*.ocleon.tfsallin.net

Issued by MSIT Machine Auth CA 2

About this certificate


This digital certificate with serial number 6d:63:8c:e2:00:01:00:00:d2:56 was issued on by MSIT Machine Auth CA 2.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present

*.ocleon.tfsallin.net

MSIT Machine Auth CA 2

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:63:8c:e2:00:01:00:00:d2:56
Serial Number (int): 516574325972602915443286
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: 6d:01:22:4c:68:f5:7e:39:fa:a5:1a:ee:6a:95:9a:a7:d3:c6:9b:bd
AuthorityKeyId: eb:db:11:5e:f8:09:9e:d8:d6:62:9c:fd:62:9d:e3:84:4a:28:e1:27

Fingerprint (sha1): b1:ad:cd:c8:4f:16:14:7b:6b:3b:7c:9e:1d:3a:00:a2:f0:d8:0e:66
Fingerprint (sha256): d7:7e:15:62:11:a9:c6:78:48:fc:5e:f1:9a:de:69:c6:80:b8:ce:91:a6:38:be:e1:f6:0e:ac:65:df:dc:5b:43

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/MSIT%20Machine%20Auth%20CA%202(1).crt
Issuing Certificate URL: http://corppki/aia/MSIT%20Machine%20Auth%20CA%202(1).crt

Revocation information

CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/MSIT%20Machine%20Auth%20CA%202(1).crl

Check the revocation status for the current certificate on *.ocleon.tfsallin.net
46
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

ocleon.tfsallin.net
*.ocleon.tfsallin.net
ocleonsps.tfsallin.net
*.ocleonsps.tfsallin.net
*.ocleon1.tfsallin.net
ocleon1.tfsallin.net
*.ocleon2.tfsallin.net
ocleon2.tfsallin.net
*.ocleon3.tfsallin.net
ocleon3.tfsallin.net
*.ocleontfs.tfsallin.net
ocleontfs.tfsallin.net
ocleon4.tfsallin.net
*.ocleon4.tfsallin.net
ocleon5.tfsallin.net
*.ocleon5.tfsallin.net
ocleon6.tfsallin.net
*.ocleon6.tfsallin.net
ocleon7.tfsallin.net
*.ocleon7.tfsallin.net
ocleon8.tfsallin.net
*.ocleon8.tfsallin.net
ocleon9.tfsallin.net
*.ocleon9.tfsallin.net
ocleon10.tfsallin.net
*.ocleon10.tfsallin.net
ocleon11.tfsallin.net
*.ocleon11.tfsallin.net
ocleon12.tfsallin.net
*.ocleon12.tfsallin.net
ocleon13.tfsallin.net
*.ocleon13.tfsallin.net
ocleon14.tfsallin.net
*.ocleon14.tfsallin.net
ocleon15.tfsallin.net
*.ocleon15.tfsallin.net
ocleon16.tfsallin.net
*.ocleon16.tfsallin.net
ocleon17.tfsallin.net
*.ocleon17.tfsallin.net
ocleon18.tfsallin.net
*.ocleon18.tfsallin.net
ocleon19.tfsallin.net
*.ocleon19.tfsallin.net
ocleon20.tfsallin.net
*.ocleon20.tfsallin.net

