*.dfs.core.usgovcloudapi.net
Issued by Microsoft IT TLS CA 1
About this certificate
This digital certificate with serial number 7b:00:0f:1d:b5:de:de:ab:38:7d:06:16:6d:00:00:00:0f:1d:b5 was issued on by Microsoft Corporation.
With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Certificate Subject
CN=*.dfs.core.usgovcloudapi.net
Microsoft Corporation
Organization:
Microsoft Corporation
Organization unit: Microsoft IT
Organization unit: Microsoft IT
State / Province:
Washington
Locality: Redmond
Country: US
Locality: Redmond
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 7b:00:0f:1d:b5:de:de:ab:38:7d:06:16:6d:00:00:00:0f:1d:b5Serial Number (int): 2742996803146708406217525184101543556947058101
Serial Number lenght: 151 bits, 19 octets
SubjectKeyId: 72:5c:46:93:fb:70:09:09:5f:a1:5e:bb:39:5f:11:db:35:ad:f5:d0
AuthorityKeyId: 58:88:9f:d6:dc:9c:48:22:b7:14:3e:ff:84:88:e8:e6:85:ff:fa:7d
Fingerprint (sha1): 9a:5c:e0:21:50:e8:b7:7f:a6:64:74:f8:81:8a:1a:ae:97:95:cc:bb
Fingerprint (sha256): 00:0a:2d:8f:b4:a9:2b:b9:6b:2a:0f:51:5c:22:17:56:78:78:75:64:8d:39:52:c5:1d:16:48:27:35:67:49:e5
Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%201.crt
Revocation information
OCSP Server: http://ocsp.msocsp.comCRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl
Check the revocation status for certificate *.dfs.core.usgovcloudapi.net
51
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.dfs.core.usgovcloudapi.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.dfs.core.usgovcloudapi.net
*.z1.dfs.core.usgovcloudapi.net
*.z2.dfs.core.usgovcloudapi.net
*.z3.dfs.core.usgovcloudapi.net
*.z4.dfs.core.usgovcloudapi.net
*.z5.dfs.core.usgovcloudapi.net
*.z6.dfs.core.usgovcloudapi.net
*.z7.dfs.core.usgovcloudapi.net
*.z8.dfs.core.usgovcloudapi.net
*.z9.dfs.core.usgovcloudapi.net
*.z10.dfs.core.usgovcloudapi.net
*.z11.dfs.core.usgovcloudapi.net
*.z12.dfs.core.usgovcloudapi.net
*.z13.dfs.core.usgovcloudapi.net
*.z14.dfs.core.usgovcloudapi.net
*.z15.dfs.core.usgovcloudapi.net
*.z16.dfs.core.usgovcloudapi.net
*.z17.dfs.core.usgovcloudapi.net
*.z18.dfs.core.usgovcloudapi.net
*.z19.dfs.core.usgovcloudapi.net
*.z20.dfs.core.usgovcloudapi.net
*.z21.dfs.core.usgovcloudapi.net
*.z22.dfs.core.usgovcloudapi.net
*.z23.dfs.core.usgovcloudapi.net
*.z24.dfs.core.usgovcloudapi.net
*.z25.dfs.core.usgovcloudapi.net
*.z26.dfs.core.usgovcloudapi.net
*.z27.dfs.core.usgovcloudapi.net
*.z28.dfs.core.usgovcloudapi.net
*.z29.dfs.core.usgovcloudapi.net
*.z30.dfs.core.usgovcloudapi.net
*.z31.dfs.core.usgovcloudapi.net
*.z32.dfs.core.usgovcloudapi.net
*.z33.dfs.core.usgovcloudapi.net
*.z34.dfs.core.usgovcloudapi.net
*.z35.dfs.core.usgovcloudapi.net
*.z36.dfs.core.usgovcloudapi.net
*.z37.dfs.core.usgovcloudapi.net
*.z38.dfs.core.usgovcloudapi.net
*.z39.dfs.core.usgovcloudapi.net
*.z40.dfs.core.usgovcloudapi.net
*.z41.dfs.core.usgovcloudapi.net
*.z42.dfs.core.usgovcloudapi.net
*.z43.dfs.core.usgovcloudapi.net
*.z44.dfs.core.usgovcloudapi.net
*.z45.dfs.core.usgovcloudapi.net
*.z46.dfs.core.usgovcloudapi.net
*.z47.dfs.core.usgovcloudapi.net
