aves-apis.us
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:bf:b4:4f:b2:3c:88:cc:be:78:ae:84:87:b5:32:ca:d4:71 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=aves-apis.us
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:bf:b4:4f:b2:3c:88:cc:be:78:ae:84:87:b5:32:ca:d4:71Serial Number (int): 326570464722938032252413504098397334459505
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 93:bf:71:ee:eb:ea:5d:f3:bc:20:d9:a3:08:55:8c:ab:5e:f2:7b:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ed:9a:8d:b0:c1:93:94:ec:d3:50:9a:06:2a:48:8d:7d:f2:ea:77:11
Fingerprint (sha256): dd:63:af:6f:37:b4:9d:28:f8:ad:75:24:5e:82:3c:20:26:dc:7f:8d:2c:9e:0a:74:15:05:ac:a6:65:27:fc:92
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate aves-apis.us
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aves-apis.us
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aves-apis.us
www.aves-apis.us
www.aves-apis.us
Other certificates including the domain name aves-apis.us
(limited to 100 certificates)
aves-apis.us
aves-apis.us
aves-apis.us
bodosom.net
www.aves-apis.us
aves-apis.us
aves-apis.us
www.aves-apis.us
aves-apis.us
aves-apis.us
aves-apis.us
bodosom.net
aves-apis.us
bodosom.net
bodosom.net
www.bodosom.net
aves-apis.us
aves-apis.us
aves-apis.us
www.aves-apis.us
aves-apis.us
www.aves-apis.us
www.aves-apis.us
aves-apis.us
www.aves-apis.us
aves-apis.us
aves-apis.us
www.bodosom.net
aves-apis.us
bodosom.net
aves-apis.us
aves-apis.us
www.aves-apis.us
bodosom.net
bodosom.net
aves-apis.us
aves-apis.us
aves-apis.us
bodosom.net
www.aves-apis.us
aves-apis.us
aves-apis.us
www.aves-apis.us
aves-apis.us
aves-apis.us
aves-apis.us
bodosom.net
aves-apis.us
bodosom.net
bodosom.net
www.bodosom.net
aves-apis.us
aves-apis.us
aves-apis.us
www.aves-apis.us
aves-apis.us
www.aves-apis.us
www.aves-apis.us
aves-apis.us
www.aves-apis.us
aves-apis.us
aves-apis.us
www.bodosom.net
aves-apis.us
bodosom.net
aves-apis.us
aves-apis.us
www.aves-apis.us
bodosom.net
bodosom.net
aves-apis.us
Certificate
The complete raw certificate details for aves-apis.us in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgISA7+0T7I8iMy+eK6Eh7UyytRxMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMDQwMzIwNDZaFw0x OTA1MDUwMzIwNDZaMBcxFTATBgNVBAMTDGF2ZXMtYXBpcy51czCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAKwQGf5MbllfA12a5qkMTTIzY+OZrPXSqjL2 +csWjZX0/mBwjwSuE7LKnB7i4N0WNX7gk3DKNjNI8eKG5apClrYUKt30esqPxy5W itEbq+bMI45RiZy92DOYfLEZkaa6MTixpDBRVq4ZiBcWUFMoHvk4nppdYVem6ytt 0tYFuoBp4Ux81pmYcg+E8knQxKSKdP3zKH5hmu4iP1arfKa8mE10nMJS9x/OyBIO Pk6MW+ml1pYZZXeDTxaAyJIp5wXnQnFKZUVygnvhXqExXDXEP/oVKZtJadvRYUuU RoGcgwNU4pe7zb4iiwY5nhkvz1Gky02jki54zd+rxRkkfomkSvhbhlLebWn5FKfQ OrofujN2Yzk6qa+T/p+x80NaGZ8//CI3xGJowxEgAs3G7ZMJr2+h+wnG6F5jMr8I F+JaE4qtG7NsG0/39UtY6yvMeIHlL8CAxgDNNJuj3RVee8uAA9V32CX4hz0QCNHK UzQxbgYpRVndOQ2pwU5bHUJwq97DyQRzWG+HlsaPuXNDNok38i2cDd43wBcfvSMj actKaU5sKFpSNAmc0govVP3OfG54WBS+fuyCIzipLn2RBVmMB27hsJmdtilowAA6 7jEGTSTzo96zhVXhtUNV/12zRZohYN8p7nFnVoBPdcuaNVibhRPp92hAKyiarwHp X5wbcHNJAgMBAAGjggJyMIICbjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJO/ce7r 6l3zvCDZowhVjKte8nsOMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIMYXZlcy1hcGlzLnVzghB3d3cu YXZlcy1hcGlzLnVzMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYK KwYBBAHWeQIEAgSB9ASB8QDvAHYAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHH aFRL2I0AAAFotryx2wAABAMARzBFAiB0DHoa+OBN9xFrbj6V+p1Rb+p1C7RREspn g6eCMyNQqQIhAMhK6H6Q9Sz91XZrsOmwcxRSWRm2gqWqLDUz/9YD8bJKAHUA4mlL ribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFotryzegAABAMARjBEAiAM 