substrate-msb-bingatwork.westus-test.cosmic-int.office.net

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 07

About this certificate

This digital certificate with serial number 33:00:3d:fe:20:35:a1:c2:c6:28:15:f7:b9:00:00:00:3d:fe:20 was issued on by Microsoft Corporation.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:3d:fe:20:35:a1:c2:c6:28:15:f7:b9:00:00:00:3d:fe:20
Serial Number (int): 1137359100140596170029145952042789574274842144
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 32:52:2d:a6:36:2d:ae:3c:48:7d:8c:1a:e5:9a:5c:79:85:08:ec:53
AuthorityKeyId: ce:15:16:3b:ea:02:a3:a6:6b:da:d9:2b:fd:e5:8c:52:be:7a:50:a8

Fingerprint (sha1): bc:c4:bd:d5:d1:bf:9a:6a:35:3e:9e:73:95:02:a4:77:0f:50:00:d5
Fingerprint (sha256): 00:7a:99:7e:c5:8b:4b:a3:dd:5a:4b:60:17:54:41:fa:09:90:93:2e:76:3c:a2:61:31:e6:73:02:11:b8:c1:66

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl

Check the revocation status for certificate substrate-msb-bingatwork.westus-test.cosmic-int.office.net

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for substrate-msb-bingatwork.westus-test.cosmic-int.office.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

substrate-msb-bingatwork-service.test-westus01.substrate-msb-bingatwork.westus-test.cosmic-int.office.net
substrate-msb-bingatworkjobprocessor-service.test-westus01.substrate-msb-bingatwork.westus-test.cosmic-int.office.net
substrate-msb-bingatworkqueryexpansion-service.test-westus01.substrate-msb-bingatwork.westus-test.cosmic-int.office.net
substrate-msb-bingatworkappserver-service.test-westus01.substrate-msb-bingatwork.westus-test.cosmic-int.office.net
substrate-msb-bingatworkdynamicsearchbox-service.test-westus01.substrate-msb-bingatwork.westus-test.cosmic-int.office.net
substrate-msb-bingatwork.westus-test.cosmic-int.office.net

Other certificates including the domain name office.net

(limited to 100 certificates)
test-s01-011-nam-westus2.substrate.cosmic-int.office.net
odc.officeapps.live.com
pavo.keyvault.office.net
prv.config.office.net
otcms.osi.office.net
displaycatalog.templatesproxy.office.net
substrate-msb-bingatwork.westus-test.cosmic-int.office.net
prv.config.office.net
statics.teams.cdn.office.net
xsi.office.net
securitysignalsapi-slice.office.net
statics.teams.cdn.office.net
mp.load.sms.skype.com
outlook.com
odc.officeapps.live.com
o365auditrealtimeingestion.manage.office.com
test-s01-003-nam-westcentralus.substrate.cosmic-int.office.net
diagnosticsportal.outlook.com
test.office.net
domaincontrollerclient.prod.torus.office.net
partition00-test.controller-info.cosmic-int.office.net
api.businesscentral.dynamics.com
support.office.net
testsslcert.office.net
griffinazureicmcert.office.net
videoplayer.osi.office.net
kasmgmtportal.osi.office.net
testrpscert.office.net
bookings.outlookapps.com
www.bing.com
c2r.ts.cdn.office.net
manage.officeppe.com
store.office.com
prv.config.office.net
mars-adls-mt-aus.office.net
prv.config.office.net
test.office.net
outlook.com
*.content.office.net
setup.office.com
agave.myanalytics.cdn.office.net
cws-escalation.office.net
nl.osi.office.net
uci.edog.officeapps.live.com
outlook.com
test-s01-002-nam-westus2.substrate.cosmic-int.office.net
shredder.osi.office.net
test.office.net
tasman.osi.office.net
sfcluster.apc.complianceposturemanagement.office.net
support.officeppe.com
prv.config.office.net
testdataencryptioncert.office.net
outlook.live.com
support.office.com
macommunication.geneva.keyvault.fullvalue.omex.office.net
test-s01-800-nam-westus.substrate.cosmic-int.office.net
*.dev.dev1.nonprod.ml.cdn.office.net
galo.checkin.partner.office.net
sway-to-sds-replication.office.net
prv.config.office.net
config.office.com
outlook.com
wevedata.office.net
test-s01-007-eur-northeurope.substrate.cosmic-int.office.net
endpoints.office.com
ocws.officeapps.live.com
testicmcertyiqwan.office.net
mars-encryptionmaster-mt-gov.office.net
o365auditrealtimeingestion.manage.office.com
outlook.com
partners.portal.office.net
cdn.forms.office.net
verification.omex.office.net
macommunication.geneva.keyvault.fullvalue.omex.office.net
hybridDMS.office.net
comments-ppe.office.net
test-s01-800-nam-westus.substrate.cosmic-int.office.net
bcws-client.office.net
esign.svc.cloud.microsoft
outlook.com
outlook.com
prv.config.office.net
partners.portal.office.net
cluster.osp.office.net
signalStore-client.office.net
gcp.comments.office.net
outlook.com
www.bing.com
outlook.com
support.officeppe.com
invites.office.com
www.bing.com
test-s01-001-nam-southcentralus.substrate.cosmic-int.office.net
outlook.com
outlook.com
uci.edog.officeapps.live.com
test-s01-800-nam-westus.substrate.cosmic-int.office.net
eop.pavcservice.office.net
mars-tokenservice-datawriterclient-mt-aus.office.net

