*.smkn19-smr.sch.id
Issued by R3
About this certificate
This digital certificate with serial number 04:fc:fd:52:c2:87:88:d9:67:6d:a6:47:ed:c6:13:af:0f:48 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.smkn19-smr.sch.id
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:fc:fd:52:c2:87:88:d9:67:6d:a6:47:ed:c6:13:af:0f:48Serial Number (int): 434537024587919080785490933541035255467848
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: b6:76:87:2f:b9:c9:7a:dd:0a:8a:48:f2:31:0a:27:4f:05:9e:c1:c1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b2:84:bc:60:37:e5:b2:ba:e6:5c:99:80:a9:fd:94:05:36:f5:6a:0c
Fingerprint (sha256): ac:12:e4:11:6a:e3:8e:c9:fa:ec:67:e5:e6:c8:a6:ec:63:f4:cf:c5:52:04:74:28:20:bd:04:e5:5c:45:60:c7
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.smkn19-smr.sch.id
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.smkn19-smr.sch.id
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.lestaritravel.my.id
*.smkn19-smr.sch.id
lestaritravel.my.id
smkn19-smr.sch.id
www.lestaritravel.smkn19-smr.sch.id
*.smkn19-smr.sch.id
lestaritravel.my.id
smkn19-smr.sch.id
www.lestaritravel.smkn19-smr.sch.id
Other certificates including the domain name smkn19-smr.sch.id
(limited to 100 certificates)
smkn19-smr.sch.id
smkn19-smr.sch.id
smkn19-smr.sch.id
www.samarinda-website.com.smkn19-smr.sch.id
www.rajaulin.com.smkn19-smr.sch.id
smkn19-smr.sch.id
smkn19-smr.sch.id
lestaritravel.my.id
smkn19-smr.sch.id
smkn19-smr.sch.id
rajaulin.com.smkn19-smr.sch.id
*.samarinda-website.com
*.lestaritravel.my.id
smkn19-smr.sch.id
*.samarinda-website.com
*.smkn19-smr.sch.id
smkn19-smr.sch.id
smkn19-smr.sch.id
smkn19-smr.sch.id
smkn19-smr.sch.id
smkn19-smr.sch.id
smkn19-smr.sch.id
www.perpustakaan.smkn19-smr.sch.id
*.smkn19-smr.sch.id
*.lestaritravel.my.id
samarinda-website.com
*.smkn19-smr.sch.id
toyotasamarinda.smkn19-smr.sch.id
rajaulin.com.smkn19-smr.sch.id
www.lestaritravel.smkn19-smr.sch.id
smkn19-smr.sch.id
www.toyotasamarinda.smkn19-smr.sch.id
smkn19-smr.sch.id
yunaconsulting.my.id.smkn19-smr.sch.id
smkn19-smr.sch.id
rajaulin.com.smkn19-smr.sch.id
smkn19-smr.sch.id
smkn19-smr.sch.id
www.samarinda-website.com.smkn19-smr.sch.id
www.rajaulin.com.smkn19-smr.sch.id
smkn19-smr.sch.id
smkn19-smr.sch.id
lestaritravel.my.id
smkn19-smr.sch.id
smkn19-smr.sch.id
rajaulin.com.smkn19-smr.sch.id
*.samarinda-website.com
*.lestaritravel.my.id
smkn19-smr.sch.id
*.samarinda-website.com
*.smkn19-smr.sch.id
smkn19-smr.sch.id
smkn19-smr.sch.id
smkn19-smr.sch.id
smkn19-smr.sch.id
smkn19-smr.sch.id
smkn19-smr.sch.id
www.perpustakaan.smkn19-smr.sch.id
*.smkn19-smr.sch.id
*.lestaritravel.my.id
samarinda-website.com
*.smkn19-smr.sch.id
toyotasamarinda.smkn19-smr.sch.id
rajaulin.com.smkn19-smr.sch.id
www.lestaritravel.smkn19-smr.sch.id
smkn19-smr.sch.id
www.toyotasamarinda.smkn19-smr.sch.id
smkn19-smr.sch.id
yunaconsulting.my.id.smkn19-smr.sch.id
smkn19-smr.sch.id
rajaulin.com.smkn19-smr.sch.id
Certificate
The complete raw certificate details for *.smkn19-smr.sch.id in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISBPz9UsKHiNlnbaZH7cYTrw9IMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA2MDEwODAzMDNaFw0yMzA4MzAwODAzMDJaMB4xHDAaBgNVBAMM Eyouc21rbjE5LXNtci5zY2guaWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDNzz8L+OqP2mdHTCrvR3nlFEwPnZwc9SvdnJ05AmQNqzQJY3qaKNQCGCk5 ZQpvAO2YVVStDU03gHr8BsmdDBk09Zb8pnhHzpc5RJgsPReHV9rvoQGKOPWgvmF+ BtY47vN7jTYwF2269uVH1ZaiJOM6uya4vHrJlKZFsX56PqDdlz8S8Xbq2ddkqQLf wCjmOpJbf6jYI/vNaglwu7CQubgg1eRNjQRb1qI5zGutwuTnxBS6iDHUdGEd3S1D KcE72/RoefcT9Bk+q1/FyPRfN1f6t4XIAlacgNuCkRnefYKVnJB3aJmqA5LsWEOm