cisurvey.officeppe.com

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 02

About this certificate

This digital certificate with serial number 33:00:d5:00:68:64:0c:b7:33:c1:54:ec:ea:00:00:00:d5:00:68 was issued on by Microsoft Corporation.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:d5:00:68:64:0c:b7:33:c1:54:ec:ea:00:00:00:d5:00:68
Serial Number (int): 1137410485811244061795301739713713904517709928
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 05:0c:86:2c:b4:77:c8:d9:8e:45:2d:fc:b2:50:91:c6:43:2d:bf:b8
AuthorityKeyId: 00:ab:91:fc:21:62:26:97:9a:a8:79:1b:61:41:90:60:a9:62:67:fd

Fingerprint (sha1): 2d:68:2e:3a:84:3f:c8:91:95:0d:76:65:2f:e5:23:00:b3:ae:82:c8
Fingerprint (sha256): 00:84:d1:be:60:14:50:b7:29:b2:9a:88:2b:9f:15:4e:7c:31:a2:35:4f:22:aa:0d:fc:dd:79:ce:39:a7:a3:99

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl

Check the revocation status for certificate cisurvey.officeppe.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cisurvey.officeppe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cisurvey.officeppe.com

Other certificates including the domain name officeppe.com

(limited to 100 certificates)
portfolios.officeppe.com
sway.officeppe.com
trustportal.officeppe.com
project.officeppe.com
officeapps.live.com
vanquishppe.securitysignals-siphonclient.officeppe.com
cisurvey.officeppe.com
vanquishppe.securitysignals-siphonclient.officeppe.com
shell.suite.officeppe.com
cert00016-azurecdn.akamaized.net
status.officeppe.com
c.msn-int.com
vanquishppe.securitysignals.tracegenevaconsumer.officeppe.com
manage.officeppe.com
*.lifecycle.officeppe.com
uci.edog.officeapps.live.com
redemptionservice.setup.officeppe.com
secure06.stage.lithium.com
support.officeppe.com
vanquishppe.securitysignals.tracegenevaconsumer.officeppe.com
test.augloop.svc.cloud-dev.microsoft
manage.officeppe.com
idsapi-edog-s2s.store.officeppe.com
*.lifecycle.officeppe.com
portal.officeppe.com
cisurvey.officeppe.com
portal.azure
mock.m365admin.officeppe.com
cdn.forms.office.net
m365rca.officeppe.com
cert00016-azurecdn.akamaized.net
cert00016-azurecdn.akamaized.net
mysmallbusiness.officeppe.com
pubsub.augloop-test.officeppe.com
pubsub.augloop-test.officeppe.com
secure06.stage.lithium.com
pubsub.augloop-int.officeppe.com
int.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
support.officeppe.com
augloop-test.officeppe.com
c.msn-int.com
uci.edog.officeapps.live.com
portfolios.officeppe.com
test.augloop.svc.cloud-dev.microsoft
augloop-test.officeppe.com
webjobs.servicetrust.officeppe.com
kevlar-ssl.augloop-dogfood.officeppe.com
augloop-test.officeppe.com
cisurvey.officeppe.com
sway.officeppe.com
protection.officeppe.com
odc.edog.officeapps.live.com
api.augloop-tools.officeppe.com
manage.officeppe.com
store.officeppe.com
vanquishppe.securitysignals.tracegenevaconsumer.officeppe.com
status.office365.com
manage.officeppe.com
connectivity.officeppe.com
webjobs.servicetrust.officeppe.com
portfolios.officeppe.com
store.officeppe.com
offlineconsumer.suite.officeppe.com
portal.azure
status.office365.com
cisurvey.officeppe.com
sway.officeppe.com
portal.officeppe.com
bcqr.officeppe.com
augloop-test.officeppe.com
setup.officeppe.com
cisurvey.officeppe.com
portal.azure
cert00016-azurecdn.akamaized.net
appamangement-ppe.officeppe.com
test.augloop.svc.cloud.dev.microsoft
localization.checkout.office.net
cisurvey.officeppe.com
augloop-test.officeppe.com
cert00016-azurecdn.akamaized.net
dragongate.officeppe.com
messaging.officeppe.com
uci.edog.officeapps.live.com
api.servicetrust.officeppe.com
cisurvey.officeppe.com
msn.co
augloop-int.officeppe.com
setup.officeppe.com
sway.officeppe.com
augloop-test.officeppe.com
pubsub.augloop-dogfood.officeppe.com
ifttt.edog.office.com
dogfood.augloop.svc.cloud.microsoft
uci.edog.officeapps.live.com
augloop-int.officeppe.com
stores.officeppe.com
cisurvey.officeppe.com
portfolios.officeppe.com
endpoints.officeppe.com