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIJ8TCCCNmgAwIBAgIKbWOM4gABAADSVjANBgkqhkiG9w0BAQUFADCBgDETMBEG CgmSJomT8ixkARkWA2NvbTEZMBcGCgmSJomT8ixkARkWCW1pY3Jvc29mdDEUMBIG CgmSJomT8ixkARkWBGNvcnAxFzAVBgoJkiaJk/IsZAEZFgdyZWRtb25kMR8wHQYD VQQDExZNU0lUIE1hY2hpbmUgQXV0aCBDQSAyMB4XDTE0MDMyNjIxMjUyOFoXDTE2 MDMyNTIxMjUyOFowIDEeMBwGA1UEAwwVKi5vY2xlb24udGZzYWxsaW4ubmV0MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqmY8lozbrfLepjsmWUBUxjj WBB86xq1mpdM2W57lZo6nOXuwa77u4C6VgncFIYUgi8eEXKdqjLAJGbmcE0IOsMU +IkpuL+P42G8pxLvBmzZn1f+I6XHhEwu4bk3Ub2ZRc6b4NEIXCWJ9OGapBOJRHPf UHnnxZMR2foMlIv1Qz8yXPO+gDmYOm3luTOmSdLLJTcl3dFRZ9YIZ/WcOq3FN+CG V6OfWjayjX58HALWKWUAxPi7yNKS1jens5XaSjatttyIevv2byWZ6pxB9+t0utN5 +n9YwE8SfNW+TVgL0UHa7fbIjBkx8W1AMoWd4k9OdN9hiGbqhCfCUqmlygecGwID AQABo4IGyjCCBsYwHQYDVR0OBBYEFG0BIkxo9X45+qUa7mqVmqfTxpu9MAsGA1Ud DwQEAwIEsDAfBgNVHSMEGDAWgBTr2xFe+Ame2NZinP1ineOESijhJzCB7gYDVR0f BIHmMIHjMIHgoIHdoIHahk9odHRwOi8vbXNjcmwubWljcm9zb2Z0LmNvbS9wa2kv bXNjb3JwL2NybC9NU0lUJTIwTWFjaGluZSUyMEF1dGglMjBDQSUyMDIoMSkuY3Js hk1odHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9jcmwvTVNJVCUy ME1hY2hpbmUlMjBBdXRoJTIwQ0ElMjAyKDEpLmNybIY4aHR0cDovL2NvcnBwa2kv Y3JsL01TSVQlMjBNYWNoaW5lJTIwQXV0aCUyMENBJTIwMigxKS5jcmwwga0GCCsG AQUFBwEBBIGgMIGdMFUGCCsGAQUFBzAChklodHRwOi8vd3d3Lm1pY3Jvc29mdC5j b20vcGtpL21zY29ycC9NU0lUJTIwTWFjaGluZSUyMEF1dGglMjBDQSUyMDIoMSku Y3J0MEQGCCsGAQUFBzAChjhodHRwOi8vY29ycHBraS9haWEvTVNJVCUyME1hY2hp bmUlMjBBdXRoJTIwQ0ElMjAyKDEpLmNydDA/BgkrBgEEAYI3FQcEMjAwBigrBgEE AYI3FQiDz4lNrfIChaGfDIL6yn2B4ft0gU+Dwu2FCI6p0oVjAgFkAgEKMB0GA1Ud JQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAnBgkrBgEEAYI3FQoEGjAYMAoGCCsG AQUFBwMCMAoGCCsGAQUFBwMBMIIESwYDVR0RBIIEQjCCBD6CE29jbGVvbi50ZnNh bGxpbi5uZXSCFSoub2NsZW9uLnRmc2FsbGluLm5ldIIWb2NsZW9uc3BzLnRmc2Fs bGluLm5ldIIYKi5vY2xlb25zcHMudGZzYWxsaW4ubmV0ghYqLm9jbGVvbjEudGZz YWxsaW4ubmV0ghRvY2xlb24xLnRmc2FsbGluLm5ldIIWKi5vY2xlb24yLnRmc2Fs bGluLm5ldIIUb2NsZW9uMi50ZnNhbGxpbi5uZXSCFioub2NsZW9uMy50ZnNhbGxp bi5uZXSCFG9jbGVvbjMudGZzYWxsaW4ubmV0ghgqLm9jbGVvbnRmcy50ZnNhbGxp bi5uZXSCFm9jbGVvbnRmcy50ZnNhbGxpbi5uZXSCFG9jbGVvbjQudGZzYWxsaW4u bmV0ghYqLm9jbGVvbjQudGZzYWxsaW4ubmV0ghRvY2xlb241LnRmc2FsbGluLm5l dIIWKi5vY2xlb241LnRmc2FsbGluLm5ldIIUb2NsZW9uNi50ZnNhbGxpbi5uZXSC Fioub2NsZW9uNi50ZnNhbGxpbi5uZXSCFG9jbGVvbjcudGZzYWxsaW4ubmV0ghYq Lm9jbGVvbjcudGZzYWxsaW4ubmV0ghRvY2xlb244LnRmc2FsbGluLm5ldIIWKi5v Y2xlb244LnRmc2FsbGluLm5ldIIUb2NsZW9uOS50ZnNhbGxpbi5uZXSCFioub2Ns ZW9uOS50ZnNhbGxpbi5uZXSCFW9jbGVvbjEwLnRmc2FsbGluLm5ldIIXKi5vY2xl b24xMC50ZnNhbGxpbi5uZXSCFW9jbGVvbjExLnRmc2FsbGluLm5ldIIXKi5vY2xl b24xMS50ZnNhbGxpbi5uZXSCFW9jbGVvbjEyLnRmc2FsbGluLm5ldIIXKi5vY2xl b24xMi50ZnNhbGxpbi5uZXSCFW9jbGVvbjEzLnRmc2FsbGluLm5ldIIXKi5vY2xl b24xMy50ZnNhbGxpbi5uZXSCFW9jbGVvbjE0LnRmc2FsbGluLm5ldIIXKi5vY2xl b24xNC50ZnNhbGxpbi5uZXSCFW9jbGVvbjE1LnRmc2FsbGluLm5ldIIXKi5vY2xl b24xNS50ZnNhbGxpbi5uZXSCFW9jbGVvbjE2LnRmc2FsbGluLm5ldIIXKi5vY2xl b24xNi50ZnNhbGxpbi5uZXSCFW9jbGVvbjE3LnRmc2FsbGluLm5ldIIXKi5vY2xl b24xNy50ZnNhbGxpbi5uZXSCFW9jbGVvbjE4LnRmc2FsbGluLm5ldIIXKi5vY2xl b24xOC50ZnNhbGxpbi5uZXSCFW9jbGVvbjE5LnRmc2FsbGluLm5ldIIXKi5vY2xl b24xOS50ZnNhbGxpbi5uZXSCFW9jbGVvbjIwLnRmc2FsbGluLm5ldIIXKi5vY2xl b24yMC50ZnNhbGxpbi5uZXQwDQYJKoZIhvcNAQEFBQADggEBAKzVCDGOP5OBmwdI GRbMwqJ87001sIwhOaZASzVGMcNMDuPBBn2Kh80oXGXYfZiwnRIME9nIOmTy/yJb u0TXX7k7P6OaYkT0fYN20i8CsIlcdaktgnT894vsH9h5Vl7tKAIl6VNCyD/fLwCN CZAEit1veCCcjX0EC9DtVOxrLA1VkwESmcr2ETw1EpODKLtgWjQrsqR1i7fe7w0A kWFRZZl8jKHjYSkJ32cUCGE3sVU8dZyrl06v/wUWVe2sxwtV4951dBZWz+hVZSZk h5O0U6BTjZbmyAdH9uiJnUw+kEUM+Y9wfY1hYnnJwj/TNki/Ofb1YZvjb80g65q+ /csRLHQ= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqmY8lozbrfLepjsmWUB UxjjWBB86xq1mpdM2W57lZo6nOXuwa77u4C6VgncFIYUgi8eEXKdqjLAJGbmcE0I OsMU+IkpuL+P42G8pxLvBmzZn1f+I6XHhEwu4bk3Ub2ZRc6b4NEIXCWJ9OGapBOJ RHPfUHnnxZMR2foMlIv1Qz8yXPO+gDmYOm3luTOmSdLLJTcl3dFRZ9YIZ/WcOq3F N+CGV6OfWjayjX58HALWKWUAxPi7yNKS1jens5XaSjatttyIevv2byWZ6pxB9+t0 utN5+n9YwE8SfNW+TVgL0UHa7fbIjBkx8W1AMoWd4k9OdN9hiGbqhCfCUqmlygec GwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 516574325972602915443286 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'microsoft' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'corp' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MSIT Machine Auth CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-26 21:25:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-25 21:25:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ocleon.tfsallin.