lifecycle.office-int.com

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 06

About this certificate

This digital certificate with serial number 33:00:3d:a3:38:25:60:71:03:4a:0d:96:43:00:00:00:3d:a3:38 was issued on by Microsoft Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:00:3d:a3:38:25:60:71:03:4a:0d:96:43:00:00:00:3d:a3:38
Serial Number (int): 1137358979305133984518549602482213317842412344
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: a1:07:bf:9d:71:48:bd:4f:c1:d0:51:cd:63:46:cc:3c:8c:b6:2f:c6
AuthorityKeyId: d5:c1:67:3a:c2:a3:9d:f4:77:52:5b:59:12:38:29:e6:55:68:bb:a5

Fingerprint (sha1): 7a:16:0c:a0:1b:28:c6:e4:e5:8a:d9:45:d8:0a:f3:04:2d:97:2e:d4
Fingerprint (sha256): 1d:56:2f:0c:0c:ab:73:ec:6d:4c:01:c5:50:95:ff:7a:3f:69:97:ae:00:4f:d8:e3:64:bf:a2:70:5d:3c:a5:fb

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2006%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2006.crl

Check the revocation status for certificate lifecycle.office-int.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lifecycle.office-int.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lifecycle.office-int.com

Other certificates including the domain name office-int.com

(limited to 100 certificates)
lifecycle.office-int.com
neur.fis.office-int.com
*.osi.office-int.net
*.osi.office-int.net
c.msn-int.com
cert00046-azurecdn.akamaized.net
cert00046-azurecdn.akamaized.net
redwood.osikevlartorus.office-int.com
api.businesscentral.dynamics-tie.com
lynx.osikevlartorus.office-int.com
cdn.forms.office.net
tasks.osi.office-int.com
helene.osikevlartorus.office-int.com
sway.office-int.com
inclient.store.office-int.com
store.office-int.com
cert00046-azurecdn.akamaized.net
osikevlartorus.office-int.com
c.msn-int.com
*.r11s-wu2-ppe.prague.office-int.com
insertmedia.osi.office-int.net
Pineapple.osikevlartorus.office-int.com
*.financials.dynamics-tie.com
geneva-mds.rose.office-int.com
Eridanus-INT-Mds.office-int.com
ssu.office-int.com
tasks.office-int.com
Mahogany.osikevlartorus.office-int.com
*.osi.office-int.net
*.wu2-ppe.prague.office-int.com
jade.osikevlartorus.office-int.com
geneva-mds.Deimos.office-int.com
support.office-int.com
wheat.osikevlartorus.office-int.com
*.osi.office-int.net
*.osi.office-int.net
firstpartymarketplace.store.office-int.com
cek.rps.lifecycle.office-int.com
geneva-mds.Galatea.office-int.com
*.osi.office-int.net
eucalyptus.osikevlartorus.office-int.com
row.fis.office-int.com
cert00046-azurecdn.akamaized.net
messaging.engagement.office-int.com
*.eu2.prague.office-int.com
forms.office-int.com
*.osi.office-int.net
geneva-mds.patriarch.office-int.com
*.osi.office-int.net
Buff.osikevlartorus.office-int.com
geneva-mds.Enceladus.office-int.com
sagittarius.osikevlartorus.office-int.com
Galatea.osikevlartorus.office-int.com
cluster.project.office-int.com
servicetrust.office-int.com
random12.fis.office-int.com
monitoring.servicetrust.office-int.com
cert00046-azurecdn.akamaized.net
eus.fis.office-int.com
servicetrust.office-int.com
Ginger.osikevlartorus.office-int.com
aqua.osikevlartorus.office-int.com
geneva-mds.Coffee.office-int.com
malachite.osikevlartorus.office-int.com
firstpartyapp-encrypt.marketplace.store.office-int.com
cert00046-azurecdn.akamaized.net
deployment.servicetrust.office-int.com
messaging.growth.office-int.com
cert00046-azurecdn.akamaized.net
persimmon.osikevlartorus.office-int.com
proteus.osikevlartorus.office-int.com
melon.osikevlartorus.office-int.com
addinslicensing.store.office-int.com
cert00046-azurecdn.akamaized.net
sway.office-int.com
cert00046-azurecdn.akamaized.net
burlywood.osikevlartorus.office-int.com
setup.office-int.com
prod.fis.office-int.com
*.r11s-wu2.prague.office-int.com
geneva-mds.auburn.office-int.com
cert00046-azurecdn.akamaized.net
*.osi.office-int.net
firstpartymarketplace.store.office-int.com
*.osi.office-int.net
api.servicetrust.office-int.com
sway.office-int.com
mint.osikevlartorus.office-int.com
forms.office-int.com
checkout.office-int.com
lifecycle.office-int.com
lumber.osikevlartorus.office-int.com
margaret.osikevlartorus.office-int.com
testIcmCert1.office-int.com
teal.officeapps.live-int.com
Eridanus-INT-Mds.office-int.com
ginger.osikevlartorus.office-int.com
store.office-int.com
messaging.engagement.office-int.com
scc-nexus.office-int.com

Certificate

The complete raw certificate details for lifecycle.office-int.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRmaUQwq7NYobG1+lYzV
BERh5CNGEWI/HBTKarr91sr8pn7M60wVTi4QlsRZuAOpoB4Hzh7TGoZSh0oUEXCn
5zRvEGt5heJvYLQFv57V6Ap9GtrcugsuSEVIjGwmrzoe4Ar/U4GRtmfQn/OjKAOE
EGelqKACt7hfTkhuDKL7PrSZjSrnOoPpk+AeiSpJ2TfN2S6nPWzA6lkSPrZrlpe+
S6JRKJhDKl2wbV4XocbVkSpp7Ib3OPGRPDgx8rJpm7al+YnM8CKysPwfZkU37kTX
/zTGbtBeX6j6nhBB3WAsdNnabsvWBrUyO9UilYSpcx7wX+FcX1msJLwSz1tGRMm8
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137358979305133984518549602482213317842412344
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 06'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-07 20:15:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-02 20:15:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lifecycle.office-int.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25386524509005025177522270054884433059351855322134409613980818646731290000792347527667610029891598853324450578013983632777751865548177236195101256737147878714579920979275740853942489736450350797338308406956486193118418759604662600347627686946281306772376890287186731169931719475821671848965794067568094059910191509126344858087472848283161243175227777203986636136509876081357607112850217347990414756344755056029185760495945840697805097917242418267711851731059407416110204957320823381231524276727308156327824086685651371224303494863788137031651597194169136353738187391933768863876049829482081193669323895890428031515829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2006%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a107bf9d7148bd4fc1d051cd6346cc3c8cb62fc6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifecycle.office-int.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2006.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5c1673ac2a39df477525b59123829e65568bba5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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