tr15938.centralus1-a.worker.database.windows.net

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 03

About this certificate

This digital certificate with serial number 33:00:52:95:2a:6d:b7:66:3f:b7:72:49:1c:00:00:00:52:95:2a was issued on by Microsoft Corporation.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:52:95:2a:6d:b7:66:3f:b7:72:49:1c:00:00:00:52:95:2a
Serial Number (int): 1137366106554422450228291223814592398349210922
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 93:11:be:31:e3:fa:29:5a:61:cc:90:b3:ca:1e:35:7c:be:54:ee:1b
AuthorityKeyId: fe:09:71:40:55:05:10:44:d8:a4:81:75:b8:9e:1a:e9:4a:06:88:c8

Fingerprint (sha1): 63:63:91:78:86:80:8b:70:5d:55:df:68:fb:50:54:d4:f0:cb:22:12
Fingerprint (sha256): 00:04:09:dd:9a:29:b6:bd:a9:17:c3:50:0e:0e:1f:a2:9e:5e:b5:9b:91:89:a7:ce:5d:49:69:75:00:6d:4c:92

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl

Check the revocation status for certificate tr15938.centralus1-a.worker.database.windows.net

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tr15938.centralus1-a.worker.database.windows.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tr15938.centralus1-a.worker.database.windows.net
*.hs1.tr15938.centralus1-a.worker.database.windows.net
*.hs2.tr15938.centralus1-a.worker.database.windows.net
*.hs3.tr15938.centralus1-a.worker.database.windows.net
*.database.windows.net
*.secondary.database.windows.net
*.sql.azuresynapse.net
*.dualstack.database.windows.net
tr15938.centralus1-a.worker.database.windows.net

Other certificates including the domain name windows.net

(limited to 100 certificates)
tr522.westeurope1-a.worker.database.windows.net
ma.p.azurewebsites.windows.net
testonly.secretstore.windows.net
*.redis.cache.windows.net
waws-prod-mwh-1e0d2a21-api.p.azurewebsites.windows.net
enc.p.azurewebsites.windows.net
tr3437.indiacentral1-a.worker.database.windows.net
ams-ts05-1-hos-rest-1-1.cloudapp.net
enc.p.azurewebsites.windows.net
tr1225.southcentralus1-a.worker.database.windows.net
testonly.secretstore.windows.net
*.redis.cache.windows.net
waws-prod-bay-55440bad.publish.p.azurewebsites.windows.net
readonly-tr4659.eastus1-a.worker.database.windows.net
*.redis.cache.windows.net
waws-prod-bay-e21e34c0-api.p.azurewebsites.windows.net
*.redis.cache.windows.net
tr13477.southcentralus1-a.worker.database.windows.net
enc.p.azurewebsites.windows.net
*.redis.cache.windows.net
tr1037.eastus1-a.worker.database.windows.net
*.store.core.windows.net
ams-ts46-1-hos-rest-1-1.cloudapp.net
metricsclient.geneva.core.windows.net
tr1075.westus2-a.worker.database.windows.net
*.blob.core.windows.net
*.sds-diagnostics.store.core.windows.net
waws-prod-am2-da5883af-api.p.azurewebsites.windows.net
metricsclient.geneva.core.windows.net
waws-prod-am2-c0d608da-api.p.azurewebsites.windows.net
tr455.australiasoutheast1-a.worker.database.windows.net
waws-prod-blu-df231187.publish.p.azurewebsites.windows.net
waws-prod-bay-6f6e9dfa.state.p.azurewebsites.windows.net
waws-prod-hk1-8db07b87-api.p.azurewebsites.windows.net
tr1686.northeurope1-a.worker.database.windows.net
cr6.southcentralus1-a.control.database.windows.net
BN2B.agent.core.windows.net
034f11840c83.database.windows.net
metricsclient.geneva.core.windows.net
DM3.agent.core.windows.net
*.redis.cache.windows.net
tr354.australiaeast1-a.control.database.windows.net
waws-prod-sy3-fb5d9039-api.p.azurewebsites.windows.net
*.redis.cache.windows.net
testonly.secretstore.windows.net
waws-prod-ch1-3955dc27.publish.p.azurewebsites.windows.net
*.redis.cache.windows.net
tr11791.eastus2-a.worker.database.windows.net
*.redis.cache.windows.net
tr1396.southafricanorth1-a.worker.database.windows.net
waws-prod-yt1-982c2880.publish.p.azurewebsites.windows.net
waws-prod-mwh-37f9bd5f.publish.p.azurewebsites.windows.net
waws-prod-am2-013.publish.azurewebsites.windows.net
tr469.australiaeast1-a.worker.database.windows.net
tr1348.westus1-a.worker.database.windows.net
*.redis.cache.windows.net
waws-prod-bn1-009.state.azurewebsites.windows.net
tr409.westeurope1-a.worker.database.windows.net
deb6a0373e6d.database.windows.net
*.redis.cache.windows.net
metricsclient.geneva.core.windows.net
tr1451.francecentral1-a.worker.database.windows.net
waws-prod-mwh-cbf02dd4.publish.p.azurewebsites.windows.net
enc.p.azurewebsites.windows.net
3f7611921e87.database.windows.net
metricsclient.geneva.core.windows.net
tr1072.westcentralus1-a.worker.database.windows.net
testonly.secretstore.windows.net
cpim.windows.net
d8d83eaf06b9.database.windows.net
ams-ts61-1-hos-rest-1-1.cloudapp.net
40b5d28d821e.database.windows.net
tr28274.eastus1-a.worker.database.windows.net
metricsclient.geneva.core.windows.net
waws-prod-sy3-87a8eac9.state.p.azurewebsites.windows.net
tr6780.canadacentral1-a.worker.database.windows.net
waws-prod-pn1-e4d07c21.api.p.azurewebsites.windows.net
waws-prod-bn1-e45ca43e-api.p.azurewebsites.windows.net
*.blob.core.windows.net
testonly.secretstore.windows.net
gwpdctosf-d9afa021808b.worker.database.windows.net
testonly.secretstore.windows.net
tr976.centralus1-a.worker.database.windows.net
metricsclient.geneva.core.windows.net
waws-prod-am2-04f0829f.publish.p.azurewebsites.windows.net
tr3000.indiacentral1-a.worker.database.windows.net
waws-prod-db3-a4287263.api.p.azurewebsites.windows.net
waws-prod-am2-6c285c27.publish.p.azurewebsites.windows.net
*.redis.cache.windows.net
metricsclient.geneva.core.windows.net
*.redis.cache.windows.net
tr15938.centralus1-a.worker.database.windows.net
*.stream-diagnostics.store.core.windows.net
testonly.secretstore.windows.net
SN3P.agent.core.windows.net
enc.p.azurewebsites.windows.net
tr832.australiaeast1-a.control.database.windows.net
enc.p.azurewebsites.windows.net
waws-prod-bay-a1bbcb3e-api.p.azurewebsites.windows.net
testonly.secretstore.windows.net

