web.marketdatasystems.com
- IG GROUP PLC -
Issued by Cybertrust Public SureServer SV CA
About this certificate
This digital certificate with serial number 01:00:00:00:00:01:44:3d:d7:e3:0f:7e:b9:c7 was issued on by Cybertrust Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
- Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
- Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
- Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
- Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
- The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)
IG GROUP PLC
Organization:
IG GROUP PLC
Organization unit: IT
Organization unit: IT
State / Province:
London
Locality: London
Country: GB
Locality: London
Country: GB
Cybertrust Inc
Organization:
Cybertrust Inc
This certificate has expire since
Certificate Details
Serial Number (hex): 01:00:00:00:00:01:44:3d:d7:e3:0f:7e:b9:c7Serial Number (int): 20282409603675034491759336798663
Serial Number lenght: 105 bits, 14 octets
SubjectKeyId: 5f:58:c8:bf:b4:d5:3c:83:10:29:3d:87:96:84:3f:50:f8:a7:7a:1f
AuthorityKeyId: 04:98:60:df:80:1b:96:49:5d:65:56:2d:a5:2c:09:24:0a:ec:dc:b9
Fingerprint (sha1): 7c:21:a9:88:8b:2d:5c:57:7b:bf:79:19:3a:1c:4f:a6:82:ee:a4:cc
Fingerprint (sha256): a9:71:1d:87:d2:9a:d6:92:e5:5c:33:ae:bf:eb:04:48:b4:e5:11:d8:8a:03:49:84:c6:9b:37:53:21:31:b0:0a
Revocation information
CRL Distribution Point: http://crl.omniroot.com/PublicSureServerSV.crlCheck the revocation status for certificate web.marketdatasystems.com
0
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for web.marketdatasystems.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
7 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
This certificate doesn't contain any subject alternative names.
Other certificates including the domain name marketdatasystems.com
(limited to 100 certificates)
incapsula.com
www.marketdatasystems.com
autodiscover.ig.com
net-cpm.marketdatasystems.com
imperva.com
*.ccg.marketdatasystems.com
incapsula.com
www.marketdatasystems.com
net-cpm.marketdatasystems.com
www.marketdatasystems.com
www.marketdatasystems.com
incapsula.com
*.marketdatasystems.com
demo.static.marketdatasystems.com
*.static.marketdatasystems.com
web.static.marketdatasystems.com
*.marketdatasystems.com
demo.marketdatasystems.com
www.marketdatasystems.com
incapsula.com
www.marketdatasystems.com
*.marketdatasystems.com
www.marketdatasystems.com
net-cpm.marketdatasystems.com
www.marketdatasystems.com
net-cpm.marketdatasystems.com
demo.marketdatasystems.com
demo.static.marketdatasystems.com
*.marketdatasystems.com
incapsula.com
net-cpm.marketdatasystems.com
*.static.marketdatasystems.com
demo.marketdatasystems.com
www.marketdatasystems.com
demo.marketdatasystems.com
jdc.marketdatasystems.com
www.marketdatasystems.com
*.marketdatasystems.com
marketdatasystems.com
demo.static.marketdatasystems.com
*.marketdatasystems.com
*.web-ccg.marketdatasystems.com
*.marketdatasystems.com
web.static.marketdatasystems.com
www.marketdatasystems.com
incapsula.com
*.static.marketdatasystems.com
incapsula.com
*.marketdatasystems.com
*.marketdatasystems.com
imperva.com
autodiscover.ig.com
*.ccg.marketdatasystems.com
www.marketdatasystems.com
net-cpm.marketdatasystems.com
*.ccg.marketdatasystems.com
net-cpm.marketdatasystems.com
*.marketdatasystems.com
*.static.marketdatasystems.com
web.marketdatasystems.com
incapsula.com
www.marketdatasystems.com
