eastus-01-a.ampss-ms-int.trafficmanager.net

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 08

About this certificate

This digital certificate with serial number 33:00:33:a0:67:7c:2f:74:77:09:1b:7a:c1:00:00:00:33:a0:67 was issued on by Microsoft Corporation.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:33:a0:67:7c:2f:74:77:09:1b:7a:c1:00:00:00:33:a0:67
Serial Number (int): 1137355572739579428654242471930208383438921831
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: ea:e0:0a:ec:8d:1b:d1:89:b3:52:a5:97:2a:3e:a6:df:38:ec:98:01
AuthorityKeyId: f6:7e:2f:bd:80:a3:4a:b2:70:5b:eb:df:9a:1f:d8:ed:ca:61:80:07

Fingerprint (sha1): 6d:e5:61:d9:80:f2:8e:57:1c:29:1d:37:08:ee:66:44:c0:8d:69:ea
Fingerprint (sha256): 00:b5:56:70:b2:85:9a:09:a9:2e:fd:ae:2e:29:25:0e:0d:64:b6:eb:a3:a8:c4:f0:6a:60:79:01:aa:fe:21:a0

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl

Check the revocation status for certificate eastus-01-a.ampss-ms-int.trafficmanager.net

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eastus-01-a.ampss-ms-int.trafficmanager.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eastus-01-a.ampss-ms-int.trafficmanager.net
oicms-int-eus.trafficmanager.net
eastus.amslim-int.azuremonitor.trafficmanager.net
index-int.azuremonitor.trafficmanager.net
eastus.index-int.azuremonitor.trafficmanager.net
index-metrics-int.azuremonitor.trafficmanager.net
*.index-metrics-int.azuremonitor.trafficmanager.net
*.kcm-ms-int.azuremonitor.trafficmanager.net
*.kcm-ms-int.appinsights.azuremonitor.trafficmanager.net
int.eastus.scheduler.trafficmanager.net
mobo-ms-int.azuremonitor.trafficmanager.net
eastus.mobo-ms-int.azuremonitor.trafficmanager.net
mobo-tip.azuremonitor.trafficmanager.net
eastus.mobo-tip.azuremonitor.trafficmanager.net
eastus.kcm-ms-int.activitylogs.azuremonitor.trafficmanager.net
eastus.fofe-ms-int.azuremonitor.trafficmanager.net
*.rpm-int.azuremonitor.trafficmanager.net
*.rpm-int.activitylogs.azuremonitor.trafficmanager.net
eastus.asc-int.azuremonitor.trafficmanager.net

Other certificates including the domain name trafficmanager.net

(limited to 100 certificates)
*.prod.execution.cscp.ms
edu-datasenseeds-ppe.trafficmanager.net
mdppuat.trafficmanager.net
southcentralus-a.ambackend-ms-int.trafficmanager.net
emea.bvd.services.skypeforbusiness.com
testservice4-test-wp.trafficmanager.net
sfmc-northeurope-a.ambackend-ms-int.trafficmanager.net
westcentralus-sbs-b.ampss.trafficmanager.net
YTO24PrdApp01.prod.idns.azure.net
dev.eastus2.paperboy.trafficmanager.net
srbtest4.cloudapp.net
switzerlandnorth-a.ambackend.trafficmanager.net
remoterendering.pmetest.mixedreality.azure.com
netmontest.cloudapp.net
centralus.dev.api.medeina.trafficmanager.net
timapi-stg.trafficmanager.net
dgrepv2-frontend-ppe.trafficmanager.net
awasappe-ase.cloudapp.net
msggw.services.skypeforbusiness.com
sfmc-eastasia-01-b.ampss.trafficmanager.net
azdevscholarshiptm.trafficmanager.net
fyffest.com
ML1PrdApp07.prod.idns.azure.net
aobo.na01.prv.sitops-preview.trafficmanager.net
germanywestcentral-a.ambackend.trafficmanager.net
centralus-a.ambackend.trafficmanager.net
CHI21PrdApp01.prod.idns.azure.net
*.falconprod-sf.trafficmanager.net
southeastasia.prod.api.medeina.trafficmanager.net
sfmc-eastus-a.alertsregional-ms-ppe.trafficmanager.net
vscode-update.trafficmanager.net
threatintel-stg.trafficmanager.net
ame.ks.immersivereader.api.cognitive.trafficmanager.net
southafricanorth-a.ambackend.trafficmanager.net
australiaeast-a.ambackend.trafficmanager.net
netgraph.osdinfra.net
presence.teams.microsoft.com
CBZ07PrdApp01.prod.idns.azure.net
deinsights.trafficmanager.net
epg-empower.trafficmanager.net
luis-australia-southeast-textanalytics-1.trafficmanager.net
preview.int2.microsoftatlanta-int.com
flightservice.trafficmanager.net
servicemap-prod-ccan.trafficmanager.net
edu-datasenseeds-ppe-westus2-https.cloudapp.azure.com
southcentralus-a.ambackend-int.trafficmanager.net
msaaslocale.support.microsoft.com
eastasia-a.ambackend.trafficmanager.net
govtrafficprod.trafficmanager.net
03-weu.emea.prd.api.mediapaas.teams.microsoft.com
dev-dxpconfig-trafficman.trafficmanager.net
MA1PrdApp03.prod.idns.azure.net
enrollment.pi.dps.microsoft.com
aikcm-prod-dewc01.cloudapp.net
DAS-SeverSSL-201703.opinsights.azure.com
beta-rma.trafficmanager.net
www.mopopfestival.com
oikcm-prod-eus2perf.cloudapp.net
graphstoreapi-eus.trafficmanager.net
gogomall.trafficmanager.net
dsreporting.corp.microsoft.com
CBN09PrdApp01.prod.idns.azure.net
SCA-SSL201712EUS.azure.com
khalid.asia.aegpresents.com
edssfdev.trafficmanager.net
os-oi-das.LAControlPlane.trafficmanager.net
ptm-pqs-0.cbr.p.prometheusmetrics.trafficmanager.net
*.ariaapps.dev.trafficmanager.net
art.na03.mmdppe.trafficmanager.net
prd.audience.teams.trafficmanager.net
noamdf.bvd.services.skypeforbusiness.com
prod-mwaas-services-partner-ui.trafficmanager.net
eastus-01-a.ampss-ms-int.trafficmanager.net
DUB07PrdApp01.prod.idns.azure.net
saspo10030serim.trafficmanager.net
an-ocp-func-imitationrequest-tm-acc.trafficmanager.net
ASCEscalationTrafficManagerppe.trafficmanager.net
gov-prod-policy-data.trafficmanager.net
CBN07PrdApp01.prod.idns.azure.net
www.startinglinerock.com
sfmc-centraluseuap-b.ambackend.trafficmanager.net
hotsara.trafficmanager.net
adminv2.ea.azure.com
rmdpfm.na03.mmddbg.trafficmanager.net
CQ1PrdApp02.prod.idns.azure.net
eastus-a.ambackend-int.trafficmanager.net
lsascheduler-prod-noe.cloudapp.net
prd.audience.teams.trafficmanager.net
gdcomessengertest.trafficmanager.net
mbprod-media.trafficmanager.net
CyberDataPrefetcher-PRD.trafficmanager.net
prod-1p-wus2-0-router.correlationplatform.trafficmanager.net
001-jpwe.apac.prd.api.cos.mediapaas.infra.teams.microsoft.com
dgrepv2-frontend-ppe.trafficmanager.net
mscm.microsoft.com
02-eus.noam.ucap.ivr.mediapaas.teams.microsoft.com
chronicle-test.trafficmanager.net
tm-cxpes-test-sdp-cm.trafficmanager.net
2019.fireflyfestival.com
sfmc-westcentralus-01-sbs-a.ampss.trafficmanager.net

