salvemedica.pl
Issued by RapidSSL SHA256 CA - G2
About this certificate
This digital certificate with serial number 45:0f:f0:1d:fc:b7:be:78:9b:51:0b:b4:27:0a:cd:e0 was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=salvemedica.pl
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 45:0f:f0:1d:fc:b7:be:78:9b:51:0b:b4:27:0a:cd:e0Serial Number (int): 91799486316171162333759390110087564768
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12
Fingerprint (sha1): 17:b3:19:c2:4c:4b:f4:2e:22:b7:01:a8:2a:5e:32:b4:b2:1d:75:a6
Fingerprint (sha256): 88:c0:5b:50:82:4d:f8:ed:d0:f6:b6:4b:07:ee:92:b8:29:71:d3:a8:12:16:64:f1:bd:57:5b:f1:68:da:df:c6
Issuing Certificate URL: http://gs.symcb.com/gs.crt
Revocation information
OCSP Server: http://gs.symcd.comCRL Distribution Point: http://gs.symcb.com/gs.crl
Check the revocation status for certificate salvemedica.pl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for salvemedica.pl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
salvemedica.pl
www.salvemedica.pl
www.salvemedica.pl
Other certificates including the domain name salvemedica.pl
(limited to 100 certificates)
*.salvemedica.pl
portal.webdesigntilburg.nl
salvemedica.pl
*.salvemedica.pl
ciaza.salvemedica.pl
plodnosc.mezczyzna.salvemedica.pl
plodnosc.kobieta.salvemedica.pl
salvemedica.pl
plodnosc.mezczyzna.salvemedica.pl
ciaza.salvemedica.pl
salvemedica.pl
ciaza.salvemedica.pl
plodnosc.kobieta.salvemedica.pl
plodnosc.mezczyzna.salvemedica.pl
salvemedica.pl
plodnosc.kobieta.salvemedica.pl
*.salvemedica.pl
projects.spektrum.consulting
projects.surmount.group
projects.forecast.media
ciaza.salvemedica.pl
ciaza.salvemedica.pl
plodnosc.kobieta.salvemedica.pl
plodnosc.kobieta.salvemedica.pl
salvemedica.pl
plodnosc.mezczyzna.salvemedica.pl
*.salvemedica.pl
plodnosc.mezczyzna.salvemedica.pl
plodnosc.mezczyzna.salvemedica.pl
*.salvemedica.pl
ciaza.salvemedica.pl
*.salvemedica.pl
*.salvemedica.pl
*.salvemedica.pl
plodnosc.kobieta.salvemedica.pl
zoho.salvemedica.pl
portal.webdesigntilburg.nl
salvemedica.pl
*.salvemedica.pl
ciaza.salvemedica.pl
plodnosc.mezczyzna.salvemedica.pl
plodnosc.kobieta.salvemedica.pl
salvemedica.pl
plodnosc.mezczyzna.salvemedica.pl
ciaza.salvemedica.pl
salvemedica.pl
ciaza.salvemedica.pl
plodnosc.kobieta.salvemedica.pl
plodnosc.mezczyzna.salvemedica.pl
salvemedica.pl
plodnosc.kobieta.salvemedica.pl
*.salvemedica.pl
projects.spektrum.consulting
projects.surmount.group
projects.forecast.media
ciaza.salvemedica.pl
ciaza.salvemedica.pl
plodnosc.kobieta.salvemedica.pl
plodnosc.kobieta.salvemedica.pl
salvemedica.pl
plodnosc.mezczyzna.salvemedica.pl
*.salvemedica.pl
plodnosc.mezczyzna.salvemedica.pl
plodnosc.mezczyzna.salvemedica.pl
*.salvemedica.pl
ciaza.salvemedica.pl
*.salvemedica.pl
*.salvemedica.pl
*.salvemedica.pl
plodnosc.kobieta.salvemedica.pl
zoho.salvemedica.pl
Certificate
The complete raw certificate details for salvemedica.pl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIQRQ/wHfy3vnibUQu0JwrN4DANBgkqhkiG9w0BAQsFADBH MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEgMB4GA1UEAxMX UmFwaWRTU0wgU0hBMjU2IENBIC0gRzIwHhcNMTcxMDEzMDAwMDAwWhcNMTgwNzEy MjM1OTU5WjAZMRcwFQYDVQQDDA5zYWx2ZW1lZGljYS5wbDCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMCN2wQe6Z8iT1EyYfjxlJ1m9olRkmtyAIc9APbY 3DAJoz5CynDQ1WkleRyo7BEBLsnCkTjIdViW7268sHczNr9nnisDzAky8jNfD+C/ EA8Ids+iVKwMp3tv5YwlWGENUDzlvvfsDsgrXTET+IBp/yegY3FQGN8MY4D2mnQm