catalog.rol.mesh.cloud.dev.microsoft

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 04

About this certificate

This digital certificate with serial number 33:00:51:eb:30:ac:41:03:e6:87:b0:c4:22:00:00:00:51:eb:30 was issued on by Microsoft Corporation.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:51:eb:30:ac:41:03:e6:87:b0:c4:22:00:00:00:51:eb:30
Serial Number (int): 1137365880618085360388304286517656779280739120
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: b0:b1:fc:40:0e:21:6a:38:37:6a:eb:5e:d3:56:a6:bd:80:aa:44:32
AuthorityKeyId: 3b:70:d1:53:e9:76:25:9d:60:a8:ca:66:0f:c6:9b:ae:6f:54:16:6a

Fingerprint (sha1): f2:57:ab:ae:6c:48:09:a8:f0:2f:ac:d6:f1:5e:9c:59:38:cb:ab:7c
Fingerprint (sha256): 8c:10:35:a5:d5:c0:2b:70:90:ea:92:01:57:75:8e:7c:0c:ed:c3:49:0a:de:4f:97:b1:38:d2:62:ab:27:30:cf

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl

Check the revocation status for certificate catalog.rol.mesh.cloud.dev.microsoft

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for catalog.rol.mesh.cloud.dev.microsoft

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

catalog.rol.mesh.cloud.dev.microsoft

Other certificates including the domain name dev.microsoft

(limited to 100 certificates)
visitstaging.teams.cloud.dev.microsoft
catalog.int.mesh.cloud.dev.microsoft
sfcluster.int01.ediscovery.svc.cloud.dev.microsoft
test.augloop.svc.cloud.dev.microsoft
catalog.ppe.mesh.cloud.dev.microsoft
int.graphservice.ediscovery.svc.cloud.dev.microsoft
int.custodianservice.ediscovery.svc.cloud.dev.microsoft
roaming.windows.cloud.dev.microsoft
int.mccservice.ediscovery.svc.cloud.dev.microsoft
int.jobscheduler.ediscovery.svc.cloud.dev.microsoft
int.migrationservice.ediscovery.svc.cloud.dev.microsoft
int.augloop.svc.cloud-dev.microsoft
sfcluster.int1.ediscovery.svc.cloud.dev.microsoft
tasks.officeppe.com
test.ins.pubsub.mb.mobile.m365.svc.cloud.dev.microsoft
*.updates.teams.cloud.dev.microsoft
tenantconfiguration.admin.cloud.dev.microsoft
config.centro.core.dev.microsoft
int.augloop.svc.cloud-dev.microsoft
Onedrive.cloud.dev.microsoft
int.caseservice.ediscovery.svc.cloud.dev.microsoft
test.ins.messageboker.mobile.m365.svc.cloud.dev.microsoft
test.augloop.svc.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
int.ediscovery.svc.cloud.dev.microsoft
test.augloop.svc.cloud-dev.microsoft
int.searchservice.ediscovery.svc.cloud.dev.microsoft
int.proxyservice.ediscovery.svc.cloud.dev.microsoft
catalog.rol.mesh.cloud.dev.microsoft
*.goals.cloud.dev.microsoft
forms.cloud.dev.microsoft
visitppe.teams.cloud.dev.microsoft
test.augloop.svc.cloud.dev.microsoft
canary.tasks.office.net
test.augloop.svc.cloud.dev.microsoft
test.scus.messageboker.mobile.m365.svc.cloud.dev.microsoft
test.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud.dev.microsoft
int.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
int.reviewsetservice.ediscovery.svc.cloud.dev.microsoft
int.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft

Certificate

The complete raw certificate details for catalog.rol.mesh.cloud.dev.microsoft in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MydSQExiaxbLGq6Gsai
/dS9BAuqn1YLCJI2udUH8mPAOaHOdIvTikhKqpQiOkdWWJ66qI5F7cXsAJ5IHD6y
rD3B+7/izqXLMitN/ZGaSrBzbW8qdaNhX2i+4E7iCT0dQDozfhvnE3FlZKPd2+H9
IohvfrqFX/H1rV0ayfFo17YCsntE6PtzA77ViYMRyh+CO+map2K0w7YkKHCBA9Jl
kxkQKRS8SdpL0mb6bnuZ7RW3VZCTT/7RLC66rMwaw/X6P96h+onRhLVVjj8VrUdl
9crICYfkETVuIf09aIvWhihsj/hHeUh4f3d/QDJnbNieZtodm6qpPpPE2hn3mOoB
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137365880618085360388304286517656779280739120
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 04'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-24 17:11:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-19 17:11:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'catalog.rol.mesh.cloud.dev.microsoft'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27368372991509723085445038670930407549219775857421529599492021566852235811867571973820054908251232413544786776467074674962037936696142870840344352525649238512177780334534875429916458044429584199820637381722674728170172175021364003040908695894858963282969962301244831569526953840167362496517480111341873373778231164794162595302526570146865489139275156654966360872159278579943358691178580868705140473845825360580032137858529031515873270405482848214553294718215494569966472842102295134565443726305584136439786162536685656578484740783846434184012056159355876003162254056246770625043009744941761595422487448238451073876341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0b1fc400e216a38376aeb5ed356a6bd80aa4432
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.rol.mesh.cloud.dev.microsoft'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3b70d153e976259d60a8ca660fc69bae6f54166a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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