orchclient.v3workflow.icm.msftcloudes.com
Issued by Microsoft IT TLS CA 4
About this certificate
This digital certificate with serial number 16:00:02:95:73:5f:c1:13:70:1e:e6:13:8b:00:00:00:02:95:73 was issued on by Microsoft Corporation.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Certificate Subject
CN=orchclient.v3workflow.icm.msftcloudes.com
Microsoft Corporation
Organization:
Microsoft Corporation
Organization unit: Microsoft IT
Organization unit: Microsoft IT
State / Province:
Washington
Locality: Redmond
Country: US
Locality: Redmond
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 16:00:02:95:73:5f:c1:13:70:1e:e6:13:8b:00:00:00:02:95:73Serial Number (int): 490617273586435187638155923959405543529026931
Serial Number lenght: 149 bits, 19 octets
SubjectKeyId: 75:3f:cc:5b:f1:7a:77:e4:13:09:fb:ad:7b:21:64:09:e1:62:1d:b7
AuthorityKeyId: 7a:7b:8c:c1:cf:e7:a0:ca:1c:d4:6b:fa:fb:e1:33:c3:0f:1a:a2:9d
Fingerprint (sha1): 0a:ba:e9:b6:e0:8b:23:ea:40:08:58:49:d9:60:71:ba:3a:5b:51:fa
Fingerprint (sha256): 00:ca:db:d1:85:21:bd:6e:49:b6:db:b2:2d:83:7c:96:4b:e2:a2:69:92:58:7c:d6:13:2d:28:ec:ba:e2:89:29
Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%204.crt
Revocation information
OCSP Server: http://ocsp.msocsp.comCRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl
Check the revocation status for certificate orchclient.v3workflow.icm.msftcloudes.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for orchclient.v3workflow.icm.msftcloudes.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
orchclient.v3workflow.icm.msftcloudes.com
Other certificates including the domain name msftcloudes.com
(limited to 100 certificates)
*.analytics.msftcloudes.com
clusterserver.azurenotifications.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
jarvis.msftcloudes.com
apiclient.icmppe.test-dsms.msftcloudes.com
server.fabric.prod.configuration.msftcloudes.com
armclientcaller.icm.test-dsms.msftcloudes.com
orchclient.v3workflow.icm.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
metagraph.clients.servicetree.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
arm.azsupport-staging.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
jarvis-int.msftcloudes.com
gcs.prod.monitoring.core.windows.net
ppe.Icm.test-dsms.msftcloudes.com
*.datastudiotest.msftcloudes.com
fcmppe.msftcloudes.com
encryptionservice.mds.Icm.test-dsms.msftcloudes.com
msupdatevsrm.icmppe.msftcloudes.com
prod.la.ingestion.msftcloudes.com
jarvis-int.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
Aad-hybridproxy-prod.msftcloudes.com
azureadsstagescus.southcentralus.cloudapp.azure.com
azureadsstagescus.southcentralus.cloudapp.azure.com
prod.ai.ingestion.msftcloudes.com
*.vnext.s360.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
ppe.hot.ingest.monitor.core.windows.net
*.fcmint.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
genevaprofiler.analytics.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
*.analyticsppe.msftcloudes.com
azurehealthprodjpe.japaneast.cloudapp.azure.com
azurehealthprodcus.centralus.cloudapp.azure.com
clusterserver.azurenotifications.msftcloudes.com
arm.azsupport-dev.msftcloudes.com
arm.azsupport-dev.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
azuresupportcenter.msftcloudes.com
azuresupportcenter.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
azureexpertprod.eastus.cloudapp.azure.com
test.Icm.test-dsms.msftcloudes.com
*.analytics.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
prod.warmpath.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
jarvis-int.msftcloudes.com
azurehealthprodscu.southcentralus.cloudapp.azure.com
