maps.pot.gov.pl
Issued by ZeroSSL RSA Domain Secure Site CA
About this certificate
This digital certificate with serial number 75:3a:7c:c6:45:e6:d4:c1:bc:72:86:db:97:f1:b2:fe was issued on by ZeroSSL.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=maps.pot.gov.pl
ZeroSSL
Organization:
ZeroSSL
Country:
AT
This certificate has expire since
Certificate Details
Serial Number (hex): 75:3a:7c:c6:45:e6:d4:c1:bc:72:86:db:97:f1:b2:feSerial Number (int): 155823359452230731095350820967858418430
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 4c:5b:d3:90:82:06:8a:63:6d:c6:95:44:68:52:3f:0d:90:96:36:25
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6
Fingerprint (sha1): 24:77:07:8c:70:4b:03:5c:51:83:cb:96:95:4c:bf:55:17:28:ed:6d
Fingerprint (sha256): d5:52:9c:9b:d5:13:e4:71:69:fa:3f:fc:8f:4a:4a:50:18:3b:91:a9:fb:1c:af:7f:e9:4a:87:58:8e:d7:7a:fb
Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt
Revocation information
OCSP Server: http://zerossl.ocsp.sectigo.comCheck the revocation status for certificate maps.pot.gov.pl
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for maps.pot.gov.pl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
maps.pot.gov.pl
Other certificates including the domain name pot.gov.pl
(limited to 100 certificates)
*.pot.gov.pl
maps.pot.gov.pl
*.pot.gov.pl
en.fotopolska.pot.gov.pl
pot.gov.pl
*.pot.gov.pl
*.pot.gov.pl
maps.pot.gov.pl
konkurs.pot.gov.pl
certyfikacja-it.pot.gov.pl
konkurs.pot.gov.pl
pot.gov.pl
pot.gov.pl
*.pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
certyfikat.pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
poczta.pot.gov.pl
*.pot.gov.pl
maps.pot.gov.pl
bezpiecznyobiekt.pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
*.pot.gov.pl
eden.konkurs.pot.gov.pl
*.pot.gov.pl
*.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
konkurs.pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl
konkurs.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
*.pot.gov.pl
konkurs.pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
*.pot.gov.pl
en.fotopolska.pot.gov.pl
pot.gov.pl
*.pot.gov.pl
*.pot.gov.pl
maps.pot.gov.pl
konkurs.pot.gov.pl
certyfikacja-it.pot.gov.pl
konkurs.pot.gov.pl
pot.gov.pl
pot.gov.pl
*.pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
certyfikat.pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
poczta.pot.gov.pl
*.pot.gov.pl
maps.pot.gov.pl
bezpiecznyobiekt.pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
*.pot.gov.pl
eden.konkurs.pot.gov.pl
*.pot.gov.pl
*.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
konkurs.pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl
konkurs.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
*.pot.gov.pl
konkurs.pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl
Certificate
The complete raw certificate details for maps.pot.gov.pl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGazCCBFOgAwIBAgIQdTp8xkXm1MG8cobbl/Gy/jANBgkqhkiG9w0BAQwFADBL MQswCQYDVQQGEwJBVDEQMA4GA1UEChMHWmVyb1NTTDEqMCgGA1UEAxMhWmVyb1NT TCBSU0EgRG9tYWluIFNlY3VyZSBTaXRlIENBMB4XDTIzMDYyODAwMDAwMFoXDTIz MDkyNjIzNTk1OVowGjEYMBYGA1UEAxMPbWFwcy5wb3QuZ292LnBsMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzjCiC8SXmv8N/W3PObJThX/yUuiPNle dKuSFxXqGxmTQz7yoQeNJx8nHGJyXsCl6fGlukv3lKAfS3Xr9o+iTTTq6vUeqbd/ GSx5p3qd+FVrh5ZZ+NHXRdgNqcLLZmWSu+Tj82ZvSnwpsftWrfl2sHvc/5Dd7gYy Gv5qCyirg04K7MKGMTKl62KONj39JPFyMONz53OsaYoA9WJ2VNIzRFHF5b+AGJT/ b+hQYyYgs/egmeQrwoSmacHgjdRvBm/YKvIIb1ZZ+xWy0dBAtQA3IyCtDQDODrIr hknn3R9xIp0FTWIcd/kKESsHOFr8s6TUSkltIELjxQCqrCkpksNTzQIDAQABo4IC