armindoalves.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:75:d0:84:a0:73:2e:a9:71:74:c4:93:e4:35:3f:60:ba:7a was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=armindoalves.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:75:d0:84:a0:73:2e:a9:71:74:c4:93:e4:35:3f:60:ba:7aSerial Number (int): 301427062785650345692001848664468836366970
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2b:78:ed:02:d6:28:77:99:c3:05:c6:a7:0d:07:d6:ff:4f:f3:36:54
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 8b:e1:5f:44:49:3a:89:61:37:a2:e1:e5:6e:06:97:9a:60:f5:3f:06
Fingerprint (sha256): b9:81:cd:e4:6d:59:6c:8d:55:f6:1b:d6:8c:59:82:f4:cc:de:4a:d1:00:22:03:e9:ef:b8:a1:16:75:bf:6c:82
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate armindoalves.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for armindoalves.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
armindoalves.ch
www.armindoalves.ch
www.armindoalves.ch
Other certificates including the domain name armindoalves.ch
(limited to 100 certificates)
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
www.armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
www.armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
www.armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
www.armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
armindoalves.ch
Certificate
The complete raw certificate details for armindoalves.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgISA3XQhKBzLqlxdMST5DU/YLp6MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjYwNTE0NTBaFw0x OTA4MjQwNTE0NTBaMBoxGDAWBgNVBAMTD2FybWluZG9hbHZlcy5jaDCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBANW92Rg6ti54G7mtpjBXfsviwYzBsjZM swoBxlgxaJztQXHhTMj0oc45ZBTB17fyRETTWwPybdTWCsQ9zjWqZm3EyOT2VyEL uTgxLhIvaMH1AEJ2zCN0SzqUNXqqUAsBEZ8PsgUjx0yJ0V5v30VYv3D3elqPTdUA xk3aiC0MEmfHysnBUgwZmn9qcwSk6tCc0nqOk8MCdkiCrkJIfHc9UDEu2lGdciHB dIzmW8B5ec2aIltjTdjIrNsSchbbII9yN5pN8NLTtZNhnAx1dLhLyeU77406tFFD vcjSfK1JkV5tpesVq9PdakCL3rpBjVZHwrtzCqx7A+52Wv9zpWMOOsP4DaPbwNie 8YUz9aVjXM9lZmOtOtpshWmIrKTZwg0lQ3XY3RlqfkxJvIekmIhFa9skm79LhBxO lk/iTvulZZfUcMHvjQne1p/PSfwvS1fkYhCUZDYtZLfIM9QNoNh486oD2x1ZjsT+ bF0xZMpYJIcrlWL9umDCA2Ias55gncAmO2vlf6r0TD7Sff/XCYzuTeeND7bz50bS mnut06LMLkot9yR95pF9jnsKy32DZq5qFkff80an9Kto4WaT9cfqg4QbqzigLQgH hsHJ5ToWJxdgkcDJ4f7Z9L9ic9SyMafImlMqyQDOSp0VmEgkmPHIxgJQUf1QQWfu j9P0JiihgbtbAgMBAAGjggJ3MIICczAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCt4 7QLWKHeZwwXGpw0H1v9P8zZUMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYDVR0RBCgwJoIPYXJtaW5kb2FsdmVzLmNo ghN3d3cuYXJtaW5kb2FsdmVzLmNoMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysG AQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu b3JnMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUAdH7agzGtMxCRIZzOJU9CcMK/ /V5CIAjGNzV55hB7zFYAAAFq8scExAAABAMARjBEAiA+5Lwst0fUgWMrvVP23Ni6 M2gGVEbke1msKXeTNCtiRQIgetHL2pkE/iG2lYYEVxZzgvS7Eb4evIHNvU2PRIUd xJIAdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWryxwTjAAAE AwBGMEQCIADkE3rFoXJWOJJ7zNZuCevyQkHURc01Nid0071+I+NzAiAJ08QPBJh9 Pq5eId6ZnqntN6cstaMGw0v422Ms7Cs0ujANBgkqhkiG9w0BAQsFAAOCAQEAg8rj ExTUJDtNmu+XnxY2e5iYyuegMF6ahjOGX6+Vm+vr5fOXIjQ+MoKTYEYHYqHhcTk1 Z7SH7arNmjiqQTxQW/FHyu0UwV0hm7QDt4AYlXfHlAK9AEmcXFy11JJ+S9uNxlxv