blog.bangkit.academy
Issued by GTS CA 1D4
About this certificate
This digital certificate with serial number f3:97:71:af:a6:14:8e:39:09:00:00:00:00:c3:da:43 was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=blog.bangkit.academy
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): f3:97:71:af:a6:14:8e:39:09:00:00:00:00:c3:da:43Serial Number (int): 323788745629986330497439277532649347651
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 0e:96:9d:7b:ca:9a:23:ab:70:c7:af:a3:83:4d:ff:e3:bd:6a:2c:9c
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92
Fingerprint (sha1): 94:fc:ce:9e:bc:b7:10:f9:70:ff:72:d7:9c:ca:f2:56:ce:e4:a3:49
Fingerprint (sha256): a7:25:19:3b:15:c0:02:d0:15:a9:56:ac:94:d0:2e:fe:53:b8:ae:26:59:c3:4f:01:34:34:e0:45:5e:38:00:10
Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der
Revocation information
OCSP Server: http://ocsp.pki.goog/gts1d4CRL Distribution Point: http://crls.pki.goog/gts1d4/T0RNknGc4S4.crl
Check the revocation status for certificate blog.bangkit.academy
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for blog.bangkit.academy
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blog.bangkit.academy
Other certificates including the domain name bangkit.academy
(limited to 100 certificates)
bangkit.academy
app.swipefwd.com
agens24.com
scan.watdrinkje.be
www.c41app.com
goong2000.com
alpha.taskgram.com
huitreriebesson.order.pulp.eu
purgatorio.mx
bangkit.academy
cburg.galander.berlin
www.domenichergert.de
www.elephantcpa.com
www.caremother.in
learn.mobilemind.io
publishingfun.com
bondandbond.co.nz
www.dormlife.app
azem.xyz
farmsense.psyborgfarms.com
srba.fyi
devvidya.com
bangkit.academy
feliciaalfieri.com
www.roomalaya.com
bangkit.academy
www.udooq.com
csavargomagazine.com
www.cloudspecialist.tk
driverportal.co.za
advisorbob.com
app.kiwi-go.jp
realtorpro.infospacesolutions.com
agens24.com
invite.noja360.com
www.jordanmihlali.dev
app.modai.io
www.stickerry.in
app.la-collaborative.org
qpr.scouthub.app
bangkit.academy
blog.bangkit.academy
access.optculture.com
bangkit.academy
www.scryptique.me
retoryx.com
auth3.hiddenlogin.com
vanessabui.com
ninevastudios.com
www.eat-vite.fr
cta.ajitama.io
www.hugeus.kr
set-landing-page.vouchercart.com
konecta.mobi
retoryx.com
adrianviegas.me
gesa.ovenfo.com
tourneygames.com
dealers-support.cox2m.com
bangkit.academy
takeout.page
www.austinpartnersgroup.com
www.lawili.com
cburg.galander.berlin
blog.bangkit.academy
login.itc-kostrena.com
holigan.cc
anderson.pesepay.com
devvidya.com
www.stitchstory.uk
link.getonform.com
get.justech.io
tryhaven.app
lumagroup.it
www.aynama.in
www.infinitesync.app
registration.bangkit.academy
www.anthonykeen.com
thangalsgold.in
www.beyondlove.me
status.bangkit.academy
app.salaryo.com
uejesusamigo.codexplus.net
benfin.dev
worldsworstvideos.com
hpm.healables.ai
roombuilder.ashleyfurniture.com
krew.angular.m4m.io
www.dormlife.app
portal.cloverbyte.com
www.cloudspecialist.tk
app.kiwi-go.jp
www.gracelandchiangmai99.com
app.nutritoo.in
www.adamhemeon.com
www.plasticcupapp.com
reparatur.info
buddbaerinc-scanner-buddbaer.cox2m.com
cloudinfra.co
www.qc4application.com
app.swipefwd.com
agens24.com
scan.watdrinkje.be
www.c41app.com
goong2000.com
alpha.taskgram.com
huitreriebesson.order.pulp.eu
purgatorio.mx
bangkit.academy
cburg.galander.berlin
www.domenichergert.de
www.elephantcpa.com
www.caremother.in
learn.mobilemind.io
publishingfun.com
bondandbond.co.nz
www.dormlife.app
azem.xyz
farmsense.psyborgfarms.com
srba.fyi
devvidya.com
bangkit.academy
feliciaalfieri.com
www.roomalaya.com
bangkit.academy
www.udooq.com
csavargomagazine.com
www.cloudspecialist.tk
driverportal.co.za
advisorbob.com
app.kiwi-go.jp
realtorpro.infospacesolutions.com
agens24.com
invite.noja360.com
www.jordanmihlali.dev
app.modai.io
www.stickerry.in
app.la-collaborative.org
qpr.scouthub.app
bangkit.academy
blog.bangkit.academy
access.optculture.com
bangkit.academy
www.scryptique.me
retoryx.com
auth3.hiddenlogin.com
vanessabui.com
ninevastudios.com
www.eat-vite.fr
cta.ajitama.io
www.hugeus.kr
set-landing-page.vouchercart.com
konecta.mobi
retoryx.com
adrianviegas.me
gesa.ovenfo.com
tourneygames.com
dealers-support.cox2m.com
