afsppweu-cp.afs.azure.net

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 07

About this certificate

This digital certificate with serial number 33:00:1b:59:b7:64:2c:a3:dc:51:23:9a:0a:00:00:00:1b:59:b7 was issued on by Microsoft Corporation.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:1b:59:b7:64:2c:a3:dc:51:23:9a:0a:00:00:00:1b:59:b7
Serial Number (int): 1137347312002482373238140531767929002088159671
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 19:33:04:c2:45:67:24:be:7f:bb:56:63:15:0f:fc:14:ea:c0:3f:23
AuthorityKeyId: ce:15:16:3b:ea:02:a3:a6:6b:da:d9:2b:fd:e5:8c:52:be:7a:50:a8

Fingerprint (sha1): d0:47:c8:73:0c:fb:35:49:45:66:dd:b8:71:9a:b2:80:0e:c4:25:67
Fingerprint (sha256): 00:19:0f:4e:03:60:70:4b:8c:ab:0f:d0:2e:5e:9e:b0:c3:a7:a8:c6:c6:2e:b9:c0:3e:22:c1:5f:f6:8d:72:87

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl

Check the revocation status for certificate afsppweu-cp.afs.azure.net

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for afsppweu-cp.afs.azure.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tm-westus201.afs.azure.net
tm-westcentralus01.afs.azure.net
*.westcentralus.afs.azure.net
*.westcentralus.privatelink.afs.azure.net
*.westus2.afs.azure.net
*.westus2.privatelink.afs.azure.net
tm-kailani-flight-pri.one.microsoft.com
tm-kailani-flight-sec.one.microsoft.com
kailani-flight-sec.one.microsoft.com
kailani-west-us-2.one.microsoft.com
afsppweu-cp.afs.azure.net

Other certificates including the domain name azure.net

(limited to 100 certificates)
adeidentity-PN1PrdApp07.diskencryption.azure.net
azattesttest.westus.cloudapp.azure.com
*.blob.core.windows.net
adeidentity-BLAPrdHPC02.diskencryption.azure.net
*.blob.core.windows.net
*.file.core.windows.net
*.table.core.windows.net
*.table.core.windows.net
adeidentity-DB4PrdHPC01.diskencryption.azure.net
*.file.core.windows.net
*.queue.core.windows.net
*.account.core.windows.net
adeidentity-MWH04PrdApp14.diskencryption.azure.net
*.file.core.windows.net
*.web.core.windows.net
*.eventgrid-int.azure.net
afsppweu-cp.afs.azure.net
*.dfs.core.windows.net
b2b.azure.net
*.table.core.windows.net
*.dfs.core.windows.net
*.blob.core.windows.net
*.queue.core.windows.net
adeidentity-BY4PrdDDC15.diskencryption.azure.net
*.queue.core.windows.net
*.queue.core.windows.net
*.account.core.windows.net
*.blob.core.windows.net
*.table.core.windows.net
*.file.core.windows.net
*.queue.core.windows.net
*.blob.core.windows.net
afsppjpw-dp.afs.azure.net
*.dfs.core.windows.net
*.account.core.windows.net
*.dfs.core.windows.net
*.queue.core.windows.net
*.queue.core.windows.net
*.file.core.windows.net
cvprhkn01v.cloudvideo.azure.net
*.file.core.windows.net
*.dfs.core.windows.net
*.dfs.core.windows.net
*.blob.core.windows.net
*.table.core.windows.net
*.blob.core.windows.net
CBN06PrdApp01.prod.idns.azure.net
*.dfs.core.windows.net
adeidentity-BL6PrdApp10.diskencryption.azure.net
*.blob.core.windows.net
*.file.core.windows.net
adeidentity-AMS20PrdHPC01.diskencryption.azure.net
*.dfs.core.windows.net
*.blob.core.windows.net
*.dfs.core.windows.net
vault.azure.net
CBZ07PrdApp01.prod.idns.azure.net
*.web.core.windows.net
*.queue.core.windows.net
*.queue.core.windows.net
*.blob.core.windows.net
*.identity.azure.net
*.dfs.core.windows.net
*.table.core.windows.net
*.file.core.windows.net
*.queue.core.windows.net
servicefabricmanagement.eventgrid.azure.net
*.web.core.windows.net
*.file.core.windows.net
*.blob.core.windows.net
*.blob.core.windows.net
*.web.core.windows.net
adeidentity-ZRH20PrdApp03.diskencryption.azure.net
*.table.core.windows.net
CW1PrdApp02.prod.idns.azure.net
*.dfs.core.windows.net
*.blob.core.windows.net
adfmonitoringclienteastus2euap.azure.net
*.web.core.windows.net
*.eventgrid-int.azure.net
*.web.core.windows.net
afsint01.afstest.azure.net
*.file.core.windows.net
*.table.core.windows.net
*.table.core.windows.net
*.file.core.windows.net
*.file.core.windows.net
adeidentity-SG2PrdApp35.diskencryption.azure.net
*.dfs.core.windows.net
*.web.core.windows.net
*.account.core.windows.net
adeidentity-TYO20PrdApp06.diskencryption.azure.net
*.web.core.windows.net
*.queue.core.windows.net
*.account.core.windows.net
adeidentity-ML1PrdApp05.diskencryption.azure.net
*.file.core.windows.net
*.file.core.windows.net
adeidentity-SG2PrdApp06.diskencryption.azure.net
adeidentity-SYD23PrdApp06.diskencryption.azure.net