net-cpm.marketdatasystems.com
www.marketdatasystems.com
web.marketdatasystems.com
autodiscover.ig.com
www2.marketdatasystems.com
net-cpm.marketdatasystems.com
incapsula.com
*.demo-ccg.marketdatasystems.com
autodiscover.ig.com
www.static.marketdatasystems.com
*.marketdatasystems.com
web.marketdatasystems.com
*.static.marketdatasystems.com
incapsula.com
net-cpm.marketdatasystems.com
incapsula.com
incapsula.com
*.web-ccg.marketdatasystems.com
net-cpm.marketdatasystems.com
www.marketdatasystems.com
imperva.com
incapsula.com
myfx.marketdatasystems.com
incapsula.com
net-cpm.marketdatasystems.com
*.demo-ccg.marketdatasystems.com
incapsula.com
web.marketdatasystems.com
*.web-ccg.marketdatasystems.com
web.static.marketdatasystems.com
www.static.marketdatasystems.com
incapsula.com
www.marketdatasystems.com
imperva.com
www.marketdatasystems.com
incapsula.com
demo.static.marketdatasystems.com
incapsula.com
www.marketdatasystems.com
autodiscover.ig.com
net-cpm.marketdatasystems.com
imperva.com
*.ccg.marketdatasystems.com
incapsula.com
www.marketdatasystems.com
net-cpm.marketdatasystems.com
www.marketdatasystems.com
www.marketdatasystems.com
incapsula.com
*.marketdatasystems.com
demo.static.marketdatasystems.com
*.static.marketdatasystems.com
web.static.marketdatasystems.com
*.marketdatasystems.com
demo.marketdatasystems.com
www.marketdatasystems.com
incapsula.com
www.marketdatasystems.com
*.marketdatasystems.com
www.marketdatasystems.com
net-cpm.marketdatasystems.com
www.marketdatasystems.com
net-cpm.marketdatasystems.com
demo.marketdatasystems.com
demo.static.marketdatasystems.com
*.marketdatasystems.com
incapsula.com
net-cpm.marketdatasystems.com
*.static.marketdatasystems.com
demo.marketdatasystems.com
www.marketdatasystems.com
demo.marketdatasystems.com
jdc.marketdatasystems.com
www.marketdatasystems.com
*.marketdatasystems.com
marketdatasystems.com
demo.static.marketdatasystems.com
*.marketdatasystems.com
*.web-ccg.marketdatasystems.com
*.marketdatasystems.com
web.static.marketdatasystems.com
www.marketdatasystems.com
incapsula.com
*.static.marketdatasystems.com
incapsula.com
*.marketdatasystems.com
*.marketdatasystems.com
imperva.com
autodiscover.ig.com
*.ccg.marketdatasystems.com
www.marketdatasystems.com
net-cpm.marketdatasystems.com
*.ccg.marketdatasystems.com
net-cpm.marketdatasystems.com
*.marketdatasystems.com
*.static.marketdatasystems.com
web.marketdatasystems.com
incapsula.com
www.marketdatasystems.com
net-cpm.marketdatasystems.com
www.marketdatasystems.com
web.marketdatasystems.com
autodiscover.ig.com
www2.marketdatasystems.com
net-cpm.marketdatasystems.com
incapsula.com
*.demo-ccg.marketdatasystems.com
autodiscover.ig.com
www.static.marketdatasystems.com
*.marketdatasystems.com
web.marketdatasystems.com
*.static.marketdatasystems.com
incapsula.com
net-cpm.marketdatasystems.com
incapsula.com
incapsula.com
*.web-ccg.marketdatasystems.com
net-cpm.marketdatasystems.com
www.marketdatasystems.com
imperva.com
incapsula.com
myfx.marketdatasystems.com
incapsula.com
net-cpm.marketdatasystems.com
*.demo-ccg.marketdatasystems.com
incapsula.com
web.marketdatasystems.com
*.web-ccg.marketdatasystems.com
web.static.marketdatasystems.com
www.static.marketdatasystems.com
incapsula.com
www.marketdatasystems.com
imperva.com
www.marketdatasystems.com
incapsula.com
demo.static.marketdatasystems.com
incapsula.com
Certificate
