personalliabilityumbrella.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a1:e3:ae:98:4f:ab:0f:b3:d3:30:dc:fe:f8:36:18:c2:5e was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=personalliabilityumbrella.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:a1:e3:ae:98:4f:ab:0f:b3:d3:30:dc:fe:f8:36:18:c2:5e
Serial Number (int): 316424960173486619034078454551789235126878
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 74:20:ad:0e:0b:db:fa:47:52:28:35:1b:f2:b7:5b:93:2f:87:6b:b0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f5:19:84:7d:1c:9d:88:cb:1f:d6:08:61:0b:df:1d:f0:6c:3b:38:76
Fingerprint (sha256): b8:0b:ee:3b:b1:f9:fe:06:ea:66:dc:14:cc:78:f6:83:9a:58:bd:3c:f9:2a:c5:d5:65:6f:1d:03:6f:50:06:b8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate personalliabilityumbrella.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for personalliabilityumbrella.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agradental.in
bankruptcybyzipcode.com
cityofsanrafael.com
doravillerealestate.com
echosofheros.com
eldercarenassaucounty.com
equityblog.com
flower4vip.com
hettingercounty.com
mediaeclipse.com
northerndata.us
ostomyintimates.com
otellere.com
personalliabilityumbrella.com
slopesiderental.com
smallchanges.video
tampapianist.com
truebuiltroofing.com

Other certificates including the domain name personalliabilityumbrella.com

(limited to 100 certificates)
crono.in.p-p.co.za
fiecare.com.personalliabilityumbrella.com
moveoregonsborder.org
personalliabilityumbrella.com
mo.cosfacts.org
biblecourse.ca
personalliabilityumbrella.com
barbkops.ca

