I’m looking at this coinbase transaction. I'm confused why there are two outputs and why one of them is labelled with OP_RETURN.
Every segwit block has one such OP_RETURN in the coinbase transaction: It's the Merkle root of the witness tree.
When the segwit softfork was activated, this included a fix to the third-party transaction malleability issue that was present on the network before. The issue was that the signature of a transaction could be changed by any other person by inverting the S-value used in the signature. This resulted in another valid (non-standard) transaction spending the same coins to the same recipients, but a different txid.
Segwit prevented this source of transaction malleability by moving the witness program out of the input script to a separate "witness field" in the transaction ("segregated the witness") which is ignored when the txid is calculated. This means that even when signatures are changed for segwit transactions, their txid remains the same. Making the txid independent from the signature also makes it easier to build on top of unsigned transactions (since their txid doesn't change with the signature) which is e.g. useful for smart contracts employed in Lightning Network payment channels.
A block commits to all of its transactions by including the root of the Merkle tree over their txids. However, this would mean that this commitment wouldn't cover the signatures of segwit transactions as they don't contribute to the txid. To commit to the signatures, segwit introduced the a second parallel Merkle tree, built from the witness txids, i.e. a transaction id calculated over the complete transaction data including the witness program. Since the blockheader can't be extended without a hardfork, segwit blocks commit to this witness tree by including the root in an OP_RETURN in the coinbase transaction.
Another reason: Merged Mining
Whilst not in the OP's example coinbase transaction, another reason for
OP_RETURN in a coinbase transaction is merge mining. A miner might follow the merged mining specification which involves placing one or more other system's block identifiers into the input script. Additionally the miner might create one or more
OP_RETURNs with an id code and block information the other blockchain(s), according to the specification of those chains.
Example: block 733578 coinbase Tx
An example, as explained here, is the block 733578 coinbase transaction in which the miner mined for three other blockchains (Namecoin, RSK, and Vcash, as well as BTC). The Namecoin (
fabe6d6d) block is identified in the input scriptsig. RSK and Vcash blocks are included in the coinbase transaction's
OP_RETURNs; RSK (
52534b424c4f434b3a) and Vcash (
Per @Murch's answer here, the third
OP_RETURN in this example is the segregated witness merkle root (
Interestingly, there is no limit to the number of
OP_RETURNs in the coinbase transaction, other than the size of the transaction, which itself is
~only constrained by the size of the block its in.