ntccofcheyenne.org

Issued by R3

About this certificate

This digital certificate with serial number 03:1e:c1:ca:6b:f1:e9:5f:c7:a6:5c:37:16:1b:c6:da:ac:97 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ntccofcheyenne.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1e:c1:ca:6b:f1:e9:5f:c7:a6:5c:37:16:1b:c6:da:ac:97
Serial Number (int): 271802920839444847197151746578007040109719
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:79:ce:fd:cb:93:6e:c7:04:d5:ad:4b:92:68:51:88:49:fd:83:c6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 32:2f:11:0f:10:f3:f0:3e:e4:4f:8a:8d:d6:96:9c:4f:2e:bc:12:70
Fingerprint (sha256): f1:f9:df:27:d0:18:38:c5:80:46:37:f1:6b:e3:7a:97:3f:ce:5c:87:51:eb:2b:b6:b1:11:52:af:85:12:24:42

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ntccofcheyenne.org

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ntccofcheyenne.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activatelearning.staybridgelubbock.com
affiliateprofitsclubhouse.com
allulosezero.com
avenuedesign.info
blowjob8k.com
bookboxes.com
eastsaintlouisrealestate.com
girardville.com
giwindustries.com
houseedgenetworks.co.uk
legalexpo.com
liverdialysis.com
mistral.in
ntccofcheyenne.org
recyclednimh.com
southwestblankets.com
treasurytrust.com
youngvancouver.social

Other certificates including the domain name ntccofcheyenne.org

(limited to 100 certificates)
ntccofcheyenne.org
gemalings.ca
63368.net.jaros.love
kiesza.ca
tvone.co.za
ntccofcheyenne.org
ntccofcheyenne.org
ntccofcheyenne.org
artisan.ninja
ssl-lsplg.epik.to
ntccofcheyenne.org