prod.warm.ingest.monitor.core.windows.net
*.analytics.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
*.icm.msftcloudes.com
prod.la.ingest.monitor.core.windows.net
arm.azsupport.msftcloudes.com
prod.la.ingestion.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
jarvis.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
vnext.s360.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.warm.ingestion.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
servicemetadata.dscmclient.servicetree.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
assetlineageppe.analytics.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
feedservice.datastudiotest.msftcloudes.com
arm.azsupport.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
azuremgmt.fcmppe.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
pappdocs.msftcloudes.com
test.hot.ingest.monitor.core.windows.net
lens.msftcloudes.com
test.warm.ingest.monitor.core.windows.net
test.Icm.test-dsms.msftcloudes.com
horizon.msftcloudes.com
datastudio.analyticsppe.msftcloudes.com
greenteam.clients.servicetree.msftcloudes.com
icmlxppeoctopus.icm.msftcloudes.com
*.analytics.msftcloudes.com
prod.la.ingest.monitor.core.windows.net
azureexpertprod.westcentralus.cloudapp.azure.com
prod.warm.ingest.monitor.core.windows.net
jarvis-int.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
clusterserver.azurenotifications.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
jarvis.msftcloudes.com
apiclient.icmppe.test-dsms.msftcloudes.com
server.fabric.prod.configuration.msftcloudes.com
armclientcaller.icm.test-dsms.msftcloudes.com
orchclient.v3workflow.icm.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
metagraph.clients.servicetree.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
arm.azsupport-staging.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
jarvis-int.msftcloudes.com
gcs.prod.monitoring.core.windows.net
ppe.Icm.test-dsms.msftcloudes.com
*.datastudiotest.msftcloudes.com
fcmppe.msftcloudes.com
encryptionservice.mds.Icm.test-dsms.msftcloudes.com
msupdatevsrm.icmppe.msftcloudes.com
prod.la.ingestion.msftcloudes.com
jarvis-int.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
Aad-hybridproxy-prod.msftcloudes.com
azureadsstagescus.southcentralus.cloudapp.azure.com
azureadsstagescus.southcentralus.cloudapp.azure.com
prod.ai.ingestion.msftcloudes.com
*.vnext.s360.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
ppe.hot.ingest.monitor.core.windows.net
*.fcmint.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
genevaprofiler.analytics.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
*.analyticsppe.msftcloudes.com
azurehealthprodjpe.japaneast.cloudapp.azure.com
azurehealthprodcus.centralus.cloudapp.azure.com
clusterserver.azurenotifications.msftcloudes.com
arm.azsupport-dev.msftcloudes.com
arm.azsupport-dev.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
azuresupportcenter.msftcloudes.com
azuresupportcenter.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
azureexpertprod.eastus.cloudapp.azure.com
test.Icm.test-dsms.msftcloudes.com
*.analytics.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
prod.warmpath.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
jarvis-int.msftcloudes.com
azurehealthprodscu.southcentralus.cloudapp.azure.com
prod.warm.ingest.monitor.core.windows.net
*.analytics.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
*.icm.msftcloudes.com
prod.la.ingest.monitor.core.windows.net
arm.azsupport.msftcloudes.com
prod.la.ingestion.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
jarvis.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
