alumni.tresvista.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:5e:1e:66:85:08:d1:85:4a:ee:78:94:3e:67:a6:67:a5:58 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=alumni.tresvista.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:5e:1e:66:85:08:d1:85:4a:ee:78:94:3e:67:a6:67:a5:58Serial Number (int): 380476095370021466274485119842019956991320
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: b5:81:45:19:69:5c:a7:82:a3:a3:75:a9:97:21:5f:f1:ce:87:d5:de
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d3:84:35:a4:47:7b:35:09:21:b5:2c:81:19:8f:16:1e:42:57:25:0e
Fingerprint (sha256): 98:91:3e:2d:a2:bf:fe:7b:c8:9f:04:06:9a:d8:40:80:a2:72:55:31:76:19:f3:8a:5b:0f:b5:e0:a7:ff:83:8b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate alumni.tresvista.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for alumni.tresvista.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
alumni.tresvista.com
www.alumni.tresvista.com
www.alumni.tresvista.com
Other certificates including the domain name tresvista.com
(limited to 100 certificates)
alumni.tresvista.com
tresvista.com
alumni.tresvista.com
tresvista.com
alumni.tresvista.com
alumni.tresvista.com
connect.nectus.uk
assist.tresvista.com
alumni.tresvista.com
www.tresvista.com
alumni.tresvista.com
join.agtpl.in
assist.inteksystems.net
tresvista.com
www.tresvista.com
assist.tresvista.com
assist.inteksystems.net
alumni.tresvista.com
alumni.tresvista.com
tresvista.com
alumni.tresvista.com
assist.inteksystems.net
tresvista.com
assist.tresvista.com
tresvista.com
assist.inteksystems.net
assist.tresvista.com
tresvista.com
alumni.tresvista.com
tresvista.com
alumni.tresvista.com
alumni.tresvista.com
connect.nectus.uk
assist.tresvista.com
alumni.tresvista.com
www.tresvista.com
alumni.tresvista.com
join.agtpl.in
assist.inteksystems.net
tresvista.com
www.tresvista.com
assist.tresvista.com
assist.inteksystems.net
alumni.tresvista.com
alumni.tresvista.com
tresvista.com
alumni.tresvista.com
assist.inteksystems.net
tresvista.com
assist.tresvista.com
tresvista.com
assist.inteksystems.net
assist.tresvista.com
Certificate
The complete raw certificate details for alumni.tresvista.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGejCCBWKgAwIBAgISBF4eZoUI0YVK7niUPmemZ6VYMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjkwNTQ3MzBaFw0x OTA4MjcwNTQ3MzBaMB8xHTAbBgNVBAMTFGFsdW1uaS50cmVzdmlzdGEuY29tMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyVR+EwIu9fRQBiEQ+qggC7DK ObdGx2/7W95KzY0UoNf1xCoNfAXmBXuQDRA+Rxlu9s3mqKYNbp35N02yls85q0RB K/92OKyUs1S1XrmpV4J4tdB8WelFM5ARdw4xz4JC7awy1XyG3QpNaFqLuYI4yZtL UFz5oFzC/WTvgwd7nuvYL2UDxs4tJNx4q25TThf0VCkZS+xQnTQKsHw9pl/T4b40 yJoYg1tHzzTO11+LUbe9egdZLamRJvidQ1y4RUjsrW9ZCTSRToQ7LmJYbohtZm4O XKESx4W5Bu4pt/z/VW6kESFzHhIF4Mkfgz+R4v5BW+ImdVmlMydYhsLPmE/8CeQv VkRQ8M6MNHHpdwG+Cv1DY9DkdX3RQNJbn0iAqYd4a2jldpgvZfaVBWW6jkEk5V3f sAz5f+7UOCfeX7xcZhHF67U7DJOTNGWx8AKF6TDGLAYUnjxTQhTD6aMgX4zVS3kZ 0pqdqdiPPCm0CqjCBzkKC5k9UqurG9xQ0eySC32I+yyITEUVcxhnp3juF81cibSd 2eSDo0+yqTQNp/ifN0a3XXHpoKUUqAzfxrkf6dWOj5kDRp9aJSFl+mVyoVImOedK JI7D9uA/ksBZgboEbGKwHd4iYPMWevpDxm9ZSZEh57FrELALtrpGiRQHTMn9DU8a PAupwgwA4KKP9GMrTWUCAwEAAaOCAoMwggJ/MA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUtYFFGWlcp4Kjo3WplyFf8c6H1d4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3 pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzA5BgNVHREEMjAwghRhbHVtbmkudHJl c3Zpc3RhLmNvbYIYd3d3LmFsdW1uaS50cmVzdmlzdGEuY29tMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAdH7a gzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFrAlgB5gAABAMARzBFAiEA 51yO7BhH3ft6tiK4e1ydIHddmQeEWiakUO3P4j4h4eACIFf8QRsWurnFWC7KIBHM