www.zurich-kredit.de

Issued by Verizon Public SureServer CA G14-SHA2

About this certificate


This digital certificate with serial number 20:8d:21:c7:ee:90:92:03:52:3a:6c:63:a3:ac:19:0f:be:92:d6:ff was issued on by Verizon Enterprise Solutions .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • WARNING: Certificate contains a Authority Info Access Issuer with an non-preferred scheme ([https])
  • WARNING: Certificate contains a Authority Info Access Issuer with an non-preferred scheme ([https])

Zurich Insurance Company Ltd

Organization: Zurich Insurance Company Ltd
Organization unit: Group IT Operations
State / Province: Zurich
Locality: Schlieren
Country: CH

Verizon Enterprise Solutions

Organization: Verizon Enterprise Solutions
Organization unit: Cybertrust
State / Province: Zurich
Locality: Schlieren
Country: CH

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 20:8d:21:c7:ee:90:92:03:52:3a:6c:63:a3:ac:19:0f:be:92:d6:ff
Serial Number (int): 185835052478089363232684722138988226252591257343
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 67:34:e8:b6:4f:c7:30:69:5c:69:5f:c6:c4:4a:a4:a8:ed:92:d1:c3
AuthorityKeyId: e4:2d:bb:91:01:65:26:1f:b4:7a:3f:a3:15:25:a4:ce:8c:44:33:3b

Fingerprint (sha1): 9a:ad:cb:75:3d:4a:0f:d3:32:f8:57:7a:5b:7d:26:aa:74:3c:5a:0b
Fingerprint (sha256): 9b:0d:35:a9:8e:ff:25:b7:bb:5b:fd:5c:e9:d6:e1:56:c6:8d:a2:aa:bf:95:27:1e:07:4b:6e:f8:e8:35:6a:66

Issuing Certificate URL: https://cacert.omniroot.com/vpssg142.crt
Issuing Certificate URL: https://cacert.omniroot.com/vpssg142.der

Revocation information

OCSP Server: http://vpssg142.ocsp.omniroot.com
CRL Distribution Point: http://vpssg142.crl.omniroot.com/vpssg142.crl

