jarvis.msftcloudes.com

Issued by Microsoft RSA TLS CA 02

About this certificate

This digital certificate with serial number 7f:00:08:9e:f6:31:d5:95:16:a9:25:32:4c:00:00:00:08:9e:f6 was issued on by Microsoft Corporation.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=jarvis.msftcloudes.com

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7f:00:08:9e:f6:31:d5:95:16:a9:25:32:4c:00:00:00:08:9e:f6
Serial Number (int): 2832197573768663627508875510699244406119636726
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 5c:6f:0a:42:66:48:d5:7d:19:74:59:17:a5:bc:5e:96:98:4e:12:30
AuthorityKeyId: ff:2f:7f:e1:06:f4:38:f3:2d:ed:25:8d:98:c2:fe:0e:f6:6c:fc:fa

Fingerprint (sha1): 68:75:cf:1e:a3:65:af:f6:c4:e2:c3:3c:13:53:39:cc:d8:1b:3c:ac
Fingerprint (sha256): 00:8f:d0:cb:d1:3e:7e:81:11:1b:78:1a:76:1f:5d:e5:37:33:fb:4e:60:2e:04:f0:dc:73:12:34:26:10:f4:c6

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2002.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl

Check the revocation status for certificate jarvis.msftcloudes.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jarvis.msftcloudes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jarvis.msftcloudes.com
west.jarvis.msftcloudes.com
east.jarvis.msftcloudes.com
auxiliary.jarvis.msftcloudes.com
jarvis.dc.ad.msft.net
jarvis-west.dc.ad.msft.net
preview.jarvis-west.dc.ad.msft.net
portal.microsoftgeneva.com
jarvis-east.dc.ad.msft.net
portal-east.microsoftgeneva.com
jarvis-west.cloudapp.net
jarvis-east.cloudapp.net
jarvis-west-auxiliary.cloudapp.net
jarvis-east-auxiliary.cloudapp.net
mds-test.east.jarvis.msftcloudes.com
mds-test.west.jarvis.msftcloudes.com
mds-prod.east.jarvis.msftcloudes.com
mds-prod.west.jarvis.msftcloudes.com
mds-mc.east.jarvis.msftcloudes.com
mds-mc.west.jarvis.msftcloudes.com
mds-ff.east.jarvis.msftcloudes.com
mds-ff.west.jarvis.msftcloudes.com
mds-bf.east.jarvis.msftcloudes.com
mds-bf.west.jarvis.msftcloudes.com
jarvis-west.production.diagnostics.monitoring.core.windows.net
jarvis-west.production.billing.monitoring.core.windows.net
jarvis-west.monitoring.windows.net
jarvis-west.firstparty.monitoring.core.windows.net

Other certificates including the domain name msftcloudes.com

(limited to 100 certificates)
*.analytics.msftcloudes.com
clusterserver.azurenotifications.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
jarvis.msftcloudes.com
apiclient.icmppe.test-dsms.msftcloudes.com
server.fabric.prod.configuration.msftcloudes.com
armclientcaller.icm.test-dsms.msftcloudes.com
orchclient.v3workflow.icm.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
metagraph.clients.servicetree.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
arm.azsupport-staging.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
jarvis-int.msftcloudes.com
gcs.prod.monitoring.core.windows.net
ppe.Icm.test-dsms.msftcloudes.com
*.datastudiotest.msftcloudes.com
fcmppe.msftcloudes.com
encryptionservice.mds.Icm.test-dsms.msftcloudes.com
msupdatevsrm.icmppe.msftcloudes.com
prod.la.ingestion.msftcloudes.com
jarvis-int.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
Aad-hybridproxy-prod.msftcloudes.com
azureadsstagescus.southcentralus.cloudapp.azure.com
azureadsstagescus.southcentralus.cloudapp.azure.com
prod.ai.ingestion.msftcloudes.com
*.vnext.s360.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
ppe.hot.ingest.monitor.core.windows.net
*.fcmint.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
genevaprofiler.analytics.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
*.analyticsppe.msftcloudes.com
azurehealthprodjpe.japaneast.cloudapp.azure.com
azurehealthprodcus.centralus.cloudapp.azure.com
clusterserver.azurenotifications.msftcloudes.com
arm.azsupport-dev.msftcloudes.com
arm.azsupport-dev.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
azuresupportcenter.msftcloudes.com
azuresupportcenter.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
azureexpertprod.eastus.cloudapp.azure.com
test.Icm.test-dsms.msftcloudes.com
*.analytics.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
prod.warmpath.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
jarvis-int.msftcloudes.com
azurehealthprodscu.southcentralus.cloudapp.azure.com
prod.warm.ingest.monitor.core.windows.net
*.analytics.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
*.icm.msftcloudes.com
prod.la.ingest.monitor.core.windows.net
arm.azsupport.msftcloudes.com
prod.la.ingestion.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
jarvis.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
vnext.s360.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.warm.ingestion.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
servicemetadata.dscmclient.servicetree.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
assetlineageppe.analytics.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
feedservice.datastudiotest.msftcloudes.com
arm.azsupport.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
azuremgmt.fcmppe.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
pappdocs.msftcloudes.com
test.hot.ingest.monitor.core.windows.net
lens.msftcloudes.com
test.warm.ingest.monitor.core.windows.net
test.Icm.test-dsms.msftcloudes.com
horizon.msftcloudes.com
datastudio.analyticsppe.msftcloudes.com
greenteam.clients.servicetree.msftcloudes.com
icmlxppeoctopus.icm.msftcloudes.com
*.analytics.msftcloudes.com
prod.la.ingest.monitor.core.windows.net
azureexpertprod.westcentralus.cloudapp.azure.com
prod.warm.ingest.monitor.core.windows.net
jarvis-int.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net

