*.livyui.pools.westus2.azuredatalakeanalytics.net

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 02

About this certificate

This digital certificate with serial number 33:00:02:50:0d:4a:66:89:52:b5:14:0e:c5:00:00:00:02:50:0d was issued on by Microsoft Corporation.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DigitalSignature KeyEncipherment DataEncipherment] (00001101) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:00:02:50:0d:4a:66:89:52:b5:14:0e:c5:00:00:00:02:50:0d
Serial Number (int): 1137338792097044166132151209768760987665715213
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 9d:95:87:d8:37:a2:9a:a9:37:be:de:a6:c7:67:3e:8a:c8:a8:44:7d
AuthorityKeyId: 00:ab:91:fc:21:62:26:97:9a:a8:79:1b:61:41:90:60:a9:62:67:fd

Fingerprint (sha1): a9:04:af:f1:c5:b7:36:6d:ad:1d:a6:1d:f0:74:cc:2c:38:69:db:fd
Fingerprint (sha256): f2:fd:4f:25:76:35:10:f9:f5:12:90:2c:1a:75:16:8b:df:c9:67:4c:2f:26:be:65:64:49:b4:01:57:20:93:d9

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl

Check the revocation status for certificate *.livyui.pools.westus2.azuredatalakeanalytics.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.livyui.pools.westus2.azuredatalakeanalytics.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.livyui.pools.westus2.azuredatalakeanalytics.net
*.sparkmasterui.pools.westus2.azuredatalakeanalytics.net
*.sparkhistoryui.pools.westus2.azuredatalakeanalytics.net

Other certificates including the domain name azuredatalakeanalytics.net

(limited to 100 certificates)
adlus08.konaaccountdogfood.net
*.adlus12.projectkonacompute.net
*.livyui.pools.westcentralus.azuredatalakeanalytics.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
adlus12.projectkonacompute.net
adlsg17.projectcabostore.net
*.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.adlie11.projectkonacompute.net
*.projectkonacompute.net
adlus08.konaaccountdogfood.net
*.adlus15.projectkonacompute.net
*.projectkonacompute.net
*.adljp20.projectkonacompute.net
*.projectkonacompute.net
*.adlca23.projectkonacompute.net
*.projectkonacompute.net
*.adlnl10.projectkonacompute.net
*.livyui.pools.westus2.azuredatalakeanalytics.net
*.adlus15.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.projectkonacompute.net
*.adlau19.projectkonacompute.net
adljp20.projectcabostore.net
*.adlus15.projectkonacompute.net
*.azuredatalakeanalytics.net
*.adlus80.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.livyui.pools.westus2.azuredatalakeanalytics.net
*.projectkonacompute.net
adlus81.projectcabostore.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.azuredatalakeanalytics.net
*.livyui.pools.westcentralus.azuredatalakeanalytics.net
*.projectkonacompute.net
adlau18.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.adlca22.projectkonacompute.net
*.livyui.pools.westcentralus.azuredatalakeanalytics.net
*.livyui.pools.westcentralus.azuredatalakeanalytics.net
*.adlhk16.projectkonacompute.net
*.adlnl10.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.adlie11.projectkonacompute.net
*.livyui.pools.westus2.azuredatalakeanalytics.net
*.projectkonacompute.net
adlus12.projectkonacompute.net
*.adlie11.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.projectkonacompute.net
*.adlnl10.projectkonacompute.net
*.adljp20.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.livyui.pools.westus2.azuredatalakeanalytics.net
*.projectkonacompute.net
*.projectkonacompute.net
*.adlie01.projectkonacompute.net

Certificate

The complete raw certificate details for *.livyui.pools.westus2.azuredatalakeanalytics.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCHV6YRWE0s9Yc5h+r83
JXTjRcSt8Ii6VsFYyyl9Ax+uTo6B9Ya9G+P890IdavcICNX2Q2Z/NLM2uPTMH6hD
dSIXyt7rUq81KSw2ctBDn/vvhNXO9dx5CoN4d21/Y6Rlpk/2vWD04flDvJ8jzJUz
MOT7jOtMiP/8Hdv60xXjzUSAoa4Yok5c0hD9/djn1Iy61IVIUzC17hMIvJsxY27Y
cbizpoXLbwowyuDQqL2C9o8u9dfYyDlE8eh+FYlVI/IExGKF/Q8ZbPeyu/zVFwq9
IztzbgTu3CaTb1kii2Xm2bn464dY4N+Pd+DKDHo4WecBcTHkEpzRgwcfnFSvHsqM
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137338792097044166132151209768760987665715213
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-27 10:32:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-22 10:32:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.livyui.pools.westus2.azuredatalakeanalytics.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24254439506956233939557798493273907292453555435830632286045235915022123880094078976242950092052386509184585374924166337030271883548738867093852998300537980508061813538672006283508882576907452893814575018061261101822619504732486964555752227060764948106746368884620654699994154885188616618344264171261352368387561965886347415169219708393510420228384637699131784131627470828687894231758764355032734712230350651410632299004110863779535199621836704867387074066210076522050157849957989666139367798835962771380102689131325573021445714720771387548741997466837984566554372914603028675354632412863566074521602004998268996193349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.2977488.11009781
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d9587d837a29aa937bedea6c7673e8ac8a8447d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livyui.pools.westus2.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparkmasterui.pools.westus2.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparkhistoryui.pools.westus2.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 00ab91fc216226979aa8791b61419060a96267fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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