genquebec.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:64:46:d3:75:55:ba:d8:ab:34:74:97:68:15:e4:50:60:e0 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=genquebec.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:64:46:d3:75:55:ba:d8:ab:34:74:97:68:15:e4:50:60:e0Serial Number (int): 295459238401550824835196061480299424407776
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 0b:fb:13:91:9a:91:d1:17:a1:47:a1:fd:2f:42:87:04:f6:69:13:95
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 21:23:c0:76:db:42:77:80:ae:a8:71:16:79:6c:56:18:43:90:68:36
Fingerprint (sha256): e5:95:c6:e9:bc:d6:4f:08:64:f3:c1:1c:bc:11:66:04:36:72:ab:12:34:3c:ea:55:54:0c:d4:04:7d:a5:28:cf
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate genquebec.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for genquebec.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dev.genquebec.com
genquebec.com
security-update.genquebec.com
staging.genquebec.com
www.genquebec.com
genquebec.com
security-update.genquebec.com
staging.genquebec.com
www.genquebec.com
Other certificates including the domain name genquebec.com
(limited to 100 certificates)
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
genquebec.com
Certificate
The complete raw certificate details for genquebec.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGrjCCBZagAwIBAgISA2RG03VVutirNHSXaBXkUGDgMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjgwNDEwNDlaFw0y MDAzMjcwNDEwNDlaMBgxFjAUBgNVBAMTDWdlbnF1ZWJlYy5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDMvSJUrV1LN0TxUlELjqgWGgomqUSQaNVF 9fnrQ/yrGe00feoIgCl4bWSWc9njQKqXyQSJmhVyGznrxGnjwdFRjlS6ItfSxErU oVoQFhnfdDgo22hofKlbvhKSaxdstyEtyQ7R6G11b35fAjF4Qeq/pD8vBDSdsQ/a hxQC7rU3BsJMEM0b2YpVvf3SE/441dJKCV2SNjDq19jaAICX6ThQwyAryxt/PSGr ce/Sbknf0p7/1fADnuAF/2HG7lYmFC50nnwMF2wi/8n7sbpdZiUVTYRvZckQ7e3v S9ydMG9P5wCccNWzK7ucUVzAiCKQOiZ8oViJ5vNVxrF665chF86343rQy/IzBdRC UTSByGb4ftTEUoQd0FFbdT4rL2CtX0E0chVwMbMUzKpnAUnBJl+ZmYVePuH+6/4+ LK33dec5emInq+0xDG7XQLfhJ5R9iN/DBlTDK+Hll40ORSG/ry9PAdN20FRJq7Eh J5Mqs7WwoBisHCxs/V+g03MsXIOF6mauilLPKaop3F5oS3uGtQCxZSnSOjKfE9hS 0PXfNFKf0B9meomM1E6aw3cHMafBD4NDfynV3Ve/UUlYNODIbDQwXQzG3WuNxJHx 0qSQc3JlgstjMK07jyYgBT7BKaL79C9GxkCagKylxBcwM1nn/mbIvgJu22PT4TsW 3LjHxRZN0wIDAQABo4ICvjCCArowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQL+xOR mpHRF6FHof0vQocE9mkTlTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMHQGA1UdEQRtMGuCEWRldi5nZW5xdWViZWMuY29t gg1nZW5xdWViZWMuY29tgh1zZWN1cml0eS11cGRhdGUuZ2VucXVlYmVjLmNvbYIV c3RhZ2luZy5nZW5xdWViZWMuY29tghF3d3cuZ2VucXVlYmVjLmNvbTBMBgNVHSAE RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3 AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABb0rqCNQAAAQDAEgw RgIhAIkZLghvMFQWeEvgn+krea5Uv1zB0YjZ7SY/Z183zqiTAiEAlxDRwjgaaSgV JRzE615Fog4lfKwavOIPyfz3lyayvRYAdQAHt1wb5X1o//Gwxh0jFce65ld8V5S3 au68YToaadOiHAAAAW9K6gkGAAAEAwBGMEQCIGvoC0akXNDEESWy/O80uzxgB71a KcNICkBCRwPx0Tm2AiBgZLWIga7pQNRSJKmiGWYi5NJsIwRHkOkBf7GJLkcTXDAN BgkqhkiG9w0BAQsFAAOCAQEAQmHpDy1LG1sOCze8pjQrNO/LN5v6awwG2+a/ZMek mc5mGo9nSa3QH45ajZRHh2p01NfgqBUQhUH4Y30BA/gKJ/BIp6OTV4E0Uc2YrAST gv4aoDTsysul8qvj8ilB6+FR3/5lPEpTPlB+1fbJxjKU3bX80jtwJN/JsEFO77SZ KjD36QeQAZWKF3VdZkZWdwtsGzIYjbxfBk5wUlu+c0OfgBuWApkf75xm158/pJV7 tQIjZjY2XqJwDd6yotVpP0y6J2iFnU7sOHvRC1OAkzkdpR57KmiBAX0+RPWXezkA 