icann.jobs
Issued by R3
About this certificate
This digital certificate with serial number 04:e9:64:d1:43:d0:5b:a5:94:a6:7b:0f:e1:02:8b:a4:5c:00 was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=icann.jobs
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:e9:64:d1:43:d0:5b:a5:94:a6:7b:0f:e1:02:8b:a4:5c:00Serial Number (int): 427868944584670838497990771095019884665856
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 12:9b:f3:68:23:41:d6:5d:17:e9:bf:0c:7b:46:94:cc:8b:91:9f:49
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 67:b8:5e:80:2f:40:35:a8:82:e5:bf:69:39:12:1d:ed:43:47:55:ea
Fingerprint (sha256): ed:d6:e2:92:88:41:37:3b:93:7e:2e:55:51:2b:a8:bd:c7:02:a4:5e:d9:0e:55:ef:68:d0:00:f1:36:4e:92:8e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate icann.jobs
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for icann.jobs
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
iana.jobs
icann.jobs
icann.mobi
me.icann.org
public.icann.org
www.iana.jobs
www.icann.jobs
www.icann.mobi
icann.jobs
icann.mobi
me.icann.org
public.icann.org
www.iana.jobs
www.icann.jobs
www.icann.mobi
Other certificates including the domain name icann.jobs
(limited to 100 certificates)
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
icann.jobs
Certificate
The complete raw certificate details for icann.jobs in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISBOlk0UPQW6WUpnsP4QKLpFwAMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAxMjcwMDA1NDhaFw0yMzA0MjcwMDA1NDdaMBUxEzARBgNVBAMT CmljYW5uLmpvYnMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQChB19M aFxDdW2JaZjNj/Dq4gtilWTlbv4q8kUHhwJkEfH3A5B/WsSdEidSl0BOB2AHCi25 DzEQa2zgm1JzDNVsF2tTmFmkaGyXBjCqLkmZ3Y1kzBTQVRoZeZWqO5nrVtFwLtlB oEBAQxC5WfLWEuhv87mo1Q8bHNi4SLdb25o1ZGhehDv0F+2o+UA+qte5i0TFmrCx UuRGmSGq/CZYFsiqACalyx+pvBivvqVlnkT0rw7AmcIyh1VkMdEltT23sbWZSk42 8b8HFP+8psLzoMm+LqiIHBeXgnur98kgfIala+gNgXLFiJVAW2+zxUuf3wXBHBhc N0DvHUEmu83Fv5Al7caXfDJHj3W8ZfZecj2GoHPKgTlJ0a0CHRHanhWnco06Ha6A 0IFx577K7wOq7M0wo3SUwNjSyhJ8OKe1VLnZXTNsUWdhg/57mieDnn+WwDfGsj7c VX7l2+z5A+nDvp/AnjF3h1/P7KeKFChBsUkUXe7EmTBJOzqBGDy3vzzGi7D38yT2 JxYw1XlT+LDfcJ9HoKo7TqlvcwmUutc13YKZ7h3UQKMGNtyZNZ1iSGobEgfKVTSx AnRfbuIyoCVAqdOyJIEopGTeyYO4eXb0EhOesBi8ST74506f9rHWIHaJBTmWReKI U5Ss7t/UpDsdHjhUAea/phAWOIyNrg7I2APhGQIDAQABo4IBuDCCAbQwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBQSm/NoI0HWXRfpvwx7RpTMi5GfSTAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzB7BgNVHREEdDBygglpYW5hLmpvYnOCCmljYW5uLmpvYnOC CmljYW5uLm1vYmmCDG1lLmljYW5uLm9yZ4IQcHVibGljLmljYW5uLm9yZ4INd3d3 LmlhbmEuam9ic4IOd3d3LmljYW5uLmpvYnOCDnd3dy5pY2Fubi5tb2JpMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G CSqGSIb3DQEBCwUAA4IBAQAK858AfjiL+ZLpbSj549upIXrKKcJtQipNeFgryoPW 6P4e783Z+v3XJc7EQSPvgdL/vow14DFa0KqZKcVM/dm0AaCb5NlAkcd7dFHlVhoa fIm8BgF9SgbwRxEoNqMKgZ6EqFI+NQsl+JYZzdLK4OMfrDcEW6N7+PMfADG7o21A m1WZBwSJlZIe88OhBWqYK9a9UdLbc2+gjVYSY1W/KQi4OogN24Ijr0CiiEQhKRth y+nKR2Ue/zqYXWjuMNAEbr9h10jEtKrI8UnKAJp0MQB9EiORIdL3se4gETq3JcK9 Gnxvy4Y97/F5Gobv4OMU5EtSqm5tIog4AlZeZnu5C2K9 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoQdfTGhcQ3VtiWmYzY/w 6uILYpVk5W7+KvJFB4cCZBHx9wOQf1rEnRInUpdATgdgBwotuQ8xEGts4JtScwzV bBdrU5hZpGhslwYwqi5Jmd2NZMwU0FUaGXmVqjuZ61bRcC7ZQaBAQEMQuVny1hLo b/O5qNUPGxzYuEi3W9uaNWRoXoQ79BftqPlAPqrXuYtExZqwsVLkRpkhqvwmWBbI qgAmpcsfqbwYr76lZZ5E9K8OwJnCModVZDHRJbU9t7G1mUpONvG/BxT/vKbC86DJ vi6oiBwXl4J7q/fJIHyGpWvoDYFyxYiVQFtvs8VLn98FwRwYXDdA7x1BJrvNxb+Q Je3Gl3wyR491vGX2XnI9hqBzyoE5SdGtAh0R2p4Vp3KNOh2ugNCBcee+yu8DquzN MKN0lMDY0soSfDintVS52V0zbFFnYYP+e5ong55/lsA3xrI+3FV+5dvs+QPpw76f wJ4xd4dfz+ynihQoQbFJFF3uxJkwSTs6gRg8t788xouw9/Mk9icWMNV5U/iw33Cf R6CqO06pb3MJlLrXNd2Cme4d1ECjBjbcmTWdYkhqGxIHylU0sQJ0X27iMqAlQKnT siSBKKRk3smDuHl29BITnrAYvEk++OdOn/ax1iB2iQU5lkXiiFOUrO7f1KQ7HR44 VAHmv6YQFjiMja4OyNgD4RkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 427868944584670838497990771095019884665856 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-27 00:05:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-27 00:05:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'icann.jobs' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 656940180089136661603259453005140381493085756550382383386141822587736218977053389893722264511581289358880661063477986769240319188076899767768260662710143790499869539234768595970582176727727206500129647061608128895057853832937272936439408923656319968670733803582674945583022143938478060397379934164361376560767769085388374744797008904670185945929954946912229716021233081591105240692376425195435526733040426004386523510620514008214751322942959930731633824147201026338528094513558410855814836864312927429834903964357276604569208502969704928258577048488489527563285248712537137531375730874361059051605338608109924497285386246471237747762346458714745428907034328275431676914749757474646935000144989264363078951167395254376290876590236226714767260318913608532758965987968975822465537301981766483856790795144227067117326691281478209175841900822230066017114621043831793653723721662507113480409288304968382997300689973586536285782747767552040869923435938523762667216302215085664441572895286344903098496012624509159049582660276965008956026133244912733724070919756958473555002772609636648953457893068790418206096313853427269037580342057712712436768101013026038943533008227375327643908423134329033388337795194175074857193682992461209142825312537 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 129bf3682341d65d17e9bf0c7b4694cc8b919f49 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iana.jobs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icann.jobs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icann.mobi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.icann.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.icann.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iana.jobs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icann.jobs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icann.mobi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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