relay.voice.messenger.msn-int.com

- Microsoft Corporation -

Issued by Microsoft Secure Server Authority

About this certificate

This digital certificate with serial number 3a:e2:58:ff:00:05:00:01:50:d7 was issued on byMicrosoft Secure Server Authority.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Windows Live Storage
State / Province: Washington
Locality: Redmond
Country: US

Microsoft Secure Server Authority

This certificate has expire since

Certificate Details

Serial Number (hex): 3a:e2:58:ff:00:05:00:01:50:d7
Serial Number (int): 278072633011513654857943
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: 7e:97:c9:98:3f:da:c3:b4:16:6d:ba:2c:db:f3:76:38:50:3a:20:b7
AuthorityKeyId: 14:55:c4:39:e0:3d:2e:d1:55:2e:48:96:b0:d8:7e:14:22:06:93:bc

Fingerprint (sha1): da:05:04:d5:e0:0b:0d:ab:34:1d:ac:9f:87:2a:b5:a0:c1:54:62:7d
Fingerprint (sha256): 14:44:99:da:4c:f7:30:e1:40:d1:62:7f:df:7a:67:54:e7:b1:81:19:21:d4:03:34:5c:57:40:fb:6f:7e:74:b2

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20Secure%20Server%20Authority(5).crt
Issuing Certificate URL: http://corppki/aia/Microsoft%20Secure%20Server%20Authority(5).crt

Revocation information

CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(5).crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(5).crl
CRL Distribution Point: http://corppki/crl/Microsoft%20Secure%20Server%20Authority(5).crl

Check the revocation status for certificate relay.voice.messenger.msn-int.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for relay.voice.messenger.msn-int.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name msn-int.com

(limited to 100 certificates)
images.partner.windowsphone.com
c.msn-int.com
*.ampcdp.msn-int.com
corp-weekly.msntv.msn-int.com
cssfs.css.msn-int.com
sync-weekly.trusted.msntv.msn-int.com
api.choice.microsoft-int.com
support.msn-int.com
suppmpgw.css.msn-int.com
corp-qfe.msntv.msn-int.com
*.secure.alphaemea.msn-int.com
ux.msntv.msn-int.com
c.msn-int.com
sps-archive.msn-int.com
suppigw.css.msn-int.com
spstesttools.msn-int.com
membercenterdev.msn-int.com
sps-archive.msn-int.com
crypto.signup.msn-int.com
cam.si.msn-int.com
SCSauth-int.msntv.msn-int.com
*.msn-int.com
eb.phxqa.my.msn-int.com
sps.msn-int.com
csscomgw.css.msn-int.com
nbservice.msn-int.com
mail-weekly.msntv.msn-int.com
profileservice.msn-int.com
weekly.msntv.msn-int.com
mobileads.si.msn-int.com
eb.phxqa.my.msn-int.com
dmp.msn-int.com
corp-daily.msntv.msn-int.com
scsweb-support.msn-int.com
membercenter.msn-int.com
csscomgw.css.msn-int.com
g.msn-int.com
storage.live-int.com
*.secure.alphablu.msn-int.com
adexpert.si.msn-int.com
reconcile.msn-int.com
cssfs.css.msn-int.com
suppiccpsts.css.msn-int.com
suppmpgwsit.css.msn-int.com
texreg.msn-int.com
*.dev.storage.live-int.com
*.vo.msecnd.net
*.zonenxt.msn-int.com
suppmpgw.css.msn-int.com
answers.msn-int.com
storage.live-int.com
relay.voice.messenger.msn-int.com
udc.msn-int.com
ssapi.msn-int.com
http.mws.mobstress.msn-int.com
Spaws.msn-int.com
logging.msnia.msn-int.com
c.msn-int.com
sps.msn-int.com
mobileads.si.msn-int.com
suppiccpsts.css.msn-int.com
api.choice.microsoft-int.com
storage.live-int.com
g.msn-int.com
icnsubscription.pcs.v2s.msn-int.com
corp-weekly.msntv.msn-int.com
get.msn-int.com
http.mws.mobtime.msn-int.com
daily.msntv.msn-int.com
libroker.mdc.msn-int.com
img.cmsdev.msn-int.com
*.tool.social.msn-int.com
mobileads.si.msn-int.com
*.vo.msecnd.net
storage.live-int.com
*.msn-int.com
storage.live-int.com
suppmpgw.css.msn-int.com
sps.msn-int.com
cam.si.msn-int.com
cssfs.css.msn-int.com
c.msn-int.com
suppstgadm.css.msn-int.com
mobileads.si.msn-int.com
Offersync.msn-int.com
mobileads.si.msn-int.com
moneyofx.msn-int.com
http.mws.mobstress.msn-int.com
storage.live-int.com
suppiccpsts.css.msn-int.com
partnergateway.v2s.msn-int.com
http.mws.mobtime.msn-int.com
CSSCOMGW.CSS.MSN-INT.COM
mutual-sslauth.msntv.msn-int.com
*.dev.storage.live-int.com
us01.pcs.v2s.msn-int.com
suppigw.css.msn-int.com
CSSFS.CSS.MSN-INT.COM
moneysprint.msn-int.com
images.partner.windowsphone.com

