*.projectkonacompute.net

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 07

About this certificate

This digital certificate with serial number 33:00:3d:1a:7c:09:c0:65:01:0f:91:72:cf:00:00:00:3d:1a:7c was issued on by Microsoft Corporation.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:3d:1a:7c:09:c0:65:01:0f:91:72:cf:00:00:00:3d:1a:7c
Serial Number (int): 1137358797553414443083628259302949715925867132
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 3e:b6:a1:e5:be:f7:15:7a:21:72:e4:f4:92:98:12:57:de:bd:54:d5
AuthorityKeyId: ce:15:16:3b:ea:02:a3:a6:6b:da:d9:2b:fd:e5:8c:52:be:7a:50:a8

Fingerprint (sha1): 05:7c:5a:eb:b4:2a:98:56:6f:b1:34:7c:cc:0c:0c:b4:d9:71:a7:64
Fingerprint (sha256): ac:7f:27:a8:cd:e8:f9:b9:ff:94:b4:49:89:b7:63:d5:29:86:05:cb:e8:bc:ab:4b:67:c4:46:09:7b:22:6b:90

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl

Check the revocation status for certificate *.projectkonacompute.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.projectkonacompute.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.azuredatalakeanalytics.net
*.adlnl10.projectkonacompute.net
*.adlnl10-e2.projectkonacompute.net
*.projectkonacompute.net

Other certificates including the domain name projectkonacompute.net

(limited to 100 certificates)
adlus08.konaaccountdogfood.net
*.projectkonacompute.net
*.adlus12.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.cachetest01.projectkonacompute.net
projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
adlus12.projectkonacompute.net
adlsg17.projectcabostore.net
*.projectkonacompute.net
*.projectkonacompute.net
*.perf.projectkonacompute.net
*.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.kobotest03.osdinfra.net
*.kobotest02.osdinfra.net
*.adlie11.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
adlus08.konaaccountdogfood.net
*.adlus15.projectkonacompute.net
*.projectkonacompute.net
adlus04.projectkonacompute.net
*.adljp20.projectkonacompute.net
*.projectkonacompute.net
*.adlca23.projectkonacompute.net
*.projectkonacompute.net
*.adlnl10.projectkonacompute.net
*.adlus15.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.cachetest01.projectkonacompute.net
*.projectkonacompute.net
*.perf.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.adlau19.projectkonacompute.net
www.kiwitest.osdinfra.net
adljp20.projectcabostore.net
*.adlus15.projectkonacompute.net
*.azuredatalakeanalytics.net
*.kobotest02.osdinfra.net
*.projectkonacompute.net
*.adlus80.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.azuredatalake.net
*.projectkonacompute.net
*.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.projectkonacompute.net
*.cachetest01.projectkonacompute.net
*.kobotest03.osdinfra.net
*.projectkonacompute.net
adlus81.projectcabostore.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.perf.projectkonacompute.net
*.azuredatalakeanalytics.net
*.kobotest03.osdinfra.net
*.projectkonacompute.net
kobotest02.osdinfra.net
*.kobotest02.osdinfra.net
adlau18.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.adlca22.projectkonacompute.net
*.kobotest03.osdinfra.net
*.kobotest04.osdinfra.net
*.adlhk16.projectkonacompute.net
*.adlnl10.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net

Certificate

The complete raw certificate details for *.projectkonacompute.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03DefpXWWFT4nJ23ORPz
36+Mj0V28/ZbvHWMTE2LNGOCSjskI0UDUx312wVNlHOqDLX++TMET83hthP65KuK
eM0BJEKqgClid4fq7KFFpA173rmkSh4YRv09eL2/dloTMjOV4fyfSoZ3nMbx8kFB
/MoOgOnrDCXPgdo1cBBiUq/U9j493iH3r0urK6qyOtPMZ0h8PxpzJsxpDinPS5WK
urnSULY7JCbEDEK7vxLKa7VIUpp9FuxgPkGINqulZyewa4sHFEIY7bISdGiiEn27
nhw7Jp/F85OYPUlm0yN0n9YFU2MkzMBC8WgGeoaqmZKF9bVdrdEQkpKwGqtmLEUo
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137358797553414443083628259302949715925867132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 07'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-24 05:46:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-19 05:46:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.projectkonacompute.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26691940184832206964796576112185153128189167136904481321807374590344717047655451437080381614467098269045388320660406029366804067489663442801369758119121110614129436325712475326346933121473446756701285072460350187681565724349751844542839414792108610488797709674149910497650345182118975816364369357375522181387067328288923135344656710624222602034813235390021474764673096173016773119756585504021783357443636204616611676914774962105144672702731078465451866355077406792599981270703997637787625098247310551160533901265157385065707036313849921466178599560336888978298712597074137682602930378679849624430089157829583201183937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3eb6a1e5bef7157a2172e4f492981257debd54d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlnl10.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlnl10-e2.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projectkonacompute.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ce15163bea02a3a66bdad92bfde58c52be7a50a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00789156f6a7cd2fb95877a67eada230609291d35c5cea305cc54c67a6a01a386d1f1bf668c08ee71f21d82552cd4b2307d839c3cbc570075ace08e1f487cfcf0352628d33c7c03fe713ee9c6a7d722ff2880b2e5afeca7ac54ea7b21a0396850189c153232162110473948bddc23d7ad7c2f3a0bbcfe50377fc7351c880e5d865ce101b2c750a5e506e67cce7d41f4246cb60be55df230f2a6ce169befeeff7dffeaa59877ff7a66e5517b17230d38a332b3bdc7743628fb0e37411c3cbcdf5b7a67af78483da1357aa65dd3980d453644a3b40a9949bcc293f84fcd4216ea663de2ee790669d482985167270bb3a736c5ce87a292284e56f7b645ef6f48b1d7e1909d1233250e684b77b6f10d5f526c535f8577debe3b2ce97109cd46d24df1fee7f21ebdb8ceb891c56bab21beb5bf83b30cfbd303928b37b949e12a3af3486e178f73309332d73a037f058f7dcbe4cabe9a8f8e4b781a552c636c3ebc46bba23698b93e25d992932665648b7362e15248d3368e52316b949ef6f05b6a8ba8979110d8fcaec83dc00fbefbee083a707c0678fccc6cb260e646749fc4a27f1f50a40089caccee5540ebc20f3a7a879a7567a063e8de890edb22239ffeb9a304ed8c91927f2a032e07d1f5d90f1947eb5c7baa7a8b2e0967e6f81e59af007e527f0736cb331d0b1d93811d96b2290a368623ccbcd5eca0f77c24fd3eaf0bb4380