Certificate

The complete raw certificate details for substrate-msb-bingatwork.westus-test.cosmic-int.office.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+tYc90m55Pn+79fkWYd
Bzt8PJXS9JnrwEQ48L3oZvrptUDyqGZUFoHYnncKk44C8S+cJA4j7OC59QDWr4ED
FK7GMdfOug6U6jOz+GRv92IN77biUE9JN2BVcB4LTqyUfXsMjQ9voX/6gBKe6dsL
EC0DtGVUH7JdxuvhuF3JbPSfK3tLfRyPjOSTxyZ/tv2pYTRbyq/rUPPuQJ2ZHlxg
siFUdYv7YSmNQT42QQjuMTgKrhXciI/Gxp6i71qdyQp0Y7iAxlLVxhm6r+F5w9jc
pMgb5Bvz9GGVUt9MRml1zoSAAItDGMW4EJ0Vv75NJJf9LdjDZI5NdCBq4rWPwy++
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137359100140596170029145952042789574274842144
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 07'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-26 10:38:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-21 10:38:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'substrate-msb-bingatwork.westus-test.cosmic-int.office.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22712709789183911761189463651106119505340045470783049108518121612790254081731612331317978143424900110562598279191295771568471852449157098290891283209814441809392832262257246734509417713331318536950413964381228659046501402632116501491508140014256442770633304488315835166665133748057730022700129098155971394297200101738146200563603086001342800718084288721841541013277934581356023772665198744605117049396809105425779471326065949527763882906943696222756670762104007703109724282309722554280559446705534420523401776104017919943728805264003481398432268357379601064510180215134127921707456676228140394762201188119254089580257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32522da6362dae3c487d8c1ae59a5c798508ec53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (650 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'substrate-msb-bingatwork-service.test-westus01.substrate-msb-bingatwork.westus-test.cosmic-int.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'substrate-msb-bingatworkjobprocessor-service.test-westus01.substrate-msb-bingatwork.westus-test.cosmic-int.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'substrate-msb-bingatworkqueryexpansion-service.test-westus01.substrate-msb-bingatwork.westus-test.cosmic-int.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'substrate-msb-bingatworkappserver-service.test-westus01.substrate-msb-bingatwork.westus-test.cosmic-int.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'substrate-msb-bingatworkdynamicsearchbox-service.test-westus01.substrate-msb-bingatwork.westus-test.cosmic-int.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'substrate-msb-bingatwork.westus-test.cosmic-int.office.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ce15163bea02a3a66bdad92bfde58c52be7a50a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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