beckmann.org
Issued by R3
About this certificate
This digital certificate with serial number 03:1b:12:1b:b7:d6:44:e2:aa:05:d5:07:67:c5:55:83:56:79 was issued on by Let's Encrypt.
With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=beckmann.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1b:12:1b:b7:d6:44:e2:aa:05:d5:07:67:c5:55:83:56:79Serial Number (int): 270548551726742490626562278117134213273209
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ea:7b:8c:bc:92:96:41:91:a3:9f:3d:3b:e2:79:08:91:18:13:24:0a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ca:cd:e9:8a:c3:bb:59:fa:ce:22:d4:74:58:04:40:ce:6c:da:8a:80
Fingerprint (sha256): d5:10:60:83:7e:91:50:ab:68:f1:53:39:46:b7:01:85:73:7e:e5:cb:e6:bb:dd:7d:92:de:7f:bf:2a:f1:16:40
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate beckmann.org
13
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for beckmann.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
anselmpublishing.com.farrisprice.com
awards.cool
beckmann.org
crafle.in
dre.chat
moontruth.xyz.hempmakes.com
olympicsnet.com
predictsoft.com
protect-my-legacy.com.newrocosmetics.com
suncollectives.com.bitcoinarbitrageur.com
tailgatingsnacks.com
typedrema.com
wvwesleyancovenant.org
awards.cool
beckmann.org
crafle.in
dre.chat
moontruth.xyz.hempmakes.com
olympicsnet.com
predictsoft.com
protect-my-legacy.com.newrocosmetics.com
suncollectives.com.bitcoinarbitrageur.com
tailgatingsnacks.com
typedrema.com
wvwesleyancovenant.org
Other certificates including the domain name beckmann.org
(limited to 100 certificates)
beckmann.org
micromobility.vc
beckmann.org
beckmann.org
beckmann.org
allanblock.ca
grocer.cc
grocer.cc
virtualvbschurch.org
urinating.org
geothermal.world
grocer.cc
grocer.cc
grocer.cc
robertweckstein.me
kitten.cool.establishingjustice.org
diamantes.ca
miami.world
beckmann.org
beckmann.org
allanblock.asia
wwwytmp3.cc
urinating.org
leaselock.ca
bakhtos.one
grocer.cc
diamantes.ca
urinating.org
allanblock.asia
urinating.org
beckmann.org
grocer.cc
grocer.cc
lease.club
reversemag.org
lease.club
grocer.cc
beckmann.org
diamantes.ca
academic.bible
beckmann.org
sanm.co.za
leaselock.ca
grocer.cc
lease.club
myautoloan.world
dominiospremium.ca
micromobility.vc
beckmann.org
beckmann.org
beckmann.org
allanblock.ca
grocer.cc
grocer.cc
virtualvbschurch.org
urinating.org
geothermal.world
grocer.cc
grocer.cc
grocer.cc
robertweckstein.me
kitten.cool.establishingjustice.org
diamantes.ca
miami.world
beckmann.org
beckmann.org
allanblock.asia
wwwytmp3.cc
urinating.org
leaselock.ca
bakhtos.one
grocer.cc
diamantes.ca
urinating.org
allanblock.asia
urinating.org
beckmann.org
grocer.cc
grocer.cc
lease.club
reversemag.org
lease.club
grocer.cc
beckmann.org
diamantes.ca
academic.bible
beckmann.org
sanm.co.za
leaselock.ca
grocer.cc
lease.club
myautoloan.world
dominiospremium.ca
Certificate
The complete raw certificate details for beckmann.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgISAxsSG7fWROKqBdUHZ8VVg1Z5MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MTkxMDI2MDlaFw0yMzEyMTgxMDI2MDhaMBcxFTATBgNVBAMT DGJlY2ttYW5uLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMi5 3qUTI35i1TCnpGy/N/JK/pXm1gfe4CK4TwPjOD2lOyCTn0tqxXu4arx3pyRnfROc 0Gc9hFlQK4pc68yaihj+dE3a+MK8WeT+HtVdNQ292rLYYPP25UfgiIT1qTSE4Jck qV1vCRJeO43E3p3ds09utyPmFBfrGNPiRs+LjAUxcBXWYU55li4BVHeoTWUYWhd6 nGdVSxDg3DsG7NB/MJEfKLNylLXpDevFcxCUJrrmeXCiEXVK631fI4ZFfHiA0TpU PYkxLcEcqPPTk4vXGbe0h8RaL6ylBb2KeZUJjh+nKXFVwGys3MZ+8uGsiPY42i4n SPEkguM6AilA05b8+LECAwEAAaOCAy0wggMpMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQU6nuMvJKWQZGjnz074nkIkRgTJAowHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w ggE0BgNVHREEggErMIIBJ4IkYW5zZWxtcHVibGlzaGluZy5jb20uZmFycmlzcHJp Y2UuY29tggthd2FyZHMuY29vbIIMYmVja21hbm4ub3JnggljcmFmbGUuaW6CCGRy ZS5jaGF0ghttb29udHJ1dGgueHl6LmhlbXBtYWtlcy5jb22CD29seW1waWNzbmV0 LmNvbYIPcHJlZGljdHNvZnQuY29tgihwcm90ZWN0LW15LWxlZ2FjeS5jb20ubmV3 