*.dfs.core.usgovcloudapi.net

Issued by Microsoft IT TLS CA 1

About this certificate

This digital certificate with serial number 7b:00:0f:1d:b5:de:de:ab:38:7d:06:16:6d:00:00:00:0f:1d:b5 was issued on by Microsoft Corporation.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=*.dfs.core.usgovcloudapi.net

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:00:0f:1d:b5:de:de:ab:38:7d:06:16:6d:00:00:00:0f:1d:b5
Serial Number (int): 2742996803146708406217525184101543556947058101
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 72:5c:46:93:fb:70:09:09:5f:a1:5e:bb:39:5f:11:db:35:ad:f5:d0
AuthorityKeyId: 58:88:9f:d6:dc:9c:48:22:b7:14:3e:ff:84:88:e8:e6:85:ff:fa:7d

Fingerprint (sha1): 9a:5c:e0:21:50:e8:b7:7f:a6:64:74:f8:81:8a:1a:ae:97:95:cc:bb
Fingerprint (sha256): 00:0a:2d:8f:b4:a9:2b:b9:6b:2a:0f:51:5c:22:17:56:78:78:75:64:8d:39:52:c5:1d:16:48:27:35:67:49:e5

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%201.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl

Check the revocation status for certificate *.dfs.core.usgovcloudapi.net

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dfs.core.usgovcloudapi.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dfs.core.usgovcloudapi.net
*.z1.dfs.core.usgovcloudapi.net
*.z2.dfs.core.usgovcloudapi.net
*.z3.dfs.core.usgovcloudapi.net
*.z4.dfs.core.usgovcloudapi.net
*.z5.dfs.core.usgovcloudapi.net
*.z6.dfs.core.usgovcloudapi.net
*.z7.dfs.core.usgovcloudapi.net
*.z8.dfs.core.usgovcloudapi.net
*.z9.dfs.core.usgovcloudapi.net
*.z10.dfs.core.usgovcloudapi.net
*.z11.dfs.core.usgovcloudapi.net
*.z12.dfs.core.usgovcloudapi.net
*.z13.dfs.core.usgovcloudapi.net
*.z14.dfs.core.usgovcloudapi.net
*.z15.dfs.core.usgovcloudapi.net
*.z16.dfs.core.usgovcloudapi.net
*.z17.dfs.core.usgovcloudapi.net
*.z18.dfs.core.usgovcloudapi.net
*.z19.dfs.core.usgovcloudapi.net
*.z20.dfs.core.usgovcloudapi.net
*.z21.dfs.core.usgovcloudapi.net
*.z22.dfs.core.usgovcloudapi.net
*.z23.dfs.core.usgovcloudapi.net
*.z24.dfs.core.usgovcloudapi.net
*.z25.dfs.core.usgovcloudapi.net
*.z26.dfs.core.usgovcloudapi.net
*.z27.dfs.core.usgovcloudapi.net
*.z28.dfs.core.usgovcloudapi.net
*.z29.dfs.core.usgovcloudapi.net
*.z30.dfs.core.usgovcloudapi.net
*.z31.dfs.core.usgovcloudapi.net
*.z32.dfs.core.usgovcloudapi.net
*.z33.dfs.core.usgovcloudapi.net
*.z34.dfs.core.usgovcloudapi.net
*.z35.dfs.core.usgovcloudapi.net
*.z36.dfs.core.usgovcloudapi.net
*.z37.dfs.core.usgovcloudapi.net
*.z38.dfs.core.usgovcloudapi.net
*.z39.dfs.core.usgovcloudapi.net
*.z40.dfs.core.usgovcloudapi.net
*.z41.dfs.core.usgovcloudapi.net
*.z42.dfs.core.usgovcloudapi.net
*.z43.dfs.core.usgovcloudapi.net
*.z44.dfs.core.usgovcloudapi.net
*.z45.dfs.core.usgovcloudapi.net
*.z46.dfs.core.usgovcloudapi.net
*.z47.dfs.core.usgovcloudapi.net
*.z48.dfs.core.usgovcloudapi.net
*.z49.dfs.core.usgovcloudapi.net
*.z50.dfs.core.usgovcloudapi.net

