*.marcoderosa.work
Issued by Actalis Domain Validation Server CA G2
About this certificate
This digital certificate with serial number 74:aa:4c:89:c1:62:96:fa:39:5c:df:13:6f:ab:19:36 was issued on by Actalis S.p.A./03358520967.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.marcoderosa.work,OU=Domain Control Validated by Actalis S.p.A.
Actalis S.p.A./03358520967
Organization:
Actalis S.p.A./03358520967
State / Province:
Bergamo
Locality: Ponte San Pietro
Country: IT
Locality: Ponte San Pietro
Country: IT
This certificate has expire since
Certificate Details
Serial Number (hex): 74:aa:4c:89:c1:62:96:fa:39:5c:df:13:6f:ab:19:36Serial Number (int): 155074690354239098531491978304870357302
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 91:df:cf:6c:74:56:c4:9d:1b:85:ad:c7:dc:4f:f9:38:f8:93:68:45
AuthorityKeyId: d5:40:08:f7:96:22:4e:19:b3:da:e5:61:93:ba:ba:b7:3e:eb:b9:cd
Fingerprint (sha1): 7f:ed:f0:81:5a:44:d5:7e:bd:5f:ef:f7:cb:2c:72:43:83:61:15:be
Fingerprint (sha256): e4:c4:6d:06:96:70:40:90:b8:65:78:dc:30:b8:3c:9c:a1:28:fb:c4:ff:34:86:8c:30:75:71:52:99:7d:f2:59
Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg2
Revocation information
OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G2CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G2/getLastCRL
Check the revocation status for certificate *.marcoderosa.work
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.marcoderosa.work
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
marcoderosa.work
*.marcoderosa.work
*.marcoderosa.work
Other certificates including the domain name marcoderosa.work
(limited to 100 certificates)
Certificate
The complete raw certificate details for *.marcoderosa.work in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIQdKpMicFilvo5XN8Tb6sZNjANBgkqhkiG9w0BAQsFADCB kDELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl IFNhbiBQaWV0cm8xIzAhBgNVBAoMGkFjdGFsaXMgUy5wLkEuLzAzMzU4NTIwOTY3 MS8wLQYDVQQDDCZBY3RhbGlzIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBH MjAeFw0xOTA1MTQxMzQ3MDBaFw0yMDA1MTQxMzQ3MDBaMFIxMzAxBgNVBAsMKkRv bWFpbiBDb250cm9sIFZhbGlkYXRlZCBieSBBY3RhbGlzIFMucC5BLjEbMBkGA1UE AwwSKi5tYXJjb2Rlcm9zYS53b3JrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAwKAf0DK0i1woh0vck8zFzwpQs6qme3bWRWa5RVqL/Sg1PofX+dGMn5F6 KKIasgnhkraSaa0VdCDa5y9wpUJP8VaWTH4MB8tYUh4gsN/fEz+UciSs8pqShMoc xgcpVtbYpd41UrjXAay524DVhOd45USOkHuRxmSEiXnifAj0s5nvdHCXvo8EiBZX Nm2PwODzM5VUHdFx72DxuqGAauRBVYBHOhNJBG3+7QijCBvzF/64oJiBdnymNIUl 1w+iVqB24W3B1HBISQCA8ZTG3XnRKqziBf3xbXU11at58b8pjmWt8kVXyM8PGchQ mcPl07quMd1dHSsYY+iLBkijuFvb/wIDAQABo4IC1jCCAtIwDAYDVR0TAQH/BAIw ADAfBgNVHSMEGDAWgBTVQAj3liJOGbPa5WGTurq3Puu5zTB9BggrBgEFBQcBAQRx MG8wOgYIKwYBBQUHMAKGLmh0dHA6Ly9jYWNlcnQuYWN0YWxpcy5pdC9jZXJ0cy9h Y3RhbGlzLWF1dGR2ZzIwMQYIKwYBBQUHMAGGJWh0dHA6Ly9vY3NwMDYuYWN0YWxp cy5pdC9WQS9BVVRIRFYtRzIwLwYDVR0RBCgwJoIQbWFyY29kZXJvc2Eud29ya4IS Ki5tYXJjb2Rlcm9zYS53b3JrMFEGA1UdIARKMEgwPAYGK4EfARcBMDIwMAYIKwYB BQUHAgEWJGh0dHBzOi8vd3d3LmFjdGFsaXMuaXQvYXJlYS1kb3dubG9hZDAIBgZn gQwBAgEwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMEgGA1UdHwRBMD8w PaA7oDmGN2h0dHA6Ly9jcmwwNi5hY3RhbGlzLml0L1JlcG9zaXRvcnkvQVVUSERW LUcyL2dldExhc3RDUkwwHQYDVR0OBBYEFJHfz2x0VsSdG4Wtx9xP+Tj4k2hFMA4G