Certificate

The complete raw certificate details for ntccofcheyenne.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgISAx7Bymvx6V/Hplw3FhvG2qyXMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMDYwMDEzNTNaFw0yNDA1MDYwMDEzNTJaMB0xGzAZBgNVBAMT
Em50Y2NvZmNoZXllbm5lLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKo6Mw0tdGLFF0wIJLgRsqxsHiWY1cEAy4azu4DK6zGFTDiu1s1XjMIhIV+f
AchnqdMx5/UDfaMJG5+Cj1d3hq5ngr8/73a2DHpexoL5FYqAMrMjWdhpdXMSbfiD
LqX2RTEnKF3lxjmiwiXEXx+9xeHH549uqrwpAWRqAViQsdH9UWulVLZj11zwQMQv
mFxTlw7mcmyoavkE88fypoaa6cicIINUMCHTKC6GWxiYXlFLNtPRVHW18eaQEs9F
6wGlkXhDp8FZCAaH64xYaPRSLXFzNrVzRlySCxMAaAk4QAiNzIGFK2VCvOa/u3ZQ
nxYnSgGLmOuGdgnCvUmK4ClOS5cCAwEAAaOCA4EwggN9MA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUfHnO/cuTbscE1a1LkmhRiEn9g8YwHwYDVR0jBBgwFoAUFC6zF7dY
VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw
Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy
Lm9yZy8wggGHBgNVHREEggF+MIIBeoImYWN0aXZhdGVsZWFybmluZy5zdGF5YnJp
ZGdlbHViYm9jay5jb22CHWFmZmlsaWF0ZXByb2ZpdHNjbHViaG91c2UuY29tghBh
bGx1bG9zZXplcm8uY29tghFhdmVudWVkZXNpZ24uaW5mb4INYmxvd2pvYjhrLmNv
bYINYm9va2JveGVzLmNvbYIcZWFzdHNhaW50bG91aXNyZWFsZXN0YXRlLmNvbYIP
Z2lyYXJkdmlsbGUuY29tghFnaXdpbmR1c3RyaWVzLmNvbYIXaG91c2VlZGdlbmV0
d29ya3MuY28udWuCDWxlZ2FsZXhwby5jb22CEWxpdmVyZGlhbHlzaXMuY29tggpt
aXN0cmFsLmlughJudGNjb2ZjaGV5ZW5uZS5vcmeCEHJlY3ljbGVkbmltaC5jb22C
FXNvdXRod2VzdGJsYW5rZXRzLmNvbYIRdHJlYXN1cnl0cnVzdC5jb22CFXlvdW5n
dmFuY291dmVyLnNvY2lhbDATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB
1nkCBAIEgfYEgfMA8QB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRz
AAABjXv6iWoAAAQDAEgwRgIhAIp4NXmCeJgf7LwBezsHKwdeiI7q5oBXs96sPkhk
UkoOAiEA0PtLLp3gq+ovuGmPyxptcxfSsC0yG7AtFyDLmmeQRXMAdgDuzdBk1dsa
zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY17+ouKAAAEAwBHMEUCID2XHVnj
c9gdXgR2y/5XQVIPZXWHKgKZ40umjc2VqyREAiEAz0GPOHdFhqEUEaf7h9RM5HaJ
U7kcl6BnADhtnCyK6fcwDQYJKoZIhvcNAQELBQADggEBAI3whX4bASUZKGXoZxi1
U+32qmKIMF8/PJkdeebjMmrDBzbC0DxRWKJQG2s+CjNCQ8GhhnsRHUfH/QpmVqA0
4Xv9DTlqEmmf26MwT7qmJ+2xEue3on3WzF+zncKWs3rwYr904iWqM/aO3RfbnDxS
OykPZRUbJ4jix2FpTtR8VsiRl94znktghUXzr2B8mQCzz3TsMlUwd/X/0QyGX9tu
v0B6UXwksmfYa3bC8GrE27BPY0l+ryjsTwfDf3WN1XwvApoWF85k5aGX8n0uPmvJ
dj3+6p+LycecN6Y7qLOKR+inYmfFsuwNx2xDTnXL4tragP/R5FzOTMqkIXC33QD/
udQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjozDS10YsUXTAgkuBGy
rGweJZjVwQDLhrO7gMrrMYVMOK7WzVeMwiEhX58ByGep0zHn9QN9owkbn4KPV3eG
rmeCvz/vdrYMel7GgvkVioAysyNZ2Gl1cxJt+IMupfZFMScoXeXGOaLCJcRfH73F
4cfnj26qvCkBZGoBWJCx0f1Ra6VUtmPXXPBAxC+YXFOXDuZybKhq+QTzx/Kmhprp
yJwgg1QwIdMoLoZbGJheUUs209FUdbXx5pASz0XrAaWReEOnwVkIBofrjFho9FIt
cXM2tXNGXJILEwBoCThACI3MgYUrZUK85r+7dlCfFidKAYuY64Z2CcK9SYrgKU5L
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271802920839444847197151746578007040109719
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 00:13:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 00:13:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ntccofcheyenne.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21489211047778930151936656563032115544784021428885374646290924170199783867775487853136019167265684735656015682906399637669609787946354328361453455525716569536793864707785243771125725736515452037377761091476571412241694471887701662447466690306493232804697961455556474946879230089619736025552836948009239568563555296387264840317101014188057243639156810823253794939737970773727044351806989129725644715272399888919274037896744538591226617421923899227046624699475849288540139531753454222494873372123402043338788519918512283478926069180784708080664224780475124940797784231821469518413502748160105397308703893325133449677719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c79cefdcb936ec704d5ad4b9268518849fd83c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (382 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activatelearning.staybridgelubbock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliateprofitsclubhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allulosezero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avenuedesign.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blowjob8k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookboxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastsaintlouisrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girardville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giwindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseedgenetworks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalexpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liverdialysis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mistral.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntccofcheyenne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recyclednimh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southwestblankets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treasurytrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngvancouver.social'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d7bfa896a00000403004830460221008a7835798278981fecbc017b3b072b075e888eeae68057b3deac3e4864524a0e022100d0fb4b2e9de0abea2fb8698fcb1a6d7317d2b02d321bb02d1720cb9a67904573007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d7bfa8b8a000004030047304502203d971d59e373d81d5e0476cbfe5741520f6575872a0299e34ba68dcd95ab2444022100cf418f38774586a11411a7fb87d44ce4768953b91c97a06700386d9c2c8ae9f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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