l23WzmCk6JEmJ0vQX3jBSYD4LMbvAgMBAAGjggK0MIICsDAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFLZ2hy+5yXrdCopI8jEKJ08FnsHBMB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMIGCBgNVHREEezB5ghUqLmxlc3Rhcml0cmF2ZWwubXkuaWSCEyouc21r bjE5LXNtci5zY2guaWSCE2xlc3Rhcml0cmF2ZWwubXkuaWSCEXNta24xOS1zbXIu c2NoLmlkgiN3d3cubGVzdGFyaXRyYXZlbC5zbWtuMTktc21yLnNjaC5pZDBMBgNV HSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpo dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA 8QB3AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABiHYyPFcAAAQD AEgwRgIhALAU5a6WMIYNW6PCPI3agrbLV48ah4NqynG+WHYg8IpSAiEAhddUnnaJ 9yLo+ytzuSFxLCT1JkUUDYoKj4MOlAopvx8AdgDoPtDaPvUGNTLnVyi8iWvJA9PL 0RFr7Otp4Xd9bQa9bgAAAYh2MjxAAAAEAwBHMEUCIGaLBvYj6/RjGKQVjJ9mwiLX VEQ3EYScCntpc/Zo1f9MAiEA5F3UGQgnqfMf46TqC/Zy9lE1801OQelDurw+T1H3 JRMwDQYJKoZIhvcNAQELBQADggEBAAVNriV0niH33Lc/XEx4YK+lBBkW2yq+k1et aakf8ZQ0egsq2BuxHNCLL1f4tMCSWf6Z2xudozdfftPz4fFvJTFouwpC2O08sfzu Q7EoiQ38J8Bgm4YdJXPqnLW5my/ISsUEvlRmcLAZS8KXd7lyPX00Uw/MHVWoa0a4 MZS7xtMuNGAttz9dLa4pkhxB29ntI9aRwTgeZdS5H5OyTCqTlNZ/xPd37fZRGdgt OdXqdXfb9mzFAOeQxaeMjomzuxIyR8ZMevm66h2HQNssTF7/dFoT+DoUczpgSNg1 nt7ewYdQYXYMZcN0pQJMNYomww45Bsdd8Zpf4SHZUwx4T7ObjI0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc8/C/jqj9pnR0wq70d5 5RRMD52cHPUr3ZydOQJkDas0CWN6mijUAhgpOWUKbwDtmFVUrQ1NN4B6/AbJnQwZ NPWW/KZ4R86XOUSYLD0Xh1fa76EBijj1oL5hfgbWOO7ze402MBdtuvblR9WWoiTj OrsmuLx6yZSmRbF+ej6g3Zc/EvF26tnXZKkC38Ao5jqSW3+o2CP7zWoJcLuwkLm4 INXkTY0EW9aiOcxrrcLk58QUuogx1HRhHd0tQynBO9v0aHn3E/QZPqtfxcj0XzdX +reFyAJWnIDbgpEZ3n2ClZyQd2iZqgOS7FhDppdt1s5gpOiRJidL0F94wUmA+CzG 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 434537024587919080785490933541035255467848 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-01 08:03:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 08:03:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.smkn19-smr.sch.id' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25981049465883658364069376417730537808578858476181132799379600066664608270573821723378027014329971997037171549928125138660364175765124074503007361512170894959176743522862532420995258778445123921661011326135637886894459156635657414858320010246403701263761625458178775694371407896010582476944143558596668545756969643945263600166880624973429267466630273755351225312122473291471147584594526918373428154038493403744605227090798425594445860538647793565028364473892515539602962907037086222243312660367317573006021859185234198008708768198348347988807574819437079903788120892241829010581735270276897137707168055148240041723631 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b676872fb9c97add0a8a48f2310a274f059ec1c1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lestaritravel.my.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smkn19-smr.sch.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lestaritravel.my.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smkn19-smr.sch.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lestaritravel.smkn19-smr.sch.id' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018876323c570000040300483046022100b014e5ae9630860d5ba3c23c8dda82b6cb578f1a87836aca71be587620f08a5202210085d7549e7689f722e8fb2b73b921712c24f52645140d8a0a8f830e940a29bf1f007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018876323c4000000403004730450220668b06f623ebf46318a4158c9f66c222d754443711849c0a7b6973f668d5ff4c022100e45dd4190827a9f31fe3a4ea0bf672f65135f34d4e41e943babc3e4f51f72513 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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