A1UdDwEB/wQEAwIFoDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AKS5CZC0GFgU h7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABarah10UAAAQDAEcwRQIhAKwaUMn5 30bQxNQ7GMhbSbHTRA6EN0P87TW5R+UmGOsrAiB9Y9Y89S8cahoHvAR8Vv/aIo02 okFGqMUMJXAuK5HdGAB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVY AAABarah16EAAAQDAEcwRQIgMXb4HerjHPv6qk7vLLlfWd5mh9liuJFSk8VsSfaH pyMCIQCl4pScrDJzn/aIRfDsjd1hJ0ZBMcgx8EmhXND8j1XRgDANBgkqhkiG9w0B AQsFAAOCAQEAFVYVm1PsB7ZTlq8OGaWIe8OPEoMD3AzCjvbdAUHNTYuH2a+92BAZ O2iuTdfSV+qteZGrVvCi5THt4ZUBeFkDr4mMgmYjfrWrMtQdgypExehevOLQOkaW wyorpA1D+VeIqxUNSXAgTnXMClyXxfrArBlI6o+xxr2RLpySNDhosRJ4ix7mKy70 pJBscBM12JVi72LPIoL6BoVbF0LoW4k/71H3vkEHXoXGnZkF6HC/k3/vubTCEat7 UVKwGT+3KFECr6xpZFNv9liG+XW8VyKJY6QBeSVWFmbWbjroSIcu/DwWo0N/DO9Y lIEVV9+9MX6/OveiIjyEc9+reGjxiZwaZw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKAf0DK0i1woh0vck8zF zwpQs6qme3bWRWa5RVqL/Sg1PofX+dGMn5F6KKIasgnhkraSaa0VdCDa5y9wpUJP 8VaWTH4MB8tYUh4gsN/fEz+UciSs8pqShMocxgcpVtbYpd41UrjXAay524DVhOd4 5USOkHuRxmSEiXnifAj0s5nvdHCXvo8EiBZXNm2PwODzM5VUHdFx72DxuqGAauRB VYBHOhNJBG3+7QijCBvzF/64oJiBdnymNIUl1w+iVqB24W3B1HBISQCA8ZTG3XnR KqziBf3xbXU11at58b8pjmWt8kVXyM8PGchQmcPl07quMd1dHSsYY+iLBkijuFvb /wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 155074690354239098531491978304870357302 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-14 13:47:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-14 13:47:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Domain Control Validated by Actalis S.p.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.marcoderosa.work' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24316714774204037388224312795935646253132845694397594884278371475514020887115871426070301720033131179746318566684865967318215479651759679909963921763903432423375299432520198645308562644035085290023210840027141225025819872534981417592413321787477085035527070845578207875167435792308285624426115179501489863708051080438168814357017360610410924661345886031677560995321909895193728015825428137112971554450569536386666791559510127888715252377363537572141364311576691443558333025124959793774039334283635329405820959479918121580665850538173390121491120711698970472585968028538242197484080856467824898940154024015152075758591 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d54008f796224e19b3dae56193babab73eebb9cd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg2' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcoderosa.work' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marcoderosa.work' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G2/getLastCRL' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 91dfcf6c7456c49d1b85adc7dc4ff938f8936845 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016ab6a1d7450000040300473045022100ac1a50c9f9df46d0c4d43b18c85b49b1d3440e843743fced35b947e52618eb2b02207d63d63cf52f1c6a1a07bc047c56ffda228d36a24146a8c50c25702e2b91dd180076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ab6a1d7a1000004030047304502203176f81deae31cfbfaaa4eef2cb95f59de6687d962b8915293c56c49f687a723022100a5e2949cac32739ff68845f0ec8ddd6127464131c831f049a15cd0fc8f55d180 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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