staging.nerpmarine.edu.au
Issued by Let's Encrypt Authority X1
About this certificate
This digital certificate with serial number 01:50:76:c2:7f:b3:0f:a4:78:e7:25:84:f6:6b:79:bd:83:89 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=staging.nerpmarine.edu.au
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:50:76:c2:7f:b3:0f:a4:78:e7:25:84:f6:6b:79:bd:83:89Serial Number (int): 114492734084581201417001528874237997974409
Serial Number lenght: 137 bits, 18 octets
SubjectKeyId: bd:14:65:c8:87:33:5f:84:34:a9:2b:75:0c:ab:30:3d:b3:eb:6e:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 62:2f:4f:47:38:ef:a0:7f:f4:a2:3f:e2:25:1f:af:40:82:27:c9:67
Fingerprint (sha256): f5:8f:8a:23:b5:83:c9:c8:6d:d4:60:36:99:cc:62:72:0b:5c:66:f4:6e:d9:d4:ce:58:09:cc:09:b3:36:de:52
Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x1.letsencrypt.org/Check the revocation status for certificate staging.nerpmarine.edu.au
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for staging.nerpmarine.edu.au
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
staging.nerpmarine.edu.au
Other certificates including the domain name nerpmarine.edu.au
(limited to 100 certificates)
nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
staging.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
nerpmarine.edu.au
www.nerpmarine.edu.au
nerpmarine.edu.au
www.nerpmarine.edu.au
nerpmarine.edu.au
nerpmarine.edu.au
www.nerpmarine.edu.au
staging.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
nerpmarine.edu.au
staging.nerpmarine.edu.au
www.nerpmarine.edu.au
staging.nerpmarine.edu.au
staging.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
staging.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
nerpmarine.edu.au
www.nerpmarine.edu.au
nerpmarine.edu.au
www.nerpmarine.edu.au
nerpmarine.edu.au
nerpmarine.edu.au
www.nerpmarine.edu.au
staging.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
www.nerpmarine.edu.au
nerpmarine.edu.au
staging.nerpmarine.edu.au
www.nerpmarine.edu.au
staging.nerpmarine.edu.au
staging.nerpmarine.edu.au
www.nerpmarine.edu.au
Certificate
The complete raw certificate details for staging.nerpmarine.edu.au in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgISAVB2wn+zD6R45yWE9mt5vYOJMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMTUyMjU4MDBaFw0x NjAzMTQyMjU4MDBaMCQxIjAgBgNVBAMTGXN0YWdpbmcubmVycG1hcmluZS5lZHUu YXUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC8FhYoR1NUxTJaka2V 96QvX9OcF94O3WxgJhPJ7ocWlczKBBBTfjKqpHBlgJRi1sZWzfFHldGPyj7buZk+ 67bP2Liqg6jtlZEQgURqCpp7FStSAd28U5goThdV1xbMNnduocLs/fbHVybnEhrh m37poivTZisIoBhb6r/3sLXmPHbDWUO20s5bokiaJoCiZIPFZ9oEwn1aSaLS8t37 FoF3WBLSg1IpA6ve8XXEYFOqt2+1fSFekIHBzqWzoBisK8A2B6NHjlq/P5OMNBgt OmISjLaUennZ84BOImyQYUKbfuS45tJy8qhmGKllCutvsRuYremwnezVJytlNZkw N2L+j0vj818YWS43eFcJZdhmKOQ+8tHFIXQGV+OCIxD/0b7z1jkPzSXpHUMO0abR ezSNirBYkGHT7na1pZ/k2HhloDbE4iKaQafohwLVOkF19IRd/9xmYbiWhSHqoBy7 E/mSUJW8VnT4OrqX7u9AbIdAmt5DYt8l8JTV8PDWu4JMZybuz1A5+cLo0O8Uv0qv JebQlYoNwPaVUt38RYDtMVVNj4GEETIoh9FCIbFcZnJCTiXuEtdE0RXB0syLLUf0 RPLTJd6FmI/tZsZMNvQihYcW1ZokH04aMKxdnNPGOkqSFwQRrpMkqM7G7JHhFKeC 6TJjHJpvuwQQOeASIiqPNBDenQIDAQABo4ICGjCCAhYwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBS9FGXIhzNfhDSpK3UMqzA9s+tudDAfBgNVHSMEGDAWgBSoSmpjBH3d uubRObemRWXv86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6 Ly9vY3NwLmludC14MS5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRw