sfek.kz
Issued by WoSign CA Free SSL Certificate G2
About this certificate
This digital certificate with serial number 1d:31:5b:8a:01:73:8d:0d:c6:9a:9c:c0:74:52:2e:91 was issued on by WoSign CA Limited.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Certificate Subject
CN=sfek.kz
WoSign CA Limited
Organization:
WoSign CA Limited
Country:
CN
This certificate has expire since
Certificate Details
Serial Number (hex): 1d:31:5b:8a:01:73:8d:0d:c6:9a:9c:c0:74:52:2e:91Serial Number (int): 38803891057040303725365274295531613841
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: c7:bc:1e:aa:4e:f0:b7:bd:ae:85:b0:eb:19:6a:24:cd:c9:47:79:03
AuthorityKeyId: d2:a7:16:20:7c:af:d9:95:9e:eb:43:0a:19:f2:e0:b9:74:0e:a8:c7
Fingerprint (sha1): 4a:8e:35:ce:a2:db:44:e1:b0:d8:b7:25:b0:a7:71:07:90:8c:0d:47
Fingerprint (sha256): ee:c8:b4:5f:e1:7f:57:a6:2e:42:72:dc:5e:3d:39:9b:65:b5:13:ea:59:d5:0d:9c:4a:c4:5f:e9:5c:7f:e7:00
Issuing Certificate URL: http://aia1.wosign.com/ca6.server1.free.cer
Revocation information
OCSP Server: http://ocsp1.wosign.com/ca6/server1/freeCRL Distribution Point: http://crls1.wosign.com/ca6-server1-free.crl
Check the revocation status for certificate sfek.kz
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sfek.kz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sfek.kz
www.sfek.kz
stat.sfek.kz
edu.sfek.kz
student.sfek.kz
www.sfek.kz
stat.sfek.kz
edu.sfek.kz
student.sfek.kz
Other certificates including the domain name sfek.kz
(limited to 100 certificates)
sfek.kz
stat.sfek.kz
sfek.kz
sfek.kz
sfek.kz
sfek.kz
webcam.sfek.kz
sfek.kz
sfek.kz
sfek.kz
student.sfek.kz
sfek.kz
sfek.cf
sfek.kz
sfek.kz
*.sfek.kz
sfek.kz
sfek.kz
sfek.kz
buh.sfek.kz
sfek.kz
buh.sfek.kz
student.sfek.kz
beta.sfek.kz
*.sfek.kz
*.sfek.kz
sfek.kz
sfek.cf
sfek.kz
sfek.kz
*.sfek.kz
sfek.kz
sfek.kz
sfek.kz
sfek.kz
sfek.kz
sfek.kz
sfek.kz
stat.sfek.kz
sfek.kz
sfek.kz
sfek.kz
sfek.kz
webcam.sfek.kz
sfek.kz
sfek.kz
sfek.kz
student.sfek.kz
sfek.kz
sfek.cf
sfek.kz
sfek.kz
*.sfek.kz
sfek.kz
sfek.kz
sfek.kz
buh.sfek.kz
sfek.kz
buh.sfek.kz
student.sfek.kz
beta.sfek.kz
*.sfek.kz
*.sfek.kz
sfek.kz
sfek.cf
sfek.kz
sfek.kz
*.sfek.kz
sfek.kz
sfek.kz
sfek.kz
sfek.kz
sfek.kz
sfek.kz
sfek.kz
Certificate
The complete raw certificate details for sfek.kz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIQHTFbigFzjQ3GmpzAdFIukTANBgkqhkiG9w0BAQsFADBV MQswCQYDVQQGEwJDTjEaMBgGA1UEChMRV29TaWduIENBIExpbWl0ZWQxKjAoBgNV BAMTIVdvU2lnbiBDQSBGcmVlIFNTTCBDZXJ0aWZpY2F0ZSBHMjAeFw0xNjAxMDcw MDE5MjlaFw0xOTAxMDcwMDE5MjlaMBIxEDAOBgNVBAMMB3NmZWsua3owggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCo+dGLwNItllvQWY4E7xyw9FUEKTT2 YizzzR3TDcZN49V6swOcg+a/DjXzbIraIKeAbtjkZyxATrCpWCKds+/Fsr4o6VKx oLnujpAg0V+ZIsQo7SWxrSJXWOw4ZQ1GHC49f4CK4wjce1y5DZhvNPKHhwosilzi 4IPO6lU7GemB4Bl1Wa41SZpRjpuuJWqFRXI5JvhKbQaxOnIc7xuM3sVE0leNY55N ROJYlFU3nMkMCDh5QvKSkBB4ev5XS/514yxdNioUNT7u51Tei3bAfvy//sUDaDdn 7hdvuqr+6MsQ3O3CSXqBmYcz0Se3nr39rey7AEZt4f/8VVrVFBZ2iwmsGLVNSayS d4W8FwFEyfXLbdPdNEFtVvl1Tzb3Qts5/BdqcezmSY0KPGdHuEbwNRW4ibeeQwjl 00BvTWklgRlH+30XEC41T7G72k2XYv+kn07sPc6pMtggmQ/Gkr2aEGZYkMp9D0RD hIEhHq/WtOhGnKj3/9Kt83/Mlq5Zm4CIjgbY2CD8PrV5fpSLUAEM0ZVaYkrGqwuF QmFNQcBTK5b+uBhhgzQhMEFu9huchkprrDzS/vB7O583U3GnGIpfDGt21MyjjTAE T1wGG9oB1GYe8C3lRv+WV96Yeo/wv0e+b7y1XRF7TUoAAvcQU2GgFj8GVvvL8eVE /G3yOM33WqBgqwIDAQABo4IB2TCCAdUwCwYDVR0PBAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMCBggrBgEFBQcDATAJBgNVHRMEAjAAMB0GA1UdDgQWBBTHvB6qTvC3 va6FsOsZaiTNyUd5AzAfBgNVHSMEGDAWgBTSpxYgfK/ZlZ7rQwoZ8uC5dA6oxzB9 BggrBgEFBQcBAQRxMG8wNAYIKwYBBQUHMAGGKGh0dHA6Ly9vY3NwMS53b3NpZ24u Y29tL2NhNi9zZXJ2ZXIxL2ZyZWUwNwYIKwYBBQUHMAKGK2h0dHA6Ly9haWExLndv c2lnbi5jb20vY2E2LnNlcnZlcjEuZnJlZS5jZXIwPQYDVR0fBDYwNDAyoDCgLoYs aHR0cDovL2NybHMxLndvc2lnbi5jb20vY2E2LXNlcnZlcjEtZnJlZS5jcmwwSwYD VR0RBEQwQoIHc2Zlay5reoILd3d3LnNmZWsua3qCDHN0YXQuc2Zlay5reoILZWR1 LnNmZWsua3qCD3N0dWRlbnQuc2Zlay5rejBRBgNVHSAESjBIMAgGBmeBDAECATA8 