global.rci.portal.rolls-royce.com

Issued by Trusted Secure Certificate Authority

About this certificate


This digital certificate with serial number 5f:9f:cd:9b:5a:1c:01:74:8a:01:40:9b:22:61:86:ed was issued on by Trusted Secure Certificate Authority .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Rolls-Royce plc

Organization: Rolls-Royce plc
Organization unit: Enterprise SSL
Address: 65 Buckingham Gate
Postal code: SW1E 6AT
State / Province: London
Locality: London
Country: GB

Trusted Secure Certificate Authority

Organization: Trusted Secure Certificate Authority
Postal code: SW1E 6AT
State / Province: London
Locality: London
Country: GB

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:9f:cd:9b:5a:1c:01:74:8a:01:40:9b:22:61:86:ed
Serial Number (int): 127106405002295491501210617538131625709
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 7e:b1:10:b9:7b:c6:ee:38:21:9e:cf:14:88:72:17:69:cb:99:5a:55
AuthorityKeyId: cc:03:5b:96:5a:9e:16:cc:26:1e:bd:a3:70:fb:e3:cb:79:19:fc:4d

Fingerprint (sha1): c3:8e:09:d7:23:e8:67:8f:74:47:08:44:cf:74:22:2e:45:c4:af:2f
Fingerprint (sha256): b4:e7:dd:f4:b2:82:07:60:28:24:32:49:ff:b8:e6:83:ed:ad:aa:d0:8b:89:13:39:d6:80:b6:02:df:68:21:8a

Issuing Certificate URL: http://crt.csctrustedsecure.com/TrustedSecureCertificateAuthority_3.crt

Revocation information

OCSP Server: http://ocsp.csctrustedsecure.com
CRL Distribution Point: http://crl.csctrustedsecure.com/TrustedSecureCertificateAuthority_3.crl

Check the revocation status for the current certificate on global.rci.portal.rolls-royce.com
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

