test-s01-003-nam-westcentralus.substrate.cosmic-int.office.net

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 03

About this certificate

This digital certificate with serial number 33:00:59:9b:7f:04:91:82:f8:b0:7e:c3:4c:00:00:00:59:9b:7f was issued on by Microsoft Corporation.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:59:9b:7f:04:91:82:f8:b0:7e:c3:4c:00:00:00:59:9b:7f
Serial Number (int): 1137368496945571449693130811071890344459737983
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: e8:da:1d:8f:81:43:05:1a:89:11:11:18:ca:88:c5:7f:1b:a4:76:07
AuthorityKeyId: fe:09:71:40:55:05:10:44:d8:a4:81:75:b8:9e:1a:e9:4a:06:88:c8

Fingerprint (sha1): a2:c2:ad:7f:b1:c1:54:51:7b:23:1d:d6:a8:91:11:b0:4a:ec:d2:ec
Fingerprint (sha256): 00:ed:eb:ea:10:bf:da:a4:86:14:4e:2e:d1:e8:f0:0d:2d:1b:3b:a6:dc:99:3d:4d:1b:4d:4d:08:03:6f:5b:30

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl

Check the revocation status for certificate test-s01-003-nam-westcentralus.substrate.cosmic-int.office.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-s01-003-nam-westcentralus.substrate.cosmic-int.office.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-s01-003-nam-westcentralus.substrate.cosmic-int.office.net

Other certificates including the domain name office.net

(limited to 100 certificates)
test-s01-011-nam-westus2.substrate.cosmic-int.office.net
odc.officeapps.live.com
pavo.keyvault.office.net
prv.config.office.net
otcms.osi.office.net
displaycatalog.templatesproxy.office.net
substrate-msb-bingatwork.westus-test.cosmic-int.office.net
prv.config.office.net
statics.teams.cdn.office.net
xsi.office.net
securitysignalsapi-slice.office.net
statics.teams.cdn.office.net
mp.load.sms.skype.com
outlook.com
odc.officeapps.live.com
o365auditrealtimeingestion.manage.office.com
test-s01-003-nam-westcentralus.substrate.cosmic-int.office.net
diagnosticsportal.outlook.com
test.office.net
domaincontrollerclient.prod.torus.office.net
partition00-test.controller-info.cosmic-int.office.net
api.businesscentral.dynamics.com
support.office.net
testsslcert.office.net
griffinazureicmcert.office.net
videoplayer.osi.office.net
kasmgmtportal.osi.office.net
testrpscert.office.net
bookings.outlookapps.com
www.bing.com
c2r.ts.cdn.office.net
manage.officeppe.com
store.office.com
prv.config.office.net
mars-adls-mt-aus.office.net
prv.config.office.net
test.office.net
outlook.com
*.content.office.net
setup.office.com
agave.myanalytics.cdn.office.net
cws-escalation.office.net
nl.osi.office.net
uci.edog.officeapps.live.com
outlook.com
test-s01-002-nam-westus2.substrate.cosmic-int.office.net
shredder.osi.office.net
test.office.net
tasman.osi.office.net
sfcluster.apc.complianceposturemanagement.office.net
support.officeppe.com
prv.config.office.net
testdataencryptioncert.office.net
outlook.live.com
support.office.com
macommunication.geneva.keyvault.fullvalue.omex.office.net
test-s01-800-nam-westus.substrate.cosmic-int.office.net
*.dev.dev1.nonprod.ml.cdn.office.net
galo.checkin.partner.office.net
sway-to-sds-replication.office.net
prv.config.office.net
config.office.com
outlook.com
wevedata.office.net
test-s01-007-eur-northeurope.substrate.cosmic-int.office.net
endpoints.office.com
ocws.officeapps.live.com
testicmcertyiqwan.office.net
mars-encryptionmaster-mt-gov.office.net
o365auditrealtimeingestion.manage.office.com
outlook.com
partners.portal.office.net
cdn.forms.office.net
verification.omex.office.net
macommunication.geneva.keyvault.fullvalue.omex.office.net
hybridDMS.office.net
comments-ppe.office.net
test-s01-800-nam-westus.substrate.cosmic-int.office.net
bcws-client.office.net
esign.svc.cloud.microsoft
outlook.com
outlook.com
prv.config.office.net
partners.portal.office.net
cluster.osp.office.net
signalStore-client.office.net
gcp.comments.office.net
outlook.com
www.bing.com
outlook.com
support.officeppe.com
invites.office.com
www.bing.com
test-s01-001-nam-southcentralus.substrate.cosmic-int.office.net
outlook.com
outlook.com
uci.edog.officeapps.live.com
test-s01-800-nam-westus.substrate.cosmic-int.office.net
eop.pavcservice.office.net
mars-tokenservice-datawriterclient-mt-aus.office.net

Certificate

The complete raw certificate details for test-s01-003-nam-westcentralus.substrate.cosmic-int.office.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxltFRD30Kg51nQWCtR7+
HaHTGE+Q3iQTqg+/2unsmc3J/eNvIGFo1rRdb/RkgeVYfJMS8sLgxhMx8xsfTxQ9
zwcVCTS1tPS0w/8YTbiY2CQh6KBpCiUGp7V5VjTMXdhFI2+/yhCHQiKNhAGaOOZB
DofmI2ruVhzEMPxpQ2mg8a5ZMZMdJkwbQ9htQn/9xRbNG/Ks9qBTKvpPLpjLKglv
aYStnC2kZ8JwJMoQKWvv53tKPrbsgeL0ECRqHSJ745+GMttelFWtKB74Edc+eqbG
im5Dn8KlOmz5B4LQ5zupZKv3KIPWZ/cbhoA66lXHN1k0ALknmUx9SDnaBTF72V+7
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137368496945571449693130811071890344459737983
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 09:02:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-30 09:02:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-s01-003-nam-westcentralus.substrate.cosmic-int.office.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25040191580040467913740025727575340528631370049013160954872862034208630835782830278657914490156530868199029936967154204751909765188091819432002523901898573292431402189545602157226510938611659661205394385287897180079558564963108473955700182328557513786755511067630763546609044065742210079197000445602297550930230134691476184828931989527338039729547068019019537762615884874097081275881044639239893774701879600211013980207783008312042958824003702643629267218543340759678882138224261870666971884021830075351303886157950036460502988903365435035575919420899978647510968006856594425933820853027627811384247063335818527488997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8da1d8f8143051a89111118ca88c57f1ba47607
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-s01-003-nam-westcentralus.substrate.cosmic-int.office.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe09714055051044d8a48175b89e1ae94a0688c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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