grupopensarte.com.br
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:16:50:e0:35:24:d5:0e:b2:b9:1e:47:67:b8:d2:f6:e8:7c was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=grupopensarte.com.br
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:16:50:e0:35:24:d5:0e:b2:b9:1e:47:67:b8:d2:f6:e8:7cSerial Number (int): 268930572259586352127388568425136894961788
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 63:27:da:69:cc:bf:aa:58:02:12:3d:7b:36:18:f2:cd:74:a7:dc:52
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 9d:53:ad:2a:34:c8:b1:2c:9c:b0:26:27:05:e9:3a:4a:99:fd:b1:5c
Fingerprint (sha256): fd:b0:1d:58:07:d4:28:7f:ee:6e:5b:41:e7:81:7c:68:05:b8:2f:c5:a6:9e:85:34:10:de:fd:77:b3:82:ba:5f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate grupopensarte.com.br
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for grupopensarte.com.br
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
grupopensarte.com.br
www.grupopensarte.com.br
www.grupopensarte.com.br
Other certificates including the domain name grupopensarte.com.br
(limited to 100 certificates)
cms.thucdon.app
grupopensarte.com.br
www.grupopensarte.com.br
play.evy.dev
grupopensarte.com.br
grupopensarte.com.br
wheely.davidkehinde.com
ch.komel.de
cms.thucdon.app
controller.sqiffer.com
slabikareodinesky.cz
grupopensarte.com.br
skyzex.com
dev-tracker.tripattern.com
grupopensarte.com.br
farawayupclose.nl
www.stage.thetoucan.app
grupopensarte.com.br
farawayupclose.nl
medios.resultadistas.com
grupopensarte.com.br
grupopensarte.com.br
grupopensarte.com.br
grupopensarte.com.br
grupopensarte.com.br
www.grupopensarte.com.br
play.evy.dev
grupopensarte.com.br
grupopensarte.com.br
wheely.davidkehinde.com
ch.komel.de
cms.thucdon.app
controller.sqiffer.com
slabikareodinesky.cz
grupopensarte.com.br
skyzex.com
dev-tracker.tripattern.com
grupopensarte.com.br
farawayupclose.nl
www.stage.thetoucan.app
grupopensarte.com.br
farawayupclose.nl
medios.resultadistas.com
grupopensarte.com.br
grupopensarte.com.br
grupopensarte.com.br
grupopensarte.com.br
Certificate
The complete raw certificate details for grupopensarte.com.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGeTCCBWGgAwIBAgISAxZQ4DUk1Q6yuR5HZ7jS9uh8MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MTMwNzAwNDhaFw0y MDA3MTIwNzAwNDhaMB8xHTAbBgNVBAMTFGdydXBvcGVuc2FydGUuY29tLmJyMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoBVZ+B4Lh1CuZuhIDxrJs2cD yxSA83QCYnm2sq/PR5rWG9Atrmnv2ZK8oLzz7UEQutDjEIpy8mCvghuvgrMQ549F 3M1jAf1CtcIz6gXLmlOQRI4oP6+cZFx2lyPO9kCI7/OsXjm2rUHqH89L5/ZMz4Hd OV+l+bnUKGRyAqo4QUx2JR6X5Y6wYbrKj4fQ4RUw+QGhhUDY8zY3/MnwuMurl6kn DgILKUkoaF/7M734WD8+znXcviEF+HE+Ci+u1CiI/B6rj9bU4nZvhDFuQ8+/XCDt BHN1lQGTs+Bc8YfzSHDNHhRAmy7iWZc3iMMwrEO0YO5MYrw0RoCBENOt01P0+idG xR33K82KzStynBUQf/W285aP60dW92vVqGLsm7nnSUAiwjHJMKq8TfQD8BcGUyBG nsYpzzq4ai86C6rmd4MDex7ZCnT5RIvzUE8k+VeachudDjBFo0h4DSJuJtiZpfoj 4a8hKUjjlshgsf2P7+mUs5J9i27k6G9NhchdUvMGuGzeukJQYNVZUJYMRxCnhL24 ZQQVkU8AsNRIeE1OrgjJqR3H+A0pZO5EveeKAhWaa81iJYK0syK2Naishg5L2Fxl 0K5y3EwcMYXO7dNK018HoNMCT0iIGV6WlcDohSx1c+Spa8noCPaqMdzp7ZcgHE1u 4lA/NryXVs0uFPieHjcCAwEAAaOCAoIwggJ+MA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUYyfaacy/qlgCEj17NhjyzXSn3FIwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3 pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzA5BgNVHREEMjAwghRncnVwb3BlbnNh cnRlLmNvbS5icoIYd3d3LmdydXBvcGVuc2FydGUuY29tLmJyMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAsh4F zIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFxco4fxQAABAMARjBEAiAJ NK3zo7s26kyFoEe31Z+Cj2de4dD8OJEX2yU7FVBMpwIgZf9O7wRwahyPz46gy0zs uwTXaY4oDSe92fr+vgEuJ6gAdgDnEvKwN34aYvuOyQxhhPHqezfLVh0RJlvz4PNL 