*.customtranslator.azure.ai

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 04

About this certificate

This digital certificate with serial number 33:00:59:67:2b:e0:34:8c:29:cb:11:b6:fe:00:00:00:59:67:2b was issued on by Microsoft Corporation.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:59:67:2b:e0:34:8c:29:cb:11:b6:fe:00:00:00:59:67:2b
Serial Number (int): 1137368427394017497498997386053743431447570219
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 37:1b:7d:fb:48:43:cf:a8:f0:8a:fa:b7:c8:55:49:b1:a7:93:90:49
AuthorityKeyId: 3b:70:d1:53:e9:76:25:9d:60:a8:ca:66:0f:c6:9b:ae:6f:54:16:6a

Fingerprint (sha1): 66:03:5d:36:6a:de:bb:66:68:89:1f:c8:42:ee:ea:eb:85:d7:f6:66
Fingerprint (sha256): 18:b1:02:ea:cf:b7:eb:d5:65:a6:3b:5d:b8:71:09:11:71:7e:90:6c:39:31:df:53:91:d6:16:a8:30:f9:c8:1c

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl

Check the revocation status for certificate *.customtranslator.azure.ai

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.customtranslator.azure.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.customtranslator.azure.ai

Other certificates including the domain name azure.ai

(limited to 100 certificates)
westus2.mlhistory.azure.ai
eastus2euap.mlhistory.azure.ai
*.customtranslator.azure.ai
southcentralus.mlhistory.azure.ai
westcentralus.mlhistory.azure.ai
southcentralus.mlhistory.azure.ai
portal.customtranslator.azure.ai
gallerycanary.azure.ai
eastus.mlhistory.azure.ai
*.customtranslator.azure.ai
*.customtranslator.azure.ai
westcentralus.mlcompute.azure.ai
legacy.portal.customtranslator.azure.ai
southeastasia.mlhistory.azure.ai
southcentralus.mlservices.azure.ai
app-quickstart-mooncake-test.azure.ai
eastus.mlhistory.azure.ai
quickstart.azure.ai
eastus.mlservices.azure.ai
southeastasia.mlcompute.azure.ai
westus2.mlhistory.azure.ai
southeastasia.mlcompute.azure.ai
northeurope.mlservices.azure.ai
eastus.mlcompute.azure.ai
*.customtranslator.azure.ai
app-quickstart-test.azure.ai
southeastasia.mlhistory.azure.ai
westcentralus.mlcompute.azure.ai
westeurope.mlhistory.azure.ai
centraluseuap.mlcompute.azure.ai
australiaeast.mlhistory.azure.ai
southeastasia.mlhistory.azure.ai
gallerycanary.azure.ai
eastus.mlcompute.azure.ai
customtranslator-int.azure.ai
westcentralus.mlservices.azure.ai
stagingus.portal.customtranslator.azure.ai
portal.customtranslator.azure.ai
australiaeast.mlhistory.azure.ai
eastus2euap.mlhistory.azure.ai
eastus2.mlcompute.azure.ai
portal.customtranslator.azure.ai
westeurope.mlcompute.azure.ai
next.portal.customtranslator.azure.ai
eastus.mlcompute.azure.ai
eastus.mlservices.azure.ai
legacy.portal.customtranslator.azure.ai
gallerycanary.azure.ai
northeurope.mlhistory.azure.ai
westeurope.mlcompute.azure.ai
westus2.mlhistory.azure.ai
northeurope.mlservices.azure.ai
australiaeast.mlhistory.azure.ai
eastus2.mlhistory.azure.ai
australiaeast.mlservices.azure.ai
portal.customtranslator.azure.ai
gallery.azure.ai
eastus2.mlhistory.azure.ai
*.customtranslator-int.azure.ai
southcentralus.mlcompute.azure.ai
app-quickstart-mooncake.azure.ai
centraluseuap.mlcompute.azure.ai
westcentralus.mlservices.azure.ai
eastus2euap.mlhistory.azure.ai
northeurope.mlcompute.azure.ai
southcentralus.mlservices.azure.ai
*.customtranslator.azure.ai
centraluseuap.mlhistory.azure.ai
app-quickstart-test.azure.ai
eastus2.mlcompute.azure.ai
westus2.mlcompute.azure.ai
eastus2.mlcompute.azure.ai
eastus.mlhistory.azure.ai
*.customtranslator.azure.ai
southcentralus.mlcompute.azure.ai
*.customtranslator.azure.ai
southcentralus.mlservices.azure.ai
eastus2euap.mlhistory.azure.ai
centraluseuap.mlhistory.azure.ai
westeurope.mlservices.azure.ai
eastus2euap.mlcompute.azure.ai
westeurope.mlservices.azure.ai
australiaeast.mlcompute.azure.ai
westus2.mlhistory.azure.ai
southeastasia.mlservices.azure.ai
next.portal.customtranslator.azure.ai
eastus.mlhistory.azure.ai
southcentralus.mlcompute.azure.ai
mamlgallerygcs-test.azure.ai
centraluseuap.mlservices.azure.ai
*.develop.portal.speech.azure.ai
westcentralus.mlcompute.azure.ai
eastus2euap.mlcompute.azure.ai
westus2.mlservices.azure.ai
develop.speech.azure.ai
westus2.mlhistory.azure.ai
*.customtranslator-testpub.azure.ai
eastus.mlcompute.azure.ai
*.customtranslator-int.azure.ai
westus.mlservices.azure.ai

Certificate

The complete raw certificate details for *.customtranslator.azure.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqJx1OcBugl9prZeKB82
jgGLNBX0IQx9Ck/+kYykzuLopHETglKxzfsZ2acZ1SUjYb3gfq1Lyyl8lusSEKCQ
iaPWFWT3QsZPBI2kO6x+P9ILR5bIFo4fy2RqBnfN3talV06K8IH9z7o10r5+zAnz
iq6ZCsmNUsRNwXnuMnjpfzBn/4kHZlfCMQ0lYZoQEY8fCFsO03S0XiH+u1ie74q9
87uIInRJ9SOqr5rXcZ71lEY1KUZsHJEK8LmqDqYAFfYu/L9sGnMUEMiLioimwOp8
4IYHSv1ZR5PhEGnClNXMcExJYRUgsqY9B62rvjdstbV4osEd3w0ay9WePQw1AV5E
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137368427394017497498997386053743431447570219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 04'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 22:12:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-29 22:12:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.customtranslator.azure.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24570335608271407988307142559235254148867960402337936580563518061797699740619378514579872880658052847224441667799104032275996989857777243766621052593249097052221188969584049141434236875337284521497775349561939154688301513022625506692575593208357376289540472472542752438812827486196999650840821015262466308480661362183857597951509911900026442807972551904118161521285697521878092520519336942654219430764663229886138765392978905330502135446806542348335785538818549098228764081722933541218341746948796202136647395704277917058001779952218246516324732111872846580616996946858630997797029766696995919389478357336015486469309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							371b7dfb4843cfa8f08afab7c85549b1a7939049
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customtranslator.azure.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3b70d153e976259d60a8ca660fc69bae6f54166a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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