*.footprintdns.com

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 03

About this certificate

This digital certificate with serial number 33:00:3d:e6:31:46:c1:75:26:49:b6:36:5c:00:00:00:3d:e6:31 was issued on by Microsoft Corporation.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:3d:e6:31:46:c1:75:26:49:b6:36:5c:00:00:00:3d:e6:31
Serial Number (int): 1137359068327740630027104513596975445436130865
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: ae:4e:8b:03:5c:63:ba:32:e1:5b:91:5a:b7:85:1a:76:ff:f4:5d:fd
AuthorityKeyId: fe:09:71:40:55:05:10:44:d8:a4:81:75:b8:9e:1a:e9:4a:06:88:c8

Fingerprint (sha1): 6d:36:1e:06:4d:f8:f8:72:bf:3c:53:5b:cc:95:7a:68:bb:c2:09:84
Fingerprint (sha256): 04:de:ff:d1:00:5b:de:16:9e:c0:ac:b2:e0:99:50:10:43:cf:b7:b6:25:11:1e:04:6d:69:87:47:4b:24:48:18

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl

Check the revocation status for certificate *.footprintdns.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.footprintdns.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.footprintdns.com
*.azr.footprintdns.com
*.clo.footprintdns.com
*.netmon.azure.com
*.taiwann.a.footprintdns.com
*.teams.fp.measure.office.com
*.measure.microsoft.com

Other certificates including the domain name footprintdns.com

(limited to 100 certificates)
*.footprintdns.com
outlook.com
partner.outlook.cn
*.footprintdns.com
*.footprintdns.com
outlook.com
*.footprintdns.com
outlook.com
*.footprintdns.com
outlook.live.com
*.footprintdns.com
outlook.com
*.footprintdns.com
*.footprintdns.com
*.footprintdns.com
outlook.com
outlook.com
*.footprintdns.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
*.footprintdns.com
*.clo.footprintdns.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.de
*.msedge.net
*.footprintdns.com
*.msedge.net
*.footprintdns.com
outlook.live.com
outlook.com
*.footprintdns.com
*.footprintdns.com
outlook.com
*.footprintdns.com
*.footprintdns.com
outlook.com
Outlook.live.com
outlook.com
outlook.com
outlook.com
outlook.com
*.footprintdns.com
outlook.com
*.msedge.net
*.footprintdns.com
*.footprintdns.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
partner.outlook.cn
outlook.com
outlook.com
*.footprintdns.com
outlook.com
outlook.com
outlook.com
outlook.com
*.clo.footprintdns.com
*.footprintdns.com
outlook.com
*.footprintdns.com
*.footprintdns.com
*.footprintdns.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
*.footprintdns.com
outlook.com
*.footprintdns.com
outlook.com
outlook.com
outlook.com
*.footprintdns.com
*.footprintdns.com
outlook.com
outlook.com
*.footprintdns.com
*.footprintdns.com
*.footprintdns.com
outlook.com
outlook.com
outlook.com
outlook.com
*.footprintdns.com
outlook.com
outlook.com

Certificate

The complete raw certificate details for *.footprintdns.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBZbWfgQEDnDGDJGJ/pf
xZMZDAWAkEkDMm+jMU3ul3+2GR88ky8dlW2XteOub5yo7cNDZfyPCADV7Isn7Vrr
UFq7T1mCqowFMNYaRLvG0uhUKeOnW1Mb5HCc4F9S/ktNMtNCl6Y+HsOt2jCxQWN5
3s7TugmuWkz9946mV3MxVN+BUK/nKHPrKKW7NnwYu1TjMfL7XfmcETghMVUyyu/T
SIVEydG7Pd3kaekS94c7wP1juEhormCSzsh9zQFdaRcRtPb0u+vk4ZL5n1MoxjRD
6eV3SjRunTXXhOe0cf2okGzDT/Zkz1zX/VDslVyrOdfiQNePWZq+S6LEFD+IPIG/
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137359068327740630027104513596975445436130865
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 03:27:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-24 03:27:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.footprintdns.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20714106583902085745805832583962143404344577805833706740781453639992085543975106683797171918479377985302050499291817445861642665281643981461943029442080719155013504970741207980444589231581463475931283624829234875923661702158993176555405446611361230720671125457104260785823071716910505743139833284585011171267621431386878266720286204213226737734305382722029625647149566928598823481506066773506917838515543589925381570450986147325318067138984943846928763873198091482044628896941388403807824354648505352329593803757946694435925786029371109640047500954887530764722731240169443815271705582084954946105184030994138023444421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae4e8b035c63ba32e15b915ab7851a76fff45dfd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (177 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footprintdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azr.footprintdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clo.footprintdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netmon.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taiwann.a.footprintdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teams.fp.measure.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.measure.microsoft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe09714055051044d8a48175b89e1ae94a0688c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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