bookings.outlookapps.com

Issued by Microsoft RSA TLS CA 01

About this certificate

This digital certificate with serial number 6b:00:04:c4:e4:f6:70:25:a4:6a:7c:9c:73:00:00:00:04:c4:e4 was issued on by Microsoft Corporation.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=bookings.outlookapps.com

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:00:04:c4:e4:f6:70:25:a4:6a:7c:9c:73:00:00:00:04:c4:e4
Serial Number (int): 2386181359089773575454039472976413229045826788
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 7a:28:ea:85:35:6a:89:53:cd:89:07:03:d5:29:bc:5d:3f:f8:94:13
AuthorityKeyId: b5:76:0c:30:11:ce:c7:92:42:4d:4c:c7:5c:2c:c8:a9:0c:e8:0b:64

Fingerprint (sha1): 50:cd:c7:4d:b0:0c:e4:e7:ea:6e:02:8c:b9:19:21:9a:aa:73:42:97
Fingerprint (sha256): ac:91:ea:c2:de:67:4e:6a:8c:3a:53:ee:a5:fe:c4:92:8a:c2:64:59:9c:42:10:e3:ad:c0:a9:3d:e0:be:3e:fd

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl

Check the revocation status for certificate bookings.outlookapps.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bookings.outlookapps.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

booker-api.outlookapps.com
msbookingsfacebook.outlookapps.com
bookings.office.net
bookings-api.outlookapps.com
bookings.outlookapps.com
bookings.microsoft.com
book.ms
bookings.office.com
*.bookings.outlookapps.com

Other certificates including the domain name outlookapps.com

(limited to 100 certificates)
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
msbookingsfacebook.outlookapps.com
bookings.outlookapps.com
bookings-api.outlookapps.com
bookings-api.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings-ppe.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-ppe.outlookapps.com
booker-api.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
*.outlookapps.com
bookings.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
msbookingsfacebook.outlookapps.com
*.outlookapps.com
bookings.outlookapps.com
*.outlookapps.com
bookings.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
booker-api.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings-api.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
*.outlookapps.com
*.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings.outlookapps.com
outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings-df.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings-api-ppe.outlookapps.com
msbookingsfacebook.outlookapps.com
bookings-ppe.outlookapps.com
bookings-api.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-api-ppe.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings.outlookapps.com
x.bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings-api.outlookapps.com
bookings.outlookapps.com
bookings-api.outlookapps.com
bookings-df.outlookapps.com
bookings.outlookapps.com

Certificate

The complete raw certificate details for bookings.outlookapps.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUKwpwK7Mg/nP9qAr1+P
egWMUTUIoUYoDD9dpEQN9Autn0XMFx9ploqKu9Prh3CUt5L2jgiGvmJONSviSedP
fAgjz5K64jRtbhDiIWTIQwHzWfPfo5x9JYMsnQhxIS2CPNRBe2PcI9NWkIZGqrj/
AneOUDBkBqEigLrTTCN7mcsvrQHw0nmfkB1RB5f4mD1mExNBE5tDAish0EfIlPyq
ZTqkgPlyaCKQmE2aQe7muDZOT3prrGemH3lVQCHJuKHnH39GLRUOIH7pNMmGkwEa
pJS1TOOmlG4cqBmpe2XdwHm2GlQXfYWyCKbG8VS2uddHJQB+ze0qZ19YelqpTCLh
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2386181359089773575454039472976413229045826788
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft RSA TLS CA 01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-15 08:23:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-15 08:23:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bookings.outlookapps.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23386972507258607991555573542495554280137443756023524472293718295802180154409770807767669369661637201511444989666049275551593671796619783023438482697782286737936039140921494091862487696559409021972813501574129967306007519350030178269800694028907239912460964745546701195827906125724204423453950568243996690858703695148600528908069246130802641106458792557806409442630333528005909335161449420729036299862571216611590178228102705141166266715844750671180178406385252962007353502037065597097087162172947349593241465731457667708972652508639067521608175401454170270762546750235915598668606883177189249220122806349474157486521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.10585921.15764560
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a28ea85356a8953cd890703d529bc5d3ff89413
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (226 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booker-api.outlookapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msbookingsfacebook.outlookapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings-api.outlookapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.outlookapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookings.outlookapps.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b5760c3011cec792424d4cc75c2cc8a90ce80b64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		002a734b106618e05349010f4ec8e7fc580f0914d803eb790fc49e3009605a7384991069e258bbb20362acbb903f85c5288ac01d8252651ff9d4a2570e09605c32fdd7bd90b1a4ee28f87d0c8a255a9884dc5a36e7b5226db14e5f787489182c88665ec5c6270e15b440d793213217c1094ce4fb83f647dc84d364707ce643df6326d7a7060b3076501f77ca6514aacc73df63727c6f0ee790330f9eb9247e78a41eee933adf6c6fca11a46076ae89a9632b99d87f1c898796fa91ccc2b3edbe463069f5db1b342c13c5011aca83a5b1c53e063ef3a1b9182f7b3164fd98bd8e213ac8d8fcf9081f3c56989bdbdedaa0e8aec50fceed3af7fe03fd6f4988e9f69e4572eb9bdf34ddb30fc0c5cc189c27476d3767fa370b70ae067811d05959d835fbe091ef677e1f7b4eeecac2518bfb8d0e3a6fda9c15a86814e51139f4afe022b3601b5e4093703bc4a33fa0dd04173012e3ec4a826d9c05362b0f064c4b754b37789a8211d95671b9407a98ad657e4a648466417422a62ddd5c44ba31ced054207ae5d1260d913e8de59f64d7d1336105b9795801fdce28eb47e51ab7369bbdbc6252cddeb36bfa2372dc881160084bc18f40b82ae398715cb72be26b4375167d97f44ad8f280705afac5d3d0259805429924c4d4b26eb125eef526eeb09fab762f79672370b564e86fa2492394dc01d64d198d981c9d9141dfab8be4dc66cf