*.projectcabostore.net

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 04

About this certificate

This digital certificate with serial number 33:00:59:f2:3b:86:ad:60:4b:b9:b8:21:5e:00:00:00:59:f2:3b was issued on by Microsoft Corporation.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:59:f2:3b:86:ad:60:4b:b9:b8:21:5e:00:00:00:59:f2:3b
Serial Number (int): 1137368612237969817505877650341771833891222075
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 0e:a8:63:e7:78:12:02:56:61:07:91:02:f8:da:9f:36:98:77:26:0e
AuthorityKeyId: 3b:70:d1:53:e9:76:25:9d:60:a8:ca:66:0f:c6:9b:ae:6f:54:16:6a

Fingerprint (sha1): 33:bb:8e:f9:ad:c4:6f:41:0b:b5:ad:49:23:9a:af:b6:91:1d:8e:67
Fingerprint (sha256): a6:b4:24:d1:bb:f2:61:57:fa:50:c3:7a:d5:c8:d3:dd:c9:8f:d5:9d:7c:73:17:69:de:b3:91:d4:65:43:01:73

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl

Check the revocation status for certificate *.projectcabostore.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.projectcabostore.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.perf.projectcabostore.net
perf.projectcabostore.net
*.caboaccountdogfood.net
*.projectcabostore.net

Other certificates including the domain name projectcabostore.net

(limited to 100 certificates)
*.projectcabostore.net
*.projectcabostore.net
adlus08.konaaccountdogfood.net
*.adlus12.projectkonacompute.net
*.projectcabostore.net
www.kiwitest.osdinfra.net
www.kiwitest.osdinfra.net
*.cachetest01.projectkonacompute.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
projectkonacompute.net
*.projectcabostore.net
*.projectcabostore.net
test2.projectcabostore.net
*.projectcabostore.net
adlus12.projectkonacompute.net
adlsg17.projectcabostore.net
*.perf.projectkonacompute.net
*.projectcabostore.net
*.projectcabostore.net
*.adlus15.projectkonacompute.net
*.kobotest03.osdinfra.net
*.kobotest02.osdinfra.net
*.adlie11.projectkonacompute.net
*.projectcabostore.net
*.projectcabostore.net
adlus08.konaaccountdogfood.net
*.adlus15.projectkonacompute.net
*.projectcabostore.net
adlus04.projectkonacompute.net
*.adljp20.projectkonacompute.net
test.projectcabostore.net
*.adlca23.projectkonacompute.net
*.adlnl10.projectkonacompute.net
*.adlus15.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.cachetest01.projectkonacompute.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.perf.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.projectcabostore.net
*.adlau19.projectkonacompute.net
*.projectcabostore.net
*.projectcabostore.net
www.kiwitest.osdinfra.net
*.projectcabostore.net
adljp20.projectcabostore.net
*.adlus15.projectkonacompute.net
*.azuredatalakeanalytics.net
*.kobotest02.osdinfra.net
*.projectcabostore.net
*.adlus80.projectkonacompute.net
www.kiwitest.osdinfra.net
*.azuredatalake.net
*.projectcabostore.net
www.kiwitest.osdinfra.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
www.kiwitest.osdinfra.net
*.projectcabostore.net
*.cachetest01.projectkonacompute.net
*.kobotest03.osdinfra.net
*.projectcabostore.net
adlus81.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.adlus15.projectkonacompute.net
*.perf.projectkonacompute.net
*.projectcabostore.net
*.azuredatalakeanalytics.net
*.kobotest03.osdinfra.net
kobotest02.osdinfra.net
*.kobotest02.osdinfra.net
*.projectcabostore.net
adlau18.projectkonacompute.net
*.projectcabostore.net
*.adlca22.projectkonacompute.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
test.projectcabostore.net
*.kobotest03.osdinfra.net
*.projectcabostore.net
*.kobotest04.osdinfra.net
*.adlhk16.projectkonacompute.net
*.adlnl10.projectkonacompute.net

Certificate

The complete raw certificate details for *.projectcabostore.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl10vvPCczsc8EjRREM/
341+lQ6D0odJSX8jk8isyuBZHDUcmmh1BwQgCwE3mpuHfBXjdrjLIkYVNXr0XYsX
adekQmx+pRga/yZR05u/mSwFOxyDVgGpNGGWMMGORzi0FOhOFpDTz8VTaslxNXOo
tOTSy+CNutr25wChtvJpMhfsHU0Qo+QDSrEuNOaNCg/FTEHZIXIaoVqDF3DAFcKs
2byEK5T1GUNm6gC6qnDHY4CMDvJTY3FSGrJRxvA8pTZnr5ZtS2GxGC9+bLa+b9J1
XmZ5NhlefjAKVEm4EI3rmWh1itx3UviHD8yayPeIFF9B0M/wbIF1Oxe4FaijLs1d
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137368612237969817505877650341771833891222075
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 04'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 18:46:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-30 18:46:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.projectcabostore.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25041269273569528519419318330783812389901612114764414123833295176946189232336026718107162426751022774950990848904341720149335448346912520887190391288533427004376960883639815661315234476423001837690160071232151852291728691569422794250764353108166253061182712131162252686088394425410109261814192488943084740431700294568528252223773605311277627031203569413431203411585126474445933663292312422858770689192628109347546474519235602312133734084354687006620177441044718092924404681693999978578870406272161341133315604328698272589119605831545891832427915439865639000685473924586807523227457536625618435329831997882070746357177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ea863e77812025661079102f8da9f369877260e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perf.projectcabostore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.projectcabostore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caboaccountdogfood.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projectcabostore.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3b70d153e976259d60a8ca660fc69bae6f54166a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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