roaming.windows.cloud.dev.microsoft

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 07

About this certificate

This digital certificate with serial number 33:00:39:03:c1:f3:c3:eb:b5:ed:bc:6c:05:00:00:00:39:03:c1 was issued on by Microsoft Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:39:03:c1:f3:c3:eb:b5:ed:bc:6c:05:00:00:00:39:03:c1
Serial Number (int): 1137357406214717702737001590728639468346606529
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: d5:7d:22:5b:bd:ac:0f:82:f5:d8:26:b8:12:ff:4f:7b:9a:6a:c4:fe
AuthorityKeyId: ce:15:16:3b:ea:02:a3:a6:6b:da:d9:2b:fd:e5:8c:52:be:7a:50:a8

Fingerprint (sha1): 66:5b:2d:b1:b7:b2:bd:60:63:47:ed:6a:f7:be:37:f1:6e:1e:fe:66
Fingerprint (sha256): 1a:7d:9a:0d:bb:41:b5:32:ac:de:89:2f:d7:d3:aa:10:99:89:38:5b:42:06:30:b3:82:50:c7:a9:5b:94:50:da

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl

Check the revocation status for certificate roaming.windows.cloud.dev.microsoft

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roaming.windows.cloud.dev.microsoft

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

roaming.windows.cloud.dev.microsoft
*.roaming.windows.cloud.dev.microsoft

Other certificates including the domain name dev.microsoft

(limited to 100 certificates)
visitstaging.teams.cloud.dev.microsoft
catalog.int.mesh.cloud.dev.microsoft
sfcluster.int01.ediscovery.svc.cloud.dev.microsoft
test.augloop.svc.cloud.dev.microsoft
catalog.ppe.mesh.cloud.dev.microsoft
int.graphservice.ediscovery.svc.cloud.dev.microsoft
int.custodianservice.ediscovery.svc.cloud.dev.microsoft
roaming.windows.cloud.dev.microsoft
int.mccservice.ediscovery.svc.cloud.dev.microsoft
int.jobscheduler.ediscovery.svc.cloud.dev.microsoft
int.migrationservice.ediscovery.svc.cloud.dev.microsoft
int.augloop.svc.cloud-dev.microsoft
sfcluster.int1.ediscovery.svc.cloud.dev.microsoft
tasks.officeppe.com
test.ins.pubsub.mb.mobile.m365.svc.cloud.dev.microsoft
*.updates.teams.cloud.dev.microsoft
tenantconfiguration.admin.cloud.dev.microsoft
config.centro.core.dev.microsoft
int.augloop.svc.cloud-dev.microsoft
Onedrive.cloud.dev.microsoft
int.caseservice.ediscovery.svc.cloud.dev.microsoft
test.ins.messageboker.mobile.m365.svc.cloud.dev.microsoft
test.augloop.svc.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
int.ediscovery.svc.cloud.dev.microsoft
test.augloop.svc.cloud-dev.microsoft
int.searchservice.ediscovery.svc.cloud.dev.microsoft
int.proxyservice.ediscovery.svc.cloud.dev.microsoft
catalog.rol.mesh.cloud.dev.microsoft
*.goals.cloud.dev.microsoft
forms.cloud.dev.microsoft
visitppe.teams.cloud.dev.microsoft
test.augloop.svc.cloud.dev.microsoft
canary.tasks.office.net
test.augloop.svc.cloud.dev.microsoft
test.scus.messageboker.mobile.m365.svc.cloud.dev.microsoft
test.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud.dev.microsoft
int.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
int.reviewsetservice.ediscovery.svc.cloud.dev.microsoft
int.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft

Certificate

The complete raw certificate details for roaming.windows.cloud.dev.microsoft in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdcFmMF/53vB39dYRmyW
5biFpYpDyO3tYCas2B1gAUqCbzS2Gmf9h683zD9KHMhCxcRhGmlMJKXl4qAHtRcX
w2n+t6l1W7gRjyFxZeQYz/hM3tIbB02OT9Z/ySEv58d0bLYuzKgPWgDV0SkvmS+2
EyUIbGabpiU1MLcWHxG0VUIM7UHMEFEciLsbDzm4emPm1Pbm16nNaP9aU9zuKrdm
ERFyzA7GZ8del8pCKVw+dX8vxqkgSJVPIDk1NyJvHHIAi+mSsR9YTx3L4gElubE7
6XZoHJ14t+X50V8uSRLZmaTJ5N/7dsIj01PQnJzau8d1rX5lKq62lOqC4YKRqZd2
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137357406214717702737001590728639468346606529
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 07'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 18:58:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-08 18:58:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roaming.windows.cloud.dev.microsoft'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22955164430905830898013097794245498979457399802765542905471551408871923812625879088807547398276345907482231786203159246927915299982775831576800887549490438659941995207790835599776444966953503543668901091298980776892740005654047215067302288951345875547194700940708751319415529163302084066911348112228353888351710843037324742426937420168397069082373915561257248654729532271199514193699847437938453669901740884301800513052815237525062973845318407592348895474734279527895947485893690458947028456578011517890565529227187708641006399465920802978493943059050041119992516537299890253337786463949197329754235529032792584713977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d57d225bbdac0f82f5d826b812ff4f7b9a6ac4fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roaming.windows.cloud.dev.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roaming.windows.cloud.dev.microsoft'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ce15163bea02a3a66bdad92bfde58c52be7a50a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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