what is the meaning of 1.3.6.1.4.1.25461.4.49.2 and 1.3.6.1.4.1.25461.4.49.1 found in a local PA certificate

[Kalvin.Li]

Issuer: C=US, O=Palo-Alto-Networks-Inc., CN=USC-Client-Issuing-CA2-G3
NotBefore: 03/29/2023 1:32 PM
NotAfter: 03/28/2024 1:32 PM
Subject: OID.1.3.6.1.4.1.25461.4.49.2=424908080, OID.1.3.6.1.4.1.25461.4.49.1=01790040595,

[JayGolf]

Hi @Kalvin.Li ,

 1.3.6.1.4.1.25461 is the root of the OID sub-tree assigned to Palo Alto Networks assigned by the Internet Assigned Numbers Authority (IANA).

[Kalvin.Li]

Thanks JayGolf, 

can i say this local certificate is owned and used by GlobalProtect service? What happen if this certificate expired? what GP service will be affected? Also, will this certificate have maintained and updated by GP agent? 

[JayGolf]

Which device did you pull this information from? Device certificates are used to be able to communicate with one or more cloud services . 

[Kalvin.Li]

this certificate found in all user's PC which has GlobalProtect agent installed only. The certificate is under Current user\Personal\Certificate