Certificate

The complete raw certificate details for personalliabilityumbrella.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgISA6HjrphPqw+z0zDc/vg2GMJeMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MjYyMzUzNDZaFw0yNDA3MjUyMzUzNDVaMCgxJjAkBgNVBAMT
HXBlcnNvbmFsbGlhYmlsaXR5dW1icmVsbGEuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA1C5D51VpC6HO2sGzEaD1MvJQn1gtCP/qYGOlCR+ZBTUU
5WlQTW9kIqbTtwg0YMWsArViKpadJs2j57CoW0jWRAWwNWaNzgBQADnKY9xD2ufP
OpgHOIzusRjebF4CB7T5HdeklA8ZSaIQ8U9fVJ+brZsHsWAHQAdSt35SbmxWFJgJ
14hcCn30HAXY3k8m8k1pXBm4h+AbCYYmDGp3wPWyxzaQt3kbLfrXGfl1zXYRUMCh
wFZE6eapjVonVKKZoZJqaaiFbwkPvycN9CbtbbiskCKWrZAdaRoKnppIz8W0PJG/
UcSatMW0xwptXsEBIrsKlf5Gq7vFkLvVltGIo2WnxwIDAQABo4IDczCCA28wDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBR0IK0OC9v6R1IoNRvyt1uTL4drsDAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzCCAXsGA1UdEQSCAXIwggFugg1hZ3JhZGVudGFsLmlu
ghdiYW5rcnVwdGN5Ynl6aXBjb2RlLmNvbYITY2l0eW9mc2FucmFmYWVsLmNvbYIX
ZG9yYXZpbGxlcmVhbGVzdGF0ZS5jb22CEGVjaG9zb2ZoZXJvcy5jb22CGWVsZGVy
Y2FyZW5hc3NhdWNvdW50eS5jb22CDmVxdWl0eWJsb2cuY29tgg5mbG93ZXI0dmlw
LmNvbYITaGV0dGluZ2VyY291bnR5LmNvbYIQbWVkaWFlY2xpcHNlLmNvbYIPbm9y
dGhlcm5kYXRhLnVzghNvc3RvbXlpbnRpbWF0ZXMuY29tggxvdGVsbGVyZS5jb22C
HXBlcnNvbmFsbGlhYmlsaXR5dW1icmVsbGEuY29tghNzbG9wZXNpZGVyZW50YWwu
Y29tghJzbWFsbGNoYW5nZXMudmlkZW+CEHRhbXBhcGlhbmlzdC5jb22CFHRydWVi
dWlsdHJvb2ZpbmcuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHW
eQIEAgSB9ASB8QDvAHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMA
AAGPHQs87gAABAMARjBEAiBvGu2bXgzjhyfZENdz6rTymnzaNz1KBZhTq7R4PsGr
qwIgUC7kdBVWpHkitntVkE+BWaV1OMSfLiUqC9sBWsW2bxMAdgA/F0tP1yJHWJQd
ZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAY8dCzzvAAAEAwBHMEUCIGsuGGxa/N3C
BzTG/3gpJCWS6ftlFCrjMgcHmOlWo03WAiEAve7KyipfkqAs4X4SAR2gl3joHfZK
8dSYdq9fBxYo9CkwDQYJKoZIhvcNAQELBQADggEBABr4Kwv0P4IV3U9pcDjpQbRS
wSuf16TjhsSQL6+Rt9XzRCWkOhvrOJvQcRoWHoW5Ri4CnXgm7AgwyGmSyavrD4Y7
8XslsMh3asOh2k0/d5HMvxGHVzdJ9GIaO+PlGGbAfEaAp/2ra4Hudj3CLmSO/RUZ
yPr7ZnMYC5DY91z3UQRF+R6unU8YuYioMS6PAN9MH0+c9nD5zQMyyXKgx/jW6FXi
Rg2WG+X8Mjbexu91UAuKWkL9y552szY6XUPFjzd5brhUTOW7nRYIgVXMmLZQLlCu
AedOMwmmvwLof1Jwe6BoCfPHUBXbvdtLSoMvzc1ewCArNV8QDt5C4l+YA1lF7mo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C5D51VpC6HO2sGzEaD1
MvJQn1gtCP/qYGOlCR+ZBTUU5WlQTW9kIqbTtwg0YMWsArViKpadJs2j57CoW0jW
RAWwNWaNzgBQADnKY9xD2ufPOpgHOIzusRjebF4CB7T5HdeklA8ZSaIQ8U9fVJ+b
rZsHsWAHQAdSt35SbmxWFJgJ14hcCn30HAXY3k8m8k1pXBm4h+AbCYYmDGp3wPWy
xzaQt3kbLfrXGfl1zXYRUMChwFZE6eapjVonVKKZoZJqaaiFbwkPvycN9Cbtbbis
kCKWrZAdaRoKnppIz8W0PJG/UcSatMW0xwptXsEBIrsKlf5Gq7vFkLvVltGIo2Wn
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316424960173486619034078454551789235126878
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 23:53:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 23:53:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'personalliabilityumbrella.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26785334897198038203085847398978240824771518455598880778091869447922272253117944038129627259889050473517873380225126325187510608734295163879177970546284878632049511277469271946521033299605447843174625014188882040869190424506587666290851175058939833085383127866891397256010832007638209517787360232113879977530926935714849361977359751247176667968234526032828797662074360258153162186565868076381222978803752289019654791687750885948888671034730704756952531619042051191199741445627259987728877115511312314666807073331505487074288005819450256448271177255666427041923459276973380554118140809978872696127888213226555196155847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7420ad0e0bdbfa475228351bf2b75b932f876bb0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (370 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agradental.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankruptcybyzipcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofsanrafael.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doravillerealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echosofheros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eldercarenassaucounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equityblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flower4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hettingercounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaeclipse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerndata.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostomyintimates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otellere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalliabilityumbrella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slopesiderental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallchanges.video'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tampapianist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truebuiltroofing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f1d0b3cee000004030046304402206f1aed9b5e0ce38727d910d773eab4f29a7cda373d4a059853abb4783ec1abab0220502ee4741556a47922b67b55904f8159a57538c49f2e252a0bdb015ac5b66f130076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f1d0b3cef000004030047304502206b2e186c5afcddc20734c6ff7829242592e9fb65142ae332070798e956a34dd6022100bdeecaca2a5f92a02ce17e12011da09778e81df64af1d49876af5f071628f429
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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