*.z48.dfs.core.usgovcloudapi.net
*.z49.dfs.core.usgovcloudapi.net
*.z50.dfs.core.usgovcloudapi.net
*.z1.dfs.core.usgovcloudapi.net
*.z2.dfs.core.usgovcloudapi.net
*.z3.dfs.core.usgovcloudapi.net
*.z4.dfs.core.usgovcloudapi.net
*.z5.dfs.core.usgovcloudapi.net
*.z6.dfs.core.usgovcloudapi.net
*.z7.dfs.core.usgovcloudapi.net
*.z8.dfs.core.usgovcloudapi.net
*.z9.dfs.core.usgovcloudapi.net
*.z10.dfs.core.usgovcloudapi.net
*.z11.dfs.core.usgovcloudapi.net
*.z12.dfs.core.usgovcloudapi.net
*.z13.dfs.core.usgovcloudapi.net
*.z14.dfs.core.usgovcloudapi.net
*.z15.dfs.core.usgovcloudapi.net
*.z16.dfs.core.usgovcloudapi.net
*.z17.dfs.core.usgovcloudapi.net
*.z18.dfs.core.usgovcloudapi.net
*.z19.dfs.core.usgovcloudapi.net
*.z20.dfs.core.usgovcloudapi.net
*.z21.dfs.core.usgovcloudapi.net
*.z22.dfs.core.usgovcloudapi.net
*.z23.dfs.core.usgovcloudapi.net
*.z24.dfs.core.usgovcloudapi.net
*.z25.dfs.core.usgovcloudapi.net
*.z26.dfs.core.usgovcloudapi.net
*.z27.dfs.core.usgovcloudapi.net
*.z28.dfs.core.usgovcloudapi.net
*.z29.dfs.core.usgovcloudapi.net
*.z30.dfs.core.usgovcloudapi.net
*.z31.dfs.core.usgovcloudapi.net
*.z32.dfs.core.usgovcloudapi.net
*.z33.dfs.core.usgovcloudapi.net
*.z34.dfs.core.usgovcloudapi.net
*.z35.dfs.core.usgovcloudapi.net
*.z36.dfs.core.usgovcloudapi.net
*.z37.dfs.core.usgovcloudapi.net
*.z38.dfs.core.usgovcloudapi.net
*.z39.dfs.core.usgovcloudapi.net
*.z40.dfs.core.usgovcloudapi.net
*.z41.dfs.core.usgovcloudapi.net
*.z42.dfs.core.usgovcloudapi.net
*.z43.dfs.core.usgovcloudapi.net
*.z44.dfs.core.usgovcloudapi.net
*.z45.dfs.core.usgovcloudapi.net
*.z46.dfs.core.usgovcloudapi.net
*.z47.dfs.core.usgovcloudapi.net
*.z48.dfs.core.usgovcloudapi.net
*.z49.dfs.core.usgovcloudapi.net
*.z50.dfs.core.usgovcloudapi.net
Other certificates including the domain name usgovcloudapi.net
(limited to 100 certificates)
testonly.secretstore.usgovcloudapi.net
a169dcd5-e90f-49db-91f8-fe3e39d14e83.vpn.usgovcloudapi.net
mdsrunner.client.usgovtexas.servicefabric.usgovcloudapi.net
8383f0f0-763b-400b-816f-b4ed06345ac2.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
b2b7c601-84ed-4838-8ed0-540c0b412ac8.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
gc-p-dd3-cdd5db25-api.p.azurewebsites.usgovcloudapi.net
bastion.usgovcloudapi.net
e7342ee0-7f90-442a-bd54-cd4759cdfd52.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
d3619af4-7ea7-4dc5-b72d-f4e2ab6460ce.vpn.usgovcloudapi.net
591db8b3-8562-4617-a325-6220d22ec756.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
*.dfs.core.usgovcloudapi.net
1d6ae19a-74b5-4890-9ec6-4ec1fad0d285.vpn.usgovcloudapi.net
*.stream-diagnostics.store.core.usgovcloudapi.net
864039e4-dc3e-4dea-810e-400dae6eeddc.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
gc-p-dd3-3db7293b.api.p.azurewebsites.usgovcloudapi.net
d16f157c-5b71-487e-b11a-5625e0f6a952.vpn.usgovcloudapi.net
gc-p-bn1-e710a604.st.p.azurewebsites.usgovcloudapi.net
bastion.usgovcloudapi.net
fast-dod-cluster.usdodeast.cloudapp.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
gc-p-bn1-8c7135e3.st.p.azurewebsites.usgovcloudapi.net