Oi8vY2VydC5pbnQteDEubGV0c2VuY3J5cHQub3JnLzAkBgNVHREEHTAbghlzdGFn aW5nLm5lcnBtYXJpbmUuZWR1LmF1MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHm BgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j cnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkg b25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkg aW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQg YXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcN AQELBQADggEBAG3WErZjQc4TjxlazjB7UjXKDhXV4d5LpD7vcr7BXL79sQ5ih2rB 0FES+w7Vl+UIguKHVNlC0oIy8vDuXmnhrrbGRe3GltZ5WJsN/fa+7fINZ+eeNAym bBZHGe5wcwfGmmvkPOo0FtWCQubudOUl1Hx8gqpkkcwQgDzQY3amNCot3MemD8db PD0Nwrff++Qcw+f/ebYvHXmldhqwAk36XGuOFGREhSQ/QaNQUlmQa1GTbOzi/Dw9 TAfmMKRaBtDkt9IX1hPqH3WDJbCHoCAilmTMwxvGmAhDxgcnCFnxXpDPOAZw178l AK+PddcUFYy5ivjUNEU6qXfFibrZ+rXVc4g= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvBYWKEdTVMUyWpGtlfek L1/TnBfeDt1sYCYTye6HFpXMygQQU34yqqRwZYCUYtbGVs3xR5XRj8o+27mZPuu2 z9i4qoOo7ZWREIFEagqaexUrUgHdvFOYKE4XVdcWzDZ3bqHC7P32x1cm5xIa4Zt+ 6aIr02YrCKAYW+q/97C15jx2w1lDttLOW6JImiaAomSDxWfaBMJ9Wkmi0vLd+xaB d1gS0oNSKQOr3vF1xGBTqrdvtX0hXpCBwc6ls6AYrCvANgejR45avz+TjDQYLTpi Eoy2lHp52fOATiJskGFCm37kuObScvKoZhipZQrrb7EbmK3psJ3s1ScrZTWZMDdi /o9L4/NfGFkuN3hXCWXYZijkPvLRxSF0BlfjgiMQ/9G+89Y5D80l6R1DDtGm0Xs0 jYqwWJBh0+52taWf5Nh4ZaA2xOIimkGn6IcC1TpBdfSEXf/cZmG4loUh6qAcuxP5 klCVvFZ0+Dq6l+7vQGyHQJreQ2LfJfCU1fDw1ruCTGcm7s9QOfnC6NDvFL9KryXm 0JWKDcD2lVLd/EWA7TFVTY+BhBEyKIfRQiGxXGZyQk4l7hLXRNEVwdLMiy1H9ETy 0yXehZiP7WbGTDb0IoWHFtWaJB9OGjCsXZzTxjpKkhcEEa6TJKjOxuyR4RSnguky Yxyab7sEEDngEiIqjzQQ3p0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 114492734084581201417001528874237997974409 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-15 22:58:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-14 22:58:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.nerpmarine.edu.au' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767325058503680709118558315438154273739289074706605215824658045440217867001290096726344098466612939545846675590404122772930517495054840110937055753579985965010943427495153900184042047981469431388888173917843381731258054095198570473448863703289010026711289305197166173442437807188021278523629220009356396054061484556029057063461484427888628881310325557786641833745323746872011905581160786843653342195968357840724876252803708186000436717248633384817066491816265061633243021504979031995820342773205869143689490147421371542037315126624795923135097025850579449999123074538494108825151783772334425338161989495871470284744048028911214271481312353056462202029767923867849364718384263995924457615592437199020969061552615294634672242435913764587232805027967587490683908620114415786370124988909730912309445233766363913260272815908859026932882864560562019632981804084100213257126490704734519222180028156607474647257380154264406008923543745377908072245450664108827124635993462264552448545503511218373337709723817828264626618342986381716565100211004231304988469958150590732255934968192532873442845540674080246305524576274783903210203776869340954741853767824552972248211632501343196914946441112271879786797983739984306055650919106459680834497601181 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bd1465c887335f8434a92b750cab303db3eb6e74 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.nerpmarine.edu.au' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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