goeatrightnow.com
Issued by R3
About this certificate
This digital certificate with serial number 04:e3:b0:ad:e7:68:7d:ef:cd:c0:de:e0:89:8e:20:fd:d7:6b was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=goeatrightnow.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:e3:b0:ad:e7:68:7d:ef:cd:c0:de:e0:89:8e:20:fd:d7:6bSerial Number (int): 425928088106224012387653318625067536340843
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: af:fc:42:76:6f:e0:26:f7:09:b8:3a:6b:88:26:9a:0a:ff:d4:d5:e4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 51:2e:96:ee:c5:5f:8a:78:cc:96:bc:be:73:8b:08:a6:49:c8:d3:2e
Fingerprint (sha256): d7:03:fb:0d:90:b0:f2:c4:94:01:ba:ec:ce:80:ec:0b:fa:e3:6b:67:54:f7:8e:3e:25:b5:be:bd:50:de:db:4e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate goeatrightnow.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for goeatrightnow.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
goeatrightnow.com
Other certificates including the domain name goeatrightnow.com
(limited to 100 certificates)
goeatrightnow.com
staging-app.claritasmind.com
goeatrightnow.com
app.claritasmind.com
goeatrightnow.com
staging-app.unwindinganxiety.com
info.goeatrightnow.com
goeatrightnow.com
*.breathebysharecare.com
sni.cloudflaressl.com
www.goeatrightnow.com
goeatrightnow.com
app2.claritasmind.com
app.goeatrightnow.com
goeatrightnow.com
dev-app2.claritasmind.com
staging-app.claritasmind.com
staging-app.claritasmind.com
app2.claritasmind.com
info.goeatrightnow.com
info.goeatrightnow.com
sni.cloudflaressl.com
app.claritasmind.com
staging-app.claritasmind.com
dev-app.claritasmind.com
staging-app.claritasmind.com
dev-app.claritasmind.com
goeatrightnow.com
admin.carboli.com
info.goeatrightnow.com
app.claritasmind.com
www.gezonderusthuislucht.be
info.goeatrightnow.com
staging-app.claritasmind.com
dev-app.claritasmind.com
info.goeatrightnow.com
goeatrightnow.com
app.claritasmind.com
admin.carboli.com
goeatrightnow.com
goeatrightnow.com
info.goeatrightnow.com
info.goeatrightnow.com
info.goeatrightnow.com
app.claritasmind.com
goeatrightnow.com
info.goeatrightnow.com
app.claritasmind.com
www.markhagethorn.com
dev-app.claritasmind.com
info.goeatrightnow.com
webapp.breathebysharecare.com
scuat-app.claritasmind.com
info.goeatrightnow.com
dev-app.claritasmind.com
info.goeatrightnow.com
sni.cloudflaressl.com
goeatrightnow.com
sni.cloudflaressl.com
goeatrightnow.com
www.markhagethorn.com
goeatrightnow.com
info.goeatrightnow.com
app.claritasmind.com
app.claritasmind.com
app.claritasmind.com
community-uploads.goeatrightnow.com
staging-app.goeatrightnow.com
webapp.breathebysharecare.com
staging-app.cravingtoquit.com
info.goeatrightnow.com
goeatrightnow.com
goeatrightnow.com
staging-app.claritasmind.com
app.claritasmind.com
staging-app.claritasmind.com
device.sighub.io
staging-app.claritasmind.com
app.claritasmind.com
app.claritasmind.com
sparrowdevelopment.net
staging-app.claritasmind.com
staging-app.claritasmind.com
dev-app.claritasmind.com
app.unwindinganxiety.com
staging-app.claritasmind.com
staging-app.claritasmind.com
goeatrightnow.com
app.claritasmind.com
goeatrightnow.com
staging-app.unwindinganxiety.com
info.goeatrightnow.com
goeatrightnow.com
*.breathebysharecare.com
sni.cloudflaressl.com
www.goeatrightnow.com
goeatrightnow.com
app2.claritasmind.com
app.goeatrightnow.com
goeatrightnow.com
dev-app2.claritasmind.com
staging-app.claritasmind.com
staging-app.claritasmind.com
app2.claritasmind.com
info.goeatrightnow.com
info.goeatrightnow.com
sni.cloudflaressl.com
app.claritasmind.com
staging-app.claritasmind.com
dev-app.claritasmind.com
staging-app.claritasmind.com
dev-app.claritasmind.com
goeatrightnow.com
admin.carboli.com
info.goeatrightnow.com
app.claritasmind.com
www.gezonderusthuislucht.be
info.goeatrightnow.com
staging-app.claritasmind.com
dev-app.claritasmind.com
info.goeatrightnow.com
goeatrightnow.com
app.claritasmind.com
admin.carboli.com
goeatrightnow.com
goeatrightnow.com
info.goeatrightnow.com
info.goeatrightnow.com
info.goeatrightnow.com
app.claritasmind.com
goeatrightnow.com
info.goeatrightnow.com
app.claritasmind.com
www.markhagethorn.com
dev-app.claritasmind.com
info.goeatrightnow.com
webapp.breathebysharecare.com
scuat-app.claritasmind.com
info.goeatrightnow.com
dev-app.claritasmind.com
info.goeatrightnow.com
sni.cloudflaressl.com
goeatrightnow.com
sni.cloudflaressl.com
