sushisjoerd.nl

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate


This digital certificate with serial number 94:87:78:e7:96:85:e8:99:95:7b:af:bf:88:a1:d6:e7 was issued on by COMODO CA Limited .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

sushisjoerd.nl

Organization unit: Domain Control Validated
Organization unit: PositiveSSL

COMODO CA Limited

Organization: COMODO CA Limited

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 94:87:78:e7:96:85:e8:99:95:7b:af:bf:88:a1:d6:e7
Serial Number (int): 197429155689512366944485690899899209447
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9a:05:07:48:d2:51:67:62:f9:5f:17:b7:9b:f1:05:61:99:c9:04:af
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): 05:cb:13:0b:25:e1:7c:a0:c6:88:bf:82:82:93:dc:e2:d0:4d:2f:fe
Fingerprint (sha256): b7:18:38:e5:54:6e:51:27:13:8e:c3:2f:9d:48:47:20:f9:d4:56:7b:fb:b0:49:be:6e:02:35:89:0d:45:39:d3

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for the current certificate on sushisjoerd.nl
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

sushisjoerd.nl
www.sushisjoerd.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIRAJSHeOeWheiZlXuvv4ih1ucwDQYJKoZIhvcNAQELBQAw gZAxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTYwNAYD VQQDEy1DT01PRE8gUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIg Q0EwHhcNMTUxMjI0MDAwMDAwWhcNMTYxMjIzMjM1OTU5WjBSMSEwHwYDVQQLExhE b21haW4gQ29udHJvbCBWYWxpZGF0ZWQxFDASBgNVBAsTC1Bvc2l0aXZlU1NMMRcw FQYDVQQDEw5zdXNoaXNqb2VyZC5ubDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC AgoCggIBAMvGF0YG/uqs7dViogL563I+N83/bAWhPB7zVI8tIYgfAvHMaoUiUdt3 mBC1GA17CGosssYHkNmCbVBebBizZQwSohO+irNy/8Vy3flsopGS2XUTHzjK9K+N 0fRIup7qyxazAPWJOYqutdH92YMpU62xeKrJXpUGKQdWzeJLYL6hs/9LRkzuLiLL 4E0X0phLjnwjWnU8YlLPuHnBbjrKCbOo5d9YAI/nZwvFX2Hola2seee74QesKkfa ULxz0Xieb71QOrDyabYsEsjwhAoiud31lRAJFXZ7pBecCdl/+XFZOTnSsu9sAiq1 jrxzuFKY4648Vb1qaHL6Bhon5wBtB/uaHliqOKb2XWnlAIuWOj0MTUfOltNyy0a7 R/V6Y8k7T2UzQHgWwppax42SsSdABKajyM1f2Tz03l+2iBAgig6JGsHABgWuyqPB P3+20sTwfvS/wldHq2UVDZfcdq9g6gKfHhHnjmnGBaMYEhGc1YNpYeY4lkMh0hZq Sr9rGPpKtfMMCGMqUYNT25NDMchws/Nl+0jUuF3fxjl6/Lq43epizfWiWcHRfIC6 PE7QfGpF1n+y9xPG9VkQLg1ixxE/08UCZuMWI+xnIozvd1erF7saQUkdcCUw6KSF SsP8l0Gx0HHP0CRRcXXty4c6Ba/QNa/OBIaiTv941VGjYUjyhAiDAgMBAAGjggHf MIIB2zAfBgNVHSMEGDAWgBSQr2o6lFoL2JDqElZz30O0Oija5zAdBgNVHQ4EFgQU mgUHSNJRZ2L5Xxe3m/EFYZnJBK8wDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQC MAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCME8GA1UdIARIMEYwOgYL KwYBBAGyMQECAgcwKzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2Rv LmNvbS9DUFMwCAYGZ4EMAQIBMFQGA1UdHwRNMEswSaBHoEWGQ2h0dHA6Ly9jcmwu Y29tb2RvY2EuY29tL0NPTU9ET1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2 ZXJDQS5jcmwwgYUGCCsGAQUFBwEBBHkwdzBPBggrBgEFBQcwAoZDaHR0cDovL2Ny dC5jb21vZG9jYS5jb20vQ09NT0RPUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNl cnZlckNBLmNydDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29t