7zyXgDLcbjKxd4Q5PEpOEJh/ksu1P1FGOcncnA+v8SCrpQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzL0iVK1dSzdE8VJRC46o FhoKJqlEkGjVRfX560P8qxntNH3qCIApeG1klnPZ40Cql8kEiZoVchs568Rp48HR UY5UuiLX0sRK1KFaEBYZ33Q4KNtoaHypW74SkmsXbLchLckO0ehtdW9+XwIxeEHq v6Q/LwQ0nbEP2ocUAu61NwbCTBDNG9mKVb390hP+ONXSSgldkjYw6tfY2gCAl+k4 UMMgK8sbfz0hq3Hv0m5J39Ke/9XwA57gBf9hxu5WJhQudJ58DBdsIv/J+7G6XWYl FU2Eb2XJEO3t70vcnTBvT+cAnHDVsyu7nFFcwIgikDomfKFYiebzVcaxeuuXIRfO t+N60MvyMwXUQlE0gchm+H7UxFKEHdBRW3U+Ky9grV9BNHIVcDGzFMyqZwFJwSZf mZmFXj7h/uv+Piyt93XnOXpiJ6vtMQxu10C34SeUfYjfwwZUwyvh5ZeNDkUhv68v TwHTdtBUSauxISeTKrO1sKAYrBwsbP1foNNzLFyDhepmropSzymqKdxeaEt7hrUA sWUp0joynxPYUtD13zRSn9AfZnqJjNROmsN3BzGnwQ+DQ38p1d1Xv1FJWDTgyGw0 MF0Mxt1rjcSR8dKkkHNyZYLLYzCtO48mIAU+wSmi+/QvRsZAmoCspcQXMDNZ5/5m yL4Cbttj0+E7Fty4x8UWTdMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 295459238401550824835196061480299424407776 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 04:10:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 04:10:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'genquebec.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 835261451703355328189418045694611121348018351254015955324014566214150547736563061928112501641031456807003476615786780717419123363124881595680592525675283136559681101845595590518856189697347587311377146250436036827170334142469849067749875226748035404053365469736174947786550651602686043780801901394939941420399326636153066282983514569357292142483014085615744318867532163501673588231038055012605741776917645915414404065042001930735170249130111412615572736664303921250339061982253469865351269345933096181422372385257814114234187410865985118717220786858718197369923845850142948834309456113395748619062589079344170225067928378399994235519343647236591154583581367711148623116655291196185390289311726400951490238629814553889004276999187025252110589717866522787356933605198734977465470100075509195053564385305070138954826510159470764032067008056035185671847467603404352211056460877717589775526320278091277061644417375242177058130430372842549910544670616486099257269116758222346049897372092963074859652780703567336056870578445348842098338993323898837613303197028488880993259729511765293367058387663709482850162087122547017901425642216934267562303521430122685153285881000624571008903752764712257035843714942167019103277716205845491554213842387 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0bfb13919a91d117a147a1fd2f428704f6691395 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.genquebec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genquebec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security-update.genquebec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.genquebec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genquebec.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f4aea08d4000004030048304602210089192e086f305416784be09fe92b79ae54bf5cc1d188d9ed263f675f37cea8930221009710d1c2381a692815251cc4eb5e45a20e257cac1abce20fc9fcf79726b2bd1600750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f4aea0906000004030046304402206be80b46a45cd0c41125b2fcef34bb3c6007bd5a29c3480a40424703f1d139b602206064b58881aee940d45224a9a2196622e4d26c23044790e9017fb1892e47135c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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