSdvbbFKAB2AN/hVuuqBa+1nA+GcY2owDJOrlbZbqf1pWoB 0cE7vlJcAAABkBH07PwAAAQDAEcwRQIgKB6bg6YMrrDvelKqj2/KCARkRdRIc1rO 60zrYy4zRgcCIQD2/WQ4hpu5OZzhlATbJEE+C+odpBzpDleal0mlxkf8RTANBgkq hkiG9w0BAQsFAAOCAQEAS69Tl1cEOF740UCumoqago27H3BwUstw6SzjGH5la5mW YWT4dyZ9DHa2Elg0vnhafl/DmXc9f6bKZw7789S16atw0VKRolkWGbsLAmR9DonP TicTE0fRVf+0IyG41LZzdnL3Q+As+QLD5KJbjH/pEIov3L7M5GJwQqamiFFZIvEI ErxeWQVs9HignV14lusnkNL01RRSkz/4VxcWulrUw0/z4aJxAqwXT3MKChU9tkBB UNv2fKeofYkCRcY9fATcbyhUvZVKtva3cjQBE5cqtJtTz7Pm9jW/mT0SKu0pjMxM YCmzdE0bG8Fb1Vc00Kn8kmLGBYmSfcGayfdopw3kEQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUokKr5jxSuOq1KL81xP EPwMW4kixpHKBF/p4o3eaMfcDeZet5l+9hDNcTxIJ+A8Pmuiu9OyGV95mZii29+o Tuce6kudibDVkqWhA2zArBgDLWMigdv+r7EVzpwZCvFojf4uvJjKutJUqTCpXEWQ X5MnGkKg8xu6SPsS908SKXnBBO9gh8Y+0h/cQXF/1kP36if9ySMqluLzszaq2Ycu UcGE917IqlntroxuSyORYlJaworEe6hRLQy8ZfPmL9BlfI/U90V+kYWUj7u8UYWX yK+dC6qDVd2TV8xToXwcHz+TxSq5xg1rFeluLZTMSsWgHN8DO8rQLQ3BW80UNQzX fwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 354401298717007952253755005893340719315321 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 13:16:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-11 13:16:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'greenpointcapital.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24905506504735129209551709595633707113348632700597049026583401523579280437498354572615839555334644513905130259652194412220929625255311005486544207393800584177305810038920555799563550802957717883025051687652318037809394521037290396856307025488768572808364713827120254297352557024346048440368648775609103636451603037600499575711306071461710594365509078329085471152974091108115812324212142091552259156223683489807514839436109233484465822298510715579127997696765828347488401632519803616917719367460601232175032093933443061019379344247030944621027026643064324194288685407178884375498637253063409587721877146549305759029119 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c31105ea1f81fcbbd9148722bf502160a86dea09 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenpointcapital.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000019011f4ebef0000040300483046022100d874cd51d0eca318671df525d5c6908f924c545a5e1e1b0a1ba3bdebbd7c5053022100e03c59e3473699a5a363cda227b2e74926dcaa485b73786ad6cca49dbdb6c528007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000019011f4ecfc00000403004730450220281e9b83a60caeb0ef7a52aa8f6fca08046445d448735aceeb4ceb632e334607022100f6fd6438869bb9399ce19404db24413e0bea1da41ce90e579a9749a5c647fc45 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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