plan.kentei.cc
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:71:07:56:18:d3:ba:85:96:6e:7c:d9:62:f1:3f:66:32:b6 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=plan.kentei.cc
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:71:07:56:18:d3:ba:85:96:6e:7c:d9:62:f1:3f:66:32:b6Serial Number (int): 299798516894399813205023164364002691527350
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 81:f0:6e:a8:36:fe:9b:e2:0f:8a:c1:ac:d4:d4:76:07:f6:bb:d7:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a9:da:94:12:f9:f5:7e:d3:46:f3:bf:dd:b1:e4:a2:27:ee:5a:95:5a
Fingerprint (sha256): be:ef:99:07:ec:ba:e6:42:c7:65:3e:4d:0a:9d:cd:d5:dd:9e:cf:0f:90:e1:99:22:4e:45:c5:9c:5b:b1:01:d8
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate plan.kentei.cc
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for plan.kentei.cc
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
plan.kentei.cc
Other certificates including the domain name kentei.cc
(limited to 100 certificates)
*.kentei.cc
dev.kentei.cc
plan.kentei.cc
plan.kentei.cc
*.kentei.cc
dev.kentei.cc
dev.kentei.cc
ssl.kentei.cc
*.kentei.cc
kentei.cc
plan.kentei.cc
dev.kentei.cc
kentei.cc
*.kentei.cc
dev.kentei.cc
dev.kentei.cc
ssl.kentei.cc
kentei.cc
kentei.cc
kentei.cc
plan.kentei.cc
plan.kentei.cc
dev.kentei.cc
plan.kentei.cc
dev.kentei.cc
*.kentei.cc
dev.kentei.cc
ssl.kentei.cc
dev.kentei.cc
plan.kentei.cc
dev.kentei.cc
dev.kentei.cc
dev.kentei.cc
dev.kentei.cc
kentei.cc
plan.kentei.cc
kentei.cc
biz.kentei.cc
*.kentei.cc
kentei.cc
dev.kentei.cc
plan.kentei.cc
plan.kentei.cc
*.kentei.cc
dev.kentei.cc
dev.kentei.cc
ssl.kentei.cc
*.kentei.cc
kentei.cc
plan.kentei.cc
dev.kentei.cc
kentei.cc
*.kentei.cc
dev.kentei.cc
dev.kentei.cc
ssl.kentei.cc
kentei.cc
kentei.cc
kentei.cc
plan.kentei.cc
plan.kentei.cc
dev.kentei.cc
plan.kentei.cc
dev.kentei.cc
*.kentei.cc
dev.kentei.cc
ssl.kentei.cc
dev.kentei.cc
plan.kentei.cc
dev.kentei.cc
dev.kentei.cc
dev.kentei.cc
dev.kentei.cc
kentei.cc
plan.kentei.cc
kentei.cc
biz.kentei.cc
*.kentei.cc
kentei.cc
Certificate
The complete raw certificate details for plan.kentei.cc in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgISA3EHVhjTuoWWbnzZYvE/ZjK2MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MTcyMDIxMjZaFw0x OTA4MTUyMDIxMjZaMBkxFzAVBgNVBAMTDnBsYW4ua2VudGVpLmNjMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtGfc0Za+PcZUNFXuxqImE6l17QeNUzIa xzW78nFdDHBZcLhlYil0YDeS0dnTg27E9V95xWs4vFtFfiiDXgLDVVI0l/LGuY+h aLsfhB43AAx3XV3GuhEEGAn8Q5gU72mN6rl8jb5uMv/xqyJqiWbymNkwCr9/yrpo BGIt9qHx/MSYR3iP8tOd+L48mcAckPEW/eTgvQ/+ZrVIynLjonpHTL3pi1PYWLvE KjmceWbvX/VPLJpf2CTx8pMsFyh0fAnpmz66dloCNECz2QbbdeaKCGWkisXwKrof dWss+fM3Jasa7XaNmrVWtdd0rsLGxFGpp9g0jiszOK5roglEusI065LxFgM51O5k lU+cL5J67McFSMWW6pgC62NiA0ImHQLDK/oaPvneaQVmr4zp4i/fRH99L9M5S4U9 vPFpMz0PbBR34doKyoaIXGLa9kxSbKkIRug3u88hWvN7EFisNkqYB0lHjlQ6fMog 2vsVx++XVG7nrM8xZ9ME9p4HoeSvqrYAOtsUtqGfAadCEsEfw7P5aeulfvpMa0Iz ouzCRWFP6SZSjRvzFwlSGW44m1A8ZSc2TdRMRSt8ollvhX79uU1hOD1qylSEjQ4B 68VQEMCZDLvYlC+x0kaIRWwuowZJ8lyRmM0s58K+ou2zJdO4mretfG9tDlgkzBED JICALdJCt6cCAwEAAaOCAmMwggJfMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUgfBu qDb+m+IPisGs1NR2B/a714swHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5wbGFuLmtlbnRlaS5jYzBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE gfIA8AB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABaserzhoA AAQDAEYwRAIgXcBAT/G7gdFj75R55kcGNayxH41ad39lApnsaNSyy6kCIHHggo70 rW0cPRmhsS6E782P9a10M/6enphS8j33GpmJAHcAKTxRllTIOWW6qlD8WAfUt2+/ WHopctykwwz05UVH9HgAAAFqx6vMVAAABAMASDBGAiEArEhEGuhRc0omlXL51VDl /f3KaAzo5HyXzc8O6I5EewACIQD+4+m6FC5ujBi+P+gwuqZ62/v/O+1GMYTDBuTl UCetDTANBgkqhkiG9w0BAQsFAAOCAQEAkXqBigvkmyRWBlb2E9qIwn7VDCwwtMDR lgVC5q6GHiGx4SJs25ZeVen5r4k7GtMM4V8tpV7ETWnk4O/HX1+/Edo5FUl2brxl miXDviBf2auqoegHIko3nhoADUj6uIE9qYdVDGX4KhoUpqpB1Ras3SfupBZDo6nK l9Vu3fCwLyj7p2m7UKAz0CevdtCkzfDPdHQhAT/YM1r+ekR5eObe/9u6xCKPYebv UsdGjdmCsVwIWmoiPDmDOZRK31GvGyNYZKJlzYU8Sp4cWUFp8ktZrOrzGnCBrAkG hHwTXm34Jg3QmPJIuVoQBsj1gGDEcnUhA3g3wQ6uaMzDBGKFvmMdaA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtGfc0Za+PcZUNFXuxqIm E6l17QeNUzIaxzW78nFdDHBZcLhlYil0YDeS0dnTg27E9V95xWs4vFtFfiiDXgLD VVI0l/LGuY+haLsfhB43AAx3XV3GuhEEGAn8Q5gU72mN6rl8jb5uMv/xqyJqiWby mNkwCr9/yrpoBGIt9qHx/MSYR3iP8tOd+L48mcAckPEW/eTgvQ/+ZrVIynLjonpH TL3pi1PYWLvEKjmceWbvX/VPLJpf2CTx8pMsFyh0fAnpmz66dloCNECz2QbbdeaK CGWkisXwKrofdWss+fM3Jasa7XaNmrVWtdd0rsLGxFGpp9g0jiszOK5roglEusI0 65LxFgM51O5klU+cL5J67McFSMWW6pgC62NiA0ImHQLDK/oaPvneaQVmr4zp4i/f RH99L9M5S4U9vPFpMz0PbBR34doKyoaIXGLa9kxSbKkIRug3u88hWvN7EFisNkqY B0lHjlQ6fMog2vsVx++XVG7nrM8xZ9ME9p4HoeSvqrYAOtsUtqGfAadCEsEfw7P5 aeulfvpMa0IzouzCRWFP6SZSjRvzFwlSGW44m1A8ZSc2TdRMRSt8ollvhX79uU1h OD1qylSEjQ4B68VQEMCZDLvYlC+x0kaIRWwuowZJ8lyRmM0s58K+ou2zJdO4mret fG9tDlgkzBEDJICALdJCt6cCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 299798516894399813205023164364002691527350 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-17 20:21:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 20:21:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'plan.kentei.cc' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735991097595662322412066777657846044098835732015605185886892050349996166629464278893614791466921561185853842589330299121492393989201902380778886936158445873651018844919532283861872502235539778457681937734337263290534819941237416619686238261310453100231393452034317282878646936558869694016029470927452807306571891047372873954235895966611807375538533263737907705376888917357452706637923009209019674895179217656454231477956833899660458652950638561253310209898973093853613285687985573910523291057484607889322585253298693419265522996362742081306489098092477229021828380840082231514404728934843867596496739030964062393635515153792662069650647022474718429527857980059477069152821414019414308560621356020961515326741047006926825696171595209731331418081881848681467763762892497308245412735010301205058537505214691024032994853550215195492166649123413994048427469736905593802231795812453921512309264348980485665781689818609871477387975011101488727522963621739114967209877958460050643685888747106402002296988225252928879383670727478860326157009415578940299584197857828224544455646490130825367674977820524824949432463679381253934153478498823264089762956070334793537940859898654499272439682640927349970279640794992552444456276576132440839979972519 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 81f06ea836fe9be20f8ac1acd4d47607f6bbd78b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.kentei.cc' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ac7abce1a000004030046304402205dc0404ff1bb81d163ef9479e6470635acb11f8d5a777f650299ec68d4b2cba9022071e0828ef4ad6d1c3d19a1b12e84efcd8ff5ad7433fe9e9e9852f23df71a9989007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ac7abcc540000040300483046022100ac48441ae851734a269572f9d550e5fdfdca680ce8e47c97cdcf0ee88e447b00022100fee3e9ba142e6e8c18be3fe830baa67adbfbff3bed463184c306e4e55027ad0d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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