VfQQjwAKi8vBUnBNA24ApHq2XYEDcl5nWDrVlMB6vVS2WSY+3umKoQJf0fsp3nvY CgQH/BYDInaxuGYrOCm7S5vRovuDUIsPJ9cYNCwL3q9RBlr+12i7Q28JAiqJ9B1s z3B/NlhLkS4Dt1lF0/PFfCRNEpf/eIcKSVRHBlpzzFDcd3Qn7q0CKkBFdc0oQ64h 89tBlKERWXRNhg7SoQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1b3ZGDq2Lngbua2mMFd+ y+LBjMGyNkyzCgHGWDFonO1BceFMyPShzjlkFMHXt/JERNNbA/Jt1NYKxD3ONapm bcTI5PZXIQu5ODEuEi9owfUAQnbMI3RLOpQ1eqpQCwERnw+yBSPHTInRXm/fRVi/ cPd6Wo9N1QDGTdqILQwSZ8fKycFSDBmaf2pzBKTq0JzSeo6TwwJ2SIKuQkh8dz1Q MS7aUZ1yIcF0jOZbwHl5zZoiW2NN2Mis2xJyFtsgj3I3mk3w0tO1k2GcDHV0uEvJ 5TvvjTq0UUO9yNJ8rUmRXm2l6xWr091qQIveukGNVkfCu3MKrHsD7nZa/3OlYw46 w/gNo9vA2J7xhTP1pWNcz2VmY6062myFaYispNnCDSVDddjdGWp+TEm8h6SYiEVr 2ySbv0uEHE6WT+JO+6Vll9Rwwe+NCd7Wn89J/C9LV+RiEJRkNi1kt8gz1A2g2Hjz qgPbHVmOxP5sXTFkylgkhyuVYv26YMIDYhqznmCdwCY7a+V/qvRMPtJ9/9cJjO5N 540PtvPnRtKae63ToswuSi33JH3mkX2OewrLfYNmrmoWR9/zRqf0q2jhZpP1x+qD hBurOKAtCAeGwcnlOhYnF2CRwMnh/tn0v2Jz1LIxp8iaUyrJAM5KnRWYSCSY8cjG AlBR/VBBZ+6P0/QmKKGBu1sCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 301427062785650345692001848664468836366970 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-26 05:14:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-24 05:14:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'armindoalves.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 871989625445063516188336288897935352658560385872284034766065509405015445941508630425834228401280858706653100053356017510459260720993305613705718108326647379199998915388994822367205098507817146362401106209869167169498220168772469480211606330313698319197128352525625827494415229324384511099991656851624437824847869246501058806236704946996025128954580104996258982384350302375492282463846204554187198757715248149011671389225368335788223173381714638289427455655998274279744204221776486320463019033861635860570666392642326222027303708889040763034520789482353397353787036489725558092251889702463311013887578965316230913100182420388779541820082379876040578403638124159476375983645885801319158225762563572778395332331532328839588196037399537600931544466047994554526194909870714086424319889944385796658778165684186904786256637384536905345026751306986561166453294639667478641286969814026358373743274574307022322187132296247240704489105562341589181308937727557309953767247837198503237248690599697700829161173960529632011631977437284552777165292939328000735486034315442919683830440285218510450413939283998023208053666943407723193584381733463401529074745555651257908509285513026582622455512149035679301490103384613644749343585900466838437644843867 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2b78ed02d6287799c305c6a70d07d6ff4ff33654 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armindoalves.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.armindoalves.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016af2c704c4000004030046304402203ee4bc2cb747d481632bbd53f6dcd8ba3368065446e47b59ac297793342b624502207ad1cbda9904fe21b695860457167382f4bb11be1ebc81cdbd4d8f44851dc492007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016af2c704e30000040300463044022000e4137ac5a1725638927bccd66e09ebf24241d445cd35362774d3bd7e23e373022009d3c40f04987d3eae5e21de999ea9ed37a72cb5a306c34bf8db632cec2b34ba . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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