wdatpprd-canc.securitycenter.windows.com

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 01

About this certificate

This digital certificate with serial number 33:00:d2:fa:c4:3e:90:6e:9e:c2:ae:54:b1:00:00:00:d2:fa:c4 was issued on by Microsoft Corporation.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:d2:fa:c4:3e:90:6e:9e:c2:ae:54:b1:00:00:00:d2:fa:c4
Serial Number (int): 1137409797748073260283552554128141134691760836
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: b9:10:a7:6d:b8:e5:3e:11:7b:fa:13:33:ea:2a:19:37:ec:09:67:8f
AuthorityKeyId: 0f:20:5d:d7:a1:57:95:db:92:cf:2b:d0:c7:c2:77:04:ce:72:80:76

Fingerprint (sha1): 69:9c:0d:b5:ee:f4:e1:a7:9e:53:3c:68:bf:cf:e2:d7:d4:36:88:23
Fingerprint (sha256): 00:38:fc:62:cd:8d:1c:5e:e9:da:f8:95:37:48:2a:93:23:29:bf:4d:d5:05:c1:d5:12:e3:11:a8:b5:f5:9b:9e

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.crl

Check the revocation status for certificate wdatpprd-canc.securitycenter.windows.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wdatpprd-canc.securitycenter.windows.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wdatpprd-canc.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
wdatpprd-can.securitycenter.windows.com
mde-cfgmgmt-apisiam-can-canc.securitycenter.windows.com
mde-cfgmgmt-apisiam-can-cane.securitycenter.windows.com

Other certificates including the domain name windows.com

(limited to 100 certificates)
wdatpprd-jpe.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
ingress.wdatpstg.windows.com
wdatpprd-cin.securitycenter.windows.com
wdatpprd-weu3.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-cus.securitycenter.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-weu.securitycenter.windows.com
wdatpprd-sin.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-neu.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-neu.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-cin.securitycenter.windows.com
CyberDataPrefetcher-PRD.trafficmanager.net
andrew.rancher.poc.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-aus.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
ti.securitycenter.windows.com
www.windowsphone.com
wdatpprd-sin.securitycenter.windows.com
*.wns.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-cus3.securitycenter.windows.com
CyberDataCtrl-PRD.trafficmanager.net
wdatpprd-cus3.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
CyberDataPrefetcher-PRD.trafficmanager.net
wdatpprd-cane.securitycenter.windows.com
wdatpprd-weu.securitycenter.windows.com
wdatpprd-uks.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
www.windowsphone.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-neu3.securitycenter.windows.com
heartbeat.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-jpe.securitycenter.windows.com
ineportalapi-stg.trafficmanager.net
wdatpprd-cus3.securitycenter.windows.com
OnboardingService-PRD.trafficmanager.net
cache.datamart.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-cin.securitycenter.windows.com
WdatpApi-PRD.trafficmanager.net
akamai-san15.exacttarget.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-cus3.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
csharp.net
wdatpstg-eus2.securitycenter.windows.com
insidersurveys.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-sin.securitycenter.windows.com
wdatpprd-ukw.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-neu3.securitycenter.windows.com
wdatpprd-swn0a.securitycenter.windows.com
wdatpprd-cus.securitycenter.windows.com
assets.activity.windows.com
wdatpprd-cus.securitycenter.windows.com
wdatpprd-cus.securitycenter.windows.com
wdatpprd-weu.securitycenter.windows.com
wdatpmdev-eus1.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-weu.securitycenter.windows.com
wdatpprd-neu.securitycenter.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
wdatpprd-neu3.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-cin.securitycenter.windows.com
wdatpprd-ukw.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-swn0a.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-aue.securitycenter.windows.com
wdatpprd-jpe.securitycenter.windows.com
wdatpprd-cus3.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-sin.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-swn0a.securitycenter.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com

Certificate

The complete raw certificate details for wdatpprd-canc.securitycenter.windows.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/+4rp4TUgr29eH+qUi7
7C7V2kAq2gl1Wyezfl5YB5+laG/vPSfbYo8qEQP+QagMdxlZlmgr4tw9DtOE+TI4
X084B7EKkLHSWA0chpuVZSPzY3kM0uE8x1oOZ7uc8DdfrAllYx1Nub2Tw3LNLWpF
gslrbWLLA4r5+hY6HzWBrldg368Q56ebjoMnXC1xqPMvs9aw5ceaab5uAkno6G6o
Sc1vNAg8jQb2D97cjT34lwhmvqvkfXWx8sz+Nb5YE3378AqckGuHU2/XmIyn3s14
z4US90wxrua0hP8YgzOdSObAo8I67cFeWgoXsLQYhD2zpzZMRi5pPYiKtbnUmrbk
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137409797748073260283552554128141134691760836
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 18:16:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wdatpprd-canc.securitycenter.windows.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27267336497014552067701419189923672920335763741079221449292595297788086953602810343397148827923348494610196979047293775887589897686900253694017153818206902929337711031041938031790952648640167146256093470881814754021697606001515235432218568199624054031128739688777349691029276813884900280429950725322880441795563647983155810811164323701610695327937969978123607452865285313955880292697107402839347243963635404170097683070592899228210906870969871196162855406498671196279443348596467744709570483008227561689066044894110939207640054038381108050072371266857621161362160884705882306998276472089672656839004387465267208709313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b910a76db8e53e117bfa1333ea2a1937ec09678f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdatpprd-canc.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdatpprd-cane.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdatpprd-can.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mde-cfgmgmt-apisiam-can-canc.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mde-cfgmgmt-apisiam-can-cane.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f205dd7a15795db92cf2bd0c7c27704ce728076
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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