*.queue.core.windows.net

Issued by Microsoft IT TLS CA 5

About this certificate

This digital certificate with serial number 2d:00:06:1e:10:35:23:ec:fe:0e:6f:44:3f:00:00:00:06:1e:10 was issued on by Microsoft Corporation.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=*.queue.core.windows.net

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:00:06:1e:10:35:23:ec:fe:0e:6f:44:3f:00:00:00:06:1e:10
Serial Number (int): 1003535615589074004324200711128359290741857808
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 59:9c:d7:7d:7c:50:ea:02:20:fe:3f:a7:da:c7:b7:fd:18:4f:b8:da
AuthorityKeyId: 08:fe:25:9f:74:ea:87:04:c2:bc:bb:8e:a8:38:5f:33:c6:d1:6c:65

Fingerprint (sha1): 1d:7c:cc:48:be:c7:1d:c2:69:7c:ce:72:d3:68:cf:53:35:65:e9:a6
Fingerprint (sha256): 00:33:4a:e2:6a:9c:3f:17:20:7a:84:6c:3a:58:d3:c6:ee:28:e7:f4:b5:02:4c:e7:5d:8a:89:ce:23:1e:53:0e

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%205.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl

Check the revocation status for certificate *.queue.core.windows.net

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.queue.core.windows.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.queue.core.windows.net
*.queue.storage.azure.net
*.z1.queue.storage.azure.net
*.z2.queue.storage.azure.net
*.z3.queue.storage.azure.net
*.z4.queue.storage.azure.net
*.z5.queue.storage.azure.net
*.z6.queue.storage.azure.net
*.z7.queue.storage.azure.net
*.z8.queue.storage.azure.net
*.z9.queue.storage.azure.net
*.z10.queue.storage.azure.net
*.z11.queue.storage.azure.net
*.z12.queue.storage.azure.net
*.z13.queue.storage.azure.net
*.z14.queue.storage.azure.net
*.z15.queue.storage.azure.net
*.z16.queue.storage.azure.net
*.z17.queue.storage.azure.net
*.z18.queue.storage.azure.net
*.z19.queue.storage.azure.net
*.z20.queue.storage.azure.net
*.z21.queue.storage.azure.net
*.z22.queue.storage.azure.net
*.z23.queue.storage.azure.net
*.z24.queue.storage.azure.net
*.z25.queue.storage.azure.net
*.z26.queue.storage.azure.net
*.z27.queue.storage.azure.net
*.z28.queue.storage.azure.net
*.z29.queue.storage.azure.net
*.z30.queue.storage.azure.net
*.z31.queue.storage.azure.net
*.z32.queue.storage.azure.net
*.z33.queue.storage.azure.net
*.z34.queue.storage.azure.net
*.z35.queue.storage.azure.net
*.z36.queue.storage.azure.net
*.z37.queue.storage.azure.net
*.z38.queue.storage.azure.net
*.z39.queue.storage.azure.net
*.z40.queue.storage.azure.net
*.z41.queue.storage.azure.net
*.z42.queue.storage.azure.net
*.z43.queue.storage.azure.net
*.z44.queue.storage.azure.net
*.z45.queue.storage.azure.net
*.z46.queue.storage.azure.net
*.z47.queue.storage.azure.net
*.z48.queue.storage.azure.net
*.z49.queue.storage.azure.net
*.z50.queue.storage.azure.net