VWw+4r87OwAtf2Ew1JCFxi7huryokpUG7cpH7HOmvXp6a7Y/ZvAjB+OtL5Z/OxxE PUwhkXdyLmotvlS9uPEkl2sMjX/c7NqKpRnWo3pj/lMOW/mSPiX9SWyDN8N/F2Ga YEb8NPZVwdrP3KqeE3E/+nxemfUMSWG/PjSU1zcFRRYs0M0CAwEAAaOCAo0wggKJ MC0GA1UdEQQmMCSCDnNhbHZlbWVkaWNhLnBsghJ3d3cuc2FsdmVtZWRpY2EucGww CQYDVR0TBAIwADArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ3Muc3ltY2IuY29t L2dzLmNybDBvBgNVHSAEaDBmMGQGBmeBDAECATBaMCoGCCsGAQUFBwIBFh5odHRw czovL3d3dy5yYXBpZHNzbC5jb20vbGVnYWwwLAYIKwYBBQUHAgIwIAweaHR0cHM6 Ly93d3cucmFwaWRzc2wuY29tL2xlZ2FsMB8GA1UdIwQYMBaAFEz0v+g7vsIk8xtH O7VuSI4Wq68SMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ3Mu c3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ3Muc3ltY2IuY29tL2dzLmNy dDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1AN3rHSt6DU+mIIuBrYFocH4ujp0B 1VyIjT0RxM227L7MAAABXxXTk28AAAQDAEYwRAIgfc4N2MqxTce4UiruuVK9pM8P y+DIrGmWcX/KPOWrVz8CIEoW6YsoY1QGFmTVStkDTrvgNXsJqtIjZ4tBaeutgmb7 AHcApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFfFdOTvQAABAMA SDBGAiEArMfXXfobEU4e9hLZJKPN7K17JNJMgFrAYukYuGkJdYUCIQD8xb98tw88 yCpoVp0uBTf/VRYOwfZOFQ0VtrwsnJuPfjANBgkqhkiG9w0BAQsFAAOCAQEAMP32 heWSyvmw453DcGxf5YZc3AqFF3Ke8n6ZlUf8BpnFXOvvuvQ2Hrchn98N/lefxzM9 LZWvIn+Ab0h0n5oLT9jd227m7eAlG5VzIEZoLt5C/F5KmuzSRD55mPeEhw14T9Dx lQOt3APnuH+Kyp44FjPp7wsu3fgaIZKIBkybT1PGATdXanwxxheYpmaxyWpRMMVW sY7Omr2EsDxwWzEaqMQgWEHx4M2td7YNg2fgf7cPdHvYsuYOufbhHnGYUlDCb5Qb p6Jm6MHy/JStBRIgf07+95lgxRFXTnV8rVh2wiXr3wLBI2wy2ddDZUAv5cgZs+kM s2HU+7ofUKVrCe8oyQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI3bBB7pnyJPUTJh+PGU nWb2iVGSa3IAhz0A9tjcMAmjPkLKcNDVaSV5HKjsEQEuycKROMh1WJbvbrywdzM2 v2eeKwPMCTLyM18P4L8QDwh2z6JUrAyne2/ljCVYYQ1QPOW+9+wOyCtdMRP4gGn/ J6BjcVAY3wxjgPaadCZVbD7ivzs7AC1/YTDUkIXGLuG6vKiSlQbtykfsc6a9enpr tj9m8CMH460vln87HEQ9TCGRd3Iuai2+VL248SSXawyNf9zs2oqlGdajemP+Uw5b +ZI+Jf1JbIM3w38XYZpgRvw09lXB2s/cqp4TcT/6fF6Z9QxJYb8+NJTXNwVFFizQ zQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 91799486316171162333759390110087564768 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'salvemedica.pl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24307706123259578473245841492516914339182239938106820477383678564743749854174509712087614797294712609918187820402256645670370442775024532766220515563182497955467527224894493628049334655762575537234077896457657482590271737321752270121383849286316169334778319620158685768115356475802462931544679295956878133312080933836345849164101937336648980844650533523169541821275357365489431621166671244241164559908414629353239882197856357109383477639266411357696435636996735168674051973215043906395419091844075177311522375095410695490310955223154269820688638842159328672146203651876315132008428737267806455279396540920972478042317 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salvemedica.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salvemedica.pl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015f15d3936f000004030046304402207dce0dd8cab14dc7b8522aeeb952bda4cf0fcbe0c8ac6996717fca3ce5ab573f02204a16e98b286354061664d54ad9034ebbe0357b09aad223678b4169ebad8266fb007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015f15d393bd0000040300483046022100acc7d75dfa1b114e1ef612d924a3cdecad7b24d24c805ac062e918b869097585022100fcc5bf7cb70f3cc82a68569d2e0537ff55160ec1f64e150d15b6bc2c9c9b8f7e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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