The complete raw certificate details for web.marketdatasystems.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEFzCCAv+gAwIBAgIOAQAAAAABRD3X4w9+uccwDQYJKoZIhvcNAQEFBQAwRjEX MBUGA1UEChMOQ3liZXJ0cnVzdCBJbmMxKzApBgNVBAMTIkN5YmVydHJ1c3QgUHVi bGljIFN1cmVTZXJ2ZXIgU1YgQ0EwHhcNMTQwMjE3MDMxNjAzWhcNMTUwMjE3MDMx NjAzWjB3MQswCQYDVQQGEwJHQjEPMA0GA1UECBMGTG9uZG9uMQ8wDQYDVQQHEwZM b25kb24xFTATBgNVBAoTDElHIEdST1VQIFBMQzELMAkGA1UECxMCSVQxIjAgBgNV BAMTGXdlYi5tYXJrZXRkYXRhc3lzdGVtcy5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNSqefnw/kA2PIH67ftcQo2il2UrWtSBJcASQEz99AX0dX huWti6qt47GK+o1LJZrx2r7/t4FRfte6BqsCfAe2ICkeQjfdDqxA/oegjvi/f99X htRKXvynssCtTCTLo6Fa+MACHFuhftJ0fjy+beQEaMmQLfa64lnLCaqiJkCQ72sC IXG347BOl41/PRgHb5KB7HJemGQhlx3ZGlXNZGagiQeJgQjnSDy68ElrdSLx2cFD tMIeRjHbWM163oABQe3HzRWWemc/C5KLx12zAzT15ARHFUnSS4SC6ryEf9ZV/SUs MxRZV3VCwP3VCqjfqmmmf8ZWB29+T/bHCN6x0UZFAgMBAAGjgdEwgc4wHwYDVR0j BBgwFoAUBJhg34AblkldZVYtpSwJJArs3LkwPwYDVR0fBDgwNjA0oDKgMIYuaHR0 cDovL2NybC5vbW5pcm9vdC5jb20vUHVibGljU3VyZVNlcnZlclNWLmNybDAdBgNV HQ4EFgQUX1jIv7TVPIMQKT2HloQ/UPineh8wCQYDVR0TBAIwADAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBEGCWCGSAGG+EIB AQQEAwIGwDANBgkqhkiG9w0BAQUFAAOCAQEAgZugTWFWb0QDObkotwb6ecxi3ke+ EIU8NsljeuSn10EUHEKIAlgl+HtHjkMftF3TCyoRoVFn3wyL9RdNA61Txlpn0Lw9 JnoSGW/e6P/ORSJCtvRBZZeqKrX+6mOTrogPaMLxqhg+iU9yVMdAnmUuEXL4eKOZ SbrKXzYIsHeXoUVZGVik9QNjre3rc0bVfr4PyQQWoQQpsrTlT4AG+iKWrDKSg8m4 yix8tMfD4owmh79091jzo7azsIE4kqzUml9xzlrfEwfpr6F0xhTMO6lrMcux7mcb lQ2v2yqTVgUwiocxatUaBrsVrfVTP0ANpe2GkW2gwaDfwRYvLh1iooc50g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUqnn58P5ANjyB+u37XE KNopdlK1rUgSXAEkBM/fQF9HV4blrYuqreOxivqNSyWa8dq+/7eBUX7XugarAnwH tiApHkI33Q6sQP6HoI74v3/fV4bUSl78p7LArUwky6OhWvjAAhxboX7SdH48vm3k BGjJkC32uuJZywmqoiZAkO9rAiFxt+OwTpeNfz0YB2+SgexyXphkIZcd2RpVzWRm oIkHiYEI50g8uvBJa3Ui8dnBQ7TCHkYx21jNet6AAUHtx80VlnpnPwuSi8ddswM0 9eQERxVJ0kuEguq8hH/WVf0lLDMUWVd1QsD91Qqo36pppn/GVgdvfk/2xwjesdFG RQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20282409603675034491759336798663 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Public SureServer SV CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-17 03:16:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-17 03:16:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IG GROUP PLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web.marketdatasystems.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25915666161816750262289709383786957284115802115433134188485614370037355393348638073311762944453386456446203676983371542055927495568301079886180426814790618686254859911588293479179586628366663469329698860751859983259109567395965885959834204011473515222626026036209515908299939028287777169186038000018403089674071759611983683085148877546094754684628556388452264211170019381554140552875822916980062177608279402196378202210237730901448212062085514193168518523305068129447633243885240099888955979066872312526509888346992277755344432821428999410921972820271152412018200036894737463850860302105948901717694204741311613978181 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 049860df801b96495d65562da52c09240aecdcb9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.omniroot.com/PublicSureServerSV.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5f58c8bfb4d53c8310293d8796843f50f8a77a1f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits) 06c0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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