tower.tools.qzhq.co
Issued by Amazon
About this certificate
This digital certificate with serial number 0c:6a:9a:89:d8:c9:d8:0b:3d:03:a6:41:70:93:a9:db was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=tower.tools.qzhq.co
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:6a:9a:89:d8:c9:d8:0b:3d:03:a6:41:70:93:a9:dbSerial Number (int): 16504253828853685464553555950556129755
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 42:04:92:94:3b:b7:22:d7:07:d0:55:c8:36:f7:c9:e3:bd:98:89:88
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): ce:7b:1b:49:b4:62:cc:73:29:6a:80:57:9b:c7:b2:69:7e:e9:2b:7f
Fingerprint (sha256): ea:0e:a7:95:22:8d:a8:84:ce:cd:e7:68:b0:b4:7b:b3:ce:69:38:74:e0:b5:0d:46:a8:3e:35:59:00:ed:be:4a
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate tower.tools.qzhq.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tower.tools.qzhq.co
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tower.tools.qzhq.co
Other certificates including the domain name qzhq.co
(limited to 100 certificates)
vendor.staging.qzhq.co
www.staging.qzhq.co
www.staging.qzhq.co
www.staging.qzhq.co
tower.tools.qzhq.co
debug71.aws.qzhq.co
admin.staging.qzhq.co
io.staging.qzhq.co
vendor.staging.qzhq.co
io.staging.qzhq.co
integration.staging.qzhq.co
*.qzhq.co
io.staging.qzhq.co
public.admin.staging.qzhq.co
static.staging.qzhq.co
beans.staging.qzhq.co
static.integration.qzhq.co
rabbitmq.staging.qzhq.co
io.staging.qzhq.co
integration.admin.staging.qzhq.co
tower.tools.qzhq.co
www.staging.qzhq.co
integration.vendor.staging.qzhq.co
vendor.staging.qzhq.co
staging.qzhq.co
io.staging.qzhq.co
quartzy.aws.qzhq.co
admin.integration.qzhq.co
vendor.staging.qzhq.co
io.staging.qzhq.co
io.staging.qzhq.co
io.staging.qzhq.co
www.staging.qzhq.co
www.staging.qzhq.co
public.staging.qzhq.co
tower.tools.qzhq.co
app.staging.qzhq.co
www.staging.qzhq.co
vendor.integration.qzhq.co
io.integration.qzhq.co
www.staging.qzhq.co
staging.qzhq.co
www.staging.qzhq.co
www.staging.qzhq.co
io.staging.qzhq.co
integration.vendor.staging.qzhq.co
admin.staging.qzhq.co
api.integration.qzhq.co
integration.qzhq.co
debug.aws.qzhq.co
staging.qzhq.co
integration.io.staging.qzhq.co
rabbitmq.staging.qzhq.co
staging.qzhq.co
admin.integration.qzhq.co
integration.staging.qzhq.co
public.vendor.staging.qzhq.co
app.staging.qzhq.co
integration.admin.staging.qzhq.co
www.staging.qzhq.co
www.staging.qzhq.co
beans.staging.qzhq.co
staging.qzhq.co
tower.tools.qzhq.co
tower.tools.qzhq.co
admin.staging.qzhq.co
www.staging.qzhq.co
www.staging.qzhq.co
www.staging.qzhq.co
tower.tools.qzhq.co
debug71.aws.qzhq.co
admin.staging.qzhq.co
io.staging.qzhq.co
vendor.staging.qzhq.co
io.staging.qzhq.co
integration.staging.qzhq.co
*.qzhq.co
io.staging.qzhq.co
public.admin.staging.qzhq.co
static.staging.qzhq.co
beans.staging.qzhq.co
static.integration.qzhq.co
rabbitmq.staging.qzhq.co
io.staging.qzhq.co
integration.admin.staging.qzhq.co
tower.tools.qzhq.co
www.staging.qzhq.co
integration.vendor.staging.qzhq.co
vendor.staging.qzhq.co
staging.qzhq.co
io.staging.qzhq.co
quartzy.aws.qzhq.co
admin.integration.qzhq.co
vendor.staging.qzhq.co
io.staging.qzhq.co
io.staging.qzhq.co
io.staging.qzhq.co
www.staging.qzhq.co
www.staging.qzhq.co
public.staging.qzhq.co
tower.tools.qzhq.co
app.staging.qzhq.co
www.staging.qzhq.co
vendor.integration.qzhq.co
io.integration.qzhq.co
www.staging.qzhq.co
staging.qzhq.co
www.staging.qzhq.co
www.staging.qzhq.co
io.staging.qzhq.co
integration.vendor.staging.qzhq.co
admin.staging.qzhq.co