Bg0rBgEEAYKbUQYBAgIBMCswKQYIKwYBBQUHAgEWHWh0dHA6Ly93d3cud29zaWdu LmNvbS9wb2xpY3kvMA0GCSqGSIb3DQEBCwUAA4IBAQDhzHyQ1G6m8rHGpmcwtLcI LA8tObxbUf5vFMdlF5PKsNK076QeW1zNtPvKaoEimxTKl3pEqGCPp2KgQLayGJEs mNLCzw7AlSczX92PdkTlVnSPIYFV197kTBcdFmojSKD8wpR9B0nDi/6oP99AI29d 8M+BTlVIaGbYsh3qZSCai6T5aG+mbv6WTnKWFVyAm9lFPb/FF0OVg4RiDhS1tRWQ Zy8g7WgwMsKjD3K+Ig3fjwMxxLMdJJ5YozQSQFfCxtWQdoOHwJWfIjsyCEwPlZF+ ydQMaUm8AfErslQHWewrp2esfmasjp65Jkp8n8zmbs5Eaw4q/uGnrRbLJoJIv+k2 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqPnRi8DSLZZb0FmOBO8c sPRVBCk09mIs880d0w3GTePVerMDnIPmvw4182yK2iCngG7Y5GcsQE6wqVginbPv xbK+KOlSsaC57o6QINFfmSLEKO0lsa0iV1jsOGUNRhwuPX+AiuMI3HtcuQ2YbzTy h4cKLIpc4uCDzupVOxnpgeAZdVmuNUmaUY6briVqhUVyOSb4Sm0GsTpyHO8bjN7F RNJXjWOeTUTiWJRVN5zJDAg4eULykpAQeHr+V0v+deMsXTYqFDU+7udU3ot2wH78 v/7FA2g3Z+4Xb7qq/ujLENztwkl6gZmHM9Ent569/a3suwBGbeH//FVa1RQWdosJ rBi1TUmskneFvBcBRMn1y23T3TRBbVb5dU8290LbOfwXanHs5kmNCjxnR7hG8DUV uIm3nkMI5dNAb01pJYEZR/t9FxAuNU+xu9pNl2L/pJ9O7D3OqTLYIJkPxpK9mhBm WJDKfQ9EQ4SBIR6v1rToRpyo9//SrfN/zJauWZuAiI4G2Ngg/D61eX6Ui1ABDNGV WmJKxqsLhUJhTUHAUyuW/rgYYYM0ITBBbvYbnIZKa6w80v7wezufN1NxpxiKXwxr dtTMo40wBE9cBhvaAdRmHvAt5Ub/llfemHqP8L9Hvm+8tV0Re01KAAL3EFNhoBY/ Blb7y/HlRPxt8jjN91qgYKsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 38803891057040303725365274295531613841 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Free SSL Certificate G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-07 00:19:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-07 00:19:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sfek.kz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 689361339050619271593573611990468643823738280389775111039748615533806080861865432734016539994221192913096998574545315308231937131825388343121900420272162339778991164560207287989009087902028847799882547634237847914893041128266958039619162003269823789382696181519378959228412181707710903800130629527681909607850104601325337787480446312795699595585307335129924831294540336728080911125051883963077828876335724535742998486499190379178277895946549876571863017553017018641870405744051292028743561287732134737175080384977600769347240615967366006249273897885121095492020478397750816977425893846746514876496596359114030166565378119857055963441513656362179897886485841126584305313489918388718941501917949240061552015202114547131571244865385165670379701940640575287505836980902375393766845240230447993305729020029645387073504808111169110671442479079845124229607942635170765805492511193030704467594416117010978797592494262710916112812304792548831054269811912514886588894668609415625171121715347946308260308008014824567449292836600892866489943389802068635296421908596440517603712017976535770493512300051719610469193743015300264315299531641522517731669451131767532504697110264793683186226081979263674175772315709478567944699609436800512127108407467 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c7bc1eaa4ef0b7bdae85b0eb196a24cdc9477903 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d2a716207cafd9959eeb430a19f2e0b9740ea8c7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp1.wosign.com/ca6/server1/free' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia1.wosign.com/ca6.server1.free.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls1.wosign.com/ca6-server1-free.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfek.kz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfek.kz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stat.sfek.kz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu.sfek.kz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.sfek.kz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.36305.6.1.2.2.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wosign.com/policy/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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