www.rockweedtrading.com
Issued by R3
About this certificate
This digital certificate with serial number 03:4e:84:8c:c0:64:50:86:b8:29:69:65:69:df:22:b4:57:ce was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.rockweedtrading.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4e:84:8c:c0:64:50:86:b8:29:69:65:69:df:22:b4:57:ceSerial Number (int): 288055071334288125680178249759543560263630
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c8:3c:df:11:15:f3:bc:3d:0e:aa:a8:42:4f:03:a8:1a:24:ee:fe:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 8f:17:17:65:2c:49:0d:83:65:6d:6e:a9:6b:d8:6b:fd:b2:33:a6:6c
Fingerprint (sha256): c3:19:ed:09:eb:c4:d2:dd:9a:0d:60:a3:37:a8:da:5f:67:89:7e:05:d6:37:6a:79:ef:e8:2e:d2:1a:a9:a5:8f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.rockweedtrading.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.rockweedtrading.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
3dmonstersex.com
bit-co.in
matthewjbooth.net
omegabritehemp.com.venture-development.com.realestatetechtips.com.powderrivercounty.com
www.rockweedtrading.com
www.simblockchain.com
bit-co.in
matthewjbooth.net
omegabritehemp.com.venture-development.com.realestatetechtips.com.powderrivercounty.com
www.rockweedtrading.com
www.simblockchain.com
Other certificates including the domain name rockweedtrading.com
(limited to 100 certificates)
seebc.com
qfamilycare.com
bestslotsite.com
qfamilycare.com
saltillo.work
highradius.org
bible.bible
qfamilycare.com
freedomap.ca
superused.com
saltillo.work
intimatehygiene.com
bhagawadgita.org
fix2020first.org
northernohiogolf.com
northernohiogolf.com
qfamilycare.com
ideakids.org
ipsstore.com
steelbeach.org
museumof.bible
johnnycox.me
terrible.life
artistryandverse.com
qfamilycare.com
elderlawbyzipcode.org
ipsstore.com
588.cool
blackpanther.fund
omgurudev.com.theelms.me
casinopost.co.uk
swarmbox.mobi
saltillo.work
www.icodisc.com
weplantpeace.org
mymedicaremarketplace.org
qfamilycare.com
property-rentals.co.za
qfamilycare.com
qfamilycare.com
cla.bible
appideas.equi.life
epanama.com
qfamilycare.com
www.exonlab.com
ed-drugs.org
dailyaudio.bible
wlq.org
lumber.cc
887.cool
mack.ac
highradius.org
ray4.me
saltillo.work
northernohiogolf.com
psalm87.com
windor-online.org
sculpit.care
www.rockweedtrading.com
enclear.org
exchangedchurch.org
mack.ac
unseal911.com
immunity.vc
mack.ac
ed-drugs.org
epanama.com
epanama.com
www.exonlab.com
avisionofelegance.com
www.kratom-store.org
rydda.com
megamac.blog
rockweedtrading.com
usc.mba
www.exonlab.com
northernohiogolf.com
epanama.com
qfamilycare.com
qfamilycare.com
audavia.com
qfamilycare.com
bestslotsite.com
qfamilycare.com
saltillo.work
highradius.org
bible.bible
qfamilycare.com
freedomap.ca
superused.com
saltillo.work
intimatehygiene.com
bhagawadgita.org
fix2020first.org
northernohiogolf.com
northernohiogolf.com
qfamilycare.com
ideakids.org
ipsstore.com
steelbeach.org
museumof.bible
johnnycox.me
terrible.life
artistryandverse.com
qfamilycare.com
elderlawbyzipcode.org
ipsstore.com
588.cool
blackpanther.fund
omgurudev.com.theelms.me
casinopost.co.uk
swarmbox.mobi
saltillo.work
www.icodisc.com
weplantpeace.org
mymedicaremarketplace.org
qfamilycare.com
property-rentals.co.za
qfamilycare.com
qfamilycare.com
cla.bible
appideas.equi.life
epanama.com
qfamilycare.com
www.exonlab.com
ed-drugs.org
dailyaudio.bible
wlq.org
lumber.cc
887.cool
mack.ac
highradius.org
ray4.me
saltillo.work
northernohiogolf.com
psalm87.com
windor-online.org
sculpit.care
www.rockweedtrading.com
enclear.org
exchangedchurch.org
mack.ac
unseal911.com
immunity.vc
mack.ac
ed-drugs.org
epanama.com
epanama.com
www.exonlab.com
avisionofelegance.com
www.kratom-store.org
rydda.com
megamac.blog
rockweedtrading.com
usc.mba
www.exonlab.com
northernohiogolf.com
epanama.com
qfamilycare.com
qfamilycare.com
audavia.com
Certificate