5cprAnPUYCuqGYzxj1EGU9fUM5ca4p6ZzIoXRQxWyQIgYQ8MeHyHLU4RkqPFUYro 0ia9kx+N5V7uIozn9RW8RYUwDQYJKoZIhvcNAQELBQADggEBAFSpUVLWQakjy/MY 1vaJvGGBqr5qTb/SzQSuLUv4vfzanUKyn7Eyb1fCXEKupURVc1sfzvOdZHt6pvOV EOOxmq2BzFWQcHAUTEDF30d9wB5qDUhp9yiyTl8BjcUWyNVu1GcP/lacKq/Lh80f Tb9GrJGjvS0M6b6ZH/Hq25J/e01yk3V7P+nSW/z9v4J4AkpRqxEnyqu3SxMS2ziq CjapSbqP5ghyoptsP1Kahy5k+up8YezRTVqhldL9vd8Us+l5vxmBtzYtwkYSxgZ/ 21Tg7iAm2qLxJ7jAhMYQegIbCIJlGNkKwq+oaAiA7kEuoZRrCbYI0nOeZF6XfpP7 qYVacQ8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArBAZ/kxuWV8DXZrmqQxN MjNj45ms9dKqMvb5yxaNlfT+YHCPBK4TssqcHuLg3RY1fuCTcMo2M0jx4oblqkKW thQq3fR6yo/HLlaK0Rur5swjjlGJnL3YM5h8sRmRproxOLGkMFFWrhmIFxZQUyge +Tieml1hV6brK23S1gW6gGnhTHzWmZhyD4TySdDEpIp0/fMofmGa7iI/Vqt8pryY TXScwlL3H87IEg4+Toxb6aXWlhlld4NPFoDIkinnBedCcUplRXKCe+FeoTFcNcQ/ +hUpm0lp29FhS5RGgZyDA1Til7vNviKLBjmeGS/PUaTLTaOSLnjN36vFGSR+iaRK +FuGUt5tafkUp9A6uh+6M3ZjOTqpr5P+n7HzQ1oZnz/8IjfEYmjDESACzcbtkwmv b6H7CcboXmMyvwgX4loTiq0bs2wbT/f1S1jrK8x4geUvwIDGAM00m6PdFV57y4AD 1XfYJfiHPRAI0cpTNDFuBilFWd05DanBTlsdQnCr3sPJBHNYb4eWxo+5c0M2iTfy LZwN3jfAFx+9IyNpy0ppTmwoWlI0CZzSCi9U/c58bnhYFL5+7IIjOKkufZEFWYwH buGwmZ22KWjAADruMQZNJPOj3rOFVeG1Q1X/XbNFmiFg3ynucWdWgE91y5o1WJuF E+n3aEArKJqvAelfnBtwc0kCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 326570464722938032252413504098397334459505 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-04 03:20:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-05 03:20:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aves-apis.us' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 701955375551116280025720390752813603457235771319460508933758764137674832357879997999346367874146891374907232660878648977508299631013046144127648453989225724456690785219669351866241029635914944321077132524699252640975205316477300140930245456531481191312732677859643026354771460956693820642377420249244406984641182428614322974479293106835955467600280713517599456151305281432327007040044387803205076755848960893623650405382075794358423455021158388620120606703797926280982158201408388794143580766390622180792459237442452187215325040408589800094739869036589317216155775070546432728436023626865242961879461080135367618137226247829165370601418217432884472274732647367073519693147218537482695031693238945211374199883026934148806142094093046991717901520751517509591259896693936289921892674089331705744975870584001003797565500063692272564000548441610366361880768933188572036383847205938832889893774258806326505320713934962516627761634588984250850742973109000053277180072826108065636620731083131371552110256771375138229018364451893929457923916670508382737440903061871444416286373195936774754746452201167590202686077685603201598723134409886501809357947801121239090509115734586152686064281916412541562635616536279982371202438051366282001227215689 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 93bf71eeebea5df3bc20d9a308558cab5ef27b0e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aves-apis.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aves-apis.us' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168b6bcb1db00000403004730450220740c7a1af8e04df7116b6e3e95fa9d516fea750bb45112ca6783a782332350a9022100c84ae87e90f52cfdd5766bb0e9b07314525919b682a5aa2c3533ffd603f1b24a007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168b6bcb37a000004030046304402200ce5ca6b0273d4602baa198cf18f510653d7d433971ae29e99cc8a17450c56c90220610f0c787c872d4e1192a3c5518ae8d226bd931f8de55eee228ce7f515bc4585 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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