Other certificates including the domain name usgovcloudapi.net

(limited to 100 certificates)
testonly.secretstore.usgovcloudapi.net
a169dcd5-e90f-49db-91f8-fe3e39d14e83.vpn.usgovcloudapi.net
mdsrunner.client.usgovtexas.servicefabric.usgovcloudapi.net
8383f0f0-763b-400b-816f-b4ed06345ac2.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
b2b7c601-84ed-4838-8ed0-540c0b412ac8.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
gc-p-dd3-cdd5db25-api.p.azurewebsites.usgovcloudapi.net
bastion.usgovcloudapi.net
e7342ee0-7f90-442a-bd54-cd4759cdfd52.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
d3619af4-7ea7-4dc5-b72d-f4e2ab6460ce.vpn.usgovcloudapi.net
591db8b3-8562-4617-a325-6220d22ec756.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
*.dfs.core.usgovcloudapi.net
1d6ae19a-74b5-4890-9ec6-4ec1fad0d285.vpn.usgovcloudapi.net
*.stream-diagnostics.store.core.usgovcloudapi.net
864039e4-dc3e-4dea-810e-400dae6eeddc.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
gc-p-dd3-3db7293b.api.p.azurewebsites.usgovcloudapi.net
d16f157c-5b71-487e-b11a-5625e0f6a952.vpn.usgovcloudapi.net
gc-p-bn1-e710a604.st.p.azurewebsites.usgovcloudapi.net
bastion.usgovcloudapi.net
fast-dod-cluster.usdodeast.cloudapp.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
gc-p-bn1-8c7135e3.st.p.azurewebsites.usgovcloudapi.net
gc-p-bn1-467b9285.pub.p.azurewebsites.usgovcloudapi.net
09c9f42f-a8d6-423b-b7c4-479331147652.vpn.usgovcloudapi.net
f8c29c68-8300-421c-9230-f4d4f170f508.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
da550243-606e-4b33-8f21-8fa3e3f4602e.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
gc-p-phx20-ed043389.st.p.azurewebsites.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
486321d5-3fa7-4f60-8498-791533e32983.vpn.usgovcloudapi.net
metricsclient.geneva.core.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
3839d009-1f07-4635-aa7e-91e0c2746671.vpn.usgovcloudapi.net
2c2217c1-29cf-4608-b382-b64763cffdc5.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
gc-p-bn1-2f405586.pub.p.azurewebsites.usgovcloudapi.net
4b9f2016-8f2b-4acd-bdd0-1345b27163e0.vpn.usgovcloudapi.net
mlcssltest2tdk06.usgovvirginia.cloudapp.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
f6dead0b-5ae4-43e4-922e-4007a12f8fd0.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
enc.p.azurewebsites.usgovcloudapi.net
c5829700-d82a-4656-9d40-9f17c6bae05f.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
e4597a01-716a-45b4-ae86-d644dd31797a.vpn.usgovcloudapi.net
343cff53-806a-4d61-b485-7e343a4c2999.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
47a65b30-a1b2-4c2d-a176-325c617a48cf.vpn.usgovcloudapi.net
8c2a44f7-4e1f-4859-a601-42d49ed23b40.vpn.usgovcloudapi.net
enc.p.azurewebsites.usgovcloudapi.net
ee9b9658-6f75-4377-b46b-c6bade4e3afc.vpn.usgovcloudapi.net
gc-p-bn1-e649a416.st.p.azurewebsites.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
Mace-Encryption.mace.usgovcloudapi.net
mlcssltestwfuou0.usgovvirginia.cloudapp.usgovcloudapi.net
gc-p-bn1-44f29f63.api.p.azurewebsites.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
adeidentity-BN1AzFApp15.diskencryption.core.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
*.web.core.usgovcloudapi.net
gc-p-bn1-1335ca65.api.p.azurewebsites.usgovcloudapi.net
38b82784-fe72-44e4-adc7-54121843122a.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
gc-p-bn1-fea8c1a4-api.p.azurewebsites.usgovcloudapi.net
abb00036-a1dd-46a5-bc86-e27d171529b4.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
e139154d-e7fd-405b-b319-6631650bf714.vpn.usgovcloudapi.net
ro-tr16.usgovsouthwest1-a.worker.database.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net

Certificate

The complete raw certificate details for *.dfs.core.usgovcloudapi.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApagt9rS04w8Dui+xuRny
zYDIOrF9vGgB92/H2ujHWv0XvKSA1vM8xyGPbyyCJbr87vJCiYOfXr103BPpzPYQ
60I8C5B2FkNZ0JxI/e3gt4I0dq//rhfFY6giNamxgRKSvIj4rh3qlWbSk2Q0O7e+
RlhNriOW7PQogllUi+L+LzFaO9xwlFseRzO0XzK6K7gDTwZS49hWIGmJ8xiWQ2sR
T0vSdy1jT4RmBJLA+ikq35PNRdh2lDNTL9TvstdG35/S7l9nCutYwccbzQyLXQRC
sHQe+3mk/1jg2HBkBECiv/gHzTqp3+xoKPCua2KMMxPlH8BvAquP5tOJ1E6zGZP8
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2742996803146708406217525184101543556947058101
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 08:32:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-22 08:32:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dfs.core.usgovcloudapi.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20912252744309795722401323089406277611768125022804408858373003997279698959026018999828800983876817183087534754569096553633176467261692873915324396903121977339526318396046501502345790296940316480910768275644859046380664794100067394375884402860721985530222784537728859272037356186260413084790162974243389827804652011156674112051804293844084931980474927905449676650606699287000832114754901407376400167167016373305886416179970236962895835027253388954925869054849901131028574900647200917940211547815123654344221646362501266167080191802970458922485099612998241670581211926958103627575338820094180060095441526309388859735157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%201.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							725c4693fb7009095fa15ebb395f11db35adf5d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1725 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z1.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z2.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z3.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z4.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z5.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z6.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z7.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z8.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z9.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z10.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z11.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z12.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z13.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z14.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z15.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z16.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z17.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z18.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z19.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z20.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z21.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z22.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z23.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z24.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z25.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z26.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z27.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z28.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z29.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z30.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z31.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z32.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z33.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z34.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z35.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z36.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z37.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z38.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z39.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z40.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z41.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z42.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z43.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z44.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z45.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z46.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z47.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z48.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z49.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z50.dfs.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 58889fd6dc9c4822b7143eff8488e8e685fffa7d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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