*.goals.cloud-dev.microsoft

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 06

About this certificate

This digital certificate with serial number 33:00:d6:48:16:25:d5:e5:b6:a0:86:84:c6:00:00:00:d6:48:16 was issued on by Microsoft Corporation.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:d6:48:16:25:d5:e5:b6:a0:86:84:c6:00:00:00:d6:48:16
Serial Number (int): 1137410921370996484298012309408612294283642902
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 0d:8f:a3:76:34:00:02:97:ca:c6:6b:2d:56:1f:68:3e:56:5c:a6:77
AuthorityKeyId: d5:c1:67:3a:c2:a3:9d:f4:77:52:5b:59:12:38:29:e6:55:68:bb:a5

Fingerprint (sha1): c5:1e:f4:7c:00:60:d7:d9:55:e9:65:17:e7:be:22:46:2f:04:58:35
Fingerprint (sha256): 4b:3a:2b:d9:35:ab:32:99:63:e1:dd:a2:a9:ee:a3:9b:fa:55:c1:36:70:72:92:8a:b9:57:00:90:09:78:8d:98

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2006%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2006.crl

Check the revocation status for certificate *.goals.cloud-dev.microsoft

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.goals.cloud-dev.microsoft

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.goals.cloud-dev.microsoft

Other certificates including the domain name cloud-dev.microsoft

(limited to 100 certificates)
status.officeppe.com
sway.officeppe.com
*.vgdev.glint.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
*.goals.cloud-dev.microsoft
sessions.int.mesh.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
sway.officeppe.com
*.vgqa.glint.cloud-dev.microsoft
test.pulse.cloud-dev.microsoft
officeapps.live.com
learning.cloud-dev.microsoft
sessions.rol.mesh.cloud-dev.microsoft
esign.svc.cloud-dev.microsoft
copilot.cloud-dev.microsoft
augloop-test.officeppe.com
dev.skills.cloud-dev.microsoft
sway.officeppe.com
teamsapp.learning.cloud-dev.microsoft
*.yammer.com
augloop-int.officeppe.com
augloop-int.officeppe.com
status.officeppe.com
test.augloop.svc.cloud-dev.microsoft
learning.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
forms.cloud-dev.microsoft
setup.cloud-dev.microsoft
sessions.ppe.mesh.cloud-dev.microsoft
sessions.int.mesh.cloud-dev.microsoft
dev.skills.cloud-dev.microsoft
*.goals.cloud-dev.microsoft
loop.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
session.rol.mesh.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
*.vgdev.glint.cloud-dev.microsoft
dev.skills.cloud-dev.microsoft
dev.skills.cloud-dev.microsoft
sessions.rol.mesh.cloud-dev.microsoft
*.yammer.com
stage.skills.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
viva.cloud-dev.microsoft
forms.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
esign.svc.cloud-dev.microsoft
esign.svc.cloud-dev.microsoft
kevlar-ssl.augloop-int.officeppe.com
officeapps.live.com
test.augloop.svc.cloud-dev.microsoft
*.vgqa.glint.cloud-dev.microsoft
sway.officeppe.com
int.augloop.svc.cloud-dev.microsoft
reports.mmp.svc.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
officeapps.live.com
*.yammer.com
officeapps.live.com
kevlar-ssl.augloop-test.officeppe.com
*.ppe.goals.cloud-dev.microsoft
learning.cloud-dev.microsoft
test.pulse.cloud-dev.microsoft
profile.ppe.mesh.microsoft.com
sway.officeppe.com
forms.cloud-dev.microsoft
sway.officeppe.com
stage.pulse.cloud-dev.microsoft
stage.pulse.cloud-dev.microsoft
dev.pulse.cloud-dev.microsoft
viva.cloud-dev.microsoft
insights.cloud-dev.microsoft
*.goals.cloud-dev.microsoft
sway.officeppe.com
reports.mmp.svc.cloud-dev.microsoft
app.int.whiteboard.microsoft.com
*.yammer.com
test.augloop.svc.cloud-dev.microsoft
stage.pulse.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
*.yammer.com
forms.cloud-dev.microsoft
aiinfrastructure.cloud-dev.microsoft
aiinfrastructure.cloud-dev.microsoft
status.officeppe.com
*.vgdev.glint.cloud-dev.microsoft
officeapps.live.com
teamsapp.learning.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
insights.cloud-dev.microsoft
aiinfrastructure.cloud-dev.microsoft
status.officeppe.com
augloop-test.officeppe.com
cdn.aiinfrastructure.cloud-dev.microsoft
status.officeppe.com

Certificate

The complete raw certificate details for *.goals.cloud-dev.microsoft in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmakp2lqd8mOdAkcPfQCz
bKrAJHkbKTVpKvA5vskRGALrktCtxord/CunckLae2IknaHYK938XEv6jDq9bEzF
hNxOdA+lU81/RVS8KifIFBvFc/3+4pY+eAa5Axi2iTI37K7pa3apWlLgjxSdUklg
0MtrluTBPTvaOYBqT4JPYssezsdTnbecvP7RU1h4nTp7Xx1zDiQ1I11ARQDCw4lt
lVdCkn09Ii3OtG6tmVoEbKFzqW6VMWIZ4jFP7FkCzWaohd3YMinDVT4xy/C97s2s
0wSanEUwzer1ILfoDusu8B1BqPKz3H1DlUu9Pqy5mliDyVbR9GkpUC7udPmfLvpt
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137410921370996484298012309408612294283642902
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 06'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 04:53:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.goals.cloud-dev.microsoft'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19397878284790369548779219806365141222074915862649867998172269940857413441750147481460685734419897327418704167940443626765468344558164631272323666748184993906630067086876560256747083728294063882360935467364194460538610198598397597709512824930061355270276609955266794680161342670834606776862933553028305828081193111955205118872077706996958017802645104816455319105656916941089972951487517541356713828863172773406230749755938016997756061824530473366192413847548153230266280896555633254040865496349370302936409991736048836615486859555827417936164570812898899822141171847414756171660384264274766602571029899634545895566841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2006%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d8fa37634000297cac66b2d561f683e565ca677
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goals.cloud-dev.microsoft'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2006.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5c1673ac2a39df477525b59123829e65568bba5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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