The complete raw certificate details for www.rockweedtrading.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgISA06EjMBkUIa4KWllad8itFfOMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTcwNzExNDRaFw0yNDAzMTYwNzExNDNaMCIxIDAeBgNVBAMT F3d3dy5yb2Nrd2VlZHRyYWRpbmcuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA36aTKInQmECwKc38NhcYVpnDLqQJIOnn9eAN1wK1bbvnAg/ZyIhi vn6wtKcG4/rOLHjazqxrANAWhaPj+B88aOvN65gharT3roweqpY3rxgnofvsKv+X +OM78m/3+Qiw6nC5ULOtOlWb5IQbEagsWFmQ/OBsi+tRukhtFrOZ2PqKn5WE31iw L/kjOWzr4SlQDdyrqornWTq8tOrT0JZUWIKl41PaVRJmjuXowzmPt6djjQKBFU+h jXLDdGAI+wuN5jxkg5eo53WBOBNP2xUOaYSTcj4Syof4JYusJddL0Cs1cMdYJm6u Q3cM6KsytD2QkUcqa81T7iEVO7unGYKHEwIDAQABo4ICvDCCArgwDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E AjAAMB0GA1UdDgQWBBTIPN8RFfO8PQ6qqEJPA6gaJO7+VzAfBgNVHSMEGDAWgBQU LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku bGVuY3Iub3JnLzCBxAYDVR0RBIG8MIG5ghAzZG1vbnN0ZXJzZXguY29tggliaXQt Y28uaW6CEW1hdHRoZXdqYm9vdGgubmV0gldvbWVnYWJyaXRlaGVtcC5jb20udmVu dHVyZS1kZXZlbG9wbWVudC5jb20ucmVhbGVzdGF0ZXRlY2h0aXBzLmNvbS5wb3dk ZXJyaXZlcmNvdW50eS5jb22CF3d3dy5yb2Nrd2VlZHRyYWRpbmcuY29tghV3d3cu c2ltYmxvY2tjaGFpbi5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEE AdZ5AgQCBIH1BIHyAPAAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiE cwAAAYx21MWJAAAEAwBHMEUCIQC2jjZwjqqfryoSwOiqvifrqjs+yk59ZlgfI47e sCyiJAIgOe67dvEqKpJt3TClJSZLp/QxmSL3CI8pfIHoFsIHrHQAdgA7U3d1Pi25 gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYx21Md/AAAEAwBHMEUCIQC0Hy9U 2jE/UYVxFOGSeXYTupto6FwNukOIC3yztgjobQIgQxxJMlOpARTTn/Y/UGpuG27M JYyiRof8Nf0wlzpyacgwDQYJKoZIhvcNAQELBQADggEBADcbqdayKly9sIsChioN MK4mf2RLdlJXx9r8WprHw8im19s7M4QSS+X41qujsuNAF9gda9e0WfZUNwQtPaqj Ke9eQt73VCTRp/ndkV3OyAxIpWUzVL2x5yvm+mvY0ccmMPdyywT7krvqgDgP3V9a lCjtmdS6xizXiypuCbqp8K2lNQS7HYVRZ7Smo0KUagcZpyg6bvbeD8W45NYbGwdk bLMILTnHL5KetwLZkMRg2fdf8bnlLcGeUkgyQCOU8y2Lm3E8g6xXYr3VvIihSz6H YeM7bQlAeE6j5+776qAnC7wMbeC2AtHLgQdQ+ywSxLlNncya0M5lyfroaIzJBNrG 5IU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36aTKInQmECwKc38NhcY VpnDLqQJIOnn9eAN1wK1bbvnAg/ZyIhivn6wtKcG4/rOLHjazqxrANAWhaPj+B88 aOvN65gharT3roweqpY3rxgnofvsKv+X+OM78m/3+Qiw6nC5ULOtOlWb5IQbEags WFmQ/OBsi+tRukhtFrOZ2PqKn5WE31iwL/kjOWzr4SlQDdyrqornWTq8tOrT0JZU WIKl41PaVRJmjuXowzmPt6djjQKBFU+hjXLDdGAI+wuN5jxkg5eo53WBOBNP2xUO aYSTcj4Syof4JYusJddL0Cs1cMdYJm6uQ3cM6KsytD2QkUcqa81T7iEVO7unGYKH EwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 288055071334288125680178249759543560263630 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 07:11:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 07:11:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rockweedtrading.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28233283121152809203530412076678807302828506766020615737443067256824891542606434082049342374977133580361194914753301226533630477109399979213471844410940085537032031857976222383705285848720444284833235181072900920069250650418257390053558137322122508103613246060689905183268908148010145605672305256162630784906454933017096953827141882487628712804808802699901891298976528411539846507975653720778319075115498048301479879169452742866880015643504861754655529165353535019908507026032492235957061076944969686639028206016757944259823306916043519312542067020743417014025959432360418223000116615935180774988550317844521958934291 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c83cdf1115f3bc3d0eaaa8424f03a81a24eefe57 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (188 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dmonstersex.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bit-co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matthewjbooth.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omegabritehemp.com.venture-development.com.realestatetechtips.com.powderrivercounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockweedtrading.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simblockchain.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c76d4c5890000040300473045022100b68e36708eaa9faf2a12c0e8aabe27ebaa3b3eca4e7d66581f238edeb02ca224022039eebb76f12a2a926ddd30a525264ba7f4319922f7088f297c81e816c207ac740076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c76d4c77f0000040300473045022100b41f2f54da313f51857114e192797613ba9b68e85c0dba43880b7cb3b608e86d0220431c493253a90114d39ff63f506a6e1b6ecc258ca24687fc35fd30973a7269c8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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