notification-hub.skype.com

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 02

About this certificate

This digital certificate with serial number 33:00:d1:12:e6:e7:9c:d1:a0:78:68:7f:0e:00:00:00:d1:12:e6 was issued on by Microsoft Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:d1:12:e6:e7:9c:d1:a0:78:68:7f:0e:00:00:00:d1:12:e6
Serial Number (int): 1137409149264778119036841100527200472187081446
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: bf:7f:6d:47:a6:ad:eb:fd:54:8d:4f:9f:99:12:98:1f:33:11:55:fb
AuthorityKeyId: 00:ab:91:fc:21:62:26:97:9a:a8:79:1b:61:41:90:60:a9:62:67:fd

Fingerprint (sha1): d3:d5:c3:cf:09:8d:b7:b6:a9:1b:3a:f0:58:60:d2:50:d9:2a:9f:29
Fingerprint (sha256): 05:3d:5d:66:a5:fc:3f:69:b4:cf:06:9e:3a:89:dc:09:69:68:6b:f4:4c:0f:59:7f:b7:dc:b0:43:86:43:7d:dd

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl

Check the revocation status for certificate notification-hub.skype.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for notification-hub.skype.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.notification-hub.skype.com
notification-hub.skype.com

Other certificates including the domain name skype.com

(limited to 100 certificates)
*.messagingthread.skype.com
dashboard.sms.skype.com
*.asm.skype.com
du5.media.vm.skype.com
x-lgw.lgw.skype.com
canary.pnh.skype.com
*.notifications.teams.microsoft.com
*.callrecorder.skype.com
images.partner.windowsphone.com
*.config.skype.com
www.skype.com
brblogs.skype.com
dogfood.pnh.skype.com
bcr.tr.skype.com
*.vo.msecnd.net
*.config.skype.com
meet.skype.com
*.mps.skype.com
qaget.skype.net
*.events.data.microsoft.com
shortener.skype.com
srm.skype.com
*.asm.skype.com
*.notifications.teams.microsoft.com
get.skype.com
csp.skype.com
secure05.stage.lithium.com
dogfood.pnh.skype.com
*.asm.skype.com
prod.registrar.skype.com
register.greenid.skype.com
*.pma.teams.microsoft.com
*.pilot1.notifications.skype.com
*.vo.msecnd.net
*.asm.skype.com
*.meet.skype.net
csharp.net
messagingexporter-staging.skype.com
heartbeat.skype.com
www.skype.com
*.vo.msecnd.net
*.config.skype.com
ui.skype.com
phobot-live.skype.com
sso.skypetoken.skype.com
dashboard.sms.skype.com
csharp.net
emulator.sms.skype.com
*.cms.skype.net
*.contacts.skype.com
csharp.net
hc.asm.skype.com
*.email.skype.com
uic.login.skype.com
bcr.tr.skype.com
prd01caeattnsvc.cloudapp.net
settings.teams.internal.office.com
dreamspace.ie
*.notifications.teams.microsoft.com
msgsearch.skype.com
latest-webclient.skype.com
go.skype.com
*.conversationservice.skype.com
api.skype.com
*.pilot1.notifications.skype.com
notification-hub.skype.com
recommend.skype.com
partners.cc.skype.com
uic.login.skype.com
*.notifications.teams.microsoft.com
fpt.microsoft.com
ic3-voiceauth.skype.com
heartbeat.skype.com
tr.skype.com
inviteconnector.skype.com
*.pilot2.notifications.skype.com
*.messagingthread.skype.com
profile.skype.com
*.pma.teams.microsoft.com
*.promotions.skype.com
prod-jwt.botapi.skype.com
interviews.skype.com
upgrade-api.skype.com
*.pilot1.notifications.skype.com
*.events.data.microsoft.com
msgsearch.skype.com
*.mps.skype.com
*.notifications.teams.microsoft.com
*.events.data.microsoft.com
*.notifications.teams.microsoft.com
*.events.data.microsoft.com
*.callrecorder.skype.com
*.vo.msecnd.net
skypegraph.skype.com
msgsearch.skype.com
s2g-skypesms-prod.sms.skype.com
calling.consumer.entitlement.skype.com
trap.skype.com
open-ai-connect-msit.skype.com
*.events.data.microsoft.com

Certificate

The complete raw certificate details for notification-hub.skype.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/nBoS8CooeIBBr4syaO
UoDQ7XW+vDOn1praQY4V7zrMiyX33vhdNFLYbWa+Y/EyPDgQKK62u+Zqg4TPjBIo
vVeo4LYahczXeVYHL7zhR+W5m2Ig0W5Yl7SV41ElB414hE5BDNEGS7i9ZeRT8wrA
3J67Ie8Cqre3af57bKr006gNhxGkJwLRcuqgZXXvIbNNJPo1w5hF+vBvSLVOj1f9
qcuruDLSM5ACX6enp0OTyKyeMM+zw9DK2pG6ztY0TOa1a1Z/1bheEyZ6d8AY+3eN
V5IZNoh3h6kTBCYWDLeMvndD+d0FriPJ/Lj+gBFGarhZgjlPKh8TxeCA5q48aeJM
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137409149264778119036841100527200472187081446
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 05:33:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'notification-hub.skype.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19690096723889891366648253193857001803086363286984172318494263664346386155014980773060838389457146993874409219721968889686496789881687445463467458539431983794622156731564432379802655171352927432169239010424164671856610616962651906372206397904081328995490369635232767998705615163595470271271907265892963006479152965092524597381617965328932503964342275006666898360441649915476268674109109982641177531467276409785619626338593112165103348730080939851186526841329906075246809319568352699910093414536770920775360918139395785203692642452193012622073706047005341366988946998132370639910848629846306197475820212906444279925797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf7f6d47a6adebfd548d4f9f9912981f331155fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.notification-hub.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notification-hub.skype.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 00ab91fc216226979aa8791b61419060a96267fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		008ea454927b3245064437053eef9cd55d304c8b4fa4783b166d5e3292f157f25efd0f1c9f0b376951d4601fff48bb24e8e282b03571c5797e38874eb5f470310304aabcb0816c3cff255a80229a4bd6b14be38ea45753d2754a8a2d0ae1ec96ef1f85ea91d5042e12efe6fb81716be40276a057c1a4f236fe1e71b2abbca68f0a1a2080861e48bd42e7b8b4e4b5a75deb1af04b10512c234cdfd60cd3c4593b3b54d700ab673f8d6dbb7488e832b3abb3531578f38dcf196c3a8c151e3aa6bbbf5e4d59c131a2a02a548a32ad856d973e2e9770f62aa530d6624a884a06c8b574aa011bfa70d91f7ff6ac897bb0347a04fe5ff297e284954f69f802d271cc407ac12016c93228682f37cc57ae95769fd57bc9d669728d6199b1a38791bd9bd9f9546ae78197c7d5d2ba099386be075529ec8d9dd347c5ab223db0baeca8023810a593cfb2269c4d92613cdcda58646bb03947d98579dc4afc4bf58fecbc10f357fa87158f326c97f14fd1c895bc8b14ffb36b8aac403dac7da6d206af9b43b69e0c93b66bd7e411f474809f40a0db37f355060a0177cc3831b70ed7e4f7477162c375401c540406b329ae959c84b4f1418f8596d7b364dedeffb0844aa5b0359cd4721fd9ee96264b3c008f8f0b45ca1ff6687dfd5133a77bb8305d8c185415e7b31ae7beda02a172703fa27c6602d49238b39240d20306298a588dc8c73ae00d