topazschool.org
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number 3e:99:d7:08:cc:ea:0f:40:0e:b9:09:9c:7b:b4:89:d9 was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=topazschool.org
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 3e:99:d7:08:cc:ea:0f:40:0e:b9:09:9c:7b:b4:89:d9Serial Number (int): 83210918573328600632951023846873663961
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: d4:0d:0f:2c:25:a0:80:38:4b:30:d1:92:3c:ed:62:d4:e2:76:91:31
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): 4f:d8:34:74:b4:37:3f:82:83:b4:c6:b4:34:72:ca:a2:7c:f4:54:97
Fingerprint (sha256): f6:c5:8e:f6:2b:6f:c6:28:be:0a:53:43:3a:05:ac:e6:c9:63:29:54:f5:13:34:12:de:8c:ed:6d:b6:5b:d2:29
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/weYC_9b1VKICRL Distribution Point: http://crls.pki.goog/gts1p5/FCDFzEATB9g.crl
Check the revocation status for certificate topazschool.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for topazschool.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
topazschool.org
Other certificates including the domain name topazschool.org
(limited to 100 certificates)
admin.advantageacademy.org
lb.comalisd.org
admin.wq.mtpcsd.org
topazschool.org
admin.waldorfhighschool.org
admin.ecrhs.pylusd.org
topazschool.org
admin.hilltopprep.org
topazschool.org
admin.uachs.org
ventureacademy.pylusd.org
admin.advantageacademy.org
www.lakeview.pylusd.org
www.topazschool.org
admin.melrose.pylusd.org
admin.sancarlos.edu.mx
admin.pylusd.org
admin.woodsboro.pylusd.org
admin.rosedrive.pylusd.org
topazschool.org
www.advantageacademy.org
topazschool.org
uachs.org
www.ecrhs.pylusd.org
www.topazschool.org
admin.lakeview.pylusd.org
newmillenniumacademy.org
www.topazschool.org
admin.ctc.dover.k12.nh.us
admin.nichols.bcsd.com
www.topazschool.org
www.topazschool.org
admin.hawthorneacad.org
admin.advantageacademy.org
www.hirschmetrohs.org
wq.mtpcsd.org
hilltopprep.org
www.trinidadusd.net
westsideusd.org
www.topazschool.org
topazschool.org
www.rosedrive.pylusd.org
admin.palomares.cv.k12.ca.us
www.woodsboro.pylusd.org
admin.advantageacademy.org
admin.southredford.org
admin.colegiosmadison.edu.mx
www.pylusd.org
admin.advantageacademy.org
melrose.pylusd.org
ecrhs.pylusd.org
admin.advantageacademy.org
www.topazschool.org
admin.newmillenniumacademy.org
www.topazschool.org
addams.southredford.org
golden.pylusd.org
www.inglesdurkheim.edu.mx
www.topazschool.org
topazschool.org
www.topazschool.org
pg.goldenruledallas.org
advantageacademy.org
lb.comalisd.org
admin.wq.mtpcsd.org
topazschool.org
admin.waldorfhighschool.org
admin.ecrhs.pylusd.org
topazschool.org
admin.hilltopprep.org
topazschool.org
admin.uachs.org
ventureacademy.pylusd.org
admin.advantageacademy.org
www.lakeview.pylusd.org
www.topazschool.org
admin.melrose.pylusd.org
admin.sancarlos.edu.mx
admin.pylusd.org
admin.woodsboro.pylusd.org
admin.rosedrive.pylusd.org
topazschool.org
www.advantageacademy.org
topazschool.org
uachs.org
www.ecrhs.pylusd.org
www.topazschool.org
admin.lakeview.pylusd.org
newmillenniumacademy.org
www.topazschool.org
admin.ctc.dover.k12.nh.us
admin.nichols.bcsd.com
www.topazschool.org
www.topazschool.org
admin.hawthorneacad.org
admin.advantageacademy.org
www.hirschmetrohs.org
wq.mtpcsd.org
hilltopprep.org
www.trinidadusd.net
westsideusd.org
www.topazschool.org
topazschool.org
www.rosedrive.pylusd.org
admin.palomares.cv.k12.ca.us
www.woodsboro.pylusd.org
admin.advantageacademy.org
admin.southredford.org
admin.colegiosmadison.edu.mx
www.pylusd.org
admin.advantageacademy.org
melrose.pylusd.org
ecrhs.pylusd.org
admin.advantageacademy.org
www.topazschool.org
admin.newmillenniumacademy.org
www.topazschool.org
addams.southredford.org
golden.pylusd.org
www.inglesdurkheim.edu.mx
www.topazschool.org
topazschool.org
www.topazschool.org
pg.goldenruledallas.org
advantageacademy.org
Certificate