MC0GA1UdEQQmMCSCDnN1c2hpc2pvZXJkLm5sghJ3d3cuc3VzaGlzam9lcmQubmww DQYJKoZIhvcNAQELBQADggEBAImqBMTyWZm/KHNFdTZcU7gwzo8Yypt09Iwu/sKJ wcvCQN39ar6jAiFiE2PoAmtEqVs89OBI2Vyzc+RJdAyubJgyCJXcGe5EMWIw+eh+ Dzwis+r374ZI4St+U1EsuX3W8ZzQuDpZzBHClLGQHWfAZrxwQVb5K9Vhqjmw+Teb pwzPvuycp9vwKH2DClPTh02dIysJtzkzUJdVTRX+jDnYUuYvianm1iMglpA4qFyE q3jo/gzTyPLs2Q5nxOHPiAl60KgvEwsxMgjtSs29yCQ2bRommVcqKWheCFT+5Fqv yVEY4bX96qXZsFEdCh0MXb0FF8Fn7oSzU5+J8OVxr9gM+gU= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy8YXRgb+6qzt1WKiAvnr cj43zf9sBaE8HvNUjy0hiB8C8cxqhSJR23eYELUYDXsIaiyyxgeQ2YJtUF5sGLNl DBKiE76Ks3L/xXLd+WyikZLZdRMfOMr0r43R9Ei6nurLFrMA9Yk5iq610f3ZgylT rbF4qslelQYpB1bN4ktgvqGz/0tGTO4uIsvgTRfSmEuOfCNadTxiUs+4ecFuOsoJ s6jl31gAj+dnC8VfYeiVrax557vhB6wqR9pQvHPReJ5vvVA6sPJptiwSyPCECiK5 3fWVEAkVdnukF5wJ2X/5cVk5OdKy72wCKrWOvHO4UpjjrjxVvWpocvoGGifnAG0H +5oeWKo4pvZdaeUAi5Y6PQxNR86W03LLRrtH9XpjyTtPZTNAeBbCmlrHjZKxJ0AE pqPIzV/ZPPTeX7aIECCKDokawcAGBa7Ko8E/f7bSxPB+9L/CV0erZRUNl9x2r2Dq Ap8eEeeOacYFoxgSEZzVg2lh5jiWQyHSFmpKv2sY+kq18wwIYypRg1Pbk0MxyHCz 82X7SNS4Xd/GOXr8urjd6mLN9aJZwdF8gLo8TtB8akXWf7L3E8b1WRAuDWLHET/T xQJm4xYj7GcijO93V6sXuxpBSR1wJTDopIVKw/yXQbHQcc/QJFFxde3LhzoFr9A1 r84EhqJO/3jVUaNhSPKECIMCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 197429155689512366944485690899899209447 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sushisjoerd.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831324544305042153214897366100185301524315167184848831569378141099102418224301440678573486131320634639829635491483356611692268046671033375092198002784703693876757308870995691316785924892754152378452738967865011363383339356794786393622161373031481439513026609456147246794482247732929694862414177349521086264666544012866066680657670166672823913873856135443319872131231837346372222643212027188371338933059152837163902301543437140973820997352988573699810125519104719700580104641222263022559347429452951680492514731492219830873444827993318938887282528002674146244763006810334510095826678512134489086380482896446540415391786197818405642896253758959359080554900096021517915640219618287475309996984019145972396583489628431023632088330273802010153070472606442578651193786551844505450439806467988319405416052983810039459961859244596498232407076715697199422909827140732282724372087591883282892812348350058433548436101709390949463973286871356542349931391207213143624641754521046797902693482313877032646459479337102603789032553090570267242084271749589106596017359309712586043685694672657878443937771179413283896238039562949246260954152524572504983565117679829736784877568752564598364255210447565300908337401315537401623359299838284683945911257219 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9a050748d2516762f95f17b79bf1056199c904af . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sushisjoerd.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sushisjoerd.nl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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