gc-p-bn1-467b9285.pub.p.azurewebsites.usgovcloudapi.net
09c9f42f-a8d6-423b-b7c4-479331147652.vpn.usgovcloudapi.net
f8c29c68-8300-421c-9230-f4d4f170f508.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
da550243-606e-4b33-8f21-8fa3e3f4602e.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
gc-p-phx20-ed043389.st.p.azurewebsites.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
486321d5-3fa7-4f60-8498-791533e32983.vpn.usgovcloudapi.net
metricsclient.geneva.core.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
3839d009-1f07-4635-aa7e-91e0c2746671.vpn.usgovcloudapi.net
2c2217c1-29cf-4608-b382-b64763cffdc5.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
gc-p-bn1-2f405586.pub.p.azurewebsites.usgovcloudapi.net
4b9f2016-8f2b-4acd-bdd0-1345b27163e0.vpn.usgovcloudapi.net
mlcssltest2tdk06.usgovvirginia.cloudapp.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
f6dead0b-5ae4-43e4-922e-4007a12f8fd0.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
enc.p.azurewebsites.usgovcloudapi.net
c5829700-d82a-4656-9d40-9f17c6bae05f.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
e4597a01-716a-45b4-ae86-d644dd31797a.vpn.usgovcloudapi.net
343cff53-806a-4d61-b485-7e343a4c2999.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
47a65b30-a1b2-4c2d-a176-325c617a48cf.vpn.usgovcloudapi.net
8c2a44f7-4e1f-4859-a601-42d49ed23b40.vpn.usgovcloudapi.net
enc.p.azurewebsites.usgovcloudapi.net
ee9b9658-6f75-4377-b46b-c6bade4e3afc.vpn.usgovcloudapi.net
gc-p-bn1-e649a416.st.p.azurewebsites.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
Mace-Encryption.mace.usgovcloudapi.net
mlcssltestwfuou0.usgovvirginia.cloudapp.usgovcloudapi.net
gc-p-bn1-44f29f63.api.p.azurewebsites.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
adeidentity-BN1AzFApp15.diskencryption.core.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
*.web.core.usgovcloudapi.net
gc-p-bn1-1335ca65.api.p.azurewebsites.usgovcloudapi.net
38b82784-fe72-44e4-adc7-54121843122a.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
gc-p-bn1-fea8c1a4-api.p.azurewebsites.usgovcloudapi.net
abb00036-a1dd-46a5-bc86-e27d171529b4.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
e139154d-e7fd-405b-b319-6631650bf714.vpn.usgovcloudapi.net
ro-tr16.usgovsouthwest1-a.worker.database.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
a169dcd5-e90f-49db-91f8-fe3e39d14e83.vpn.usgovcloudapi.net
mdsrunner.client.usgovtexas.servicefabric.usgovcloudapi.net
8383f0f0-763b-400b-816f-b4ed06345ac2.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
b2b7c601-84ed-4838-8ed0-540c0b412ac8.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
gc-p-dd3-cdd5db25-api.p.azurewebsites.usgovcloudapi.net
bastion.usgovcloudapi.net
e7342ee0-7f90-442a-bd54-cd4759cdfd52.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
d3619af4-7ea7-4dc5-b72d-f4e2ab6460ce.vpn.usgovcloudapi.net
591db8b3-8562-4617-a325-6220d22ec756.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
*.dfs.core.usgovcloudapi.net
1d6ae19a-74b5-4890-9ec6-4ec1fad0d285.vpn.usgovcloudapi.net
