adlus08.konaaccountdogfood.net

Issued by Microsoft IT TLS CA 2

About this certificate

This digital certificate with serial number 20:00:02:dc:30:1a:4f:40:64:c3:28:ff:c8:00:00:00:02:dc:30 was issued on by Microsoft Corporation.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=adlus08.konaaccountdogfood.net

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 20:00:02:dc:30:1a:4f:40:64:c3:28:ff:c8:00:00:00:02:dc:30
Serial Number (int): 713624819597636725900622075087123355780963376
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: fd:fd:84:8e:72:8c:9a:5f:00:35:a8:1d:ea:8d:34:45:29:3f:f0:39
AuthorityKeyId: 91:9e:3b:44:6c:3d:57:9c:42:77:2a:34:d7:4f:d1:cc:4a:97:2c:da

Fingerprint (sha1): a4:3a:4e:69:4f:10:90:aa:27:aa:da:c2:4c:84:ca:31:3a:82:ec:52
Fingerprint (sha256): 49:ab:6b:cd:0f:26:f6:a9:9a:29:a6:a2:07:3d:39:d2:56:dc:f5:c9:66:cc:88:37:16:54:93:fb:b5:7f:12:0d

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%202.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl

Check the revocation status for certificate adlus08.konaaccountdogfood.net

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adlus08.konaaccountdogfood.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adlus08.konaaccountdogfood.net
adlus08.projectcabostore.net
adlus08.projectkonacompute.net
*.adlus08.konaaccountdogfood.net
*.adlus08.projectcabostore.net
*.adlus08.projectkonacompute.net
*.azuredatalakestore.net
*.azuredatalakeanalytics.net
*.southcentralus.azuredatalakestore.net
*.southcentralus.azuredatalakeanalytics.net
*.australiaeast.azuredatalakestore.net
*.australiaeast.azuredatalakeanalytics.net
*.caboaccountdogfood.net
*.adlus08.caboaccountdogfood.net
*.konaaccountdogfood.net

Other certificates including the domain name konaaccountdogfood.net

(limited to 100 certificates)
adlus08.konaaccountdogfood.net
*.projectkonacompute.net
*.livyui.pools.centralus.konaaccountdogfood.net
www.kiwitest.osdinfra.net
www.kiwitest.osdinfra.net
*.cachetest01.projectkonacompute.net
*.livyui.pools.centralus.konaaccountdogfood.net
*.projectkonacompute.net
*.perf.projectkonacompute.net
*.kobotest03.osdinfra.net
*.kobotest02.osdinfra.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
adlus08.konaaccountdogfood.net
adlus04.projectkonacompute.net
*.projectkonacompute.net
*.cachetest01.projectkonacompute.net
*.perf.projectkonacompute.net
*.livyui.pools.japaneast.konaaccountdogfood.net
www.kiwitest.osdinfra.net
*.kobotest02.osdinfra.net
*.projectkonacompute.net
*.sparkhistoryui.pools.centralus.konaaccountdogfood.net
*.livyui.pools.centralus.konaaccountdogfood.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.cachetest01.projectkonacompute.net
*.kobotest03.osdinfra.net
*.projectkonacompute.net
*.perf.projectkonacompute.net
*.kobotest03.osdinfra.net
kobotest02.osdinfra.net
*.kobotest03.osdinfra.net
*.kobotest04.osdinfra.net
*.kobotest03.osdinfra.net
*.livyui.pools.centralus.konaaccountdogfood.net
*.projectkonacompute.net
www.kiwitest.osdinfra.net
*.livyui.pools.japaneast.konaaccountdogfood.net
*.kobotest02.osdinfra.net
*.projectkonacompute.net
www.kiwitest.osdinfra.net
*.cabohdi01.projectcabostore.net
www.kiwitest.osdinfra.net
*.tadlus01.projectkonacompute.net
*.livyui.pools.japaneast.konaaccountdogfood.net
*.test05.projectkonacompute.net
*.projectkonacompute.net

Certificate

The complete raw certificate details for adlus08.konaaccountdogfood.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz71kRjXVtAs90v8HpLq
T7nBXGVLrc7kmykqcuRSdT18261f1ZsBwrZmfB4f2msMjZBT3OA7D00E10c2INbd
SA2g4FbH3gVzWwniwnydFtGsUQy7/BWlywpmF1eW4GWTGYcVKt12e2yEp9izptB2
aywX3AwctfSpNYP2isM8t4y3C7Ub9e3QNN/EQLKzpIJoxwz7I1oj18gVp8gtspiu
aNHa++lHv6maljuSE27ZCDin/VIesnLr2WPVTcGszG4wOwMYbZN2km2PIAiexNvx
Pk1CIQa50G0GvYUCAzTf4fZvDa37khxc2DqHmiCyPMF04GbmqJH/Jl0zDdRO6sMF
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 713624819597636725900622075087123355780963376
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-03 07:26:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 07:26:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adlus08.konaaccountdogfood.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24647515829330421703934654362570391852870679051023425978719503666912317225453704984222513790397164941479195695005578159393401611057725159629090145831809117588021043098917583830387769066383423479866398204089274198608883740257260877806767039708731486363284201070009320681507110404070767075364198466325224211706449288079621938112919786386976288611602036489499506136542308868635593896901429747443656718468968592549140109375706359325678881855445523755852433575554538107020473670125691176290150993258928793904365911166506599270144650172734622286917300747529936367436146528921674413592501627144208289179907418631497169700207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%202.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdfd848e728c9a5f0035a81dea8d3445293ff039
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (510 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adlus08.konaaccountdogfood.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adlus08.projectcabostore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adlus08.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus08.konaaccountdogfood.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus08.projectcabostore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus08.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azuredatalakestore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southcentralus.azuredatalakestore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southcentralus.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.australiaeast.azuredatalakestore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.australiaeast.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caboaccountdogfood.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus08.caboaccountdogfood.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.konaaccountdogfood.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 919e3b446c3d579c42772a34d74fd1cc4a972cda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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