Certificate

The complete raw certificate details for relay.voice.messenger.msn-int.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgIKOuJY/wAFAAFQ1zANBgkqhkiG9w0BAQUFADCBizETMBEG
CgmSJomT8ixkARkWA2NvbTEZMBcGCgmSJomT8ixkARkWCW1pY3Jvc29mdDEUMBIG
CgmSJomT8ixkARkWBGNvcnAxFzAVBgoJkiaJk/IsZAEZFgdyZWRtb25kMSowKAYD
VQQDEyFNaWNyb3NvZnQgU2VjdXJlIFNlcnZlciBBdXRob3JpdHkwHhcNMDkxMTEy
MjEyMTQ5WhcNMTAxMTEyMjEyMTQ5WjCBnzELMAkGA1UEBhMCVVMxEzARBgNVBAgT
Cldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m
dCBDb3Jwb3JhdGlvbjEdMBsGA1UECxMUV2luZG93cyBMaXZlIFN0b3JhZ2UxKjAo
BgNVBAMTIXJlbGF5LnZvaWNlLm1lc3Nlbmdlci5tc24taW50LmNvbTCBnzANBgkq
hkiG9w0BAQEFAAOBjQAwgYkCgYEAvGu0fSIjRsNhDlCswBYPsgDa5jVpE08C/pY3
JB6oekhDEkPfAkNf7JF5br4nf7OkhSPctLRVcbn+5DwwW9tuW+GGlgNX6jf8+CqY
WwVkBeuYQNLMtAfEbR5T10+FiQmTe+J5ptggFHVhdEtxc1ZeEYmFsgd3PrhtT+zn
b0qHp/ECAwEAAaOCArgwggK0MB0GA1UdDgQWBBR+l8mYP9rDtBZtuizb83Y4UDog
tzAfBgNVHSMEGDAWgBQUVcQ54D0u0VUuSJaw2H4UIgaTvDCCAQoGA1UdHwSCAQEw
gf4wgfuggfiggfWGWGh0dHA6Ly9tc2NybC5taWNyb3NvZnQuY29tL3BraS9tc2Nv
cnAvY3JsL01pY3Jvc29mdCUyMFNlY3VyZSUyMFNlcnZlciUyMEF1dGhvcml0eSg1
KS5jcmyGVmh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9N
aWNyb3NvZnQlMjBTZWN1cmUlMjBTZXJ2ZXIlMjBBdXRob3JpdHkoNSkuY3JshkFo
dHRwOi8vY29ycHBraS9jcmwvTWljcm9zb2Z0JTIwU2VjdXJlJTIwU2VydmVyJTIw
QXV0aG9yaXR5KDUpLmNybDCBvwYIKwYBBQUHAQEEgbIwga8wXgYIKwYBBQUHMAKG
Umh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL01pY3Jvc29mdCUy
MFNlY3VyZSUyMFNlcnZlciUyMEF1dGhvcml0eSg1KS5jcnQwTQYIKwYBBQUHMAKG
QWh0dHA6Ly9jb3JwcGtpL2FpYS9NaWNyb3NvZnQlMjBTZWN1cmUlMjBTZXJ2ZXIl
MjBBdXRob3JpdHkoNSkuY3J0MAwGA1UdEwEB/wQCMAAwCwYDVR0PBAQDAgSwMD8G
CSsGAQQBgjcVBwQyMDAGKCsGAQQBgjcVCIPPiU2t8gKFoZ8MgvrKfYHh+3SBT4PC
7YUIjqnShWMCAWQCAQYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMCcG
CSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwIwCgYIKwYBBQUHAwEwDQYJKoZIhvcN
AQEFBQADggEBAASNYCem6SG43LtSFA9T1Ln/QSkcfBi2JBxWtVIwzRRVkcauj17e
Eu66tBXQEMS3QhpexRGszTUUCMh3n8zYlrSFM2MPbzg7/cnCylSbx6U4vWujBUEI
grfQYGK64xC1opaN81H82ngoHbKTn9gYdwuQ0bBt5BBN7WJchRsJ0E65vnXM6l63
+AOYNvJJM4NUv27u/JwRaWVV5BinJL9jLm3oBaJdqSkjHxLsRRXc4Q8MWQ18kF5o
gc9CiEv9hy53SgDTljuvj0L+XXtSxM55JpmAAkrxkLYs/CUZftm0so2fs7tauyem
FZsaR4Vff+mH5VKwo3IlRtVKvFF5dyARB1Y=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8a7R9IiNGw2EOUKzAFg+yANrm
NWkTTwL+ljckHqh6SEMSQ98CQ1/skXluvid/s6SFI9y0tFVxuf7kPDBb225b4YaW
A1fqN/z4KphbBWQF65hA0sy0B8RtHlPXT4WJCZN74nmm2CAUdWF0S3FzVl4RiYWy