*.stream-diagnostics.store.core.usgovcloudapi.net
864039e4-dc3e-4dea-810e-400dae6eeddc.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
gc-p-dd3-3db7293b.api.p.azurewebsites.usgovcloudapi.net
d16f157c-5b71-487e-b11a-5625e0f6a952.vpn.usgovcloudapi.net
gc-p-bn1-e710a604.st.p.azurewebsites.usgovcloudapi.net
bastion.usgovcloudapi.net
fast-dod-cluster.usdodeast.cloudapp.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
gc-p-bn1-8c7135e3.st.p.azurewebsites.usgovcloudapi.net
gc-p-bn1-467b9285.pub.p.azurewebsites.usgovcloudapi.net
09c9f42f-a8d6-423b-b7c4-479331147652.vpn.usgovcloudapi.net
f8c29c68-8300-421c-9230-f4d4f170f508.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
da550243-606e-4b33-8f21-8fa3e3f4602e.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
gc-p-phx20-ed043389.st.p.azurewebsites.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
486321d5-3fa7-4f60-8498-791533e32983.vpn.usgovcloudapi.net
metricsclient.geneva.core.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
3839d009-1f07-4635-aa7e-91e0c2746671.vpn.usgovcloudapi.net
2c2217c1-29cf-4608-b382-b64763cffdc5.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
gc-p-bn1-2f405586.pub.p.azurewebsites.usgovcloudapi.net
4b9f2016-8f2b-4acd-bdd0-1345b27163e0.vpn.usgovcloudapi.net
mlcssltest2tdk06.usgovvirginia.cloudapp.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
f6dead0b-5ae4-43e4-922e-4007a12f8fd0.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
enc.p.azurewebsites.usgovcloudapi.net
c5829700-d82a-4656-9d40-9f17c6bae05f.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
e4597a01-716a-45b4-ae86-d644dd31797a.vpn.usgovcloudapi.net
343cff53-806a-4d61-b485-7e343a4c2999.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
47a65b30-a1b2-4c2d-a176-325c617a48cf.vpn.usgovcloudapi.net
8c2a44f7-4e1f-4859-a601-42d49ed23b40.vpn.usgovcloudapi.net
enc.p.azurewebsites.usgovcloudapi.net
ee9b9658-6f75-4377-b46b-c6bade4e3afc.vpn.usgovcloudapi.net
gc-p-bn1-e649a416.st.p.azurewebsites.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
Mace-Encryption.mace.usgovcloudapi.net
mlcssltestwfuou0.usgovvirginia.cloudapp.usgovcloudapi.net
gc-p-bn1-44f29f63.api.p.azurewebsites.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
adeidentity-BN1AzFApp15.diskencryption.core.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
*.web.core.usgovcloudapi.net
gc-p-bn1-1335ca65.api.p.azurewebsites.usgovcloudapi.net
38b82784-fe72-44e4-adc7-54121843122a.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
gc-p-bn1-fea8c1a4-api.p.azurewebsites.usgovcloudapi.net
abb00036-a1dd-46a5-bc86-e27d171529b4.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
e139154d-e7fd-405b-b319-6631650bf714.vpn.usgovcloudapi.net
ro-tr16.usgovsouthwest1-a.worker.database.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
Certificate
