coopercont.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a5:af:e4:53:24:f5:43:89:bb:62:d2:ed:cc:45:ba:b9:16 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=coopercont.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a5:af:e4:53:24:f5:43:89:bb:62:d2:ed:cc:45:ba:b9:16
Serial Number (int): 404829534698310055705869054798413747108118
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 06:2b:34:3e:c1:d7:83:d1:ca:43:b0:a6:95:69:12:6a:c7:06:4b:25
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): db:ac:80:81:44:2c:2b:df:6d:83:fb:a0:fc:19:6b:9c:61:ca:b3:2e
Fingerprint (sha256): fb:d5:ec:ca:34:99:4b:22:e9:30:08:08:da:52:e2:b3:5e:ad:ff:6a:76:f7:83:42:de:5c:50:ff:66:7c:ad:20

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate coopercont.com.br

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for coopercont.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

coopercont.com.br
mail.coopercont.com.br
www.coopercont.com.br

Other certificates including the domain name coopercont.com.br

(limited to 100 certificates)
thx1138-force.com
getworkplan.io
app.flemme.io
coopercont.com.br
theswingerscorner.com
dev-links.asmmbc.net
webmail.coopercont.com.br
coopercont.com.br
www.uwrizzu.me
www.medbuyer.com
cqc.coopercont.com.br
coopercont.com.br
coopercont.com.br
www.audiodramapp.cl
www.vinasa.net
sweal.me
www.thiwakorn.com
www.medbuyer.com
app.boostchinese.com
coopercont.com.br