Certificate

The complete raw certificate details for cisurvey.officeppe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG9DCCBNygAwIBAgITMwDVAGhkDLczwVTs6gAAANUAaDANBgkqhkiG9w0BAQwF
ADBZMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
MSowKAYDVQQDEyFNaWNyb3NvZnQgQXp1cmUgVExTIElzc3VpbmcgQ0EgMDIwHhcN
MjMxMDIzMDUyNjA1WhcNMjQwNjI3MjM1OTU5WjBtMQswCQYDVQQGEwJVUzELMAkG
A1UECBMCV0ExEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD
b3Jwb3JhdGlvbjEfMB0GA1UEAxMWY2lzdXJ2ZXkub2ZmaWNlcHBlLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPCxXzivxppLP935gQk/3Kp/wSSE
PA5qmKU0cIXQfktpiVyS8o9AcAj0ikKIxssklheurPKuE6yUc2dbBzbgC09RX+iG
uRMaZHOrnrNpugO2Qla1Gj7XhL/MIGyNS5yHQ3lrtUMvtoV4TO40IImHmx193z6F
YlGE5tSvUojE+aBjE5BWEf9nK/A6ePNPj6eJtQmVUuUE5tZRw8joF6Qz+XicbrK4
I/JjbzoLXgZmmAS/oUGmOkuejMiJ3Yir/ixERLtSbaNEUbx+t2AdPvAkp/CE9wZd
i8ELBPy9eWiwd0hEsYfBqg1rBwg5Xo60oCfnGCmL974OS9jl7aoneJoIx8UCAwEA
AaOCAp8wggKbMBMGCisGAQQB1nkCBAMBAf8EAgUAMCcGCSsGAQQBgjcVCgQaMBgw
CgYIKwYBBQUHAwIwCgYIKwYBBQUHAwEwPAYJKwYBBAGCNxUHBC8wLQYlKwYBBAGC
NxUIh73XG4Hn60aCgZ0ujtAMh/DaHV2ChOVpgvOnPgIBZAIBJjCBrgYIKwYBBQUH
AQEEgaEwgZ4wbQYIKwYBBQUHMAKGYWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9w
a2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQXp1cmUlMjBUTFMlMjBJc3N1aW5nJTIw
Q0ElMjAwMiUyMC0lMjB4c2lnbi5jcnQwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vbmVv
Y3NwLm1pY3Jvc29mdC5jb20vb2NzcDAdBgNVHQ4EFgQUBQyGLLR3yNmORS38slCR
xkMtv7gwDgYDVR0PAQH/BAQDAgWgMCEGA1UdEQQaMBiCFmNpc3VydmV5Lm9mZmlj
ZXBwZS5jb20wDAYDVR0TAQH/BAIwADBkBgNVHR8EXTBbMFmgV6BVhlNodHRwOi8v
d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBBenVyZSUy
MFRMUyUyMElzc3VpbmclMjBDQSUyMDAyLmNybDBmBgNVHSAEXzBdMFEGDCsGAQQB
gjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v
cGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wCAYGZ4EMAQICMB8GA1UdIwQYMBaA
FACrkfwhYiaXmqh5G2FBkGCpYmf9MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF
BQcDATANBgkqhkiG9w0BAQwFAAOCAgEAOp4j6Car3pSpX9uVqJqLonWxfcPCRRSo
kOjyXLT34uF4hxJhZgkeq26fJvhFrSEPhCa+C3e8wGmhkGSSC+QhJQsM1mDhYLYP
/DWE/rXYaHpf/23bR+51ZJx84r6Xn83ERPFEc+/VU4cmQFkNyKuwOuGsOXrFfQ0h
Ix9H0B0UsPNoXzviLGZS1E9q72X44U1MkhbT3HEXN7/0Z2rAchF5m13bP7dNtOjb
tMbUsUTVC52+l78aT9LLFTw/24LMfv15drGz2SViODNFffhNNWVkNxIJslv7szNX
+kmpZsTob4stGQCaxqyA1Fi37JPNMXQ6ks3bNAbq3JC66jI13IRHDqtqcokm5WVn
xWK64d4or5l0M9PVnc8ZBwRO1525g7S3OD+PGt3w3Eil7JpQDgSoUjPtF7txbzCq
JGQiP0vpmbdpVjqheyvGM0MntWotlpilOKiyl7M7Om0tAVIh7s/6GLHIr2cLK5Fk
cEjyrSgyyf2b63K8PI3EJA9uqAiBY/VjsGQSUBAVP1xmeIW0uH6BqkucWgDhFId8
9GtaM0gAbqcqy+JGmNWCAIX639MMn7IeNhwRpIs6NrR6JnVrvyWmYK9dTrisiJDu
axUnvAk1CY19GLVaGRd2YO8fJOaQUVXrRN1jxRnHhWt5GvuueLS/CtLzG6gL5QgZ
