shsatrelha4151ada6dcfaa010.cloudax.test.dynamics.com

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 06

About this certificate

This digital certificate with serial number 33:00:02:de:a3:19:4c:19:de:a9:10:79:d9:00:00:00:02:de:a3 was issued on by Microsoft Corporation.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DigitalSignature KeyEncipherment DataEncipherment] (00001101) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:00:02:de:a3:19:4c:19:de:a9:10:79:d9:00:00:00:02:de:a3
Serial Number (int): 1137338981625268163874496783951808867697090211
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 3b:a0:35:26:b4:2a:5e:46:86:8c:35:08:cf:84:2f:43:cf:d1:13:b9
AuthorityKeyId: d5:c1:67:3a:c2:a3:9d:f4:77:52:5b:59:12:38:29:e6:55:68:bb:a5

Fingerprint (sha1): c2:91:ac:c9:6c:49:87:08:c3:4e:dd:95:e9:f3:eb:bf:84:97:14:eb
Fingerprint (sha256): 00:1c:0d:cd:fb:d4:45:16:41:ad:66:3d:b5:e2:bf:01:e8:6a:2e:51:56:32:48:11:34:33:d5:2f:6b:bc:07:a9

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2006%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2006.crl

Check the revocation status for certificate shsatrelha4151ada6dcfaa010.cloudax.test.dynamics.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shsatrelha4151ada6dcfaa010.cloudax.test.dynamics.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shsatrelha4151ada6dcfaa010ret.cloudax.test.dynamics.com
shsatrelha4151ada6dcfaa010pos.cloudax.test.dynamics.com
shsatrelha4151ada6dcfaa010aossoap.cloudax.test.dynamics.com
shsatrelha4151ada6dcfaa010.cloudax.test.dynamics.com

