etime.co.campbell.va.us
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 0e:32:2d:e7:bb:59:8a:13:8a:c7:ce:34:86:2e:ff:cf was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=etime.co.campbell.va.us
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:32:2d:e7:bb:59:8a:13:8a:c7:ce:34:86:2e:ff:cfSerial Number (int): 18869737852035212003911076877534429135
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: e9:19:e8:81:38:5e:a4:e4:34:26:d8:b8:65:8e:3a:cd:59:66:17:42
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): ee:56:84:77:b4:43:b0:6f:cd:a7:5c:35:5f:db:f9:2d:7d:0c:b5:fa
Fingerprint (sha256): c1:a9:3e:c3:78:5c:aa:2b:d3:fa:6a:a1:da:6d:15:08:a0:98:30:c1:15:00:1f:09:5e:39:d8:fd:12:fa:77:f3
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate etime.co.campbell.va.us
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for etime.co.campbell.va.us
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
etime.co.campbell.va.us
Other certificates including the domain name campbell.va.us
(limited to 100 certificates)
bai.co.campbell.va.us
bai.co.campbell.va.us
www.www.co.campbell.va.us
adp.co.campbell.va.us
bai.co.campbell.va.us
extranet.co.campbell.va.us
adp.co.campbell.va.us
etime.co.campbell.va.us
etime.co.campbell.va.us
extranet.co.campbell.va.us
rdsgw.co.campbell.va.us
www.www.co.campbell.va.us
www.www.co.campbell.va.us
bai.co.campbell.va.us
extranet.co.campbell.va.us
extranet.co.campbell.va.us
gis.co.campbell.va.us
vpn.co.campbell.va.us
gis.co.campbell.va.us
rds.co.campbell.va.us
vpn.co.campbell.va.us
portal.co.campbell.va.us
portal.co.campbell.va.us
rds.co.campbell.va.us
portal.co.campbell.va.us
portal.co.campbell.va.us
gis.co.campbell.va.us
extranet.co.campbell.va.us
bai.co.campbell.va.us
portal.co.campbell.va.us
www.www.co.campbell.va.us
portal.co.campbell.va.us
portal.co.campbell.va.us
etime.co.campbell.va.us
extranet.co.campbell.va.us
portal.co.campbell.va.us
gis.co.campbell.va.us
ldap.co.campbell.va.us
etime.co.campbell.va.us
portal.co.campbell.va.us
gis.co.campbell.va.us
portal.co.campbell.va.us
adp.co.campbell.va.us
vpn.co.campbell.va.us
bai.co.campbell.va.us
portal.co.campbell.va.us
gis.co.campbell.va.us
bai.co.campbell.va.us
extranet.co.campbell.va.us
adp.co.campbell.va.us
portal.co.campbell.va.us
bai.co.campbell.va.us
www.www.co.campbell.va.us
adp.co.campbell.va.us
bai.co.campbell.va.us
extranet.co.campbell.va.us
adp.co.campbell.va.us
etime.co.campbell.va.us
etime.co.campbell.va.us
extranet.co.campbell.va.us
rdsgw.co.campbell.va.us
www.www.co.campbell.va.us
www.www.co.campbell.va.us
bai.co.campbell.va.us
extranet.co.campbell.va.us
extranet.co.campbell.va.us
gis.co.campbell.va.us
vpn.co.campbell.va.us
gis.co.campbell.va.us
rds.co.campbell.va.us
vpn.co.campbell.va.us
portal.co.campbell.va.us
portal.co.campbell.va.us
rds.co.campbell.va.us
portal.co.campbell.va.us
portal.co.campbell.va.us
gis.co.campbell.va.us
extranet.co.campbell.va.us
bai.co.campbell.va.us
portal.co.campbell.va.us
www.www.co.campbell.va.us
portal.co.campbell.va.us
portal.co.campbell.va.us
etime.co.campbell.va.us
extranet.co.campbell.va.us
portal.co.campbell.va.us
gis.co.campbell.va.us
ldap.co.campbell.va.us
etime.co.campbell.va.us
portal.co.campbell.va.us
gis.co.campbell.va.us
portal.co.campbell.va.us
adp.co.campbell.va.us
vpn.co.campbell.va.us
bai.co.campbell.va.us
portal.co.campbell.va.us
gis.co.campbell.va.us
bai.co.campbell.va.us