8kFUbgAAAXFyjh/EAAAEAwBHMEUCICd6jxF5zOriZoRo0D8EGmHAEz2xnalQ2K7F pJ9z2yYWAiEA5SfvHACfSqLhDT/r3GYivbdqqz6LaMpOsbBB+bBgOwkwDQYJKoZI hvcNAQELBQADggEBAA7Ha4VE4Q7IZ4ctGBC8MViVjSZef/u9G9+pdkOOh4JVvd62 9z/SWKbHBz/+7VhL9oN8QDzYwPHWlmxI22EaUnlkSBPJ6BjcH9iyomFZNO9WmYWZ KZMrbE7D21rgv6UGMj/26Qf3ewoRxXACXF+/bhjvAD8r9SjEDXzFY0oWlk6l93RE vKmu8LAa7liA9yb0b99rg6e862M1sbDmRuiEN21LU5m2wn2CzLkSZA8thFZ/JK+p JpI6CKrME7x5Ue3W645RPBYDRYC7/GViiuShKAVaYtGQrrK2dT//pZV0Hv7cRIrM DeBqsHHj5jRP8uDUPaly4S6mdjIREb4HGO760Is= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoBVZ+B4Lh1CuZuhIDxrJ s2cDyxSA83QCYnm2sq/PR5rWG9Atrmnv2ZK8oLzz7UEQutDjEIpy8mCvghuvgrMQ 549F3M1jAf1CtcIz6gXLmlOQRI4oP6+cZFx2lyPO9kCI7/OsXjm2rUHqH89L5/ZM z4HdOV+l+bnUKGRyAqo4QUx2JR6X5Y6wYbrKj4fQ4RUw+QGhhUDY8zY3/MnwuMur l6knDgILKUkoaF/7M734WD8+znXcviEF+HE+Ci+u1CiI/B6rj9bU4nZvhDFuQ8+/ XCDtBHN1lQGTs+Bc8YfzSHDNHhRAmy7iWZc3iMMwrEO0YO5MYrw0RoCBENOt01P0 +idGxR33K82KzStynBUQf/W285aP60dW92vVqGLsm7nnSUAiwjHJMKq8TfQD8BcG UyBGnsYpzzq4ai86C6rmd4MDex7ZCnT5RIvzUE8k+VeachudDjBFo0h4DSJuJtiZ pfoj4a8hKUjjlshgsf2P7+mUs5J9i27k6G9NhchdUvMGuGzeukJQYNVZUJYMRxCn hL24ZQQVkU8AsNRIeE1OrgjJqR3H+A0pZO5EveeKAhWaa81iJYK0syK2Naishg5L 2Fxl0K5y3EwcMYXO7dNK018HoNMCT0iIGV6WlcDohSx1c+Spa8noCPaqMdzp7Zcg HE1u4lA/NryXVs0uFPieHjcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 268930572259586352127388568425136894961788 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-13 07:00:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-12 07:00:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grupopensarte.com.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 653083309807433529135679793592132656443170550704832813826475577317520361310689977755291527494676062601953921918936048854682764490792895605227356428410029421495835080830655629601139952942378975173892657460380574585514311059966279397038159773093875369864737648469664752579952890876117771728702747524739897025535623452501248742364415919084090689311100482341643542747503069329697253780514605852159141386253608826610782613376479779445324720320811278288887994600847861189687408483393397386507587834947294100378441194802059417457604425282247653743848536256509499534321213255008768023857292345761158926362613351305409154502252139996143345158307146458962433033029654519684913017709411544107481442831443094068394057974586416063816805784238555156271414761394014942833633495527594668391807982040595941355790453226436634047512943556533477036714524509844783363024215130518659403288405274601163896984595903318079079160108619140939353636005494194383943856773031215212278402430864968443322830416581713771854282358919162314933913703982784515857090231847123502272364270909099725548169851769173733487033708474282960778246405748333959608327664416092324158556613865223465036686193715818181560422779160052742059625482670337393478314583548886304287547596343 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6327da69ccbfaa5802123d7b3618f2cd74a7dc52 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupopensarte.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupopensarte.com.br' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000171728e1fc5000004030046304402200934adf3a3bb36ea4c85a047b7d59f828f675ee1d0fc389117db253b15504ca7022065ff4eef04706a1c8fcf8ea0cb4cecbb04d7698e280d27bdd9fafebe012e27a8007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000171728e1fc400000403004730450220277a8f1179cceae2668468d03f041a61c0133db19da950d8aec5a49f73db2616022100e527ef1c009f4aa2e10d3febdc6622bdb76aab3e8b68ca4eb1b041f9b0603b09 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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