The complete raw certificate details for *.dfs.core.usgovcloudapi.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIINgDCCC2igAwIBAgITewAPHbXe3qs4fQYWbQAAAA8dtTANBgkqhkiG9w0BAQsF ADCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UE CxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDEw HhcNMjAwMTIyMDgzMjIzWhcNMjIwMTIyMDgzMjIzWjAnMSUwIwYDVQQDDBwqLmRm cy5jb3JlLnVzZ292Y2xvdWRhcGkubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEApagt9rS04w8Dui+xuRnyzYDIOrF9vGgB92/H2ujHWv0XvKSA1vM8 xyGPbyyCJbr87vJCiYOfXr103BPpzPYQ60I8C5B2FkNZ0JxI/e3gt4I0dq//rhfF Y6giNamxgRKSvIj4rh3qlWbSk2Q0O7e+RlhNriOW7PQogllUi+L+LzFaO9xwlFse RzO0XzK6K7gDTwZS49hWIGmJ8xiWQ2sRT0vSdy1jT4RmBJLA+ikq35PNRdh2lDNT L9TvstdG35/S7l9nCutYwccbzQyLXQRCsHQe+3mk/1jg2HBkBECiv/gHzTqp3+xo KPCua2KMMxPlH8BvAquP5tOJ1E6zGZP8dQIDAQABo4IJPjCCCTowEwYKKwYBBAHW eQIEAwEB/wQCBQAwJwYJKwYBBAGCNxUKBBowGDAKBggrBgEFBQcDAjAKBggrBgEF BQcDATA+BgkrBgEEAYI3FQcEMTAvBicrBgEEAYI3FQiH2oZ1g+7ZAYLJhRuBtZ5h hfTrYIFdhNLfQoLnk3oCAWQCAR0wgYUGCCsGAQUFBwEBBHkwdzBRBggrBgEFBQcw AoZFaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvTWljcm9zb2Z0 JTIwSVQlMjBUTFMlMjBDQSUyMDEuY3J0MCIGCCsGAQUFBzABhhZodHRwOi8vb2Nz cC5tc29jc3AuY29tMB0GA1UdDgQWBBRyXEaT+3AJCV+hXrs5XxHbNa310DALBgNV HQ8EBAMCBLAwggbGBgNVHREEgga9MIIGuYIcKi5kZnMuY29yZS51c2dvdmNsb3Vk YXBpLm5ldIIfKi56MS5kZnMuY29yZS51c2dvdmNsb3VkYXBpLm5ldIIfKi56Mi5k ZnMuY29yZS51c2dvdmNsb3VkYXBpLm5ldIIfKi56My5kZnMuY29yZS51c2dvdmNs b3VkYXBpLm5ldIIfKi56NC5kZnMuY29yZS51c2dvdmNsb3VkYXBpLm5ldIIfKi56 NS5kZnMuY29yZS51c2dvdmNsb3VkYXBpLm5ldIIfKi56Ni5kZnMuY29yZS51c2dv dmNsb3VkYXBpLm5ldIIfKi56Ny5kZnMuY29yZS51c2dvdmNsb3VkYXBpLm5ldIIf Ki56OC5kZnMuY29yZS51c2dvdmNsb3VkYXBpLm5ldIIfKi56OS5kZnMuY29yZS51 c2dvdmNsb3VkYXBpLm5ldIIgKi56MTAuZGZzLmNvcmUudXNnb3ZjbG91ZGFwaS5u ZXSCICouejExLmRmcy5jb3JlLnVzZ292Y2xvdWRhcGkubmV0giAqLnoxMi5kZnMu Y29yZS51c2dvdmNsb3VkYXBpLm5ldIIgKi56MTMuZGZzLmNvcmUudXNnb3ZjbG91 ZGFwaS5uZXSCICouejE0LmRmcy5jb3JlLnVzZ292Y2xvdWRhcGkubmV0giAqLnox NS5kZnMuY29yZS51c2dvdmNsb3VkYXBpLm5ldIIgKi56MTYuZGZzLmNvcmUudXNn b3ZjbG91ZGFwaS5uZXSCICouejE3LmRmcy5jb3JlLnVzZ292Y2xvdWRhcGkubmV0 giAqLnoxOC5kZnMuY29yZS51c2dvdmNsb3VkYXBpLm5ldIIgKi56MTkuZGZzLmNv cmUudXNnb3ZjbG91ZGFwaS5uZXSCICouejIwLmRmcy5jb3JlLnVzZ292Y2xvdWRh cGkubmV0giAqLnoyMS5kZnMuY29yZS51c2dvdmNsb3VkYXBpLm5ldIIgKi56MjIu ZGZzLmNvcmUudXNnb3ZjbG91ZGFwaS5uZXSCICouejIzLmRmcy5jb3JlLnVzZ292 Y2xvdWRhcGkubmV0giAqLnoyNC5kZnMuY29yZS51c2dvdmNsb3VkYXBpLm5ldIIg Ki56MjUuZGZzLmNvcmUudXNnb3ZjbG91ZGFwaS5uZXSCICouejI2LmRmcy5jb3Jl LnVzZ292Y2xvdWRhcGkubmV0giAqLnoyNy5kZnMuY29yZS51c2dvdmNsb3VkYXBp Lm5ldIIgKi56MjguZGZzLmNvcmUudXNnb3ZjbG91ZGFwaS5uZXSCICouejI5LmRm cy5jb3JlLnVzZ292Y2xvdWRhcGkubmV0giAqLnozMC5kZnMuY29yZS51c2dvdmNs b3VkYXBpLm5ldIIgKi56MzEuZGZzLmNvcmUudXNnb3ZjbG91ZGFwaS5uZXSCICou ejMyLmRmcy5jb3JlLnVzZ292Y2xvdWRhcGkubmV0giAqLnozMy5kZnMuY29yZS51 c2dvdmNsb3VkYXBpLm5ldIIgKi56MzQuZGZzLmNvcmUudXNnb3ZjbG91ZGFwaS5u ZXSCICouejM1LmRmcy5jb3JlLnVzZ292Y2xvdWRhcGkubmV0giAqLnozNi5kZnMu Y29yZS51c2dvdmNsb3VkYXBpLm5ldIIgKi56MzcuZGZzLmNvcmUudXNnb3ZjbG91 ZGFwaS5uZXSCICouejM4LmRmcy5jb3JlLnVzZ292Y2xvdWRhcGkubmV0giAqLnoz OS5kZnMuY29yZS51c2dvdmNsb3VkYXBpLm5ldIIgKi56NDAuZGZzLmNvcmUudXNn b3ZjbG91ZGFwaS5uZXSCICouejQxLmRmcy5jb3JlLnVzZ292Y2xvdWRhcGkubmV0 giAqLno0Mi5kZnMuY29yZS51c2dvdmNsb3VkYXBpLm5ldIIgKi56NDMuZGZzLmNv cmUudXNnb3ZjbG91ZGFwaS5uZXSCICouejQ0LmRmcy5jb3JlLnVzZ292Y2xvdWRh