itsupport.jrg.ca
Issued by R3
About this certificate
This digital certificate with serial number 03:17:c8:27:c6:2b:7f:f7:d3:c2:6e:b2:15:f8:ba:f4:a0:70 was issued on by Let's Encrypt.
With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=itsupport.jrg.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:17:c8:27:c6:2b:7f:f7:d3:c2:6e:b2:15:f8:ba:f4:a0:70Serial Number (int): 269429404352560307344462427372996760215664
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2c:48:9f:65:f4:b8:a0:69:f8:fc:9f:74:9a:3e:74:b9:dd:af:a3:ed
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 3c:87:20:6b:2e:a7:d0:f4:a3:21:31:19:a0:dd:85:5e:16:52:c4:b8
Fingerprint (sha256): 8d:d6:eb:37:bc:d3:dc:82:66:77:d2:6b:f5:32:4b:f0:87:91:1f:8a:5e:6e:c7:3e:f8:ff:49:ea:56:01:03:2c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate itsupport.jrg.ca
16
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for itsupport.jrg.ca
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
atendimento.ingresso.com
caresightsupport.bluesteelcyber.com
eagledatasupport.bluesteelcyber.com
itsupport.jrg.ca
jedi.support.akcelita.com
mlrsupport.midtc.com
sac-rockinrio.ingresso.com
servicedesk.sms-digital.com
soporte.co2networks.com.mx
suporte.ingresso.com
support.finalfiber.com
support.igpsport.com
support.mortgageworkflowpartners.com
support.revgate.net
syterasupport.bluesteelcyber.com
telegraphssupport.digivalet.com
caresightsupport.bluesteelcyber.com
eagledatasupport.bluesteelcyber.com
itsupport.jrg.ca
jedi.support.akcelita.com
mlrsupport.midtc.com
sac-rockinrio.ingresso.com
servicedesk.sms-digital.com
soporte.co2networks.com.mx
suporte.ingresso.com
support.finalfiber.com
support.igpsport.com
support.mortgageworkflowpartners.com
support.revgate.net
syterasupport.bluesteelcyber.com
telegraphssupport.digivalet.com
Other certificates including the domain name jrg.ca
(limited to 100 certificates)
jrg.ca
partners.soarcommunitynetwork.com
asistencia.sistemasnolan.online
jrg.ca
*.jrg.ca
jrg.ca
app.jrg.ca
jrg.ca
itsupport.jrg.ca
support.way4sme.com
*.jrg.ca
jrg.ca
jrg.ca
shop.jrg.ca
support.prehos.co
jrg.ca
jrg.ca
itsupport.jrg.ca
jrg.ca
www.jrg.ca
jrg.ca
jrg.ca
jrg.ca
jrg.ca
*.jrg.ca
jrg.ca
support.iharc.ca
jrg.ca
jrg.ca
jrg.ca
partners.soarcommunitynetwork.com
asistencia.sistemasnolan.online
jrg.ca
*.jrg.ca
jrg.ca
app.jrg.ca
jrg.ca
itsupport.jrg.ca
support.way4sme.com
*.jrg.ca
jrg.ca
jrg.ca
shop.jrg.ca
support.prehos.co
jrg.ca
jrg.ca
itsupport.jrg.ca
jrg.ca
www.jrg.ca
jrg.ca
jrg.ca
jrg.ca
jrg.ca
*.jrg.ca
jrg.ca
support.iharc.ca
jrg.ca
jrg.ca
jrg.ca
Certificate
The complete raw certificate details for itsupport.jrg.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGCzCCBPOgAwIBAgISAxfIJ8Yrf/fTwm6yFfi69KBwMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjExMTUwODUxMzVaFw0yMzAyMTMwODUxMzRaMBsxGTAXBgNVBAMT EGl0c3VwcG9ydC5qcmcuY2EwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAATS4f2Q tz6O/iSl7KalEIUODWY77a5ibm34zWFsVsqH70i1jO04n1eaO4bp+ElzNvgGLdR8 RVygNOxzatBiXgcjo4ID+zCCA/cwDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQsSJ9l 9Ligafj8n3SaPnS53a+j7TAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTC xjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNy Lm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCAcsGA1Ud EQSCAcIwggG+ghhhdGVuZGltZW50by5pbmdyZXNzby5jb22CI2NhcmVzaWdodHN1 cHBvcnQuYmx1ZXN0ZWVsY3liZXIuY29tgiNlYWdsZWRhdGFzdXBwb3J0LmJsdWVz dGVlbGN5YmVyLmNvbYIQaXRzdXBwb3J0LmpyZy5jYYIZamVkaS5zdXBwb3J0LmFr Y2VsaXRhLmNvbYIUbWxyc3VwcG9ydC5taWR0Yy5jb22CGnNhYy1yb2NraW5yaW8u aW5ncmVzc28uY29tghtzZXJ2aWNlZGVzay5zbXMtZGlnaXRhbC5jb22CGnNvcG9y