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22554049902561996050749651987902015427538933092897751523232429015627203727005611329253460475359151205670651595273360642982402964530335049459901793649913882552370947290404367098276887312951298941333788926930884271953905887876762098557530240707507760966524038660761447344311820548418443765470825347398885060720997104148891070698306684654975119189722028478950268348538621963070464179648191452340176302267509106192446434587085806872436018526721048946841699748935402001153494331155036568527285688563925422361036198611392110816607834110815916114425925443230011327647010859624357646700117029725065461962477156459530655603739 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6d01224c68f57e39faa51aee6a959aa7d3c69bbd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebdb115ef8099ed8d6629cfd629de3844a28e127 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (230 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/MSIT%20Machine%20Auth%20CA%202(1).crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/MSIT%20Machine%20Auth%20CA%202(1).crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://corppki/crl/MSIT%20Machine%20Auth%20CA%202(1).crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/MSIT%20Machine%20Auth%20CA%202(1).crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://corppki/aia/MSIT%20Machine%20Auth%20CA%202(1).crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER asn1: structure error: base 128 integer too large 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 10 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1090 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleonsps.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleonsps.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon1.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon1.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon2.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon2.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon3.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon3.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleontfs.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleontfs.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon4.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon4.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon5.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon5.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon6.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon6.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon7.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon7.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon8.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon8.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon9.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon9.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon10.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon10.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon11.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon11.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon12.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon12.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon13.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon13.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon14.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon14.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon15.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon15.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon16.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon16.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon17.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon17.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon18.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon18.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon19.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon19.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocleon20.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocleon20.tfsallin.net' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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