*.appservices.staging.businesscentral.dynamics-tie.com

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 01

About this certificate

This digital certificate with serial number 33:00:03:5b:19:af:17:e6:f7:73:09:e0:44:00:00:00:03:5b:19 was issued on by Microsoft Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:00:03:5b:19:af:17:e6:f7:73:09:e0:44:00:00:00:03:5b:19
Serial Number (int): 1137339147065268896333504208072996294687415065
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 59:7a:d9:be:8f:f5:1f:24:53:a8:5b:cd:fe:a0:b8:43:3d:60:78:17
AuthorityKeyId: 0f:20:5d:d7:a1:57:95:db:92:cf:2b:d0:c7:c2:77:04:ce:72:80:76

Fingerprint (sha1): 10:b8:c1:4d:c2:44:37:02:40:28:cd:de:3b:14:fe:0b:3a:9d:2e:6c
Fingerprint (sha256): 00:38:61:c1:1e:73:e2:0d:dd:59:4c:1b:cb:be:62:03:4f:ec:53:89:58:ed:ec:ca:8a:26:b1:83:f4:a7:1e:70

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.crl

Check the revocation status for certificate *.appservices.staging.businesscentral.dynamics-tie.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.appservices.staging.businesscentral.dynamics-tie.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.appservices.staging.businesscentral.dynamics-tie.com

Other certificates including the domain name dynamics-tie.com

(limited to 100 certificates)
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
cluster.services.dev.smb.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
syncdaemoninternal-aadapp.staging.smb.dynamics-tie.com
cluster.services.staging.smb.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
api.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
extensionmanagementproxy-aadapp.test.smb.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.services.smb.dynamics-tie.com

Certificate

The complete raw certificate details for *.appservices.staging.businesscentral.dynamics-tie.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtydc4FVGyegM9NVIf03U
zCcQvCt2233h3ZRGRXGJ9VYiNHWf2b8GhhnUVWthoOkuGHNzpSqb/D4Ax4qlQ7Wm
M8DwxEtvTxUIMBkyQNmF+TH7z1DV/ZlSHMxShlIJf8VFuoINVLSebMGt7h374g4q
MvVr480rLoBdvM6+aIPJghBVdXaQwwcansErMl0/AFwRyStj55YlfUkLKw7h4pOh
hJttawgoFJxIWQZxJd9nSwrN/wCVsA9F3c5DZnD7FqybQIi30BnLpfjjJQtNiiYA
qvIDqV/FZl+iOk9Jj+jYgmQR1PIY/BjjERMDEp5rpZmYjDwg35G9vt75UaAliKA6
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137339147065268896333504208072996294687415065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-24 20:39:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-23 20:39:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.appservices.staging.businesscentral.dynamics-tie.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23121020327947941214322243219801313312387937050148399207762452249630661000852535358435666614480449693564222615777872995495552467681977215128979477187045155005496230595612820878762377994416349969305340366016717647493376076622374672371314849138059650648380111463737836387623867485497614022089431619601653539227600724416718964046827869895999164446988829905753934783538592897279833371517127585862652316966522495753398882074889625979021026418430459116188536185985707014408649387326457996322491053224682215424284234631265161910230094344039595125475157901113122251691504990582928652176937914117703827314268967127282947734033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4912048.16480415
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							597ad9be8ff51f2453a85bcdfea0b8433d607817
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appservices.staging.businesscentral.dynamics-tie.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f205dd7a15795db92cf2bd0c7c27704ce728076
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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