Other certificates including the domain name dynamics.com

(limited to 100 certificates)
emicoolprod.operations.dynamics.com
trial-7fbgjm.sandbox.operations.dynamics.com
cervus-test-10-0-137a320c86a90a6352devaos.cloudax.dynamics.com
zipcorp-devdevaos.sandbox.ax.dynamics.com
mjstest.sandbox.operations.dynamics.com
spa-dvp59cb1bf5c01c3737aos.cloudax.dynamics.com
taap-uat.sandbox.operations.dynamics.com
austability-dev.sandbox.ax.dynamics.com
trial-tr-eastus.operations.test.dynamics.com
uat-hcmm.sandbox.operations.dynamics.com
d365commerce.sandbox.operations.dynamics.com
ajf-buildaos.sandbox.ax.dynamics.com
trial-tr-westus2.operations.test.dynamics.com
trifast-ast001.sandbox.operations.dynamics.com
caldic-dev-03d0ac9641470fe46fdevaos.cloudax.dynamics.com
sandbox123lease.sandbox.operations.dynamics.com
quaron-form.sandbox.operations.dynamics.com
REIDevTest2.sandbox.ax.dynamics.com
trial-bx728m.sandbox.operations.dynamics.com
ahlysportingclub.operations.dynamics.com
vb-buildaos.sandbox.ax.dynamics.com
dixiechemical-devaos.sandbox.ax.dynamics.com
gc-test.sandbox.operations.dynamics.com
d365fopbi03cec3701fd46d2154devaos.cloudax.dynamics.com
kwality-devtestdevaos.sandbox.ax.dynamics.com
tax-shd-evrst-1.sandbox.operations.dynamics.com
trial-t2329q.sandbox.operations.dynamics.com
trial-tr-westus2.operations.test.dynamics.com
ptut-0525164721.operations.int.dynamics.com
devvm-11f5b157f218fb793adevaos.cloudax.dynamics.com
pse-d365-uat.sandbox.operations.dynamics.com
amtrakdev855b73b0aff9b08b2devaos.axcloud.dynamics.com
cfp-tst-msev-mcs-1.sandbox.operations.dynamics.com
ded-dev03c9751e26c10cf712devaos.cloudax.dynamics.com
assiprod.operations.dynamics.com
Soma-Prod.operations.dynamics.com
vodafoneziggo-prod.operations.dynamics.com
aurorabapenv4d36c.operations.int.dynamics.com
lcsc-devdevaos.sandbox.ax.dynamics.com
trial-w24jtd.sandbox.operations.dynamics.com
ad-bod365d1devaos.sandbox.ax.dynamics.com
eu.lcs.int.dynamics.com
asia-dev12e57055876b5ee73fdevaos.cloudax.dynamics.com
axios-dev-691a81ffc568e2435devaos.cloudax.dynamics.com
ul-vstsbuildmachineaos.sandbox.ax.dynamics.com
ecs-hollyf6df1799d3ff5fc9devaos.cloudax.dynamics.com
lmi-uat.sandbox.operations.dynamics.com
rweastudent.sandbox.ax.dynamics.com
trial-dpvzxx.sandbox.operations.dynamics.com
AZ-Erytech365-DEV01aos.sandbox.ax.dynamics.com
trial-loaaou.sandbox.operations.dynamics.com
tokaidev2b9e3891729a2e945devaos.cloudax.dynamics.com
testrunner-westeurope.sandbox.operations.dynamics.com
trial-tr-westeurope.sandbox.operations.dynamics.com
rg-crp-d365-cdev19-nae6651b94c8a18e3devaos.cloudax.dynamics.com
merrick-dev01c698bc45c331b0c4devaos.cloudax.dynamics.com
szf-uat.sandbox.operations.uae.dynamics.com
trial-wpny3v.sandbox.operations.dynamics.com
dynamics365coeaef0a21c215113c3aos.cloud.retail.dynamics.com
daoconf0139fee344e221133adevaos.cloudax.eu.dynamics.com
trial-sjdxd8.sandbox.operations.dynamics.com
verti-dev2.operations.dynamics.com
dwdev01aa9bb513eed658c87devaos.cloudax.dynamics.com
hxtt0it4xv0uqu93yu6a77bda91ecc8cfb.cloudax.int.dynamics.com
fec-dm.sandbox.operations.dynamics.com
caldic-bld-0149eeb8f87b87ef52aos.cloudax.dynamics.com
comercia-pro.operations.dynamics.com
portal-infra.dynamics.com
testrunner-eastus.operations.test.dynamics.com
fcs-techtest.sandbox.operations.dynamics.com
hxhwthbn8gx0kdbbwa3aa9d1e3842b1da0r.cloudax.test.dynamics.com
gpc-use2-n-lcsdev204081dfa26a75e78ddevaos.axcloud.dynamics.com
lci-marino.sandbox.operations.dynamics.com
waghtiesand0910.sandbox.operations.test.dynamics.com
enw-d365-dev03ea933076aedc1920devaos.cloudax.dynamics.com
mhpruebas.sandbox.operations.dynamics.com
prd-365-4kufaos.sandbox.ax.dynamics.com
trial-kjubqu.sandbox.operations.dynamics.com
trial-tr-westus.sandbox.operations.int.dynamics.com
whitewaterwest.operations.dynamics.com
tervita-test-proj.sandbox.operations.dynamics.com
bhg-uat.sandbox.operations.dynamics.com
trial-nnyfm7.trial.operations.dynamics.com
trial-fk3fv6.sandbox.operations.dynamics.com
trial-tr-eastus.operations.test.dynamics.com
d365isv-rsat-01af3d37020337d0acaos.cloudax.dynamics.com
vietthuongmusic-uatret.sandbox.operations.dynamics.com
equippers-glddevaos.sandbox.ax.dynamics.com
armetallizing-accupg.sandbox.operations.dynamics.com
dixiechemical-prod.operations.dynamics.com
dev-ji0128cdab4233fcd04ddevaos.axcloud.dynamics.com
dndax-test01aos.sandbox.ax.dynamics.com
ptud-0511144804.operations.dynamics.com
cbs-d365fo-bld01aos.sandbox.ax.dynamics.com
trial-tr-westeurope.sandbox.operations.dynamics.com
shsatrelha4151ada6dcfaa010.cloudax.test.dynamics.com
waterdale.operations.dynamics.com
ragn-price.sandbox.operations.eu.dynamics.com
ma-stage.sandbox.operations.dynamics.com
nightly-0827.operations.test.dynamics.com