ejCCAnYwHwYDVR0jBBgwFoAUyNl4aKLZGWjVPXLeXwo+3LWGhqYwHQYDVR0OBBYE FExb05CCBopjbcaVRGhSPw2QljYlMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8E AjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAEQjBAMDQG CysGAQQBsjEBAgJOMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20v Q1BTMAgGBmeBDAECATCBiAYIKwYBBQUHAQEEfDB6MEsGCCsGAQUFBzAChj9odHRw Oi8vemVyb3NzbC5jcnQuc2VjdGlnby5jb20vWmVyb1NTTFJTQURvbWFpblNlY3Vy ZVNpdGVDQS5jcnQwKwYIKwYBBQUHMAGGH2h0dHA6Ly96ZXJvc3NsLm9jc3Auc2Vj dGlnby5jb20wggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQCt9776fP8QyIudPZwe PhhqtGcpXc+xDCTKhYY069yCigAAAYkBFTGMAAAEAwBGMEQCIDnpq/bDqqhu3Uui K7ccs0D8lpZ2mX7dy+HxQFZnpFyuAiBUTpbb00SNjG8uejPldd6CJIXvoPK1tXoq GWNb0mhd3QB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABiQEV Me4AAAQDAEcwRQIhAOg+DdD2e9EFGH+wlBTdEGKoeBNJhwRJikSyKDWPntwYAiBS CNuUA49AodeM5JtrlTuXtrWIX3gfiL9+7exfMy4uKTAaBgNVHREEEzARgg9tYXBz LnBvdC5nb3YucGwwDQYJKoZIhvcNAQEMBQADggIBAGR232fQ1W7QsXX+FWHCycxE quXVWg8p4RWTSQix+exbpsoztxCjjhNEoAYzl2nt95XtrWxePu11bJLx47KEL/uy jw1IVx9IpsuLGsK+9DMc0Hlw9sSlyidcuk0x9TifqRBHqWczcX54jGY8r7z5VwUa +C244Rxsn3cOgUX6KvImHygjdLxsXinxcZUYwmY7PdDuVo/ThYLWZYlv+F2+naIy ts1N6Feuh2mqo/ySW1KDnuKAVsNg4yhJop0LvWKHTT9C9jLr7xGIcKlIgRvqURMw etfiwTdZ5JE7swZpSmqMbPJR3JMl0I9Ww5kW5dLkwwe6uf7QIJq9ADt+40SSlUdG /bfzJ24RgAJBmRxZ830P+VilsAI+3SabaY49HA958XWTFUQsbpv22dtLn35ENRSX ntikWz1+XMY7RiNy1i6iqCIz5z5XRiWtjl3jShRl4PHmkAgUToipF0cbV7SSUBgI TbBerJqPL+4wIOJQVgrXzQTnOF9gPaTIxQLZOmORoDBNnHaDC6ZId4qO5zr2bZ5g KmOpyv4vwTzlqlX+4lqXWBaN79WT+JISliy79+JTsB/5M+OQZsKEOpIf8Q4qcoCI erPRDG9iprRnC6vJxsahy9IIz4uoHl+q9ZIBYAlfpgPd2hyDb15jAzgKrQzYsyK8 RpqFbSkCQMUO8IPfMrhE -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzjCiC8SXmv8N/W3PObJ ThX/yUuiPNledKuSFxXqGxmTQz7yoQeNJx8nHGJyXsCl6fGlukv3lKAfS3Xr9o+i TTTq6vUeqbd/GSx5p3qd+FVrh5ZZ+NHXRdgNqcLLZmWSu+Tj82ZvSnwpsftWrfl2 sHvc/5Dd7gYyGv5qCyirg04K7MKGMTKl62KONj39JPFyMONz53OsaYoA9WJ2VNIz RFHF5b+AGJT/b+hQYyYgs/egmeQrwoSmacHgjdRvBm/YKvIIb1ZZ+xWy0dBAtQA3 IyCtDQDODrIrhknn3R9xIp0FTWIcd/kKESsHOFr8s6TUSkltIELjxQCqrCkpksNT zQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 155823359452230731095350820967858418430 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'maps.pot.gov.pl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18080066955329610700766201970427384767733576173500403390322427263162600847625393721975823576634610456638114073991115085498669702938076546949252388698517319104783634291160615269507937501836465894524113214948295989230308581140622582655937313850154601320076887283411143254358214653074482853283552795456250243554430582868960521015273680378418264637522355988097851862696566115617809190608213720934148862456404273486732280531388668076919907397029131129274354792800710220076395025942487527273001885834189340824050865057931623325503489292146238160005807346003312478026260899104190612967954590631478375473805362369638172939213 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4c5bd39082068a636dc6954468523f0d90963625 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001890115318c0000040300463044022039e9abf6c3aaa86edd4ba22bb71cb340fc969676997eddcbe1f1405667a45cae0220544e96dbd3448d8c6f2e7a33e575de822485efa0f2b5b57a2a19635bd2685ddd0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189011531ee0000040300473045022100e83e0dd0f67bd105187fb09414dd1062a87813498704498a44b228358f9edc1802205208db94038f40a1d78ce49b6b953b97b6b5885f781f88bf7eedec5f332e2e29 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps.pot.gov.pl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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