*.footprintdns.com

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 07

About this certificate

This digital certificate with serial number 33:00:15:94:b2:c6:7c:2c:d6:e2:5b:36:56:00:00:00:15:94:b2 was issued on by Microsoft Corporation.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:15:94:b2:c6:7c:2c:d6:e2:5b:36:56:00:00:00:15:94:b2
Serial Number (int): 1137345348708765092183597164866368767945708722
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 29:36:96:02:d3:0c:81:c2:e1:03:16:34:5e:66:3e:28:39:bf:dc:f6
AuthorityKeyId: ce:15:16:3b:ea:02:a3:a6:6b:da:d9:2b:fd:e5:8c:52:be:7a:50:a8

Fingerprint (sha1): 94:d4:f3:02:12:58:92:b4:6f:65:cb:21:d6:f1:14:cf:bb:a5:20:16
Fingerprint (sha256): 0d:ab:06:68:f7:e2:f1:80:b4:19:19:0c:a7:6b:d8:5f:06:37:43:6e:73:df:a4:0d:d2:ff:e1:84:2a:6c:55:f5

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl

Check the revocation status for certificate *.footprintdns.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.footprintdns.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.footprintdns.com
*.azr.footprintdns.com
*.clo.footprintdns.com
*.netmon.azure.com
*.australiac2.a.footprintdns.com
*.measure.microsoft.com

Other certificates including the domain name footprintdns.com

(limited to 100 certificates)
*.footprintdns.com
outlook.com
partner.outlook.cn
*.footprintdns.com
*.footprintdns.com
outlook.com
*.footprintdns.com
outlook.com
*.footprintdns.com
outlook.live.com
*.footprintdns.com
outlook.com
*.footprintdns.com
*.footprintdns.com
outlook.com
outlook.com
*.footprintdns.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
*.footprintdns.com
*.clo.footprintdns.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.de
*.msedge.net
*.footprintdns.com
*.msedge.net
*.footprintdns.com
outlook.live.com
outlook.com
*.footprintdns.com
*.footprintdns.com
outlook.com
*.footprintdns.com
*.footprintdns.com
outlook.com
Outlook.live.com
outlook.com
outlook.com
outlook.com
outlook.com
*.footprintdns.com
outlook.com
*.msedge.net
*.footprintdns.com
*.footprintdns.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
partner.outlook.cn
outlook.com
outlook.com
*.footprintdns.com
outlook.com
outlook.com
outlook.com
outlook.com
*.clo.footprintdns.com
*.footprintdns.com
outlook.com
*.footprintdns.com
*.footprintdns.com
*.footprintdns.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
*.footprintdns.com
outlook.com
*.footprintdns.com
outlook.com
outlook.com
outlook.com
*.footprintdns.com
outlook.com
outlook.com
*.footprintdns.com
*.footprintdns.com
*.footprintdns.com
outlook.com
outlook.com
outlook.com
outlook.com
*.footprintdns.com
outlook.com
outlook.com
*.msedge.net
outlook.com

Certificate

The complete raw certificate details for *.footprintdns.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvawv8/r9Vr4w7zdrWIz+
2+0QCEJQ9ABRHc8EiymEXXH7ELV5Wl0l9RoNTRePszwTqoA/jo1o8PhfKyaG/eo3
3OuM8x+FeU1t0PfUdt81waf7Jhs9XdnyRPk6uTxYnvNnv6wL3z1tdt7PWOavGSf+
NBIq9+OyY8JXn1sQA82yt20mrgGcSQSz3uB3lCpkZXdWXLE3slmxY2K1vuY/8hSk
IejBfy6MKez/6Jmb0bqtCsG+KDq+R+BLxfbChhlEYlhUZz3sexmvoM18M62UvJ1V
IxLQMcitX2s2xNUBmsk6Ip7wQxmxs5jrwVYCS2wwLbR6NN8oDGxu8+58aTmlwE3g
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137345348708765092183597164866368767945708722
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 07'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 04:23:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-04 04:23:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.footprintdns.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23943948368990232148452059293441972079698674556277945833661154509006002508094036513267861867560375291419874008612120514750214138222983443455284690737716588116054884728281732787543931384541085451871194282561361590950954896079164635541506868958495043732148745590040028821554045604735661414862122703264424290327952435370325959986865999641093950645701113499336334241937580994027744566588894951538310992057786294152898039709837563731915769340770900771552716675148821403141473112527654593741520092265592594345225639284204441808417588838928984625141708126798705916598154499493534251795214312508909963153349137392125785006289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29369602d30c81c2e10316345e663e2839bfdcf6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (150 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footprintdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azr.footprintdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clo.footprintdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netmon.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.australiac2.a.footprintdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.measure.microsoft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ce15163bea02a3a66bdad92bfde58c52be7a50a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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