prehelperapi.skype.net

Issued by Microsoft IT TLS CA 4

About this certificate

This digital certificate with serial number 16:00:06:02:40:db:47:08:e9:f4:17:ac:bd:00:00:00:06:02:40 was issued on by Microsoft Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=prehelperapi.skype.net

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 16:00:06:02:40:db:47:08:e9:f4:17:ac:bd:00:00:00:06:02:40
Serial Number (int): 490618439057085700922078013555296000402653760
Serial Number lenght: 149 bits, 19 octets

SubjectKeyId: e4:99:3c:95:c5:17:49:37:9a:e3:f3:58:10:4d:ee:c4:d2:44:74:60
AuthorityKeyId: 7a:7b:8c:c1:cf:e7:a0:ca:1c:d4:6b:fa:fb:e1:33:c3:0f:1a:a2:9d

Fingerprint (sha1): 6d:66:85:0b:7e:b4:3f:60:db:5f:24:6f:6f:6d:8c:7d:51:59:af:bc
Fingerprint (sha256): 06:70:a4:39:9f:4e:a2:fd:c1:5b:a8:d2:c8:75:72:d4:de:20:b6:9c:1d:85:80:c0:2f:b3:e1:9f:6e:b4:51:d6

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%204.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl

Check the revocation status for certificate prehelperapi.skype.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prehelperapi.skype.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prehelperapi.skype.net

Other certificates including the domain name skype.net

(limited to 100 certificates)
*.trouter-int.skype.net
c-signing.dev3.ml.mdn.skype.net
pnh-prod.mtls-client.skype.net
*.cc-dev.skype.net
usermap.skype.net
*.esaps-int.skype.net
pnh-prod.mtls-client.skype.net
*.tpc.skype.net
kd-encryption.asosnitski.ml.mdn.skype.net
*.config.skype.net
kd-encryption.dev1.ml.mdn.skype.net
c-signing.hmetssalu.ml.mdn.skype.net
ust-provisioner.qa.skype.net
*.vo.msecnd.net
*.messagingthread.skype.net
qaget.skype.net
reporting.fl.skype.net
pnh-prod.mtls-client.skype.net
pnh-prod.mtls-client.skype.net
issuer-test.skypetoken.skype.net
c-signing.imalkevich.ml.mdn.skype.net
storage.asm.skype.net
*.compliancecurator-dev.skype.net
c.angorozi.main.ml.mdn.skype.net
c.kristjanjogi.main.ml.mdn.skype.net
*.cc-dev.skype.net
lu4-sasbc.skypeconnect.skype.net
*.ccts-rc.skype.net
tnm-lnpsupport.e2e.nmp.mtls.skype.net
d-signing.dev3.ml.mdn.skype.net
*.vo.msecnd.net
pnh-prod.mtls-client.skype.net
d-signing.hmetssalu.ml.mdn.skype.net
o.hmetssalu.main.ml.mdn.skype.net
entitlement.teams.microsoft-int.com
*.meet.skype.net
csharp.net
client-amt-prod.mtls-client.skype.net
*.events-sandbox.data.microsoft.com
lgw-df.mtls-client.skype.net
pnh-prod.mtls-client.skype.net
calling.consumer.entitlement.dev.skype.net
entitlement.teams.microsoft-int.com
c.abartkoviak.ctrl.ml.mdn.skype.net
*.vo.msecnd.net
*.pipe.skype.net
srm.qa.skype.net
d.imalkevich.main.ml.mdn.skype.net
c-pke.dev1.ctrl.ml.mdn.skype.net
kd-encryption.kristjanjogi.ml.mdn.skype.net
fass.skype.net
dtr-signing.lt.ml.mdn.skype.net
calling.consumer.entitlement.dev.skype.net
csharp.net
*.tc-int.skype.net
dtr-signing.abartkoviak.ml.mdn.skype.net
*.cms.skype.net
csharp.net
urlp.asm.skype.net
api.bot.skype.net
kd-encryption.sasaares.ml.mdn.skype.net
c-signing.hmetssalu.ml.mdn.skype.net
fb.sasaares.main.ml.mdn.skype.net
*.ep-dev.skype.net
d-signing.sasaares.ml.mdn.skype.net
dtr-signing.dev1.ml.mdn.skype.net
o365.fass.skype.net
*.messagingthread.skype.net
*.ccts-rc.skype.net
config.edge.skype.net
a.qalogin.skype.net
premanager.skype.net
policyprocessor.teams.skype.net
*.cc-rc.skype.net
a.qalogin.skype.net
admin.local.peer5.skype.net
kd-encryption.dev2.ml.mdn.skype.net
inviteconnector.skype.net
c-signing.abartkoviak.ml.mdn.skype.net
d.dev3.main.ml.mdn.skype.net
*.ccts-dev.skype.net
*.pipe.aria.int.microsoft.com
prehelperapi.skype.net
storage.asm.skype.net
c.angorozi.ctrl.ml.mdn.skype.net
c-signing.lt.ml.mdn.skype.net
pnh-prod.mtls-client.skype.net
*.events-sandbox.data.microsoft.com
test.ans.messaging.core.microsoft
api.bot.skype.net
usermap.skype.net
d-signing.lt.ml.mdn.skype.net
tor.security.skype.net
*.afd.asm.skype.net
*.events-sandbox.data.microsoft.com
sip.pstnhub-ppe.skype.net
geneva.tpc.skype.net
notification-hub.skype.net
d-signing.hmetssalu.ml.mdn.skype.net
d-signing.abartkoviak.ml.mdn.skype.net

Certificate

The complete raw certificate details for prehelperapi.skype.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VOoOKyZYacMuirXguwH
MORFcTz2vgd5wvLxh/9hTvCiWtsOcp0Khhp4TMtuhY7ks6ngj4KTsgWftWaZdDo4
EmFUGCY6XVA/TgbEiQrqLi7l9YbDbfK45SVO0eWkzJhRol28bXmVj5Hm499hqrp9
cstD3+L/1tMEVkx8MGiN30A/LWMt0H5ZL2kOQ5yvcrUUa5ozV80fTvl/AZF916a7
SKiD2R40tF4n+I3aLsqTuUUgcIwD+DHop8sDktFJR2gchxoKZL0/U7em1in7qzqo
g/OPWFMGR7vW1LjX4WotMPib2EhDWn3qbCCrbdaDJXeYBIWjhFCnqPjmQm1z7qpA
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 490618439057085700922078013555296000402653760
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-31 14:03:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-31 14:03:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prehelperapi.skype.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26930011818583632528626269523064912688355084546399801818074644652122694125248966930378932157342591590153849217191010402703418681707991056172901796751900135206851557158356614009003528820863379859955067770917554866461447409016386629825495726707188742113967050521509133454096539669119685463555733039202599141694650218250365867560096967818309496100168398369772930564198623099434032340618541585810737940964441610289750371489869634268071130921519047782086169163907455637296564962788107272930609133944642727480543374442595067599570943952430308090146942001807712183018784936755828624202551518216179714082969781141863077134421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%204.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e4993c95c51749379ae3f358104deec4d2447460
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prehelperapi.skype.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7a7b8cc1cfe7a0ca1cd46bfafbe133c30f1aa29d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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