extranet.co.campbell.va.us
adp.co.campbell.va.us
portal.co.campbell.va.us
Certificate
The complete raw certificate details for etime.co.campbell.va.us in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIQDjIt57tZihOKx840hi7/zzANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MjAwMjA0MDAwMDAwWhcNMjIwMjAzMTIwMDAwWjAiMSAwHgYDVQQDExdldGltZS5j by5jYW1wYmVsbC52YS51czCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANZJSxe3fnQBjRtuhpcFZgOCnw2P39fYMKqd7YwF2WMEsvH6WsTQnM/khJrEG1I7 1P3y1YH6o3ok3OtkJ/yN6VLtJFhLobhqFwbpJ+KMO8i2QI5wQLsw/+r1QTokNYf3 LB1vB4CPNkw5DmVWeBiGYRwBMqvl99/6XTkph2JiDCowk8KptC64m7u+e0V3+buO JpVHu1gA3i8XuLCdYDckHGYBhdTgKyrV3U0VLX/AJIxJBwIqmi/HDhuUVQLi4m+7 Ij4DWU75Abo3sPpMM6Cy4cSt06MsP306TLG4GeEmXnwPheKxneTnFxMo94b1X59s zaQfxssWfm/QEoNwlGmoWoMCAwEAAaOCAbIwggGuMB8GA1UdIwQYMBaAFKPIXmVU 5TB4wQXqBwpqWcy5/t5aMB0GA1UdDgQWBBTpGeiBOF6k5DQm2LhljjrNWWYXQjAi BgNVHREEGzAZghdldGltZS5jby5jYW1wYmVsbC52YS51czAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDoGA1UdHwQzMDEwL6At oCuGKWh0dHA6Ly9jZHAudGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIwMTguY3JsMEwG A1UdIARFMEMwNwYJYIZIAYb9bAECMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3 LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQIBMG8GCCsGAQUFBwEBBGMwYTAkBggr BgEFBQcwAYYYaHR0cDovL3N0YXR1cy50aGF3dGUuY29tMDkGCCsGAQUFBzAChi1o dHRwOi8vY2FjZXJ0cy50aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5jcnQwCQYD VR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA FtXC/K0FA+yfive3xxW91o4iFkXt9V9pAPJejnFRFddKtt3cQUQD/Ofh5E/GcG6O 1ior4aTvemEJjBlAC1qsC0xbZJQNvimsAcMEE4sE2skDn8Y4w5gDmdpj35YO4TZ7 oJ/amMLb0VTZiJUcAY2hTHwknFwHiIIDewA5DmqyK+whsJBpoRLFIWegLLDcZLrI 7XT/vH5eWyhJsyBoghGU/rRyNjrXRLF7/qb2eDjtEYiJmhQzqoZvsMP92Rgdrmql n7x5wPwK//4+OAnvp3nRdrXtQkBAjXhYVih9MOlIbbP3patmH2+FTcYE+j+leojM /Q+zBgnrrCdptME+jdaxvQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1klLF7d+dAGNG26GlwVm A4KfDY/f19gwqp3tjAXZYwSy8fpaxNCcz+SEmsQbUjvU/fLVgfqjeiTc62Qn/I3p Uu0kWEuhuGoXBukn4ow7yLZAjnBAuzD/6vVBOiQ1h/csHW8HgI82TDkOZVZ4GIZh HAEyq+X33/pdOSmHYmIMKjCTwqm0Lribu757RXf5u44mlUe7WADeLxe4sJ1gNyQc ZgGF1OArKtXdTRUtf8AkjEkHAiqaL8cOG5RVAuLib7siPgNZTvkBujew+kwzoLLh xK3Toyw/fTpMsbgZ4SZefA+F4rGd5OcXEyj3hvVfn2zNpB/GyxZ+b9ASg3CUaaha gwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18869737852035212003911076877534429135 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-03 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'etime.co.campbell.va.us' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051139551116289787059136077686794765010781109246097309460907129301943003555871575428865412765365592818335424972822238308750146145330752408710984268107132860653325268442671538711702395799157176053859105183129928430313754173589258242428509233909106126740269806738940970212489282069366774245903996892501001167848050162369900841757363787445914852491550121058732555837908208002888208835445067336974450598279757113636815464249715652222068733466612892647185264950910611919636622490390686823743377992107424722191629191361729190021740508254583401550798911410638375510532651241563429226497108764262427685430420795523454229123 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e919e881385ea4e43426d8b8658e3acd59661742 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etime.co.campbell.va.us' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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