campaign.consumer.entitlement.dev.skype.net

Issued by Microsoft IT TLS CA 4

About this certificate

This digital certificate with serial number 16:00:0a:87:43:1b:06:a5:19:5a:81:10:19:00:00:00:0a:87:43 was issued on by Microsoft Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=campaign.consumer.entitlement.dev.skype.net

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 16:00:0a:87:43:1b:06:a5:19:5a:81:10:19:00:00:00:0a:87:43
Serial Number (int): 490619976985554390507847569343011024349595459
Serial Number lenght: 149 bits, 19 octets

SubjectKeyId: 1f:94:f2:ef:00:31:7e:aa:90:c5:fd:58:25:08:6a:f7:c8:8c:92:93
AuthorityKeyId: 7a:7b:8c:c1:cf:e7:a0:ca:1c:d4:6b:fa:fb:e1:33:c3:0f:1a:a2:9d

Fingerprint (sha1): cd:39:d9:15:ff:09:2a:88:ce:91:9e:84:c5:d9:9c:a7:73:9b:f6:79
Fingerprint (sha256): 07:73:0f:7d:45:a5:c9:16:bc:ac:82:1f:0d:2c:20:02:61:bb:61:fa:3e:2d:7a:28:55:9f:e1:ee:2f:2f:3e:26

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%204.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl

Check the revocation status for certificate campaign.consumer.entitlement.dev.skype.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campaign.consumer.entitlement.dev.skype.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campaign.consumer.entitlement.dev.skype.net

Other certificates including the domain name skype.net

(limited to 100 certificates)
*.trouter-int.skype.net
c-signing.dev3.ml.mdn.skype.net
pnh-prod.mtls-client.skype.net
*.cc-dev.skype.net
usermap.skype.net
*.esaps-int.skype.net
pnh-prod.mtls-client.skype.net
*.tpc.skype.net
kd-encryption.asosnitski.ml.mdn.skype.net
*.config.skype.net
kd-encryption.dev1.ml.mdn.skype.net
c-signing.hmetssalu.ml.mdn.skype.net
ust-provisioner.qa.skype.net
*.vo.msecnd.net
*.messagingthread.skype.net
qaget.skype.net
reporting.fl.skype.net
pnh-prod.mtls-client.skype.net
pnh-prod.mtls-client.skype.net
issuer-test.skypetoken.skype.net
c-signing.imalkevich.ml.mdn.skype.net
*.compliancecurator-dev.skype.net
c.angorozi.main.ml.mdn.skype.net
c.kristjanjogi.main.ml.mdn.skype.net
*.cc-dev.skype.net
lu4-sasbc.skypeconnect.skype.net
*.ccts-rc.skype.net
tnm-lnpsupport.e2e.nmp.mtls.skype.net
d-signing.dev3.ml.mdn.skype.net
*.vo.msecnd.net
pnh-prod.mtls-client.skype.net
d-signing.hmetssalu.ml.mdn.skype.net
o.hmetssalu.main.ml.mdn.skype.net
entitlement.teams.microsoft-int.com
*.meet.skype.net
csharp.net
client-amt-prod.mtls-client.skype.net
*.events-sandbox.data.microsoft.com
lgw-df.mtls-client.skype.net
pnh-prod.mtls-client.skype.net
calling.consumer.entitlement.dev.skype.net
entitlement.teams.microsoft-int.com
*.vo.msecnd.net
*.pipe.skype.net
srm.qa.skype.net
kd-encryption.kristjanjogi.ml.mdn.skype.net
fass.skype.net
calling.consumer.entitlement.dev.skype.net
csharp.net
*.tc-int.skype.net
*.cms.skype.net
csharp.net
urlp.asm.skype.net
api.bot.skype.net
kd-encryption.sasaares.ml.mdn.skype.net
c-signing.hmetssalu.ml.mdn.skype.net
fb.sasaares.main.ml.mdn.skype.net
*.ep-dev.skype.net
d-signing.sasaares.ml.mdn.skype.net
dtr-signing.dev1.ml.mdn.skype.net
o365.fass.skype.net
*.messagingthread.skype.net
*.ccts-rc.skype.net
config.edge.skype.net
a.qalogin.skype.net
premanager.skype.net
policyprocessor.teams.skype.net
*.cc-rc.skype.net
a.qalogin.skype.net
admin.local.peer5.skype.net
kd-encryption.dev2.ml.mdn.skype.net
inviteconnector.skype.net
c-signing.abartkoviak.ml.mdn.skype.net
d.dev3.main.ml.mdn.skype.net
*.ccts-dev.skype.net
*.pipe.aria.int.microsoft.com
prehelperapi.skype.net
storage.asm.skype.net
c.angorozi.ctrl.ml.mdn.skype.net
pnh-prod.mtls-client.skype.net
*.events-sandbox.data.microsoft.com
test.ans.messaging.core.microsoft
api.bot.skype.net
usermap.skype.net
d-signing.lt.ml.mdn.skype.net
tor.security.skype.net
*.afd.asm.skype.net
*.events-sandbox.data.microsoft.com
sip.pstnhub-ppe.skype.net
geneva.tpc.skype.net
notification-hub.skype.net
d-signing.hmetssalu.ml.mdn.skype.net
d-signing.abartkoviak.ml.mdn.skype.net
campaign.consumer.entitlement.dev.skype.net
*.compliancecurator-dev.skype.net
testing.acs.skype.net
urlp.asm.skype.net
dog02eusattnsvc.cloudapp.net
*.ep-dev.skype.net
o.dev3.main.ml.mdn.skype.net

Certificate

The complete raw certificate details for campaign.consumer.entitlement.dev.skype.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRzOGJBgHPzywKuzSR/L
2PqV19sHw4DP2Lw3RL7cS8jrlTTrkrx5qAmVRoORCYQxfaVZKB1MUcx2O3XZj4I3
NySoEaZ14LrmpEgsOj2+ZhLbzjTGHzQKYMctlGmD2g5UlMGxTt7MytL8lo8aNvG3
t2QQcKuykJozyRae0AnkP4IcaQdW/NRw0VBM3rcgmu73Dyt48CFTsDfZiekn+5o8
HNdUL3omgWLfLqLhde2hv+06HNXkorqti98YKO8rdQua7SMWF2SR2uaaFq/MATPl
yQSSVL55/gQTGeS1SbuFQmhxBGR9wC2sx63FluOPXBoOEz8QKJ7zrKM4BfR0EQos
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 490619976985554390507847569343011024349595459
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-02 06:31:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-02 06:31:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campaign.consumer.entitlement.dev.skype.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19328664965436899143374561211241204090759103803129856669668037295982184680929106307093909054318022549581882143001528141369792662900669572055227056077520837823346456518771426499458631279374845260785114232239659937045395642905746963347724137349370323932932257913428222458386735115858803227103785179764621427680555673045396964498548079212961235061078822420648635967563848459332748967099305556480347527821842660682937970513331832647564364344973715032277139099287263690497396628433549278640447869893764390950520320317040623211491710915616621928803554078225225670558423887216578453547631033997549302435832468159836424121577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%204.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f94f2ef00317eaa90c5fd5825086af7c88c9293
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.consumer.entitlement.dev.skype.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7a7b8cc1cfe7a0ca1cd46bfafbe133c30f1aa29d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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