Microsoft Corporation

- Microsoft Corporation -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 05:fa:b3:bf:35:4a:52:83:85:60:b9:63:f8:e1:de:74 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Microsoft Corporation

Company registration number: 600 413 485
Organization: Microsoft Corporation
Address: One Microsoft Way
State / Province: Washington
Locality: Redmond
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:fa:b3:bf:35:4a:52:83:85:60:b9:63:f8:e1:de:74
Serial Number (int): 7947859893948935836514751920618987124
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 05:98:1f:c3:eb:e5:94:7d:c2:f9:86:66:d2:46:05:15:06:16:5f:92
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): ee:e7:b1:3b:8a:ca:76:7b:96:8c:af:9a:4d:ea:72:5f:9d:04:ff:4f
Fingerprint (sha256): d9:12:44:42:67:ba:08:d3:12:8b:82:09:2e:7e:9d:4a:8d:41:e8:9e:6c:6f:8c:7e:40:46:9f:9a:14:bb:04:b8

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate Microsoft Corporation

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Microsoft Corporation

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edu.microsoft.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Microsoft Corporation in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqCdcnmKdJqa8tYXKEaa
RxKE61qfCEYN638MFg1svNdNbfPeEY6Yx+b0TdysTCPLn24oF2UCE4fqRgnHrRBk
e9eolD4nlN7iucgVlYUTeLnCxUH+V+QY1COqtRcGxTlyRQP9FvSZTlIHcyKhzZ7+
VBYcz2J2PPKg2fsaPM9RoXjWCgbSrPzP85CPZgIaXnfBOZjBumxSN3jprkmVIjtx
oDstnFi9FRF7lmL4TNPqW0ypF2R0Ik8ldN9Ajc6h22fljxfdCSrBT28xGlK1g/8A
npuygyAbExrbU1eeqfd0bq1hxoXa8g6A6P3N1vPDzEZUcN7ndxx9BQMPxvghfykQ
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7947859893948935836514751920618987124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-20 19:29:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-20 19:29:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'One Microsoft Way'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '600 413 485'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4560827'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United States Patent and Trademark Office (USPTO)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20024854406849510384410900193920225443546356817820508273217401624861070784367373949199891234244185384263787269833221745911541677770318930290439495185249287353711228751092715004472440895214539642110872327843125829524019310039192668331202122425944746638073952955043970500822863321267924743167411311928858135452982716729256305459209768094905660855702351331398508376981959702089452459575653883168950239446367234672108488082000075939703993548941783362741249906320810362616171087997689628746851328662655796361802268369607071598632177950343836016701011184103218729882734628063160997438479119995793038311528263963301951115389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05981fc3ebe5947dc2f98666d246051506165f92
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (574 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															b07a076f12225b8ca7f2d633e9091c3ed7e785bae8aee30040663598730f1599
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,H4sIAAAAAAAAAJWRXU/CMBSGrzXxPxyPVyauPRRBJRuEGUa4MDEx4R5Y2ZrUlXQdg39v2UAlXqhN04/T9nmfpOFo965hK22pTBFhhxGCLFYmVUUWYeXWwSOOhleX4XUQwFQW0i6csQMYp2YpYaZ1VbqmBKLPBOvcwdt8CpPdxlgHr7rKglkBrCnO25AB9BkRxJXSKdAtQBAc+OU2+64hEJaLUr5as1ZaRuhUsQ82JYLXLcoIc+c2A87rumZ1lxmbcUFE3FMQtkrWsdlFSEAgDh19AkDolNNy+KJW1pRm7eDZWO+5cD4z5O2hN7Fy5cCn6ghvkqYh1Cp1eYSeBLlUWe7aNT/cz/xw0b7ymV3WQdgf5xNF9EiIT0qf9b4wzYafITrEuj8YD0k8Jvoz46TRso4MovH9JPm/xxkkSeKnX0VCnjWj/4/hBxQG4SljAgAA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu.microsoft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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