bangkit.academy
takeout.page
www.austinpartnersgroup.com
www.lawili.com
cburg.galander.berlin
blog.bangkit.academy
login.itc-kostrena.com
holigan.cc
anderson.pesepay.com
devvidya.com
www.stitchstory.uk
link.getonform.com
get.justech.io
tryhaven.app
lumagroup.it
www.aynama.in
www.infinitesync.app
registration.bangkit.academy
www.anthonykeen.com
thangalsgold.in
www.beyondlove.me
status.bangkit.academy
app.salaryo.com
uejesusamigo.codexplus.net
benfin.dev
worldsworstvideos.com
hpm.healables.ai
roombuilder.ashleyfurniture.com
krew.angular.m4m.io
www.dormlife.app
portal.cloverbyte.com
www.cloudspecialist.tk
app.kiwi-go.jp
www.gracelandchiangmai99.com
app.nutritoo.in
www.adamhemeon.com
www.plasticcupapp.com
reparatur.info
buddbaerinc-scanner-buddbaer.cox2m.com
cloudinfra.co
www.qc4application.com
Certificate
The complete raw certificate details for blog.bangkit.academy in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEbDCCA1SgAwIBAgIRAPOXca+mFI45CQAAAADD2kMwDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjExMDI3MTY1MjQ2WhcNMjIwMTI1 MTY1MjQ1WjAfMR0wGwYDVQQDExRibG9nLmJhbmdraXQuYWNhZGVteTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMR6wLiUlCmcDUN0+Q5zqVaCLudv7YpN ++H7jRI3Y0JL1PWYo4TBd2vrUcSX+L9yk5X+FwW6Fp9Ufe6nUQ0YWBTqxkNrHkoH uRJeB1r7+dkcp0A1qAtLRaDTZybmmXl9bX6F8ZMcwcIyIXoqReqbopL7MG+02a99 IeWD5n79E6MGNAmrcUse6KSsAB6MuU0hT+Ma5HAKWcwmLe1A+BDfIhffvSYWgZ/P DLRzIDlT0dkW7ZmoJjmuzIILq4f3fbhHVcFLzp2zpNzZzUOuwQej2vuhwNf9Ymtu Tmr3Zy8g6fRIR9GOcU68y0Wr1jYszLc1gIb3h915NUw4Qq9I5WAUnuECAwEAAaOC AXowggF2MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBQOlp17ypojq3DHr6ODTf/jvWosnDAfBgNVHSME GDAWgBQl4hgOsleRlCrl1F2GkIPeU7O4kjBqBggrBgEFBQcBAQReMFwwJwYIKwYB BQUHMAGGG2h0dHA6Ly9vY3NwLnBraS5nb29nL2d0czFkNDAxBggrBgEFBQcwAoYl aHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMWQ0LmRlcjAfBgNVHREEGDAW ghRibG9nLmJhbmdraXQuYWNhZGVteTAhBgNVHSAEGjAYMAgGBmeBDAECATAMBgor BgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5nb29n L2d0czFkNC9UMFJOa25HYzRTNC5jcmwwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ KoZIhvcNAQELBQADggEBAJmpZ4TQuuEN8AguKENu0NwXcCNSnGmzxtO6cq6+nzOE h0rPmbqoBnijEojuI684JVlpqEUBDwtlt0xuA3cl1mc0ef5eIgbK93284mAFZrR8 mWpud7RZW1uuzn+lJ6rbd4jHHBTfxj5cbETHwrpULPndcqGOL6UtQ2OZCkuAjc99 zo8eZWJ5ZvEoiCdb9dAy7bwO+zkGdjomZq0lvyTKAlKcPHlJ/Ng2jgwICs6ExeKm e06MxuOIwJM5G2UaGBCuAHJ0/gSSRNOYKkFXexTsCAAvaI+QT+7G2yaIzi5O4wC6 +nrwJ5PtJG9s//evFjLFbnxN/XByLtLmufaOkfjSa6E= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHrAuJSUKZwNQ3T5DnOp VoIu52/tik374fuNEjdjQkvU9ZijhMF3a+tRxJf4v3KTlf4XBboWn1R97qdRDRhY FOrGQ2seSge5El4HWvv52RynQDWoC0tFoNNnJuaZeX1tfoXxkxzBwjIheipF6pui kvswb7TZr30h5YPmfv0TowY0CatxSx7opKwAHoy5TSFP4xrkcApZzCYt7UD4EN8i F9+9JhaBn88MtHMgOVPR2RbtmagmOa7Mggurh/d9uEdVwUvOnbOk3NnNQ67BB6Pa +6HA1/1ia25OavdnLyDp9EhH0Y5xTrzLRavWNizMtzWAhveH3Xk1TDhCr0jlYBSe 4QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 323788745629986330497439277532649347651 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-27 16:52:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-25 16:52:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.bangkit.academy' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24803239443196641817700066235466726701433430902914767647524349529642538429223056900316060273234044027396228991065994087257918312118119619749834797189668800859867713822076263574147855594202873062213316809379006809067572076497234955463173807711826300876171844435618183363196672773901907865563167183656423368055259379132665070447963475131765881719209295634328760206654915690974921661940685458175229102529533074347288379639614342608067912590828750082659024762627918939879327232426579166128224094887990764784638840820276556518166941539606785008250574754481811952053058635932562173548635514490486060222898276692824706817761 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0e969d7bca9a23ab70c7afa3834dffe3bd6a2c9c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d4' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.bangkit.academy' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/T0RNknGc4S4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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