Certificate

The complete raw certificate details for coopercont.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGijCCBXKgAwIBAgISBKWv5FMk9UOJu2LS7cxFurkWMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMzExODQ4NDNaFw0y
MDA0MzAxODQ4NDNaMBwxGjAYBgNVBAMTEWNvb3BlcmNvbnQuY29tLmJyMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArhfOS+FZQLd2yB0ZYYuTLfnAswz1
KjU9G/iP+5KpuuL7CLimEVgdaZAqzNYKpVx3tB+LJW0PA/goZHKLfGwCH09KnjaE
7X2c8OJT7w4gxQUMOOR4SffSUxa0a+ObxkOHYViaZpxffeUTJRDYdHxNTcEIRbAj
Nn9NYO1MZNQqf5Z+SnxctroUuSeh6vdbac+s0a5lztmqMCgn35y6UyrM3PjPSNxb
dpzR/6lGRCorT/1whQBKoRhyLi8hvOyFnX1jpmdlG5KjuG5GKz/RCbxKzwc7tSbd
2we1tDMUxE4XmfOi6TOWH9wGccJkUpeXuhE61WCm1wNs03uKgCiHrWBbbQWziOED
dAh4CbTau4vKedH+g0F5zs4EcrD6fpxfdKWMbxTeuKCvHm8MNDeUmKYa0AjnQ3g7
ziaJ9F7sbt9cclsiHrvRMMDsFlomb+28MJhHAJJ//Q2v3G6FTytdroE0gaZcCmsx
qvjyxIHs5/Yb9Gh+N3r/T+29m8xqQOyYFsjnXF8O3pwbPlm+FDYclJpTww8ggUH9
ZpiA0FIvTrtekkMxILTwb4dqltnIjeIdIzfHg+8WZ93jxVGHscXdI984vpwK/X9l
JahOMbh2NbtRauFvzCqzydbhc3dQ5zYmN++v1Gc6MGJ7P0QvMvkeLs81UepbxIhR
LnM96XEgZWZXwFkCAwEAAaOCApYwggKSMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
Bis0PsHXg9HKQ7CmlWkSascGSyUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzBLBgNVHREERDBCghFjb29wZXJjb250LmNv
bS5icoIWbWFpbC5jb29wZXJjb250LmNvbS5icoIVd3d3LmNvb3BlcmNvbnQuY29t
LmJyMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB
BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIE
AgSB9gSB8wDxAHcA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFv
/SYBSwAABAMASDBGAiEAlQoPURndZnoMl7t/Ofhk9bgWPhuc8Dc1KXbe/pUbcrUC
IQC3dkot99kkAGcolto8YolWoGy7CFqTnMcNJamwU4BGYgB2AAe3XBvlfWj/8bDG
HSMVx7rmV3xXlLdq7rxhOhpp06IcAAABb/0mAXEAAAQDAEcwRQIhALOj+6Rn8ffh
xjeDvAKAzj1+Ae6vLARx6EFyqHV2gpHlAiA4a7ip1opJ6IP46Am+Y/iy4FWaRs2P
tgPGslSCTUkZ5jANBgkqhkiG9w0BAQsFAAOCAQEAjsZlbsWJj7Tw9CROyhqeS2q8
2z84IxSMk9cJbR1fEIvVw1ac6ngCmNyLCqGwfu8ptqWjjHM9T6GpISnT7hKRJZA7
TiLnFRf9VPq1+QEGwppRyMksFWcXLnJPtKxjY/tZvgfLs+719tHIDrNo50KZzdEx
wRpVZ4oBWRp0KClaQKdOEAZD4dLrhvWdSmnpVZnev8rRTqGSi9CwKJgulZU0WqoY
o91QriEt2+scwgOYBfnhEhdigwzLhsX/8p4i6RX7/IvKfnhRYjpdVvnNX69xRoPD
MiP7/s0LJjPdW8Lle4MYAhu9qgruXubiWE26/LulIvBtFqytcivnfttWR23U+w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArhfOS+FZQLd2yB0ZYYuT
LfnAswz1KjU9G/iP+5KpuuL7CLimEVgdaZAqzNYKpVx3tB+LJW0PA/goZHKLfGwC
H09KnjaE7X2c8OJT7w4gxQUMOOR4SffSUxa0a+ObxkOHYViaZpxffeUTJRDYdHxN
TcEIRbAjNn9NYO1MZNQqf5Z+SnxctroUuSeh6vdbac+s0a5lztmqMCgn35y6UyrM
3PjPSNxbdpzR/6lGRCorT/1whQBKoRhyLi8hvOyFnX1jpmdlG5KjuG5GKz/RCbxK
zwc7tSbd2we1tDMUxE4XmfOi6TOWH9wGccJkUpeXuhE61WCm1wNs03uKgCiHrWBb
bQWziOEDdAh4CbTau4vKedH+g0F5zs4EcrD6fpxfdKWMbxTeuKCvHm8MNDeUmKYa
0AjnQ3g7ziaJ9F7sbt9cclsiHrvRMMDsFlomb+28MJhHAJJ//Q2v3G6FTytdroE0
gaZcCmsxqvjyxIHs5/Yb9Gh+N3r/T+29m8xqQOyYFsjnXF8O3pwbPlm+FDYclJpT
ww8ggUH9ZpiA0FIvTrtekkMxILTwb4dqltnIjeIdIzfHg+8WZ93jxVGHscXdI984
vpwK/X9lJahOMbh2NbtRauFvzCqzydbhc3dQ5zYmN++v1Gc6MGJ7P0QvMvkeLs81
UepbxIhRLnM96XEgZWZXwFkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404829534698310055705869054798413747108118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-31 18:48:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-30 18:48:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'coopercont.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 710237440396945992297054703783824607886901382811735709929438093411384879137736787071029284351962848754801878997468285909310008111810513009285846570251497452323952496298207609535512404676899660541713745017746766569863111445308958410675950991490599950767441996148357164513144787448853566061869400603375757165468131932612982749221184457882389498487918150777835841234448726643179608563556929630182605517335978959718895822584268448147423436181699453063094205513117275567727380483509950474768437876616633939831602340296152694964876261249379178233051365129209835959239960211520517919746181788930555497315123121300123895035586240488149132973457386454599325632619783989071194704165352328736581858171367657261107414090893012921540629129138492563226926824114542100181335185232557233340360398382510314705740210011701243454103181393971507894285262533317499910765366199830919147811419763096084379100133884055349659103064751717918897366948229770281472437824114801865434711249149932965680136791692880555827472820114299400428860387734590411893461900344766253364559146149903947651969270379257341436958471867633786617518926591194500329212734221547138295214786817976095855749448382388784837170136007420621604673887343859857211544659248723948312454479961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							062b343ec1d783d1ca43b0a69569126ac7064b25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coopercont.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.coopercont.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coopercont.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ffd26014b0000040300483046022100950a0f5119dd667a0c97bb7f39f864f5b8163e1b9cf037352976defe951b72b5022100b7764a2df7d92400672896da3c628956a06cbb085a939cc70d25a9b05380466200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ffd2601710000040300473045022100b3a3fba467f1f7e1c63783bc0280ce3d7e01eeaf2c0471e84172a875768291e50220386bb8a9d68a49e883f8e809be63f8b2e0559a46cd8fb603c6b254824d4919e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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