B3c+uG1P7OdvSoen8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278072633011513654857943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'microsoft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'corp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Secure Server Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-11-12 21:21:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-11-12 21:21:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Windows Live Storage'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'relay.voice.messenger.msn-int.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 132313531182181847175164311613515805774056373797395548116114807930277122559617693827745610431041035602986652514576671661249492114097555460408849922232351968794983201975575528644246304350027997895025433726580043448333739570505582237033799953478489732418632541323980377642170506342903198676009908086276153124849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e97c9983fdac3b4166dba2cdbf37638503a20b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1455c439e03d2ed1552e4896b0d87e14220693bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (257 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(5).crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(5).crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://corppki/crl/Microsoft%20Secure%20Server%20Authority(5).crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20Secure%20Server%20Authority(5).crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://corppki/aia/Microsoft%20Secure%20Server%20Authority(5).crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER asn1: structure error: base 128 integer too large
1.3.6.1.4.1.311.21.8.7587021.751874.11030412.6202749.3702260.207.945504904.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00048d6027a6e921b8dcbb52140f53d4b9ff41291c7c18b6241c56b55230cd145591c6ae8f5ede12eebab415d010c4b7421a5ec511accd351408c8779fccd896b48533630f6f383bfdc9c2ca549bc7a538bd6ba305410882b7d06062bae310b5a2968df351fcda78281db2939fd818770b90d1b06de4104ded625c851b09d04eb9be75ccea5eb7f8039836f249338354bf6eeefc9c11696555e418a724bf632e6de805a25da929231f12ec4515dce10f0c590d7c905e6881cf42884bfd872e774a00d3963baf8f42fe5d7b52c4ce79269980024af190b62cfc25197ed9b4b28d9fb3bb5abb27a6159b1a47855f7fe987e552b0a3722546d54abc51797720110756