canary.pnh.skype.com

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 02

About this certificate

This digital certificate with serial number 33:00:d4:f7:af:9d:6d:35:72:dc:30:7d:5b:00:00:00:d4:f7:af was issued on by Microsoft Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:d4:f7:af:9d:6d:35:72:dc:30:7d:5b:00:00:00:d4:f7:af
Serial Number (int): 1137410474218008919009441555694496839237957551
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: ac:b8:7b:9a:43:d8:8f:96:e0:34:b7:d4:ac:78:4c:88:74:10:7e:34
AuthorityKeyId: 00:ab:91:fc:21:62:26:97:9a:a8:79:1b:61:41:90:60:a9:62:67:fd

Fingerprint (sha1): 8a:fd:46:d9:f9:f5:f1:53:19:53:7e:77:1e:46:b1:b3:1f:7e:cb:7a
Fingerprint (sha256): 09:75:f7:d0:da:c9:fb:6a:67:49:1c:fb:ce:ca:f1:e4:4b:8d:9b:ac:a8:65:b6:dc:ff:56:18:db:1b:80:d5:dc

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl

Check the revocation status for certificate canary.pnh.skype.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canary.pnh.skype.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.canary.pnh.skype.com
canary.pnh.skype.com

Other certificates including the domain name skype.com

(limited to 100 certificates)
*.messagingthread.skype.com
dashboard.sms.skype.com
*.asm.skype.com
du5.media.vm.skype.com
x-lgw.lgw.skype.com
canary.pnh.skype.com
*.notifications.teams.microsoft.com
*.callrecorder.skype.com
images.partner.windowsphone.com
*.config.skype.com
www.skype.com
brblogs.skype.com
dogfood.pnh.skype.com
bcr.tr.skype.com
*.vo.msecnd.net
*.config.skype.com
meet.skype.com
*.mps.skype.com
qaget.skype.net
*.events.data.microsoft.com
shortener.skype.com
srm.skype.com
*.asm.skype.com
*.notifications.teams.microsoft.com
get.skype.com
csp.skype.com
secure05.stage.lithium.com
dogfood.pnh.skype.com
*.asm.skype.com
prod.registrar.skype.com
register.greenid.skype.com
*.pma.teams.microsoft.com
*.pilot1.notifications.skype.com
*.vo.msecnd.net
*.asm.skype.com
*.meet.skype.net
csharp.net
messagingexporter-staging.skype.com
heartbeat.skype.com
www.skype.com
*.vo.msecnd.net
*.config.skype.com
ui.skype.com
phobot-live.skype.com
sso.skypetoken.skype.com
dashboard.sms.skype.com
csharp.net
emulator.sms.skype.com
*.cms.skype.net
*.contacts.skype.com
csharp.net
hc.asm.skype.com
*.email.skype.com
uic.login.skype.com
bcr.tr.skype.com
prd01caeattnsvc.cloudapp.net
settings.teams.internal.office.com
dreamspace.ie
*.notifications.teams.microsoft.com
msgsearch.skype.com
latest-webclient.skype.com
go.skype.com
*.conversationservice.skype.com
api.skype.com
*.pilot1.notifications.skype.com
notification-hub.skype.com
recommend.skype.com
partners.cc.skype.com
uic.login.skype.com
*.notifications.teams.microsoft.com
fpt.microsoft.com
ic3-voiceauth.skype.com
heartbeat.skype.com
tr.skype.com
inviteconnector.skype.com
*.pilot2.notifications.skype.com
*.messagingthread.skype.com
profile.skype.com
*.pma.teams.microsoft.com
*.promotions.skype.com
prod-jwt.botapi.skype.com
interviews.skype.com
upgrade-api.skype.com
*.pilot1.notifications.skype.com
*.events.data.microsoft.com
msgsearch.skype.com
*.mps.skype.com
*.notifications.teams.microsoft.com
*.events.data.microsoft.com
*.notifications.teams.microsoft.com
*.events.data.microsoft.com
*.callrecorder.skype.com
*.vo.msecnd.net
skypegraph.skype.com
msgsearch.skype.com
s2g-skypesms-prod.sms.skype.com
calling.consumer.entitlement.skype.com
trap.skype.com
open-ai-connect-msit.skype.com
*.events.data.microsoft.com

Certificate

The complete raw certificate details for canary.pnh.skype.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97K/h2q1PIDx192JNLOg
MBuETSGkA3pb59VQiBdpFrwsndWSZc8wbYYQAHUTvaTF/vO4AK1vcJIQZmkoVKEp
Ly41ApSlDQjYWsOWoAWCO07OLDinRaNrOFFHdeo1cj+CBwLDr0u24SUsS4I3iVVb
WDkLWkP2PSMryEiV/0rWC4k2ZkNnaGyMdZGdREEpOxcVMd1/rbEC9DwhFSpQ1F7v
Lu4l/2RzZmTa9I+tljOS2S+kFvGBP4JjY76IQ+ZFbYKdNw9I2Lf4zvWPhXBFaLSW
+uhtboPi9oQqC19dfCnWSJyC96Hg4EB/3dg9Fbz658qWWfJcSTdbvRYAljzDMvRa
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137410474218008919009441555694496839237957551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 02:24:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canary.pnh.skype.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31269005329507540070986322926423502295894538483876144799639034665498876848162742113532413000790901057571005716528526467807500799434575855557253959869275394643513958654971245684207207103290099154905314985596563160361170457977882876966887668334479948121731924147156952007148742151257330044089927769852986831458668734705078802199776997477201501847993465075943829208608599803940296381628536357815627527737588394902626690191626508014029785363840355773844004164096288823676160818974968906105844313755172121840075396500436605030421673904906362854448610768097737335608721659127841577134018820348863729288423316937209959176817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							acb87b9a43d88f96e034b7d4ac784c8874107e34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary.pnh.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canary.pnh.skype.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 00ab91fc216226979aa8791b61419060a96267fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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