Certificate

The complete raw certificate details for shsatrelha4151ada6dcfaa010.cloudax.test.dynamics.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxY/8I2MiWB74zs/6MBy
SBJy2Xp6zNqndpeDCd6sS6XFUFtDjEsjsfhQi+9mBj9AcXPdqKVjyn77y7JZNtKA
UavtSVIIlbWfEzexwfVU9zVubqmJlHd0KWnrVd5CxwS0MhoODujqFURJNiPy0pSG
awRVlL+V1frQKlioysrVcEbFUS4+mPPPz0qu9U9hmTqw5F3r0XP2i9d8Xaltvyxl
v1T/QpfgittwBajHINvlypsw4B8VsUROS6khW1eUXXs7IUvf0Uu/CVRQOuprHxlV
EhD8a/yvcEg4E7bibz4iCwPEfXcME5G9t7+zOJn2Rse73t+fLQtvIgMIujY/7Rzd
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137338981625268163874496783951808867697090211
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 06'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-22 05:47:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-17 05:47:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shsatrelha4151ada6dcfaa010.cloudax.test.dynamics.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24122488016215109739311116849142824105293494983729257009694760834535350106184727299280524232716484117870075133609980005491686015815801813664975503216543316608021425898895711284496227139435486970943860018979611684668970581356764889432769550995377760068635649027687068333300523622640797890366509753800279662269997802973424645505127731765218237983019385088422466040075173859868736917492049684538456275979885020857495149280391861047429732862550679919245525479881456740281276465288529030175516148836197674558341149166513296688068766916526917640325993989815265085634432856678547421509639934355132380242574122457544024448473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.2977488.11009781
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2006%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ba03526b42a5e46868c3508cf842f43cfd113b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (232 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shsatrelha4151ada6dcfaa010ret.cloudax.test.dynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shsatrelha4151ada6dcfaa010pos.cloudax.test.dynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shsatrelha4151ada6dcfaa010aossoap.cloudax.test.dynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shsatrelha4151ada6dcfaa010.cloudax.test.dynamics.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2006.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5c1673ac2a39df477525b59123829e65568bba5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00a3b3bb1d735e36a23d0ca6c11f650ae12a19b814fa32b32cb6199764d5a072b4c0035b97169cc0cd10002b11005181a17a180645269e0c551e33705bad3bd1d10be0fde3846a0312ab193b69aa955ce4d650bc225b649971a1098a108d2f9c215e3d55f422a1f50c5070bad37bc651315d9e02e05a551f727c79f9726afaa3cb5df65a0fa6ecb3872ab828ae0e170a5ce7d7a111372c2b343b42f7ebd4bc5e7bae5134622820103cfb43a2d8b3b84e68f2bc0d6e6d99b605de5f5e789dbc5de1e2b10cbe9d7f3e8b0b7f5286c2773467d214d35908771adf222f19469c7dab1a9a008289e72eff6508b5848cef94c7691f60120e6d5f09df33ba8500142007d82de27ad2dda2734b582eb7da779c0cc790869d123152c668bfa4dede63299024f26995525bb2190e7ce9f79e97729e5c1ba491980b913b5b35594355009358fc3fc16cc59218feb9149a34324ee4612488bc1fcea4d206f6990421da8d0feb04d45875f63d78ca75289157097653d8f4239a45ed9c072ba4f11291ef7466b762f7bdcc8d08d89e855849814fb1a441fea3f763f2bff9716738a5a43200098e3f218439d7b6004ef4012e8d6594210660b670b12ce9d3c782ce7800b29b8491c493fb97be39dd1f39303fdd3670cbd14c925a548163da1490b6fa61986a0f2801e75853197d2e9f71040ff0f0688915f82c8f3d6e2598f8c590ee5a1ad40662e8