Certificate

The complete raw certificate details for tr15938.centralus1-a.worker.database.windows.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs12TPlLZktmOhZr3+0a0
O6FvCspyVGZMOlGulE+khGNa8Pog9p5hAPwJId8YHgmKUF/LGuG7ehHxoBAH1UWu
u6w6jCfZNBcCsm5mlwJHUvmOaPqhpiNL4STQVkM4qGZBO2Uwrt2GytcLLXP8qIZE
6hou+hB9XeED+m89rUNry8N4IhVB8DQUyQJFqE9eTOx0TK5pIR1l3zfOm8BU80OE
pZpo/m59dhRfjOWCZmrXGgUz4vMZVcFMRyowlJ765xmUJlMWXPKoqYWOqI7rLZuJ
wM79sBK7n92gneSoLgW5F8N0gSeL6/GCKoiUK4YQc5F/VptjRwBnv6BJF7RBF/oF
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137366106554422450228291223814592398349210922
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 23:01:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-20 23:01:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tr15938.centralus1-a.worker.database.windows.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22642800224916780185359656872335333815501037327934135668536555421390036819379761629113158433543971443758638863123456866349074387149950044967785000035366437662486549011766354062924860031616356729748347947668412145329432944688927642570562756402556520383721956229575133221151346017006240996987108103328628946350058702269162491822009339985190543220612975957761188797379525021069014398487253057620747612284947353001052275684836472718338058303042738308099462506841573558016434309396208753981095570829984935655310562636704725125500948245918625780419752276730511030499458554041602198361353846008658662375559473010060415337757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9311be31e3fa295a61cc90b3ca1e357cbe54ee1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (390 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tr15938.centralus1-a.worker.database.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hs1.tr15938.centralus1-a.worker.database.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hs2.tr15938.centralus1-a.worker.database.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hs3.tr15938.centralus1-a.worker.database.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.database.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secondary.database.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sql.azuresynapse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dualstack.database.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tr15938.centralus1-a.worker.database.windows.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe09714055051044d8a48175b89e1ae94a0688c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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