The complete raw certificate details for topazschool.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgIQPpnXCMzqD0AOuQmce7SJ2TANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yMzA3MjcwNzAzNTZaFw0yMzEwMjUw NzAzNTVaMBoxGDAWBgNVBAMTD3RvcGF6c2Nob29sLm9yZzCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAKrrQImzA2TRF8nORYUqOHxkHf9x90cxKNQ6Sgp6 qSat0+L/WBtGUSHkfim0w4vB56hSrhvwmNwY+qV3ZGM+GxhY3QugIabLj4GdoGbU 9+LyIYNg/caX1F+HDlkOUWW7NRy/ywKHgBwTkMhi3GwPwrTQSu+1x4rTBdquAM40 /cQL334PRikSRrGqaWo0GHDTRmKVt563TCP2i106FkBaME5A2W1v53Zw0y4siQ2G 5EgkA4TTLOqLGQuxM6Yo3slcXj2QAClJumffsauYQ3pLrx6t54+YGGLRAeg9++lj cjAerCafLpDM+B+2KtF7qePq9AQqYHySrcyqOVKgwzkdDJMCAwEAAaOCAncwggJz MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8E AjAAMB0GA1UdDgQWBBTUDQ8sJaCAOEsw0ZI87WLU4naRMTAfBgNVHSMEGDAWgBTV /J4N3x7K3QiXl24rxV/FK/XsuDB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUHMAGG KWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMXA1L3dlWUNfOWIxVktJMDEGCCsG AQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxcDUuZGVyMBoG A1UdEQQTMBGCD3RvcGF6c2Nob29sLm9yZzAhBgNVHSAEGjAYMAgGBmeBDAECATAM BgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5n b29nL2d0czFwNS9GQ0RGekVBVEI5Zy5jcmwwggEFBgorBgEEAdZ5AgQCBIH2BIHz APEAdwCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAAAYmWYDzzAAAE AwBIMEYCIQCRsvishFQ9iCCyOfTjSkYP3G8fuqMJKLOn3laVczqA9wIhAJkUg6H8 92sZOQ/F+EAGlKOw0iE5isNpkMEJsLOaxq+FAHYArfe++nz/EMiLnT2cHj4YarRn KV3PsQwkyoWGNOvcgooAAAGJlmA9FwAABAMARzBFAiEAtkZ/wwWy8NrNkko00wXT ZnYwgzjZkWDG6creetrHWd4CIBS7dKezWNfsCZB138c4iFh5LFQuH0NP1WDXCyBb qaK1MA0GCSqGSIb3DQEBCwUAA4IBAQB5FOKF0/oM6gKMEKB8yoIvvT8luRk+C3YP bB3Adb0s4Gm8iwbsWim6PJ7DqnJ8XiRObfB6AEsffZizNsdySS1df+/bGKaCv4N+ ESTazuZO2M5wryiTi1XGEa1SYZkdNDKwXyB7MxoIL5BrboXXnpU7QEkD0vN3EcT6 82Lt35Dxzh7OdthgJ5USdP9MKmVr2X3nPJJ5Rg9OXOZ/a2TkyY+p61++j1gssDzn TZC5yTICqXqzWMpg/08uu/yTU7NyVyhmVl8sni1221UM2FlOnf10YAcIiT13bBuF 4J8wLr89bK2lyxDgCFJWna02RdNaD6QQXTZVYGuMpjIO6aUnQetU -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqutAibMDZNEXyc5FhSo4 fGQd/3H3RzEo1DpKCnqpJq3T4v9YG0ZRIeR+KbTDi8HnqFKuG/CY3Bj6pXdkYz4b GFjdC6AhpsuPgZ2gZtT34vIhg2D9xpfUX4cOWQ5RZbs1HL/LAoeAHBOQyGLcbA/C tNBK77XHitMF2q4AzjT9xAvffg9GKRJGsappajQYcNNGYpW3nrdMI/aLXToWQFow TkDZbW/ndnDTLiyJDYbkSCQDhNMs6osZC7EzpijeyVxePZAAKUm6Z9+xq5hDekuv Hq3nj5gYYtEB6D376WNyMB6sJp8ukMz4H7Yq0Xup4+r0BCpgfJKtzKo5UqDDOR0M kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 83210918573328600632951023846873663961 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-27 07:03:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 07:03:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'topazschool.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21576518978939392043826563463925477283278223831387922540993452668997936048473814026251187648033538991732673175143137415145815276217872159860359678177958510402462715884290647461176821875025632965231156536116479129392575146995729587807768610634709054441152506581305106958939354331227637021935128577072089500725029837473529391292926135921876725494262349659824036285645875133738630407886163670255752644071043321448231655647376986109618538182459513711633948165616956493793008789500854549005646611850825164102382996920652066842887768090911894145243600698212861520734991681138383882260382439038270199939077085058434074479763 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d40d0f2c25a080384b30d1923ced62d4e2769131 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/weYC_9b1VKI' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topazschool.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/FCDFzEATB9g.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018996603cf3000004030048304602210091b2f8ac84543d8820b239f4e34a460fdc6f1fbaa30928b3a7de5695733a80f7022100991483a1fcf76b19390fc5f8400694a3b0d221398ac36990c109b0b39ac6af85007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018996603d170000040300473045022100b6467fc305b2f0dacd924a34d305d36676308338d99160c6e9cade7adac759de022014bb74a7b358d7ec099075dfc7388858792c542e1f434fd560d70b205ba9a2b5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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