Check the revocation status for the current certificate on www.zurich-kredit.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: www.zurich-kredit.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgIUII0hx+6QkgNSOmxjo6wZD76S1v8wDQYJKoZIhvcNAQEL BQAwgY0xCzAJBgNVBAYTAk5MMRIwEAYDVQQHEwlBbXN0ZXJkYW0xJTAjBgNVBAoT HFZlcml6b24gRW50ZXJwcmlzZSBTb2x1dGlvbnMxEzARBgNVBAsTCkN5YmVydHJ1 c3QxLjAsBgNVBAMTJVZlcml6b24gUHVibGljIFN1cmVTZXJ2ZXIgQ0EgRzE0LVNI QTIwHhcNMTUwMzI1MTUxNzA1WhcNMTYwMjIwMDAwMDAwWjCBljELMAkGA1UEBhMC Q0gxDzANBgNVBAgTBlp1cmljaDESMBAGA1UEBxMJU2NobGllcmVuMSUwIwYDVQQK ExxadXJpY2ggSW5zdXJhbmNlIENvbXBhbnkgTHRkMRwwGgYDVQQLExNHcm91cCBJ VCBPcGVyYXRpb25zMR0wGwYDVQQDExR3d3cuenVyaWNoLWtyZWRpdC5kZTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALvrrZzWb25FussRsRiHBH7AU46D xuwGToaLaPsrrHjckxlq4gIXH5fRPhnYhB6iZwEK0BakOTIe6bVxUI2LfehqIkA+ e7AtJ3kJI5CA8AQUW8PUucz41pBPlcb1fB+rpz0Ri6Uo4EYpa7TYZUghHeKGghiq Z1DcWk9IaKRT01RdFxOgJxIhnncuPHcHWVs7QMxt88a/wYQY6fwDWx1jHcsP2BSg T0ttjWP/Vfq1AiL0YR/EeOp5xvWU/CV+cOZ/rfDM1ByG4+ddpy+L2ZSFWsBGBjbZ TOHKaVPsgTRtWiJtjXapGNSOycFNBOt2u464bapFniWmK2IAQM1Tw/Qo15sCAwEA AaOCAd4wggHaMAwGA1UdEwEB/wQCMAAwTAYDVR0gBEUwQzBBBgkrBgEEAbE+ATIw NDAyBggrBgEFBQcCARYmaHR0cHM6Ly9zZWN1cmUub21uaXJvb3QuY29tL3JlcG9z aXRvcnkwgasGCCsGAQUFBwEBBIGeMIGbMC0GCCsGAQUFBzABhiFodHRwOi8vdnBz c2cxNDIub2NzcC5vbW5pcm9vdC5jb20wNAYIKwYBBQUHMAKGKGh0dHBzOi8vY2Fj ZXJ0Lm9tbmlyb290LmNvbS92cHNzZzE0Mi5jcnQwNAYIKwYBBQUHMAKGKGh0dHBz Oi8vY2FjZXJ0Lm9tbmlyb290LmNvbS92cHNzZzE0Mi5kZXIwHwYDVR0RBBgwFoIU d3d3Lnp1cmljaC1rcmVkaXQuZGUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTkLbuRAWUmH7R6P6MVJaTO jEQzOzA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vdnBzc2cxNDIuY3JsLm9tbmly b290LmNvbS92cHNzZzE0Mi5jcmwwHQYDVR0OBBYEFGc06LZPxzBpXGlfxsRKpKjt ktHDMA0GCSqGSIb3DQEBCwUAA4IBAQCxfM+90Lexl7IO136+a3Tz+2cFJ8q/kMFu OAoW3ymV55DSB5NuW/Ndx2moWuXBse/OAQg0fAln5nZoZV3JzX6vFhQKNlXFgLJ4 gOiD0kI3xiyFE6iZLuNQ/TwLdTUO/yBbsZ2nIftqlMk3M7Srja+2awndNgiYySdv e904AtvW/sh613xW12YqQ0w3sXQt74NvtJWE5NEBoBlWL16S2/sQWcruVVesFRmO NRG7oND0A4nHiyisUPIQy0QA6eKmWVscRlufSFUxo5grP96kl12xa7YcCBwaaMM6 lN0CZhvD/bWnHV/GhN7fBny5qvS1GrF/pLpHw5AtX3KvwI4IE4P2 -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+utnNZvbkW6yxGxGIcE fsBTjoPG7AZOhoto+yuseNyTGWriAhcfl9E+GdiEHqJnAQrQFqQ5Mh7ptXFQjYt9 6GoiQD57sC0neQkjkIDwBBRbw9S5zPjWkE+VxvV8H6unPRGLpSjgRilrtNhlSCEd 4oaCGKpnUNxaT0hopFPTVF0XE6AnEiGedy48dwdZWztAzG3zxr/BhBjp/ANbHWMd yw/YFKBPS22NY/9V+rUCIvRhH8R46nnG9ZT8JX5w5n+t8MzUHIbj512nL4vZlIVa wEYGNtlM4cppU+yBNG1aIm2NdqkY1I7JwU0E63a7jrhtqkWeJaYrYgBAzVPD9CjX mwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 185835052478089363232684722138988226252591257343 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Enterprise Solutions' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Public SureServer CA G14-SHA2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-25 15:17:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-20 00:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schlieren' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich Insurance Company Ltd' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Group IT Operations' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.zurich-kredit.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23722780267926627169222520224578621211170585808472979855040354594515343524059542330640481717729803079463502038169318657868079997016268511384917891642124949771107098301650806260641022540240073345313723226876900452615964711066892829130178589184158038401864485493883058898398472808505999417724188292239316290179871780460891368798704936504723499591598531015143808891836038264955168679981024654442418337088836951551469471322297208200214245990751059720277832253344649599882733554192500578695435371773026697226430140126840401454761461616967388432743724875242977513842221858908072097972881790000962210400281685983842055804827 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6334.1.50 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.omniroot.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (158 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vpssg142.ocsp.omniroot.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'https://cacert.omniroot.com/vpssg142.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'https://cacert.omniroot.com/vpssg142.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zurich-kredit.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e42dbb910165261fb47a3fa31525a4ce8c44333b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vpssg142.crl.omniroot.com/vpssg142.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6734e8b64fc730695c695fc6c44aa4a8ed92d1c3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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