Certificate

The complete raw certificate details for afsppweu-cp.afs.azure.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+YWKqPOsDjMpGlITugN
yNmhEcuy0bPIfK9zeX4JS5Xg+f7AVbXDQPIXNmLaxagHI4HTGtQ7GAT/OXbdAkQ7
DRlTZQrB5S36ZxmqlA8qNKAg+/dzJFocVSxG3OQzg3301h0kxTrC3AZZ3vt8/zsh
aq1gOox5RgO3ISSCMKf3ntpkZ0RKS60ZMmL8qOcBu8FeIfC9glyzscftJwEusrCX
i+P9OGnvgaRiMYxhCvDfnnlqB5g7YJf60ZvXJcmOzTvEJiRN4e27FKnpzEUTMxRT
iVaY4L+Z2euQtFtKFvWU3tHC/Sua8IKxB0j4QCXZd8GyvfuNYj3GmyxT8UfS9adB
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137347312002482373238140531767929002088159671
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 07'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 10:39:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-23 10:39:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afsppweu-cp.afs.azure.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24729929393699052419878517700279865888745288763566926279846512327393951500781981446700376847894933846512204270168287110693932914721017142500585716504751147773731013549179521665147946485895435508349805180889774849933818806979511564068351155171017663418595051888065647243139335085933758678599169649808836054878286238685292232787663066824874880125742839774794463728683218998738207075427776608863248735732081721035077884623138651353705796938633652620284112611379917617625594997394191397926342911168389924485700081596374118366100001006640040532466587419722901054049731308234363411893206813907507710575826399256840189198717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018d54d67a7700000403004730450221009d5877c791dd7c370b6e76428de97ff38c0364c32a0eb54b3493161cf9994fd1022021f1cc55dd985a179f47e54962b175b2d3cd103cfd759771ddf1b4717f92bbb40077007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018d54d67b5400000403004830460221008ef2aa694dd495949f7eb5982115012d8e9eb67fd0a532f15f2b348c069988a3022100da12260f602a4d343540d425247fe27dc6eddfc85852dc6d51794de196ecc1120076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018d54d67b590000040300473045022100f82cfc29088d2508efdb8a0452e15bcad44d9bcc8def2395408ea587c72af51d02207de8979c8659910e1af5ea7296d7d8a7f69732bd703b4970146af4c119148003
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							193304c2456724be7fbb5663150ffc14eac03f23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (386 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tm-westus201.afs.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tm-westcentralus01.afs.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westcentralus.afs.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westcentralus.privatelink.afs.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westus2.afs.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westus2.privatelink.afs.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tm-kailani-flight-pri.one.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tm-kailani-flight-sec.one.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kailani-flight-sec.one.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kailani-west-us-2.one.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afsppweu-cp.afs.azure.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ce15163bea02a3a66bdad92bfde58c52be7a50a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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