Other certificates including the domain name windows.net

(limited to 100 certificates)
tr522.westeurope1-a.worker.database.windows.net
ma.p.azurewebsites.windows.net
testonly.secretstore.windows.net
waws-prod-mwh-1e0d2a21-api.p.azurewebsites.windows.net
enc.p.azurewebsites.windows.net
ams-ts05-1-hos-rest-1-1.cloudapp.net
enc.p.azurewebsites.windows.net
tr1225.southcentralus1-a.worker.database.windows.net
testonly.secretstore.windows.net
waws-prod-bay-55440bad.publish.p.azurewebsites.windows.net
readonly-tr4659.eastus1-a.worker.database.windows.net
waws-prod-bay-e21e34c0-api.p.azurewebsites.windows.net
enc.p.azurewebsites.windows.net
tr1037.eastus1-a.worker.database.windows.net
*.store.core.windows.net
ams-ts46-1-hos-rest-1-1.cloudapp.net
metricsclient.geneva.core.windows.net
tr1075.westus2-a.worker.database.windows.net
*.blob.core.windows.net
*.sds-diagnostics.store.core.windows.net
waws-prod-am2-da5883af-api.p.azurewebsites.windows.net
metricsclient.geneva.core.windows.net
waws-prod-am2-c0d608da-api.p.azurewebsites.windows.net
tr455.australiasoutheast1-a.worker.database.windows.net
waws-prod-blu-df231187.publish.p.azurewebsites.windows.net
waws-prod-bay-6f6e9dfa.state.p.azurewebsites.windows.net
waws-prod-hk1-8db07b87-api.p.azurewebsites.windows.net
tr1686.northeurope1-a.worker.database.windows.net
BN2B.agent.core.windows.net
metricsclient.geneva.core.windows.net
DM3.agent.core.windows.net
tr354.australiaeast1-a.control.database.windows.net
waws-prod-sy3-fb5d9039-api.p.azurewebsites.windows.net
testonly.secretstore.windows.net
waws-prod-ch1-3955dc27.publish.p.azurewebsites.windows.net
waws-prod-yt1-982c2880.publish.p.azurewebsites.windows.net
waws-prod-mwh-37f9bd5f.publish.p.azurewebsites.windows.net
waws-prod-am2-013.publish.azurewebsites.windows.net
tr469.australiaeast1-a.worker.database.windows.net
tr1348.westus1-a.worker.database.windows.net
waws-prod-bn1-009.state.azurewebsites.windows.net
tr409.westeurope1-a.worker.database.windows.net
metricsclient.geneva.core.windows.net
waws-prod-mwh-cbf02dd4.publish.p.azurewebsites.windows.net
enc.p.azurewebsites.windows.net
3f7611921e87.database.windows.net
metricsclient.geneva.core.windows.net
testonly.secretstore.windows.net
cpim.windows.net
ams-ts61-1-hos-rest-1-1.cloudapp.net
40b5d28d821e.database.windows.net
metricsclient.geneva.core.windows.net
waws-prod-sy3-87a8eac9.state.p.azurewebsites.windows.net
waws-prod-pn1-e4d07c21.api.p.azurewebsites.windows.net
waws-prod-bn1-e45ca43e-api.p.azurewebsites.windows.net
*.blob.core.windows.net
testonly.secretstore.windows.net
gwpdctosf-d9afa021808b.worker.database.windows.net
testonly.secretstore.windows.net
tr976.centralus1-a.worker.database.windows.net
metricsclient.geneva.core.windows.net
waws-prod-am2-04f0829f.publish.p.azurewebsites.windows.net
waws-prod-db3-a4287263.api.p.azurewebsites.windows.net
waws-prod-am2-6c285c27.publish.p.azurewebsites.windows.net
metricsclient.geneva.core.windows.net
*.stream-diagnostics.store.core.windows.net
testonly.secretstore.windows.net
SN3P.agent.core.windows.net
enc.p.azurewebsites.windows.net
tr832.australiaeast1-a.control.database.windows.net
enc.p.azurewebsites.windows.net
waws-prod-bay-a1bbcb3e-api.p.azurewebsites.windows.net
testonly.secretstore.windows.net
waws-prod-cw1-d3d1bfdf.publish.p.azurewebsites.windows.net
testonly.secretstore.windows.net
testonly.secretstore.windows.net
*.stream-diagnostics.store.core.windows.net
tr1419.centralus1-a.worker.database.windows.net
waws-prod-blu-96e6d8f2-api.p.azurewebsites.windows.net
waws-prod-blu-edf2d934-api.p.azurewebsites.windows.net
waws-prod-bn1-53f95518-api.p.azurewebsites.windows.net
uswest12.rnm.core.windows.net
tr16.southcentralus1-a.worker.database.windows.net
waws-prod-sn1-ea02b418-api.p.azurewebsites.windows.net
metricsclient.geneva.core.windows.net
metricsclient.geneva.core.windows.net
waws-prod-sy3-24d1ce36.state.p.azurewebsites.windows.net
testonly.secretstore.windows.net
testonly.secretstore.windows.net
HK2.agent.core.windows.net
gwpdctosf-e77d764d22ff.worker.database.windows.net
waws-prod-am2-13bb9e6c.state.p.azurewebsites.windows.net
waws-prod-db3-92f298be.publish.p.azurewebsites.windows.net
testonly.secretstore.windows.net
waws-prod-bay-f5246b21.publish.p.azurewebsites.windows.net
tr165.ukwest1-a.worker.database.windows.net
testonly.secretstore.windows.net
tr277.australiasoutheast1-a.control.database.windows.net
metricsclient.geneva.core.windows.net
metricsclient.geneva.core.windows.net

