giving.ag.org

Issued by GeoTrust DV SSL CA

About this certificate


This digital certificate with serial number 08:67:a7 was issued on by GeoTrust Inc. .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

giving.ag.org

Company registration number: IX3YjIYD5FLnTxLWC/m-Q0RfxvvzdOBa
Organization unit: GT12133318
Organization unit: See www.geotrust.com/resources/cps (c)14
Organization unit: Domain Control Validated - QuickSSL(R) Premium

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 08:67:a7
Serial Number (int): 550823
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 17:f8:d2:e8:d7:75:80:fe:47:ad:98:cb:a0:49:8f:de:66:74:6c:48
AuthorityKeyId: 8c:f4:d9:93:0a:47:bc:00:a0:4a:ce:4b:75:6e:a0:b6:b0:b2:7e:fc

Fingerprint (sha1): 5b:f5:5e:a7:4c:7c:98:26:b1:a8:5c:64:3c:5c:f2:be:87:83:12:dc
Fingerprint (sha256): 43:5f:02:c0:08:54:15:34:a7:e5:da:6a:e7:84:4b:5e:0c:89:be:c6:e8:d3:03:e7:e0:fd:30:33:42:74:b4:ac

Issuing Certificate URL: http://gtssldv-aia.geotrust.com/gtssldv.crt

Revocation information

OCSP Server: http://gtssldv-ocsp.geotrust.com
CRL Distribution Point: http://gtssldv-crl.geotrust.com/crls/gtssldv.crl

Check the revocation status for the current certificate on giving.ag.org
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: giving.ag.org