api.integration.qzhq.co
integration.qzhq.co
debug.aws.qzhq.co
staging.qzhq.co
integration.io.staging.qzhq.co
rabbitmq.staging.qzhq.co
staging.qzhq.co
admin.integration.qzhq.co
integration.staging.qzhq.co
public.vendor.staging.qzhq.co
app.staging.qzhq.co
integration.admin.staging.qzhq.co
www.staging.qzhq.co
www.staging.qzhq.co
beans.staging.qzhq.co
staging.qzhq.co
tower.tools.qzhq.co
tower.tools.qzhq.co
admin.staging.qzhq.co
Certificate
The complete raw certificate details for tower.tools.qzhq.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfDCCA2SgAwIBAgIQDGqaidjJ2As9A6ZBcJOp2zANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA5MDYwMDAwMDBaFw0xOTEwMDYx MjAwMDBaMB4xHDAaBgNVBAMTE3Rvd2VyLnRvb2xzLnF6aHEuY28wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOEf+UmWqZdfpdtZ73rOf8giLW6LfBBAK7 yMNNBmopwE097+OQxM+m/TIbCezXwKqMBDFRZ3EsERLqB+CR2n2fnjKUyVFNNQgo 6fuOvDxjE7rSNOTasILdyoLzBLNxs0nplA3Q+tgtIlRnSd1kpULNkUJYPjzhiaQT ZWrhUiDYfhLcT6qqtK6MXjG+Xd5eEOa5kha68ntsv0NrMh+AlESKxSyW4g7jH26R uoIeJ0vCZ/72UXEfyh9ltD9qxOMnygBrgsme4ZGj+e7QQJbNtlXtLlheEs7Mol1/ /gNrpQjnXPLcjKUQvP5DnwUD3jIjuIUE1ujvdJGef7U1ZUFvYt9PAgMBAAGjggGM MIIBiDAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU QgSSlDu3ItcH0FXINvfJ472YiYgwHgYDVR0RBBcwFYITdG93ZXIudG9vbHMucXpo cS5jbzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1 c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwB AgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2Ex Yi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIu YW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB 1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnrXNX3porUn6DMmntgSI0 JglCfD2x/8Za8XoXDL/54fp7rLOHnXL1Y+a3Q+YINa23GwmR24xT/JmjjFNDbNaZ DgHZW8ExQkGjlTyu0kWJIEzlrrXb3W7AZtlMNkOnGXuRQ3L0mCFvrrhXVZ5ftls9 w0yYG7HgAP3vHOpMn7Mgi0s3aTgCiX73h4+nuv/8+iUzgDAomW8zYs0wGrhjJnnA FQh2mkxGT1zij+4GNUIC4PMVixKMnV2eve4qihoj0OfnvoHE7eiXhwTLKBE7fyNo T6muvdR1MBPN5gKqXtd/jd8087J5GZc01apswHjEv2qMEZ9ylCwi55p048uD6MeU -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhH/lJlqmXX6XbWe96zn /IIi1ui3wQQCu8jDTQZqKcBNPe/jkMTPpv0yGwns18CqjAQxUWdxLBES6gfgkdp9 n54ylMlRTTUIKOn7jrw8YxO60jTk2rCC3cqC8wSzcbNJ6ZQN0PrYLSJUZ0ndZKVC zZFCWD484YmkE2Vq4VIg2H4S3E+qqrSujF4xvl3eXhDmuZIWuvJ7bL9DazIfgJRE isUsluIO4x9ukbqCHidLwmf+9lFxH8ofZbQ/asTjJ8oAa4LJnuGRo/nu0ECWzbZV 7S5YXhLOzKJdf/4Da6UI51zy3IylELz+Q58FA94yI7iFBNbo73SRnn+1NWVBb2Lf TwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16504253828853685464553555950556129755 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-06 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tower.tools.qzhq.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26013966145701192450897298820802666653191299006364846956150002820891860401084936661901743783222603657304086530244034180801693645573485292247390944748561643902429665558358288651527982169375895864169329794143602948090024122235344800378345711832756696271601425086806227602079376463711423554557971375750171332197685967984599065184372982954528971671316862784353457423105312727799075815925576037753313074112089676333253849405647541342927186692186496778623475830213981179731410495310528664434200684210415991430459917363151280584022469552292131041244055350669806913948238751073423683309171752625897131537089878359448299429711 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 420492943bb722d707d055c836f7c9e3bd988988 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tower.tools.qzhq.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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