DnUbWExGb3U=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LFfOK/Gmks/3fmBCT/c
qn/BJIQ8DmqYpTRwhdB+S2mJXJLyj0BwCPSKQojGyySWF66s8q4TrJRzZ1sHNuAL
T1Ff6Ia5Expkc6ues2m6A7ZCVrUaPteEv8wgbI1LnIdDeWu1Qy+2hXhM7jQgiYeb
HX3fPoViUYTm1K9SiMT5oGMTkFYR/2cr8Dp480+Pp4m1CZVS5QTm1lHDyOgXpDP5
eJxusrgj8mNvOgteBmaYBL+hQaY6S56MyIndiKv+LEREu1Jto0RRvH63YB0+8CSn
8IT3Bl2LwQsE/L15aLB3SESxh8GqDWsHCDlejrSgJ+cYKYv3vg5L2OXtqid4mgjH
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137410485811244061795301739713713904517709928
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 05:26:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cisurvey.officeppe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30384658564577611230449469774849730620453449019314187215659639581208703496684280765194967737199796695501448154906906002397895405237757657297080641133983848352417796466964457369322812681414312221076598938346508314854253756417546838606569494244340614977227079411338894127542301634481987623225115971946200804324383291096804433720324756023635929817834680521896828892106335923156819236227160988102630944698466443335588449235680369737276106387522482563960908799064483071064717187361247305848132884541649406310958526732892192393449882697233256929617980385887508727928955799520766921191188314719068345160334235511609899927493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							050c862cb477c8d98e452dfcb25091c6432dbfb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisurvey.officeppe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 00ab91fc216226979aa8791b61419060a96267fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		003a9e23e826abde94a95fdb95a89a8ba275b17dc3c24514a890e8f25cb4f7e2e17887126166091eab6e9f26f845ad210f8426be0b77bcc069a19064920be421250b0cd660e160b60ffc3584feb5d8687a5fff6ddb47ee75649c7ce2be979fcdc444f14473efd553872640590dc8abb03ae1ac397ac57d0d21231f47d01d14b0f3685f3be22c6652d44f6aef65f8e14d4c9216d3dc711737bff4676ac07211799b5ddb3fb74db4e8dbb4c6d4b144d50b9dbe97bf1a4fd2cb153c3fdb82cc7efd7976b1b3d925623833457df84d356564371209b25bfbb33357fa49a966c4e86f8b2d19009ac6ac80d458b7ec93cd31743a92cddb3406eadc90baea3235dc84470eab6a728926e56567c562bae1de28af997433d3d59dcf1907044ed79db983b4b7383f8f1addf0dc48a5ec9a500e04a85233ed17bb716f30aa2464223f4be999b769563aa17b2bc6334327b56a2d9698a538a8b297b33b3a6d2d015221eecffa18b1c8af670b2b91647048f2ad2832c9fd9beb72bc3c8dc4240f6ea8088163f563b064125010153f5c667885b4b87e81aa4b9c5a00e114877cf46b5a3348006ea72acbe24698d5820085fadfd30c9fb21e361c11a48b3a36b47a26756bbf25a660af5d4eb8ac8890ee6b1527bc0935098d7d18b55a19177660ef1f24e6905155eb44dd63c519c7856b791afbae78b4bf0ad2f31ba80be508190e751b584c466f75