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIDCGenMA0GCSqGSIb3DQEBBQUAMGExCzAJBgNVBAYTAlVT MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQLExREb21haW4gVmFsaWRh dGVkIFNTTDEbMBkGA1UEAxMSR2VvVHJ1c3QgRFYgU1NMIENBMB4XDTE0MDEyNTA5 MDMxNloXDTE2MDIyNzE1NDkyN1owgcQxKTAnBgNVBAUTIElYM1lqSVlENUZMblR4 TFdDL20tUTBSZnh2dnpkT0JhMRMwEQYDVQQLEwpHVDEyMTMzMzE4MTEwLwYDVQQL EyhTZWUgd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvY3BzIChjKTE0MTcwNQYD VQQLEy5Eb21haW4gQ29udHJvbCBWYWxpZGF0ZWQgLSBRdWlja1NTTChSKSBQcmVt aXVtMRYwFAYDVQQDEw1naXZpbmcuYWcub3JnMIICIjANBgkqhkiG9w0BAQEFAAOC Ag8AMIICCgKCAgEAxAv+PC5PtJFzoLeacJlrk2rtlbnYE+OZdZDSrjKh24a24+rW pyh8EoTai9ePqPQi5D+l1y7tEJ5d/lOCwNlDPAL33YKogVvXca8LTJp1jlVtt5FN 6PhHPQpu9irYotrtgB2h3UK4d86LlUeA+LmKKuJvUMvB5HTu/qCrSe1qnRQ1edQj QGo7sBnksH+Dxnt2iSoCMRZpJEYCdHRUPHd/EZgnndPm6iheZFeoCk/o6yi6tVBd 80bPggAihe2lzOzlnIN0HVGjameVgRlVITiRCXLspHrMoFI+C6nQ6mY5+HO+7FI7 cm2TwrU38rXNhHefzOUYQNw9fOajBCxXC1B5Yu2noJqUehKJAFQBvQ6xxq+psLfb ksCsJ86G69vWkzJSxYNKI1t8DVtwEeoS1ZepN1urwaKIYbCJUq90ZUE8NYXNC6Eg Cz3Y88CQvfErVV4MuuK7xUuRHafbepPr+6sTWnggFC0LjPn6Qq0j0YGlkIdhoUQi x6K9RasFPcJ5dJPnraHmWuvoTZ04i0zoYWCj+O3plP6gJN55uckdmo4sbXR5l6jh 1hvS9dRGtxm0/lcwJgN0z1ZlMFba/1HER04T92Gb5h9NcoabaBDwzdwkJvzr8D8X ILdPLZiPVT6MI3n2SX7UiTbEJ64b0DpFiQsGQbEou3CNZuK8n9jIWWd8jekCAwEA AaOCAaMwggGfMB8GA1UdIwQYMBaAFIz02ZMKR7wAoErOS3VuoLawsn78MA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwGAYDVR0R BBEwD4INZ2l2aW5nLmFnLm9yZzBBBgNVHR8EOjA4MDagNKAyhjBodHRwOi8vZ3Rz c2xkdi1jcmwuZ2VvdHJ1c3QuY29tL2NybHMvZ3Rzc2xkdi5jcmwwHQYDVR0OBBYE FBf40ujXdYD+R62Yy6BJj95mdGxIMAwGA1UdEwEB/wQCMAAwdQYIKwYBBQUHAQEE aTBnMCwGCCsGAQUFBzABhiBodHRwOi8vZ3Rzc2xkdi1vY3NwLmdlb3RydXN0LmNv bTA3BggrBgEFBQcwAoYraHR0cDovL2d0c3NsZHYtYWlhLmdlb3RydXN0LmNvbS9n dHNzbGR2LmNydDBMBgNVHSAERTBDMEEGCmCGSAGG+EUBBzYwMzAxBggrBgEFBQcC ARYlaHR0cDovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL2NwczANBgkqhkiG 9w0BAQUFAAOCAQEAVPKuxXMHKAy8lsZI4p+X1J/jQ+UlSmviJW2xATzr9By39FR6 kAQWiIFpzeO6fZwHp2N3CAKUmae7svzqqgLT6vx8S7XaNoaPkOre/5P6SMIs2ooi AqjrhL8lIa0A8A48ZsEsgazAtl/OTe4NllmVVh3sv8/AozkeS/baI/lRN0WqvEii 1OP3+tjhjnJW2cebc3DPjjmViM7mUIhC7xitV2/KSf41UG6SRSsMpv4NytCgAUae SGE24Wo/6q3VA6dB/7jraIW9SIn13wWJPPGC0Z1NdgBtUdXmhUKg/bXaEM+re06A UC4zbL3ZJbW0APoZzx/Q08aSEGBObd/jvkS0Iw== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxAv+PC5PtJFzoLeacJlr k2rtlbnYE+OZdZDSrjKh24a24+rWpyh8EoTai9ePqPQi5D+l1y7tEJ5d/lOCwNlD PAL33YKogVvXca8LTJp1jlVtt5FN6PhHPQpu9irYotrtgB2h3UK4d86LlUeA+LmK KuJvUMvB5HTu/qCrSe1qnRQ1edQjQGo7sBnksH+Dxnt2iSoCMRZpJEYCdHRUPHd/ EZgnndPm6iheZFeoCk/o6yi6tVBd80bPggAihe2lzOzlnIN0HVGjameVgRlVITiR CXLspHrMoFI+C6nQ6mY5+HO+7FI7cm2TwrU38rXNhHefzOUYQNw9fOajBCxXC1B5 Yu2noJqUehKJAFQBvQ6xxq+psLfbksCsJ86G69vWkzJSxYNKI1t8DVtwEeoS1Zep N1urwaKIYbCJUq90ZUE8NYXNC6EgCz3Y88CQvfErVV4MuuK7xUuRHafbepPr+6sT WnggFC0LjPn6Qq0j0YGlkIdhoUQix6K9RasFPcJ5dJPnraHmWuvoTZ04i0zoYWCj +O3plP6gJN55uckdmo4sbXR5l6jh1hvS9dRGtxm0/lcwJgN0z1ZlMFba/1HER04T 92Gb5h9NcoabaBDwzdwkJvzr8D8XILdPLZiPVT6MI3n2SX7UiTbEJ64b0DpFiQsG QbEou3CNZuK8n9jIWWd8jekCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 550823 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-25 09:03:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-27 15:49:27 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IX3YjIYD5FLnTxLWC/m-Q0RfxvvzdOBa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT12133318' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)14' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R) Premium' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'giving.ag.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799801360780710475426787724190728211287876339754107112837656600850025271953631077672306950640480917610393427951805467121621391804134317336528057702471274223506896676171151398912397806920460442385283770166748315551436098171326155180142265585833991794789354898051078593793163015700511908693312935636000324833909535051396272262260824450066099027583855671317194571506985293373536492834552828580937175239379936306969930618930669438882913293268763276118619410472731960626264594423431701659942952469055295854637693216449810112784215041050723544288106373258815329603805668493629119932866235056744678000483705211395339380076233839163989903990171380390605435198004696630424450570643135259847722204452514125320794020296470187274240932316964533036309011368364053877635167541663839529724751956839400298349858709014639583037040544642450874306552224667353493404432777696012568468196756019354574078894237185164807107406896785442751804616916020859034597696515323727038712386168130671403845470334397506365064113975211598450483709471933599095031510661886176603451605627433386485547781235227736523860241349459351989798607763592989313938313316517358275915792929812000273109566109994854628950653034212487956898103886991532549272467136491121725156924100073 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8cf4d9930a47bc00a04ace4b756ea0b6b0b27efc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.ag.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-crl.geotrust.com/crls/gtssldv.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 17f8d2e8d77580fe47ad98cba0498fde66746c48 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-aia.geotrust.com/gtssldv.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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