*.ugv.backup.windowsazure.us

Issued by Microsoft IT TLS CA 4

About this certificate

This digital certificate with serial number 16:00:0a:79:31:76:60:1c:4f:be:08:d3:89:00:00:00:0a:79:31 was issued on by Microsoft Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=*.ugv.backup.windowsazure.us

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 16:00:0a:79:31:76:60:1c:4f:be:08:d3:89:00:00:00:0a:79:31
Serial Number (int): 490619958284753893540262704585051505913657649
Serial Number lenght: 149 bits, 19 octets

SubjectKeyId: 59:95:ec:b4:b5:2e:cc:8e:bf:7c:60:16:15:bd:f5:cd:ad:b1:1c:2a
AuthorityKeyId: 7a:7b:8c:c1:cf:e7:a0:ca:1c:d4:6b:fa:fb:e1:33:c3:0f:1a:a2:9d

Fingerprint (sha1): be:98:ff:61:53:01:70:ce:49:81:d1:51:f3:f1:82:ca:bf:08:b4:09
Fingerprint (sha256): 08:33:a2:64:2e:5d:0e:87:cd:b5:0b:8e:5b:40:09:af:38:87:0f:b1:da:0b:00:ed:8b:99:40:1d:63:f7:85:1e

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%204.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl

Check the revocation status for certificate *.ugv.backup.windowsazure.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ugv.backup.windowsazure.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ugv.backup.windowsazure.us

Other certificates including the domain name windowsazure.us

(limited to 100 certificates)
internalep.ugv.backup.windowsazure.us
directoryprovisioning.windowsazure.us
graph.windows.net
directoryprovisioning.windowsazure.us
*.ugi.backup.windowsazure.us
*.udc.backup.windowsazure.us
azuresupportrp.windowsazure.us
*.ugt.hypervrecoverymanager.windowsazure.us
graph.windows.net
graph.windows.net
*.ugv.backup.windowsazure.us
graph.windows.net
*.uga.backup.windowsazure.us
lswsasclient.adnotifications.windowsazure.us
*.uga.backup.windowsazure.us
*.ugi.backup.windowsazure.us
*.udc.backup.windowsazure.us
graph.windows.net
SasCappClient.adnotifications.windowsazure.us
graph.windows.net
*.ude.backup.windowsazure.us
azuresupportmds.windowsazure.us
bearer.syncfabric.windowsazure.us
graph.windows.net
graph.windows.net
*.ugt.backup.windowsazure.us
dcaasmdscert.aadc.activedirectory.windowsazure.us
*.ugt.backup.windowsazure.us
*.uga.backup.windowsazure.us
*.ugv.backup.windowsazure.us
graph.windows.net
*.udc.backup.windowsazure.us
encrypt.syncfabric.windowsazure.us
cab-prv-dsts.windowsazure.us
graph.windows.net
*.ude.hypervrecoverymanager.windowsazure.us
*.uga.backup.windowsazure.us
authorization-fairfax-primary.windowsazure.us
*.ugt.backup.windowsazure.us
internalep.ugv.backup.windowsazure.us
*.ude.backup.windowsazure.us
graph.windows.net
*.ugi.hypervrecoverymanager.windowsazure.us
*.ugi.backup.windowsazure.us
*.ugt.backup.windowsazure.us
*.uga.hypervrecoverymanager.windowsazure.us
*.ugt.backup.windowsazure.us
*.ude.backup.windowsazure.us
graph.windows.net
*.udc.backup.windowsazure.us
*.ugv.backup.windowsazure.us
graph.windows.net
*.ugv.azureregionmove.windowsazure.us
*.ugv.backup.windowsazure.us
*.uga.backup.windowsazure.us
graph.windows.net
*.uga.backup.windowsazure.us
graph.windows.net
credentials.windowsazure.us
*.ugv.backup.windowsazure.us
AzureResourceGraphAppCert.backup.windowsazure.us
*.ugv.backup.windowsazure.us
graph.windows.net
*.ugv.backup.windowsazure.us
graph.windows.net
internalep.ugv.backup.windowsazure.us
graph.windows.net
*.ude.backup.windowsazure.us
*.udc.backup.windowsazure.us
AzureResourceGraphAppCert.backup.windowsazure.us
*.ude.backup.windowsazure.us
*.ugt.backup.windowsazure.us
portal.azure.us
*.ugi.storsimple.windowsazure.us
graph.windows.net
graph.windows.net
graph.windows.net
encrypt.aaddc.activedirectory.windowsazure.us
*.ugv.backup.windowsazure.us
internalep.ugv.backup.windowsazure.us
*.ugv.backup.windowsazure.us
azuremanagement.aaddc.activedirectory.windowsazure.us
graph.windows.net
*.ude.backup.windowsazure.us
graph.windows.net
*.prod.migration.windowsazure.us
*.support.ext.windowsazure.us
*.ugi.storsimple.windowsazure.us
graph.windows.net
azuresupportmds.windowsazure.us
*.ugv.backup.windowsazure.us
graph.windows.net
*.ugv.backup.windowsazure.us
*.udc.backup.windowsazure.us
*.ugt.hypervrecoverymanager.windowsazure.us
*.ude.backup.windowsazure.us
*.ugi.backup.windowsazure.us
*.prod.migration.windowsazure.us
*.udc.backup.windowsazure.us
graph.windows.net

Certificate

The complete raw certificate details for *.ugv.backup.windowsazure.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu853gwo5jOGFXtLl+sOr
N92rHvvgEgJNSM2zMAdyfCbJ5q8JIOzsJW1P6GN3fIDuStYhFs/b6kjA1jeYOox0
hSx2xeFGUBjfBICPFKU+rBaPptmHQsTnaaIS98+9rpe72ahSN+yqb28Nt7BnQBWK
epnyKHQUJtgeC50VuAHvJyQ9Jig3LTD6RjwNgOs9+n0R6Oem8UwL3RAaU1bGQE6j
PgxLhjF89N/1guIHPjVntsHjyZgHlm0f8UBZTd7S4tMpK/X0wgyOO/rTVSX1Z757
ShpmdYV9lax7K/T7nrj75pGTcrTMhATmyLrQQB4808bGp36bLa2377Le68neZSh0
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 490619958284753893540262704585051505913657649
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 20:43:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-30 20:43:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ugv.backup.windowsazure.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23708375623672251235742853766003675976515003277548353056007385274619647062311775441001275773277595937493106386987206582164928111635638548180222261902854605820781580501327533285971983961819500946740756218245478774357054433457086657825160227114499904076323859466109009752750407077248496495336923439531528194282428245914647444558786052575771727527766854951351963213576909753249988279000966917885366845528040225220685570839436454274144322131758967123784733153006194372766137558507665815927503214406622700138955760766912986887444260560868778191499869550713319766984071249107479612393390431560683861476890471717465223623781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%204.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5995ecb4b52ecc8ebf7c601615bdf5cdadb11c2a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ugv.backup.windowsazure.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7a7b8cc1cfe7a0ca1cd46bfafbe133c30f1aa29d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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