dGUuY28ybmV0d29ya3MuY29tLm14ghRzdXBvcnRlLmluZ3Jlc3NvLmNvbYIWc3Vw cG9ydC5maW5hbGZpYmVyLmNvbYIUc3VwcG9ydC5pZ3BzcG9ydC5jb22CJHN1cHBv cnQubW9ydGdhZ2V3b3JrZmxvd3BhcnRuZXJzLmNvbYITc3VwcG9ydC5yZXZnYXRl Lm5ldIIgc3l0ZXJhc3VwcG9ydC5ibHVlc3RlZWxjeWJlci5jb22CH3RlbGVncmFw aHNzdXBwb3J0LmRpZ2l2YWxldC5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYL KwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw dC5vcmcwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQC3Pvsk35xNunXyOcW6WPRs XfxCz3qfNcSeHQmBJe20mQAAAYR6s4PcAAAEAwBGMEQCIDAmkhOEeh/pfcvsrvyq xD/6Ty55PvY6k/S73CMHzG/WAiBAwjVeWAE4w6tTViuRx5NXgwd8OKueZUJH67PT FWFa+gB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABhHqzhO0A AAQDAEYwRAIgLpGsR+WzX3KFytcIGFaD2VlynH/DrwB/3fc550npWAYCIDq2A3Dt eisxZGino1QRuqcNa+fWnascFTzsE/9oO/DkMA0GCSqGSIb3DQEBCwUAA4IBAQCZ YLQSOUNABuvi5UE+bsrPau2m9DR38rjdanQIYA/XAiR6wn+6gs7oMMtdM4W2t2IM AXeCTkJd6hHi03nVhCyz7XUIebuW1x6z/NqKZOTEcwgEHk1gS4E6GKgOZLnGfivP 4nhQTqbpZ7+d2Kqi02VLZOED+HHW8cIx0cfxkzHJK1w/m9MTTgv7PgeYqw+ZWwFa QgIMajIwYPf+6Rstedozp7FQ/QkZ+/BDihV6et9///eITRVSTgDZ/WYBfLmcScEq Qy+9gGsuHX+7UTopP6aNfzdAALsQT96KnCpYAfPbTlUFyz4TLIfNF3hbfDiQBbXD 9jiX/w/zfjxBx+HP5DfW -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE0uH9kLc+jv4kpeympRCFDg1mO+2u Ym5t+M1hbFbKh+9ItYztOJ9XmjuG6fhJczb4Bi3UfEVcoDTsc2rQYl4HIw== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 269429404352560307344462427372996760215664 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-15 08:51:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-13 08:51:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itsupport.jrg.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004d2e1fd90b73e8efe24a5eca6a510850e0d663bedae626e6df8cd616c56ca87ef48b58ced389f579a3b86e9f8497336f8062dd47c455ca034ec736ad0625e0723 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2c489f65f4b8a069f8fc9f749a3e74b9ddafa3ed . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (450 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atendimento.ingresso.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caresightsupport.bluesteelcyber.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eagledatasupport.bluesteelcyber.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsupport.jrg.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jedi.support.akcelita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlrsupport.midtc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac-rockinrio.ingresso.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.sms-digital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.co2networks.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.ingresso.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.finalfiber.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.igpsport.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mortgageworkflowpartners.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.revgate.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syterasupport.bluesteelcyber.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telegraphssupport.digivalet.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001847ab383dc0000040300463044022030269213847a1fe97dcbecaefcaac43ffa4f2e793ef63a93f4bbdc2307cc6fd6022040c2355e580138c3ab53562b91c7935783077c38ab9e654247ebb3d315615afa0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001847ab384ed000004030046304402202e91ac47e5b35f7285cad708185683d959729c7fc3af007fddf739e749e9580602203ab60370ed7a2b316468a7a35411baa70d6be7d69dab1c153cec13ff683bf0e4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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