goeatrightnow.com
www.markhagethorn.com
goeatrightnow.com
info.goeatrightnow.com
app.claritasmind.com
app.claritasmind.com
app.claritasmind.com
community-uploads.goeatrightnow.com
staging-app.goeatrightnow.com
webapp.breathebysharecare.com
staging-app.cravingtoquit.com
info.goeatrightnow.com
goeatrightnow.com
goeatrightnow.com
staging-app.claritasmind.com
app.claritasmind.com
staging-app.claritasmind.com
device.sighub.io
staging-app.claritasmind.com
app.claritasmind.com
app.claritasmind.com
sparrowdevelopment.net
staging-app.claritasmind.com
staging-app.claritasmind.com
dev-app.claritasmind.com
app.unwindinganxiety.com
staging-app.claritasmind.com
Certificate
The complete raw certificate details for goeatrightnow.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgISBOOwredofe/NwN7giY4g/ddrMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMTExMjIzMzdaFw0yNDAyMDkxMjIzMzZaMBwxGjAYBgNVBAMT EWdvZWF0cmlnaHRub3cuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5OtuHGjJTOu9e0weMNH0JG1NwEnopXQlUKYUhD2G+a5c0Yhb5gZPgxLPQzjt OEo4XQ7yUaKSGF8/2QPG3xnoHFikrpGvH9GSusCP7MpAC+z0EZh5dXCf3AbC5Flo Ke2hy0Rcmf3Tcy7svsh5PS5jeX3Nic77NKWyIaEGxFXBd5EY+lHn5pUsqcFqDQpY cwyRmlokLp+wXTR8oVbPYemNX8ZP/8baGKLohVDtMS2Lp7yRMtEQQkJpPZ1ywVLI FLEdriutZwRvO9KEjJtITKiFp0KSZvP1fK1wAMYNHxieM+/kNqCHcgeVU4KUl/p2 83hi1g431NNwAuLh5SNBMAAqHQIDAQABo4ICFDCCAhAwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBSv/EJ2b+Am9wm4OmuIJpoK/9TV5DAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzAcBgNVHREEFTATghFnb2VhdHJpZ2h0bm93LmNvbTATBgNVHSAEDDAKMAgG BmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AEiw42vapkc0D+VqAvqd MOscUgHLVt0sgdm7v6s52IRzAAABi76NXycAAAQDAEcwRQIhAL51nfvV/fiVR8J3 ZnAobKG5gYYmuKLQuELP2wloN/v4AiAq/1mr01suo/3TsZLln8sfzoiiFYm7TaXR TMgh++gfZwB3ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABi76N XyQAAAQDAEgwRgIhAJth7bs4T6JZNtczR1Qd6jarlKU6drlbbJJQDu5Y6OjDAiEA rPZFfYQv8Vc2OEp/RmYG7etF0RNFixOwioB6SOoBTy8wDQYJKoZIhvcNAQELBQAD ggEBACuk4dCDzXx/SwosVVmlNxeISB7kWFNI/5qBZs/SSUBU5/028wIIx8EqyOyx gYm3WtGoFG3WK7JV1tFKDhPmco5gD2BrDdK07+bpDSO3ifUxwi5Idiyh/xqpj9EC oUmsunS3mOj2gObKh9miA1mHK8A1sHPO50SP3FOej61BbQLhtbEqszTtNTNLHXVy ypbzJN1cQHwG7ymvD+zYcfuzcqeuSt//SXL81xUVJfUy1095NWXg6IPUcOWJOfbK o0tlGitWaxAp/bn165CclGmyUf5P0lK/6HNoAifyK20EZovJcy1xr+w+qKgl7jT8 OaCHwY3Pk+NYAsDSyngVDvpT9lQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OtuHGjJTOu9e0weMNH0 JG1NwEnopXQlUKYUhD2G+a5c0Yhb5gZPgxLPQzjtOEo4XQ7yUaKSGF8/2QPG3xno HFikrpGvH9GSusCP7MpAC+z0EZh5dXCf3AbC5FloKe2hy0Rcmf3Tcy7svsh5PS5j eX3Nic77NKWyIaEGxFXBd5EY+lHn5pUsqcFqDQpYcwyRmlokLp+wXTR8oVbPYemN X8ZP/8baGKLohVDtMS2Lp7yRMtEQQkJpPZ1ywVLIFLEdriutZwRvO9KEjJtITKiF p0KSZvP1fK1wAMYNHxieM+/kNqCHcgeVU4KUl/p283hi1g431NNwAuLh5SNBMAAq HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 425928088106224012387653318625067536340843 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-11 12:23:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 12:23:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goeatrightnow.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28898428451839352988511262434391985175996957935362821123742413085019575924344904704215438162550358432458715132906216285791632875801732459469646443289017765453721108286664350523998779872825490384552173227524934173140744471344853112636278643839843569586130941735512985851779473080126326131081636879305930783006109967940504261374361460841131497230025845090413011082404706053242033347238053083584800807117542685486087248871170537868721003550850947915799146892363162352005647473463722700761249031895367074569641127868052213229069815261078389578526068319943371525451756832719658877761369012473584158714131992866699677280797 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) affc42766fe026f709b83a6b88269a0affd4d5e4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goeatrightnow.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bbe8d5f270000040300473045022100be759dfbd5fdf89547c2776670286ca1b9818626b8a2d0b842cfdb096837fbf802202aff59abd35b2ea3fdd3b192e59fcb1fce88a21589bb4da5d14cc821fbe81f670077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bbe8d5f2400000403004830460221009b61edbb384fa25936d73347541dea36ab94a53a76b95b6c92500eee58e8e8c3022100acf6457d842ff15736384a7f466606edeb45d113458b13b08a807a48ea014f2f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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