rF4jx/xc1AOObK+l4+gs2TBTAHYAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHH aFRL2I0AAAFrAlgBxwAABAMARzBFAiEAyPJO7GLi9PvverqxfAomsCyNPtX7RIgl p8hOi7JTVYICIAsDT0jAjLvexPgFMbBm+d4jZ6FEZgu6tiIWUiCPlKK0MA0GCSqG SIb3DQEBCwUAA4IBAQBUQB/VJW53VWK3Qu2IZB6zAMeF5Hz0fxlq9Kkne8gHVRyH 0R+x4uqJFvBtmZgJJty85lVZJUmU6mue5VZCRywUiQTFExP1jvZ35RgjKV3HnoAg M56r6BR13iHk5PoJrif1adJsbU9G69irD9RA6YpN2Xj7k9VjHwIQBRQdegOAlNOl MaKKyOoWVJmGPGu6Dsbd1GMIUMqlkXfDE2YPaBsdleja9OPVj1akgI2+mW6W6x34 MDtyRD39EOlf2CSfoctxiMv5nw+IXOgOUB6iCoan667UDOvAQAfGSlHsXJu4CgXT CBCQr110XdIwcbn7FlYMKJfMA4J5zs52kxnhBXnF -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyVR+EwIu9fRQBiEQ+qgg C7DKObdGx2/7W95KzY0UoNf1xCoNfAXmBXuQDRA+Rxlu9s3mqKYNbp35N02yls85 q0RBK/92OKyUs1S1XrmpV4J4tdB8WelFM5ARdw4xz4JC7awy1XyG3QpNaFqLuYI4 yZtLUFz5oFzC/WTvgwd7nuvYL2UDxs4tJNx4q25TThf0VCkZS+xQnTQKsHw9pl/T 4b40yJoYg1tHzzTO11+LUbe9egdZLamRJvidQ1y4RUjsrW9ZCTSRToQ7LmJYboht Zm4OXKESx4W5Bu4pt/z/VW6kESFzHhIF4Mkfgz+R4v5BW+ImdVmlMydYhsLPmE/8 CeQvVkRQ8M6MNHHpdwG+Cv1DY9DkdX3RQNJbn0iAqYd4a2jldpgvZfaVBWW6jkEk 5V3fsAz5f+7UOCfeX7xcZhHF67U7DJOTNGWx8AKF6TDGLAYUnjxTQhTD6aMgX4zV S3kZ0pqdqdiPPCm0CqjCBzkKC5k9UqurG9xQ0eySC32I+yyITEUVcxhnp3juF81c ibSd2eSDo0+yqTQNp/ifN0a3XXHpoKUUqAzfxrkf6dWOj5kDRp9aJSFl+mVyoVIm OedKJI7D9uA/ksBZgboEbGKwHd4iYPMWevpDxm9ZSZEh57FrELALtrpGiRQHTMn9 DU8aPAupwgwA4KKP9GMrTWUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 380476095370021466274485119842019956991320 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-29 05:47:30 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 05:47:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alumni.tresvista.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 821354939058051361211703749822344825556335496065583889785031733935492584121818546183238511311474943707803871169014130578608794823292837124419933819563115767323127112022646994565042150139308067961672135378294321713264969396273598801862135881712470388569347598797882388055348660603824127714800225964010013251660202936182884853966624621245317459359962941373186132761765195061552513985796337855644321698248292385488388321880540103438796626623163561245002900137886342497014551993270005300095155807976518113185344742664739893661117040858040874791298194508291849641568821690624643832765610075328386520003964695272013818882640201518435218539680162245037320896272109278698116753339693791811131023530876892309744041700896499981286868041437442926172583549573246899288034024659309281864672759635336174375400320641167024515078031951247784068813507010743408757354020294128875383652790323472043659709022243518634904159831889660116227736762832659171103776594718438252447905391101569893586061127606847695829521000290996673765401988098624027474697958205247317758778250913727737914690745017423681628563908982175673963952507739035294525876851531517874962025266563952909507515441393167395306575473478001693404786758221847388265836359100401881734351375717 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b5814519695ca782a3a375a997215ff1ce87d5de . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.tresvista.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.tresvista.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b025801e60000040300473045022100e75c8eec1847ddfb7ab622b87b5c9d20775d9907845a26a450edcfe23e21e1e0022057fc411b16bab9c5582eca2011ccac5e23c7fc5cd4038e6cafa5e3e82cd9305300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b025801c70000040300473045022100c8f24eec62e2f4fbef7abab17c0a26b02c8d3ed5fb448825a7c84e8bb253558202200b034f48c08cbbdec4f80531b066f9de2367a144660bbab6221652208f94a2b4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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