*.goals.cloud.dev.microsoft

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 08

About this certificate

This digital certificate with serial number 33:00:2b:af:19:1e:97:ad:14:ff:1b:28:60:00:00:00:2b:af:19 was issued on by Microsoft Corporation.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:2b:af:19:1e:97:ad:14:ff:1b:28:60:00:00:00:2b:af:19
Serial Number (int): 1137352870012166553702838129829915584656813849
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 61:aa:f3:1d:f6:c1:d0:2f:2a:bd:1a:b7:0d:92:fd:ab:9a:90:98:22
AuthorityKeyId: f6:7e:2f:bd:80:a3:4a:b2:70:5b:eb:df:9a:1f:d8:ed:ca:61:80:07

Fingerprint (sha1): 60:7e:aa:44:70:20:53:78:2f:f5:c5:88:e0:70:37:b3:92:64:9c:ba
Fingerprint (sha256): 92:2a:62:08:34:fa:2f:52:e9:5e:6b:f6:56:9a:e4:08:d0:71:f7:49:84:eb:09:b8:8d:b1:89:45:03:20:79:b7

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl

Check the revocation status for certificate *.goals.cloud.dev.microsoft

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.goals.cloud.dev.microsoft

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.goals.cloud.dev.microsoft

Other certificates including the domain name dev.microsoft

(limited to 100 certificates)
visitstaging.teams.cloud.dev.microsoft
catalog.int.mesh.cloud.dev.microsoft
sfcluster.int01.ediscovery.svc.cloud.dev.microsoft
test.augloop.svc.cloud.dev.microsoft
catalog.ppe.mesh.cloud.dev.microsoft
int.graphservice.ediscovery.svc.cloud.dev.microsoft
int.custodianservice.ediscovery.svc.cloud.dev.microsoft
roaming.windows.cloud.dev.microsoft
int.mccservice.ediscovery.svc.cloud.dev.microsoft
int.jobscheduler.ediscovery.svc.cloud.dev.microsoft
int.migrationservice.ediscovery.svc.cloud.dev.microsoft
int.augloop.svc.cloud-dev.microsoft
sfcluster.int1.ediscovery.svc.cloud.dev.microsoft
tasks.officeppe.com
test.ins.pubsub.mb.mobile.m365.svc.cloud.dev.microsoft
*.updates.teams.cloud.dev.microsoft
tenantconfiguration.admin.cloud.dev.microsoft
config.centro.core.dev.microsoft
int.augloop.svc.cloud-dev.microsoft
Onedrive.cloud.dev.microsoft
int.caseservice.ediscovery.svc.cloud.dev.microsoft
test.ins.messageboker.mobile.m365.svc.cloud.dev.microsoft
test.augloop.svc.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
int.ediscovery.svc.cloud.dev.microsoft
test.augloop.svc.cloud-dev.microsoft
int.searchservice.ediscovery.svc.cloud.dev.microsoft
int.proxyservice.ediscovery.svc.cloud.dev.microsoft
catalog.rol.mesh.cloud.dev.microsoft
*.goals.cloud.dev.microsoft
forms.cloud.dev.microsoft
visitppe.teams.cloud.dev.microsoft
test.augloop.svc.cloud.dev.microsoft
canary.tasks.office.net
test.augloop.svc.cloud.dev.microsoft
test.scus.messageboker.mobile.m365.svc.cloud.dev.microsoft
test.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud.dev.microsoft
int.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
int.reviewsetservice.ediscovery.svc.cloud.dev.microsoft
int.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft

Certificate

The complete raw certificate details for *.goals.cloud.dev.microsoft in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApErVM9a/xcVnaLBbG7ew
Mr/llt9RPqsLKiIk16tDkU7+VXQo5drO9+0XQGMDAIfhBdCtMW717nijCKOvT7mI
29LgUpcgffirbgOHd7qZFeYr4rC+HKOeNK2iYI/ylXw2TQgRBfeUOjchDGRqGDWZ
VPz6vHsBp7BQ6FUy268LNdQF8WtTP/xvZSbvpe6+EVwHYh54fzpzDjEKsaild5Iy
poXadWzDWCeOfZkzog8gIFcg5KZ8BlEffuOdxU7L+WoVxUfyMk+Oehz42X3Z+cLm
70BzLOGzus33cbtmRK8WZFvgXnR8D07lBjM2JRzLQToDZzJfh9wm2xuMjcOGAwHQ
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137352870012166553702838129829915584656813849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 08'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-11 10:29:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-06 10:29:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.goals.cloud.dev.microsoft'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20739983454419747147085208174676262709954919560835784734598944646939538684232620159098504646093425198494122637473725437656951605059343359377444343350880212008315444361270631886574167125000284940725273305169794215945087918488586578681699912723488468712977653018847812400553919364543787198038224839416710645073185685047274527963661418309857242565811285883648596930728672484707118662935119198568814831766527555101886826824849790153286259467972666643600245384629629985612055666444424171743008094369590366870971371879004814105412297455071799997485469079920484604239807754521352848435677372847509137699124941199081147060437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61aaf31df6c1d02f2abd1ab70d92fdab9a909822
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goals.cloud.dev.microsoft'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f67e2fbd80a34ab2705bebdf9a1fd8edca618007
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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