renin.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:88:6f:d0:fb:71:be:c0:00:c0:00:9e:89:3a:ed:82:7d:4e was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=renin.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:88:6f:d0:fb:71:be:c0:00:c0:00:9e:89:3a:ed:82:7d:4eSerial Number (int): 307763889101703699026776089662020590402894
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5c:8f:5e:da:66:85:14:e7:a1:b2:5f:10:56:7f:28:7a:34:08:d0:b6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a3:9b:e6:bd:1d:24:04:ba:52:09:70:6e:3f:6a:30:f3:ba:8b:32:f9
Fingerprint (sha256): 9d:b6:c0:45:98:89:f7:4d:90:34:80:8e:1f:8d:43:25:0e:ee:c0:d2:f0:f7:68:6b:c0:d3:aa:2c:7f:0a:31:99
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate renin.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for renin.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
renin.com
www.renin.com
www.renin.com
Other certificates including the domain name renin.com
(limited to 100 certificates)
helpdesk.renin.com
helpdesk.warren-wilson.edu
itservicedesk.intactpublicentities.ca
helpdesk.posnackschool.org
shop.renin.com
helpdesk.warren-wilson.edu
renin.com
servicedesk.primehealthcare.com
renin.com
helpdesk.warren-wilson.edu
servicedesk.hardwoodlumber.net
*.renin.com
renin.com
helpdesk.posnackschool.org
shop.renin.com
itservicedesk.intactpublicentities.ca
itservicedesk.intactpublicentities.ca
*.renin.com
helpdesk.renin.com
renin.com
helpdesk.renin.com
shop.renin.com
renin.com
helpdesk.renin.com
renin.com
shop.renin.com
shop.renin.com
helpdesk.posnackschool.org
servicedesk.hardwoodlumber.net
renin.com
*.renin.com
helpdesk.warren-wilson.edu
itservicedesk.intactpublicentities.ca
helpdesk.posnackschool.org
shop.renin.com
helpdesk.warren-wilson.edu
renin.com
servicedesk.primehealthcare.com
renin.com
helpdesk.warren-wilson.edu
servicedesk.hardwoodlumber.net
*.renin.com
renin.com
helpdesk.posnackschool.org
shop.renin.com
itservicedesk.intactpublicentities.ca
itservicedesk.intactpublicentities.ca
*.renin.com
helpdesk.renin.com
renin.com
helpdesk.renin.com
shop.renin.com
renin.com
helpdesk.renin.com
renin.com
shop.renin.com
shop.renin.com
helpdesk.posnackschool.org
servicedesk.hardwoodlumber.net
renin.com
*.renin.com
Certificate
The complete raw certificate details for renin.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgISA4hv0PtxvsAAwACeiTrtgn1OMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMTgwOTIxNTFaFw0x OTA1MTkwOTIxNTFaMBQxEjAQBgNVBAMTCXJlbmluLmNvbTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAL2MKIHrbZuKCkGQu02OntNUTQov1zigU8O+AKFo 9ZWWAvmmltOFjRqYECTqO4q3eKlaMobztG8vSMXHRdWAGnEv7TSwo+vMwIDz6xNQ 2lECOYiBLOuvFuseZftk7SuL3ET0/Ni6B+j89rwHtLax3mqW+3gfH1/ZTXwto5CG olmkcaMqn+kg/C+nuUHCldwk6EaEycY4Ha3i2TzYCEdbPeJcixmGsPtg/SylaXGa fEYTN9e+C/IwlXIPc6QLDGOZebU7TlGMpaQzyc6VGD1VgwVXVtq6iXG+Og9IxXQY jWemIznapj9064lbSSs6izokT+fQo+9AJ8v2//sSvNOBgyTHNRLeRmeiGF7JWHfJ NKfhu2Zu8/MWznl9cQeaj+4O/VK4HsXtOgUiwORZJRqY9RHGsr6zdZsEVmvD5C3u n5G7fXKjA+0E7GIGEFd5nM74I8f+JMYFtjE3LnOsJGPbWAS/fs50UrYk73DtPRxC uB+3rljnm/1XxpIM1JuSbWZD9ix+gk2KSj9+BajBZ2/1Ms/cl56ft8v5W0HryGCf HGe8oB8joVRArNzewR3pnGOf5QB3MXZrow3jqFhLjkMyiAyHlPvY/BIFZ6Rx1OGA iD+C1C8sUN6sG0FP0pUwABEmcVytAgq679s5gAYUBNDMq7iy5c9j8PLBJvjManBN j8+zAgMBAAGjggJtMIICaTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFyPXtpmhRTn obJfEFZ/KHo0CNC2MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIJcmVuaW4uY29tgg13d3cucmVuaW4u Y29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIE AgSB9QSB8gDwAHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFp ACBSCgAABAMARjBEAiAlQ4HE/12mHPY1QcnBjTnPg6aAKACC8Npxj9uy5XQDSwIg