cm9jb3NtZXRpY3MuY29tgilzdW5jb2xsZWN0aXZlcy5jb20uYml0Y29pbmFyYml0 cmFnZXVyLmNvbYIUdGFpbGdhdGluZ3NuYWNrcy5jb22CDXR5cGVkcmVtYS5jb22C Fnd2d2VzbGV5YW5jb3ZlbmFudC5vcmcwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEE BgorBgEEAdZ5AgQCBIH1BIHyAPAAdgC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSe HQmBJe20mQAAAYqtMMT+AAAEAwBHMEUCIAXMtJNZill96FHIswPaJNIu/0HC1jCl b9xeG2yNrEQEAiEAmU+fktIZcRQFHaV73/Le3e5aLqox2SXSMtOYKy0a58wAdgDo PtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYqtMMUcAAAEAwBHMEUC IQDWqcxifv0x3Aqj7JaSsf/gwnzegtF7FLwkndZq589uGgIgVBhrFavmOUTOLiWf ujDLZvyBH27y8NPehnvNFKuOX/MwDQYJKoZIhvcNAQELBQADggEBAA6OOHCh3r8v 2FUhWvsdXjGDF6hu67Lv8Yclzym8pTvs/hqbNB5SpiqtJ+ecDiYxUcE9xPNhwPPJ OpBsQjWuTH2v4FFaDjMZRcC5Y2K1Pm/bEu7HHENlE7MoStUP/fyOBw8e32PQ+tyt TuUdrO4Us+nIdUDSQ2kV+n3NZ0bokh/ISjUTRreIdqQ45kSoPneccNOsaCja1Nn8 5mg/UX1evlmBYQNcLzC1FKwCYz/mlxsQxyQedv0EAgIjxH1viQyyN51Cul/OSMJJ TsR50ATb2u0q1+dk3SVSpxO5vfvOh+5OHrVrv/D0eXJ+oxXHCq0rxx8WiZSbCBN0 X5iIsEPen2A= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLnepRMjfmLVMKekbL83 8kr+lebWB97gIrhPA+M4PaU7IJOfS2rFe7hqvHenJGd9E5zQZz2EWVArilzrzJqK GP50Tdr4wrxZ5P4e1V01Db3asthg8/blR+CIhPWpNITglySpXW8JEl47jcTend2z T263I+YUF+sY0+JGz4uMBTFwFdZhTnmWLgFUd6hNZRhaF3qcZ1VLEODcOwbs0H8w kR8os3KUtekN68VzEJQmuuZ5cKIRdUrrfV8jhkV8eIDROlQ9iTEtwRyo89OTi9cZ t7SHxFovrKUFvYp5lQmOH6cpcVXAbKzcxn7y4ayI9jjaLidI8SSC4zoCKUDTlvz4 sQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 270548551726742490626562278117134213273209 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 10:26:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 10:26:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beckmann.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25339316761465710004806228479688935334057972223027251553075770120071653511066214990854702364548129646038867471783280174913150787606632664938874278412616038437054601976710451232131555850199919202405428605220086226081910290518139917621749807648703768680558503380506408374847341705135726105072366694446092721794817092678328950751452169230810967920325916510590738637518641373814022069337608490612813415188751158487876564598566507056484286577316010524780725915036376578188297597220381090615341055856282577318432337425655043973861624642324495014312802932869625174969590071439913698816214236161463120906381723063827111409841 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ea7b8cbc92964191a39f3d3be27908911813240a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (299 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anselmpublishing.com.farrisprice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awards.cool' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckmann.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crafle.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dre.chat' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moontruth.xyz.hempmakes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympicsnet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predictsoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protect-my-legacy.com.newrocosmetics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suncollectives.com.bitcoinarbitrageur.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tailgatingsnacks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'typedrema.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvwesleyancovenant.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aad30c4fe0000040300473045022005ccb493598a597de851c8b303da24d22eff41c2d630a56fdc5e1b6c8dac4404022100994f9f92d2197114051da57bdff2deddee5a2eaa31d925d232d3982b2d1ae7cc007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aad30c51c0000040300473045022100d6a9cc627efd31dc0aa3ec9692b1ffe0c27cde82d17b14bc249dd66ae7cf6e1a022054186b15abe63944ce2e259fba30cb66fc811f6ef2f0d3de867bcd14ab8e5ff3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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