thesockhouse.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:37:9c:ad:0f:95:c3:12:62:0a:4a:55:dd:45:f0:5d:89:1a was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=thesockhouse.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:37:9c:ad:0f:95:c3:12:62:0a:4a:55:dd:45:f0:5d:89:1aSerial Number (int): 280260646126732840901672128798573830441242
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 05:1d:2a:84:a2:e3:ec:d6:5f:ba:3c:e7:f3:b9:c7:98:60:85:4c:5f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 02:b8:ee:2e:f7:5d:06:e0:bb:26:b0:38:2b:c8:5f:57:4f:1c:67:e3
Fingerprint (sha256): c7:55:05:59:06:e1:65:f7:b9:af:e6:54:45:80:95:f0:fe:d3:dd:04:5e:8d:61:3c:9e:3a:1c:ef:16:50:5a:f5
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate thesockhouse.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for thesockhouse.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
thesockhouse.com
www.thesockhouse.com
www.thesockhouse.com
Other certificates including the domain name thesockhouse.com
(limited to 100 certificates)
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
thesockhouse.com
Certificate
The complete raw certificate details for thesockhouse.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgISAzecrQ+VwxJiCkpV3UXwXYkaMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMDIwMjExMzlaFw0x OTAxMzEwMjExMzlaMBsxGTAXBgNVBAMTEHRoZXNvY2tob3VzZS5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCE5NMnJbMk+Pa4NASnGPT0XkODnJJu NqCjviodyLqtrBdSUHDe1Hfjeokc8TgB/fZjzDW4pLZpGCZD20lRRpXqQRAifj3c q6FNQU1dKBSqdSg8Ivj7yKPMrNezE0Lfnl7tHf52dTRytCa8mH/s450+V6Vud4Wu AR3vtoe87iPM0hv4kulnuYQH4aP7ZLrX42H7ZpR7giEm3lRZoXNJCWzS88HN9nja QuRFOhu535BFKxglR+bAsATCg53rfkEWfvOZd/9DEOrrINgCC8ieKJ5LzcGYmI+w qNLjhNZEJonHr4wjLWCd3t0ZHQ/NBAs+I0kXYnPlE+1/mAjmFT0Y/8XBAgMBAAGj ggMvMIIDKzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAUdKoSi4+zWX7o85/O5x5hg hUxfMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wMQYDVR0RBCowKIIQdGhlc29ja2hvdXNlLmNvbYIUd3d3LnRoZXNvY2to b3VzZS5jb20wgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEB MIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYI KwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGll ZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNl IHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xl dHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA 8QB2AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABZtJnpFoAAAQD AEcwRQIhAIH+HmV/EzgyA2IVDoW+EGwVSGe92oGwWV8dV9loSXuzAiAUwt1qctB9 pvuSKbpFTyukZy3LoG7kYCsmjZapRaEYqAB3AGPy283oO8wszwtyhCdXazOkjWF3 j711pjixx2hUS9iNAAABZtJno/IAAAQDAEgwRgIhANeVoxGWrx9EGucWVr2S1ZJD Q3ZIQTUkt7dNI6ZYT518AiEAslK7guJb0n8bR3I4AsUHmMmFOZN4xjvFmlakeBm0 dQgwDQYJKoZIhvcNAQELBQADggEBAGaVzlrQ/ktdaMONm7Ji0R3bbq3EaDc98tu7 P6jCOg8m50bgWdPENl2t2/zF8RkAjAdkZLdUD/CdZPnaJG99Xv8hIJBu4umBWa/r 6ulVFprMt784njJD50Zfdpg2k830F2WwqS5KkdCZzZ3PEMBQw1N+hpyj4JYIDk0g reML4dO+Je2dj6vRzURe4W859Ntghuty5qxT4xDNLSt9DPqEWa7fegc5aPwwiQys ywUOjSoK7utCinxUVMZZepltyTiuK1hmmvo4DvGYt5IADb/tBvM/5jHyTqq+DYUy 4piexIjwd9yCxayDukhRgpgwXYVqGL7g9pcnA8YvZWCi9PdwD5k= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOTTJyWzJPj2uDQEpxj0 9F5Dg5ySbjago74qHci6rawXUlBw3tR343qJHPE4Af32Y8w1uKS2aRgmQ9tJUUaV 6kEQIn493KuhTUFNXSgUqnUoPCL4+8ijzKzXsxNC355e7R3+dnU0crQmvJh/7OOd PlelbneFrgEd77aHvO4jzNIb+JLpZ7mEB+Gj+2S61+Nh+2aUe4IhJt5UWaFzSQls 0vPBzfZ42kLkRTobud+QRSsYJUfmwLAEwoOd635BFn7zmXf/QxDq6yDYAgvIniie S83BmJiPsKjS44TWRCaJx6+MIy1gnd7dGR0PzQQLPiNJF2Jz5RPtf5gI5hU9GP/F wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 280260646126732840901672128798573830441242 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-02 02:11:39 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-31 02:11:39 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thesockhouse.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16776293977853150131002482539691726716240767682690851208790212774624908107980376745453085480367894803880650103368878584572727444826648701858643480850013200633393285510076943899298690590730340868105617475630130136598803740653835624990491831500244286969436826617413977562050663078043793256017041589001609637160363191638890590977425875096601839895194730653289654916735883765671032560940233172896841301115527788219581399351841887750954881549906852018305465909187759053988495519965943002150925683710465327032044566919037704367702174768026218454296416902928022551678001848879880291747324774257469866976137948470761322694081 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 051d2a84a2e3ecd65fba3ce7f3b9c79860854c5f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesockhouse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesockhouse.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166d267a45a000004030047304502210081fe1e657f1338320362150e85be106c154867bdda81b0595f1d57d968497bb3022014c2dd6a72d07da6fb9229ba454f2ba4672dcba06ee4602b268d96a945a118a800770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000166d267a3f20000040300483046022100d795a31196af1f441ae71656bd92d59243437648413524b7b74d23a6584f9d7c022100b252bb82e25bd27f1b47723802c50798c985399378c63bc59a56a47819b47508 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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