cGkubmV0giAqLno0NS5kZnMuY29yZS51c2dvdmNsb3VkYXBpLm5ldIIgKi56NDYu ZGZzLmNvcmUudXNnb3ZjbG91ZGFwaS5uZXSCICouejQ3LmRmcy5jb3JlLnVzZ292 Y2xvdWRhcGkubmV0giAqLno0OC5kZnMuY29yZS51c2dvdmNsb3VkYXBpLm5ldIIg Ki56NDkuZGZzLmNvcmUudXNnb3ZjbG91ZGFwaS5uZXSCICouejUwLmRmcy5jb3Jl LnVzZ292Y2xvdWRhcGkubmV0MIGsBgNVHR8EgaQwgaEwgZ6ggZuggZiGS2h0dHA6 Ly9tc2NybC5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL01pY3Jvc29mdCUy MElUJTIwVExTJTIwQ0ElMjAxLmNybIZJaHR0cDovL2NybC5taWNyb3NvZnQuY29t L3BraS9tc2NvcnAvY3JsL01pY3Jvc29mdCUyMElUJTIwVExTJTIwQ0ElMjAxLmNy bDBNBgNVHSAERjBEMEIGCSsGAQQBgjcqATA1MDMGCCsGAQUFBwIBFidodHRwOi8v d3d3Lm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9jcHMwHwYDVR0jBBgwFoAUWIif 1tycSCK3FD7/hIjo5oX/+n0wHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMB MA0GCSqGSIb3DQEBCwUAA4ICAQB7bj1/IajqKpYoi5269nc7d4/HEQN09q3p9zkR W56Q6f1j4SLs7YaQDG+ggjblZWAVkStC+p/uBGtZz2wwcqEnX1VOVTFV6CtRyaT2 +OF6CJ6WHTR27gxL1IUt/hYAIrdYONs8HuBUAwok13H2MkvDJ+vw3mZhtIbk8xmf hAdzIxnV+DqkPQlJsqbKPNok4RGs4iGQ0++AJrqurYFOx0f8Q7s+QEK/TSRg4kru 0ilOnTHujaitcjr/EgGcemAATb0LhtQsvDX2PGznDMPshaQOwmrVfX2KqA34KXI7 aXjLhou6lrBS+F0ok0/qxnsX8d8M8v7S49H90Bm4LJJKBHhbGJKRz3ePhq4xE/IW PoC9eMhxJV7P/cSblOhRYTdc/fHB7MCP4/b7zbYob1ZLCT4pZNIhaEmb2kqyMsvl vy3Cs90A7w5LvTkhE01dai3891LZEQuzsyUnpJjXxhcv54vEguCMpXsb+vMm4O4+ ENTjCGVHmkW5G8XwxweZzR2Y7QDhs1Um6h/mwFNd9wowb7Bvyn+Rioxxmgg/AWx1 pnTT4HtPM2BI+YeayxpNWqImqtliCaIWYKtQn3rNJxH8qam7U6bquYPP5cxt6zoL cbNeXSVlUVqu7GAUSc0bFsreQt90zWjBG3IqFRdRZwk7W2eO20O3eV6bc4S6JMaH wPk/3g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApagt9rS04w8Dui+xuRny zYDIOrF9vGgB92/H2ujHWv0XvKSA1vM8xyGPbyyCJbr87vJCiYOfXr103BPpzPYQ 60I8C5B2FkNZ0JxI/e3gt4I0dq//rhfFY6giNamxgRKSvIj4rh3qlWbSk2Q0O7e+ RlhNriOW7PQogllUi+L+LzFaO9xwlFseRzO0XzK6K7gDTwZS49hWIGmJ8xiWQ2sR T0vSdy1jT4RmBJLA+ikq35PNRdh2lDNTL9TvstdG35/S7l9nCutYwccbzQyLXQRC sHQe+3mk/1jg2HBkBECiv/gHzTqp3+xoKPCua2KMMxPlH8BvAquP5tOJ1E6zGZP8 dQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2742996803146708406217525184101543556947058101 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 08:32:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-22 08:32:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dfs.core.usgovcloudapi.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20912252744309795722401323089406277611768125022804408858373003997279698959026018999828800983876817183087534754569096553633176467261692873915324396903121977339526318396046501502345790296940316480910768275644859046380664794100067394375884402860721985530222784537728859272037356186260413084790162974243389827804652011156674112051804293844084931980474927905449676650606699287000832114754901407376400167167016373305886416179970236962895835027253388954925869054849901131028574900647200917940211547815123654344221646362501266167080191802970458922485099612998241670581211926958103627575338820094180060095441526309388859735157 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%201.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 725c4693fb7009095fa15ebb395f11db35adf5d0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1725 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z1.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z2.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z3.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z4.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z5.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z6.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z7.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z8.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z9.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z10.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z11.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z12.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z13.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z14.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z15.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z16.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z17.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z18.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z19.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z20.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z21.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z22.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z23.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z24.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z25.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z26.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z27.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z28.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z29.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z30.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z31.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z32.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z33.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z34.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z35.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z36.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z37.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z38.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z39.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z40.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z41.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z42.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z43.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z44.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z45.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z46.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z47.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z48.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z49.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z50.dfs.core.usgovcloudapi.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 58889fd6dc9c4822b7143eff8488e8e685fffa7d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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