global.rci.portal.rolls-royce.com
www.global.rci.portal.rolls-royce.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgIQX5/Nm1ocAXSKAUCbImGG7TANBgkqhkiG9w0BAQUFADBr MQswCQYDVQQGEwJVUzEtMCsGA1UEChMkVHJ1c3RlZCBTZWN1cmUgQ2VydGlmaWNh dGUgQXV0aG9yaXR5MS0wKwYDVQQDEyRUcnVzdGVkIFNlY3VyZSBDZXJ0aWZpY2F0 ZSBBdXRob3JpdHkwHhcNMTQwODE0MDAwMDAwWhcNMTUwODE0MjM1OTU5WjCBvjEL MAkGA1UEBhMCR0IxETAPBgNVBBETCFNXMUUgNkFUMQ8wDQYDVQQIEwZMb25kb24x DzANBgNVBAcTBkxvbmRvbjEbMBkGA1UECRMSNjUgQnVja2luZ2hhbSBHYXRlMRgw FgYDVQQKEw9Sb2xscy1Sb3ljZSBwbGMxFzAVBgNVBAsTDkVudGVycHJpc2UgU1NM MSowKAYDVQQDEyFnbG9iYWwucmNpLnBvcnRhbC5yb2xscy1yb3ljZS5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtd+eDnW7/oIR4/NPAnanmCCX KCPqp/UjsSzYjp6qNi9FUQUe6GqzEfeteH4Pu21lcLS7glszfm79L/33s9no+HaZ oDVvf92dHnHkQZDQclHUwv+HoWmkLny3G3TWGa3jiRKuLsh1YwJO6OnI/vjeCbk+ PECTsOMUPGWtx7k7UQSKLZWKLH90kSZSjnIU7y5shbYTvIrEfFDnMKMsUX3bbBNc 4vBFbuIoj8OOY7skhtWcT875RvuLNmCR0kqtr2kw7M7GXNNLqtpVv/9X0daoXYnG 5vDavsfnq4KVx+M4gAVskeXQ5cPY/3Tfq/atTo4caCqikCkvkeGzMSpdnUVfAgMB AAGjggIdMIICGTAfBgNVHSMEGDAWgBTMA1uWWp4WzCYevaNw++PLeRn8TTAdBgNV HQ4EFgQUfrEQuXvG7jghns8UiHIXacuZWlUwDgYDVR0PAQH/BAQDAgWgMAwGA1Ud EwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFUGA1UdIARO MEwwQAYLKwYBBAGyMQECAggwMTAvBggrBgEFBQcCARYjaHR0cDovL3d3dy5jc2N0 cnVzdGVkc2VjdXJlLmNvbS9jcHMwCAYGZ4EMAQICMFgGA1UdHwRRME8wTaBLoEmG R2h0dHA6Ly9jcmwuY3NjdHJ1c3RlZHNlY3VyZS5jb20vVHJ1c3RlZFNlY3VyZUNl cnRpZmljYXRlQXV0aG9yaXR5XzMuY3JsMIGTBggrBgEFBQcBAQSBhjCBgzBTBggr BgEFBQcwAoZHaHR0cDovL2NydC5jc2N0cnVzdGVkc2VjdXJlLmNvbS9UcnVzdGVk U2VjdXJlQ2VydGlmaWNhdGVBdXRob3JpdHlfMy5jcnQwLAYIKwYBBQUHMAGGIGh0 dHA6Ly9vY3NwLmNzY3RydXN0ZWRzZWN1cmUuY29tMFMGA1UdEQRMMEqCIWdsb2Jh bC5yY2kucG9ydGFsLnJvbGxzLXJveWNlLmNvbYIld3d3Lmdsb2JhbC5yY2kucG9y dGFsLnJvbGxzLXJveWNlLmNvbTANBgkqhkiG9w0BAQUFAAOCAQEAOG1O5/pi7CBt VWFE1/9i5NUOHgpag46XmeS9CtqQqe8dJ682ezL8Kwm2oECCmJdW5wdNcNovrvsE xtE6Zraoh2CeOALJogRQI8W9Ys/vu+gU3cHnGJj96jjrOdyAwS0ByeJkw2SHIEse g5y6AraG8ToABTWLGYoLskaZ5tdXyycNcggw588cZSPVY6ujJG6sRI6j+gGv47zK xKiD6mSNLi2dOHHCRTvFTVxhiWSQrkuWiuidEj6Rw1eycHhrQGHY86RJnbFn7kk9 BlJ6oSMcB3H+iJBaJ0VwJZ/A0lQfKB9POr+NH+ZlP+zl+wcrTXmlhsXj9TJhdRnR dzOBI1Ge5A== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrXfng51u/6CEePzTwJ2 p5gglygj6qf1I7Es2I6eqjYvRVEFHuhqsxH3rXh+D7ttZXC0u4JbM35u/S/997PZ 6Ph2maA1b3/dnR5x5EGQ0HJR1ML/h6FppC58txt01hmt44kSri7IdWMCTujpyP74 3gm5PjxAk7DjFDxlrce5O1EEii2Viix/dJEmUo5yFO8ubIW2E7yKxHxQ5zCjLFF9 22wTXOLwRW7iKI/DjmO7JIbVnE/O+Ub7izZgkdJKra9pMOzOxlzTS6raVb//V9HW qF2Jxubw2r7H56uClcfjOIAFbJHl0OXD2P9036v2rU6OHGgqopApL5HhszEqXZ1F XwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 127106405002295491501210617538131625709 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-14 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SW1E 6AT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '65 Buckingham Gate' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rolls-Royce plc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'global.rci.portal.rolls-royce.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24579916331589686991248793165567403234839496416467940113871198569123327333832572271433345668555270261484827838727437348030784568210861733527160929030290545452305519553648720358923989118518612557614225939985741616879368525848211953522503624734436227885958007307593315966663182114446324813630152075822945539327315903577224713536020454127726385625258841270674958192448066247225090480663827322779645805602592714123235038100365374554635508382692331851158893001396045528562556990856740709813600884879383886849202436291739042890628849961631865107416168617047317643002675198219092097224691382537724388110478862800852214433119 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cc035b965a9e16cc261ebda370fbe3cb7919fc4d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7eb110b97bc6ee38219ecf1488721769cb995a55 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.csctrustedsecure.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.csctrustedsecure.com/TrustedSecureCertificateAuthority_3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.csctrustedsecure.com/TrustedSecureCertificateAuthority_3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.csctrustedsecure.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.rci.portal.rolls-royce.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.global.rci.portal.rolls-royce.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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