Certificate

The complete raw certificate details for eastus-01-a.ampss-ms-int.trafficmanager.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9tvt/msa2ruZYkAcRLw
ENY8RYMsTi1vS0eo3KK+VqBJbTrsqzMsbu0zUTNFg068Di+m62EeELYXlwYm2Neq
CDCcDEZK4/86WvS5h5rd6MsY4GLzVITSuLPsG9EQOI/f+3nZuAj6MDrLOHjfooCR
QmnJkXCGsKYy/o8jR53Da3fOU+hVvx2yWJyfj3x5f/ORE5yu3+rtDqrnRf2RDStJ
DQyMW9TviL0WZV0nDJ3ah0OJZQk1KAgWEYkJhhEmJBlUQOQIX9C8KAn/MzCRmyMK
7+lIMqH7eEkEegaZeaRYC/HvRb5uqQzOUOWZfIFvBqKmuaAZIhbNN7ZFCEyg8ogi
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137355572739579428654242471930208383438921831
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 08'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 18:07:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-30 18:07:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eastus-01-a.ampss-ms-int.trafficmanager.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25229630810545831907945493356427130333426058072026278716405420945621995478945339818761494373569140562213484424427443712167331356600738492824391519115638150555373957284388067412797218204047245765500070295940987642860161769267682708917387339340653175448226186074803185022840604887490314769274808865196317240991700058876047489413998622680958524892817936769661372523458347333827125596528417700165360246723018626702796080794256929591782209106898753673815957152298384987306465954237824315273945320839700353407434571306432853939511051472919123884950135443598456344483699215386746509117577117827921403515740035417676299379209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eae00aec8d1bd189b352a5972a3ea6df38ec9801
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (927 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastus-01-a.ampss-ms-int.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oicms-int-eus.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastus.amslim-int.azuremonitor.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'index-int.azuremonitor.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastus.index-int.azuremonitor.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'index-metrics-int.azuremonitor.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.index-metrics-int.azuremonitor.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kcm-ms-int.azuremonitor.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kcm-ms-int.appinsights.azuremonitor.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.eastus.scheduler.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobo-ms-int.azuremonitor.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastus.mobo-ms-int.azuremonitor.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobo-tip.azuremonitor.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastus.mobo-tip.azuremonitor.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastus.kcm-ms-int.activitylogs.azuremonitor.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastus.fofe-ms-int.azuremonitor.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rpm-int.azuremonitor.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rpm-int.activitylogs.azuremonitor.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastus.asc-int.azuremonitor.trafficmanager.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f67e2fbd80a34ab2705bebdf9a1fd8edca618007
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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