*.footprintdns.com

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 03

About this certificate

This digital certificate with serial number 33:00:02:c4:a8:e0:d2:14:e2:5e:b6:56:9b:00:00:00:02:c4:a8 was issued on by Microsoft Corporation.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:02:c4:a8:e0:d2:14:e2:5e:b6:56:9b:00:00:00:02:c4:a8
Serial Number (int): 1137338947095348572301321356736647765535409320
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: e5:89:a7:18:ba:2d:51:6e:91:e4:02:12:82:a0:21:1c:ce:b6:ea:40
AuthorityKeyId: fe:09:71:40:55:05:10:44:d8:a4:81:75:b8:9e:1a:e9:4a:06:88:c8

Fingerprint (sha1): 13:e9:76:be:7f:f7:2a:30:3e:10:e4:5e:c4:c2:28:52:30:99:73:84
Fingerprint (sha256): 1b:2d:1a:48:68:13:d7:4f:11:3c:d0:d9:d4:9d:9c:83:e0:73:25:5a:fa:d7:83:5f:aa:c5:77:70:c8:a6:d4:08

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl

Check the revocation status for certificate *.footprintdns.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.footprintdns.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.footprintdns.com
*.azr.footprintdns.com
*.clo.footprintdns.com
*.netmon.azure.com
*.usnorth.a.footprintdns.com
*.teams.fp.measure.office.com
*.measure.microsoft.com

Other certificates including the domain name footprintdns.com

(limited to 100 certificates)
*.footprintdns.com
outlook.com
partner.outlook.cn
*.footprintdns.com
*.footprintdns.com
outlook.com
*.footprintdns.com
outlook.com
*.footprintdns.com
outlook.live.com
*.footprintdns.com
outlook.com
*.footprintdns.com
*.footprintdns.com
outlook.com
outlook.com
*.footprintdns.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
*.footprintdns.com
*.clo.footprintdns.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.de
*.msedge.net
*.footprintdns.com
*.msedge.net
*.footprintdns.com
outlook.live.com
outlook.com
*.footprintdns.com
*.footprintdns.com
outlook.com
*.footprintdns.com
*.footprintdns.com
outlook.com
Outlook.live.com
outlook.com
outlook.com
outlook.com
outlook.com
*.footprintdns.com
outlook.com
*.msedge.net
*.footprintdns.com
*.footprintdns.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
partner.outlook.cn
outlook.com
outlook.com
*.footprintdns.com
outlook.com
outlook.com
outlook.com
outlook.com
*.clo.footprintdns.com
*.footprintdns.com
outlook.com
*.footprintdns.com
*.footprintdns.com
*.footprintdns.com
outlook.com
outlook.com
outlook.com
outlook.com
outlook.com
*.footprintdns.com
outlook.com
*.footprintdns.com
outlook.com
outlook.com
outlook.com
*.footprintdns.com
outlook.com
outlook.com
*.footprintdns.com
*.footprintdns.com
*.footprintdns.com
outlook.com
outlook.com
outlook.com
outlook.com
*.footprintdns.com
outlook.com
outlook.com
*.msedge.net
outlook.com

Certificate

The complete raw certificate details for *.footprintdns.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7jodufurOF6H/4lIjiz
2aebghj9cWVA9QPATtD4zinFhAVr+xwA1+ZY47RXHb32Yu4zmimF2ty4Bz+8ihve
d40OccVYw6l4bebji/zgcuknwQZdKLN9qp0a6PAZ1sKp2PDMoYas9XkFW2clvh0k
xvUIU/iyroeWJzyH1Hb2ulCNeTRx6qkX4vWibgULtI7MyrFO8hikaKM2iGqAxFi6
w6oqjiaEaOUGO9x9OxWfAMcK+eKpCNxf8ZxAKnOhXgQUSe6HXD2emrqxHEV/ZrvX
SHkgMqXu3+hp66+yQ8u54/CBjBTK7HsUAXMrQoWj+bpfBlURoSdCM5cApZt18ICw
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137338947095348572301321356736647765535409320
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 20:24:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-15 20:24:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.footprintdns.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23697744593573009656200404160481683943189768010246671804293007984976885329914901520166546839225045942142005378980053985151539365524430294631413215158895566315805261177987132132329023154027453958788739708356308397841029014816553888773390301313100144833872153481926178468322129779122507730205531653238496753810323184786583166895936088832611730574870160536522657098044716086330603899065553946259323925996449869974047033537787728161741979248493561658886528389107260645079270434466761443611145154019531931528387899951022953161487957474408204824562981892227494341445219343493638410331975604854997327982866241722683689578681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e589a718ba2d516e91e4021282a0211cceb6ea40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (177 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footprintdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azr.footprintdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clo.footprintdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netmon.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usnorth.a.footprintdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teams.fp.measure.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.measure.microsoft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe09714055051044d8a48175b89e1ae94a0688c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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