Certificate

The complete raw certificate details for *.queue.core.windows.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwweUjlvT9YGfIxl13R8s
yUtjZmmF9RmzwhiqZ7aFsJZ+SufwqJjYqfWBzWng+hSIJlxRQHkZIf+cpPnWW8jh
DqP1C9eqwS3IlRp+Q5DJW2Hk13ZzKcNub1lU61s0Vnu4vU7VEQIvHfSLqelZoiv1
Gg4T/zZxpgvXl6Bs08IKfHZuwBhTYp0nWabma516pOhcZ6XkQ8iN7p5J/z+F0GZ5
dkaIVdSrf44vbRR3pfj8vrrj9c2iRb4rptjA/zu6U3WIqJrjPXLYQI7mPAeayHXP
+aMhS2u+JcbWKIgndpVWV/mehYQW6RL6+PKZqBkYkEcDkCYVMB6GbkGp+dhUxMS2
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1003535615589074004324200711128359290741857808
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-04 16:43:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-04 16:43:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.queue.core.windows.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24620207452257880551905654737648108597801354892705528560573782350967703937744879150608389503312031631964423627350557683682726904331847384903422173785231015477983039025399301347373538625658896588989784903092899211783846821612280322636016753280192974454977317579281712952544645688017841201992829515716901723904726206689591986236674628476112744600886670799788052526729506002079498528576048223501395371634862556936492220589277635232604919249469376875539536573845959781185460838664276599918183540099218121031237927190147193794642512403141001664017848269604022342292998105124256222061804212363767614208367719838610129991353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e0007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016a83c42c1b000004030046304402205f5dbb589ff4938eaffecd0eec115fdb0c1065a37070ba72a242fcff2a1436790220008863a25e1f2ce9f403ad6a8da5dce4f2108f2234819ef41532904a6f71f1d70076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000016a83c42b2e0000040300473045022026a775f739cee09ec2d0a74a2e51e311709281fd1f3e20f48c0c28b88f6ddc6b022100a66897653563a6eeb503bdad716f2ffa9fd1f1988c586d3410cd6b73fe55d2c3007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016a83c42c230000040300483046022100a5b8485f22e3ae70da7c0fdc0349611200b653dd06662aa63dd0a3465e0826e602210098771aa452126ca98cbf9a09edd477cb507afcde3e5ba7ef38b45044fe86b861007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000016a83c42c440000040300473045022100f09fd5b19a1cdfebc23d1220b996debcaf808afbc0ee6489ef35e8dfb6c8414102207c8d1535dd26dd6b80ddd74a84ad2ef587ec364875f2f309b37c38efa0ab0aae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%205.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							599cd77d7c50ea0220fe3fa7dac7b7fd184fb8da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1598 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.queue.core.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z1.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z2.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z3.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z4.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z5.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z6.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z7.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z8.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z9.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z10.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z11.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z12.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z13.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z14.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z15.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z16.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z17.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z18.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z19.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z20.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z21.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z22.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z23.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z24.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z25.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z26.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z27.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z28.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z29.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z30.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z31.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z32.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z33.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z34.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z35.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z36.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z37.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z38.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z39.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z40.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z41.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z42.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z43.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z44.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z45.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z46.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z47.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z48.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z49.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z50.queue.storage.azure.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 08fe259f74ea8704c2bcbb8ea8385f33c6d16c65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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