portal.customtranslator.azure.ai

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 04

About this certificate

This digital certificate with serial number 33:00:54:9c:9b:47:f2:a4:b8:85:87:ff:59:00:00:00:54:9c:9b was issued on by Microsoft Corporation.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:54:9c:9b:47:f2:a4:b8:85:87:ff:59:00:00:00:54:9c:9b
Serial Number (int): 1137366797009715769844829276320109337792257179
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: a8:fe:ba:35:0a:88:c8:05:57:0c:fb:85:56:76:4a:b5:4d:54:15:e4
AuthorityKeyId: 3b:70:d1:53:e9:76:25:9d:60:a8:ca:66:0f:c6:9b:ae:6f:54:16:6a

Fingerprint (sha1): 4a:e5:85:8a:aa:10:4a:26:5b:13:4a:cc:61:8f:61:e6:16:bf:f9:9d
Fingerprint (sha256): 80:1e:ba:85:0d:8a:48:58:9e:04:1b:59:01:37:69:b3:0d:75:ab:ca:99:13:25:b4:b3:3a:3f:17:de:22:08:61

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl

Check the revocation status for certificate portal.customtranslator.azure.ai

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.customtranslator.azure.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.customtranslator.azure.ai

Other certificates including the domain name azure.ai

(limited to 100 certificates)
westus2.mlhistory.azure.ai
eastus2euap.mlhistory.azure.ai
*.customtranslator.azure.ai
southcentralus.mlhistory.azure.ai
westcentralus.mlhistory.azure.ai
southcentralus.mlhistory.azure.ai
portal.customtranslator.azure.ai
gallerycanary.azure.ai
eastus.mlhistory.azure.ai
*.customtranslator.azure.ai
*.customtranslator.azure.ai
westcentralus.mlcompute.azure.ai
legacy.portal.customtranslator.azure.ai
southeastasia.mlhistory.azure.ai
southcentralus.mlservices.azure.ai
app-quickstart-mooncake-test.azure.ai
eastus.mlhistory.azure.ai
quickstart.azure.ai
eastus.mlservices.azure.ai
southeastasia.mlcompute.azure.ai
westus2.mlhistory.azure.ai
southeastasia.mlcompute.azure.ai
northeurope.mlservices.azure.ai
eastus.mlcompute.azure.ai
*.customtranslator.azure.ai
app-quickstart-test.azure.ai
southeastasia.mlhistory.azure.ai
westcentralus.mlcompute.azure.ai
westeurope.mlhistory.azure.ai
centraluseuap.mlcompute.azure.ai
australiaeast.mlhistory.azure.ai
southeastasia.mlhistory.azure.ai
gallerycanary.azure.ai
eastus.mlcompute.azure.ai
customtranslator-int.azure.ai
westcentralus.mlservices.azure.ai
stagingus.portal.customtranslator.azure.ai
portal.customtranslator.azure.ai
australiaeast.mlhistory.azure.ai
eastus2euap.mlhistory.azure.ai
eastus2.mlcompute.azure.ai
portal.customtranslator.azure.ai
westeurope.mlcompute.azure.ai
next.portal.customtranslator.azure.ai
eastus.mlcompute.azure.ai
eastus.mlservices.azure.ai
legacy.portal.customtranslator.azure.ai
gallerycanary.azure.ai
northeurope.mlhistory.azure.ai
westeurope.mlcompute.azure.ai
westus2.mlhistory.azure.ai
northeurope.mlservices.azure.ai
australiaeast.mlhistory.azure.ai
eastus2.mlhistory.azure.ai
australiaeast.mlservices.azure.ai
portal.customtranslator.azure.ai
gallery.azure.ai
eastus2.mlhistory.azure.ai
*.customtranslator-int.azure.ai
southcentralus.mlcompute.azure.ai
app-quickstart-mooncake.azure.ai
centraluseuap.mlcompute.azure.ai
westcentralus.mlservices.azure.ai
eastus2euap.mlhistory.azure.ai
northeurope.mlcompute.azure.ai
southcentralus.mlservices.azure.ai
*.customtranslator.azure.ai
centraluseuap.mlhistory.azure.ai
app-quickstart-test.azure.ai
eastus2.mlcompute.azure.ai
westus2.mlcompute.azure.ai
eastus2.mlcompute.azure.ai
eastus.mlhistory.azure.ai
*.customtranslator.azure.ai
southcentralus.mlcompute.azure.ai
*.customtranslator.azure.ai
southcentralus.mlservices.azure.ai
eastus2euap.mlhistory.azure.ai
centraluseuap.mlhistory.azure.ai
westeurope.mlservices.azure.ai
eastus2euap.mlcompute.azure.ai
westeurope.mlservices.azure.ai
australiaeast.mlcompute.azure.ai
westus2.mlhistory.azure.ai
southeastasia.mlservices.azure.ai
next.portal.customtranslator.azure.ai
eastus.mlhistory.azure.ai
southcentralus.mlcompute.azure.ai
mamlgallerygcs-test.azure.ai
centraluseuap.mlservices.azure.ai
*.develop.portal.speech.azure.ai
westcentralus.mlcompute.azure.ai
eastus2euap.mlcompute.azure.ai
westus2.mlservices.azure.ai
develop.speech.azure.ai
westus2.mlhistory.azure.ai
*.customtranslator-testpub.azure.ai
eastus.mlcompute.azure.ai
*.customtranslator-int.azure.ai
westus.mlservices.azure.ai

Certificate

The complete raw certificate details for portal.customtranslator.azure.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjGQp+EN5T1p8PRFDTtK
ySK4DVhp5pZJXHKIvoZAb2hn5MwRYPH+hMwYwMNX2uYX4GOqWpKlcuUcIyzm3kof
fI4y3DlGRGMtBoAAQJ+5euoVtqZU6ui2Hx71f1lvjUj0N0IK1Kz1JzZz3SN1usz3
83g5OCe9sUiPoLaFiQb9G4MqFXp0sRDXYpJcmw2SP/vJ+WfhO/loeEXZ+KzjtdkL
PtdbmTNx0a/7Fc247L2TDfsPIdCCEIR7ztaq7RYiAxAbvFfilaOi7T6kfw4B6416
mYGFYzrxzFt/smsybZQdlMsDxj0pDlukOz2m1VASQGSbJBX477UARzymvHphZgbu
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137366797009715769844829276320109337792257179
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 04'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 12:02:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-24 12:02:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.customtranslator.azure.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24514672606251187951539768828528292914675800620673247606472397011449012531132555927276209345918718567212591728270070434698646101182896633798687486337074937154343449032029360047906766477402499602716796850047885760737819285558112975397864700521264336589648849049189790218056601851000778987371367061095566950545126831546572854064338708650742564047217452350446861463094228242554474017553332794296267858831432507503169411699586862266817238790633998612895495083027181480594038347278468267161408729617823245194523959544827442651943216729954283546955688499650936541128092409936674915459207206263907261603880206121647007526449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8feba350a88c805570cfb8556764ab54d5415e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.customtranslator.azure.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3b70d153e976259d60a8ca660fc69bae6f54166a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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