Certificate

The complete raw certificate details for jarvis.msftcloudes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vyAZWrLfgX0r7c38PX4
4/ghXObvh/rxTAhVtkU59iuZ3orieiM9jiCnxQN/P19NZLe5221TPeyjWT47Wc2j
GDhPbc4No7z0cUJpcRtQunATMXE4a+srOEM9DTTRm3N1i3XPGMVct3TXW9IWCRkK
4GrnEnRiIlqySmsaMTxsyB1wz5vu9CRcnvgn2kBgdYwQx4QlyGNR+zwc/3AS47C/
sAsnPLBKa0KZo6TjYwfVsvgpu0ztUYe0ZGnur4c1WcyGI4dci/8EYRpa8IBfUmab
hleyFvTd7LTab6mAUzKgU3YIzTSj+0k8hvQKV10qBpcIeRUPRW0ZmTtfw7eK0EgG
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2832197573768663627508875510699244406119636726
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft RSA TLS CA 02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-08 17:41:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-08 17:41:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jarvis.msftcloudes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30674182955528790185785892243950784946785932442595697295424126622068597895198612347888493798095002038982942065576298652977443627318760349867546493585983313674348669160975932287684354752732960146724730918820906835866700539880722518190365770947822012362400992887921454663244262439438286508412510949101577823065797283181592662347517397967732654458720593703486238654323951876431435276228646682117169850074026021913531377568863095603162257292738251696047390842973067431604973455881173126627084205051423227800214903163164601246486169627046906991168441917434916288583089311203850408261623698247464167945160489840913240557077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.10585921.15764560
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2002.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c6f0a426648d57d19745917a5bc5e96984e1230
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1000 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarvis.msftcloudes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'west.jarvis.msftcloudes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'east.jarvis.msftcloudes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auxiliary.jarvis.msftcloudes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarvis.dc.ad.msft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarvis-west.dc.ad.msft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.jarvis-west.dc.ad.msft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.microsoftgeneva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarvis-east.dc.ad.msft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-east.microsoftgeneva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarvis-west.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarvis-east.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarvis-west-auxiliary.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarvis-east-auxiliary.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mds-test.east.jarvis.msftcloudes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mds-test.west.jarvis.msftcloudes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mds-prod.east.jarvis.msftcloudes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mds-prod.west.jarvis.msftcloudes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mds-mc.east.jarvis.msftcloudes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mds-mc.west.jarvis.msftcloudes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mds-ff.east.jarvis.msftcloudes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mds-ff.west.jarvis.msftcloudes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mds-bf.east.jarvis.msftcloudes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mds-bf.west.jarvis.msftcloudes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarvis-west.production.diagnostics.monitoring.core.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarvis-west.production.billing.monitoring.core.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarvis-west.monitoring.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarvis-west.firstparty.monitoring.core.windows.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ff2f7fe106f438f32ded258d98c2fe0ef66cfcfa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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