$ openssl asn1parse -i < [EXTENSIONS] 0:d=0 hl=2 l= 54 cons: SEQUENCE 2:d=1 hl=2 l= 52 cons: SEQUENCE 4:d=2 hl=2 l= 3 prim: OBJECT :X509v3 Extended Key Usage 9:d=2 hl=2 l= 45 prim: OCTET STRING [HEX DUMP]:302B06082B0601050507030106082B06010505070302060A2B0601040182370A030306096086480186F8420401 -----BEGIN EXTENSIONS----- MDYwNAYDVR0lBC0wKwYIKwYBBQUHAwEGCCsGAQUFBwMCBgorBgEEAYI3CgMDBglghkgBhvhCBAE = -----END EXTENSIONS----- $ openssl asn1parse -i < [EXTENDED KEY USAGE] 0:d=0 hl=2 l= 43 cons: SEQUENCE 2:d=1 hl=2 l= 8 prim: OBJECT :TLS Web Server Authentication 12:d=1 hl=2 l= 8 prim: OBJECT :TLS Web Client Authentication 22:d=1 hl=2 l= 10 prim: OBJECT :Microsoft Server Gated Crypto 34:d=1 hl=2 l= 9 prim: OBJECT :Netscape Server Gated Crypto -----BEGIN EXTENDED KEY USAGE----- MCsGCCsGAQUFBwMBBggrBgEFBQcDAgYKKwYBBAGCNwoDAwYJYIZIAYb4QgQB -----END EXTENDED KEY USAGE-----