bI2yUXHO36mNCGKDmZgkMW7vuXhFgj3tdkZ+++F8BHcAdwApPFGWVMg5ZbqqUPxY B9S3b79Yeily3KTDDPTlRUf0eAAAAWkAIFBwAAAEAwBIMEYCIQCAzDUaFhQH0eDY ZYoB+SGEx3WiWc+jjX/NkmKFQzVrfgIhAKhpSP1IqjZ7DkLnR9mQtx1jSjCsCYeB qdB6vCxEI8sfMA0GCSqGSIb3DQEBCwUAA4IBAQA9MlxJ3SLMT+CS0RGdIM07wh3A wc6Hm75vUTJU1dn/94Lag76AC3u5rdXr1/Ra1RRXZd1TTodWwIyZG2IYqqHH9xXf HD4oHUHu+hLuAqP3/0bXaSjB+FQvMKHvGu5a4lNlGbJm9Orpn18bbVDiyEkhleMA x9HfuL3lKl/lMjoVR4T8v7/2vkxQvFkCjy/wCIZjdMbkGharfs/Sz48MXfViZ4MD /c1iV+hsaHxv0yBjZ2swbAPE+IFj1dnN4blHiHhaVs3AqTbG4poGZjXHRTSolcAC yvpXoNaAfYNk8Lp3fsyrLWVBNBZetS/wfsVTxjhS8Co2jdDmzYt5yss+JIQT -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvYwogettm4oKQZC7TY6e 01RNCi/XOKBTw74AoWj1lZYC+aaW04WNGpgQJOo7ird4qVoyhvO0by9IxcdF1YAa cS/tNLCj68zAgPPrE1DaUQI5iIEs668W6x5l+2TtK4vcRPT82LoH6Pz2vAe0trHe apb7eB8fX9lNfC2jkIaiWaRxoyqf6SD8L6e5QcKV3CToRoTJxjgdreLZPNgIR1s9 4lyLGYaw+2D9LKVpcZp8RhM3174L8jCVcg9zpAsMY5l5tTtOUYylpDPJzpUYPVWD BVdW2rqJcb46D0jFdBiNZ6YjOdqmP3TriVtJKzqLOiRP59Cj70Any/b/+xK804GD JMc1Et5GZ6IYXslYd8k0p+G7Zm7z8xbOeX1xB5qP7g79Urgexe06BSLA5FklGpj1 EcayvrN1mwRWa8PkLe6fkbt9cqMD7QTsYgYQV3mczvgjx/4kxgW2MTcuc6wkY9tY BL9+znRStiTvcO09HEK4H7euWOeb/VfGkgzUm5JtZkP2LH6CTYpKP34FqMFnb/Uy z9yXnp+3y/lbQevIYJ8cZ7ygHyOhVECs3N7BHemcY5/lAHcxdmujDeOoWEuOQzKI DIeU+9j8EgVnpHHU4YCIP4LULyxQ3qwbQU/SlTAAESZxXK0CCrrv2zmABhQE0Myr uLLlz2Pw8sEm+MxqcE2Pz7MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 307763889101703699026776089662020590402894 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-18 09:21:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-19 09:21:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'renin.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 773286305814638979246583840660919086310941105963743912793505356374035006422405922817397214997277845160710674893320123210297727709596072190009071701056347691415827294241203738398271014441496684074679454099934899035490634175680520524600268346189965924190494141356385721377320415002225856987084666961897913856963277871161975360461088188601334513207721275614400913447562829071998506267137260811272240215966469456179679052715719431347553272962863174789267997791399576912488949084712030880986576712968196711150257887373886158098033554980917150444041527227656158041682379928000924940555803626950402645937681522201552035393845856247488508573520059183987688822988402293199234735696481531524026640672342578779626559047953786837101895391499337634010705362866278174564998129605440478344099142972077620981952063923046598647524558655149378776302854752500446032165708413548568392953519526787499543093420453578662913757417730655732313883712849722950771919437409420016924235908354408781004659004412793725589860736634407711963847119598797596720078424610892713924796507174217367873167150489774744212061623990639373337267667048620453534003253039783966439991329734528146321691495429433975214429470093377640887817689953513403023088343893601620461030985651 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5c8f5eda668514e7a1b25f10567f287a3408d0b6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renin.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001690020520a00000403004630440220254381c4ff5da61cf63541c9c18d39cf83a680280082f0da718fdbb2e574034b02206c8db25171cedfa98d086283999824316eefb97845823ded76467efbe17c0477007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016900205070000004030048304602210080cc351a161407d1e0d8658a01f92184c775a259cfa38d7fcd92628543356b7e022100a86948fd48aa367b0e42e747d990b71d634a30ac098781a9d07abc2c4423cb1f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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