vnext.s360.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.warm.ingestion.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
servicemetadata.dscmclient.servicetree.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
assetlineageppe.analytics.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
feedservice.datastudiotest.msftcloudes.com
arm.azsupport.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
azuremgmt.fcmppe.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
pappdocs.msftcloudes.com
test.hot.ingest.monitor.core.windows.net
lens.msftcloudes.com
test.warm.ingest.monitor.core.windows.net
test.Icm.test-dsms.msftcloudes.com
horizon.msftcloudes.com
datastudio.analyticsppe.msftcloudes.com
greenteam.clients.servicetree.msftcloudes.com
icmlxppeoctopus.icm.msftcloudes.com
*.analytics.msftcloudes.com
prod.la.ingest.monitor.core.windows.net
azureexpertprod.westcentralus.cloudapp.azure.com
prod.warm.ingest.monitor.core.windows.net
jarvis-int.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
Certificate
The complete raw certificate details for orchclient.v3workflow.icm.msftcloudes.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG+TCCBOGgAwIBAgITFgAClXNfwRNwHuYTiwAAAAKVczANBgkqhkiG9w0BAQsF ADCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UE CxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDQw HhcNMTgwODE2MTgxMjAzWhcNMjAwODE2MTgxMjAzWjA0MTIwMAYDVQQDEylvcmNo Y2xpZW50LnYzd29ya2Zsb3cuaWNtLm1zZnRjbG91ZGVzLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBALYXZyKGUb7Sou2tWQWAy5kacE5c4BLdF9vd h2lQJ0XWItgSLhP3osJVq14lyc8Qn4Wl9bIwifx+xC2yGo0ozG7EyNf4Kdj3EZvQ 0IPTFNSmNwXEsoHLbI9Bj27NA5jE2bD2ucCIWh6h8OZeyH0cEzfT2sHHsD/hQnHg R3rvtRstNwSj2KMF+0jN/WBQZmd6NCF+0Lhkr+840p4F2m9qGeZKuIPtDlwhNUyv u9w2mojRAAAJpEJe4sPQLjK7SgNf0DPQSqfP8YqkVIWrBWpS/EB5peug+mcGhIuU HnddQAwpsR6hPMQPNM10of7tRZD3ew1V6hY8hSa277RCMJdFJ8kCAwEAAaOCAqow ggKmMBMGCisGAQQB1nkCBAMBAf8EAgUAMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYB BQUHAwIwCgYIKwYBBQUHAwEwPgYJKwYBBAGCNxUHBDEwLwYnKwYBBAGCNxUIh9qG dYPu2QGCyYUbgbWeYYX062CBXYTS30KC55N6AgFkAgEdMIGFBggrBgEFBQcBAQR5 MHcwUQYIKwYBBQUHMAKGRWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNj b3JwL01pY3Jvc29mdCUyMElUJTIwVExTJTIwQ0ElMjA0LmNydDAiBggrBgEFBQcw AYYWaHR0cDovL29jc3AubXNvY3NwLmNvbTAdBgNVHQ4EFgQUdT/MW/F6d+QTCfut eyFkCeFiHbcwCwYDVR0PBAQDAgSwMDQGA1UdEQQtMCuCKW9yY2hjbGllbnQudjN3 b3JrZmxvdy5pY20ubXNmdGNsb3VkZXMuY29tMIGsBgNVHR8EgaQwgaEwgZ6ggZug gZiGS2h0dHA6Ly9tc2NybC5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL01p Y3Jvc29mdCUyMElUJTIwVExTJTIwQ0ElMjA0LmNybIZJaHR0cDovL2NybC5taWNy b3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL01pY3Jvc29mdCUyMElUJTIwVExTJTIw Q0ElMjA0LmNybDBNBgNVHSAERjBEMEIGCSsGAQQBgjcqATA1MDMGCCsGAQUFBwIB FidodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9jcHMwHwYDVR0j BBgwFoAUenuMwc/noMoc1Gv6++Ezww8aop0wHQYDVR0lBBYwFAYIKwYBBQUHAwIG CCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4ICAQA0wk05nOXrriS/x29ut2WhkfCy ZXwSDSb+6W/z5qg2CnmEWTtPW3pdarwcTwpAp6Yzs96B6kPyzv3y1Y3gy2QChxcc S5AQB+k19FsvMBfZeulHCmarqq4yF4Crk6njz0FhpQ6oO78QwLeNOzIiVaqXLWg+ JSa1UG7CdHgqwFm/UJUUbyowgQIETjk3lF98XoqTq8/ZyDu+MblGEjH4GkvLgWoh VfEsZ7A3zRUbt1cU/ki6HS6t5TnnDn2WeSdu2z/mborJEPQ9ZP6V9QFLNVimeiF9 ztXHTjZFbRsOXJ1tQiyqd5+UHrc6vWckivvuThtfTEjDU9Ogjho81VDBwxE3iNe0 s6lONZuY4RgrcsSSSb/UoUdApPnnMeSZTTOnm5iuCoE9wTUteRwYseD+vbIyRQZf 2BHgjTssI+dlXXCIf5i1Qy46GQ7QP1WBoy7dMFaB19+/tJ5qFNk0sDM4mWNp8T0i +5ZFzUKZT57RIY+J08vYZfEmBQruQmb6u3g0oQok9gAoi+dds4Za2eBZUKPxzgVR 3kFTi0C1BqgU/bkVpMKShE1Tof3kqOZwMpJWA0CR+KkxhKdIerAril+JcsaMFl/W laCiWJ+7R+1Gz+i5yjrkG8+Bc14L97eDKdsFeCgfQdC9P15kT1hk8rX+p/9v5b/Z Ctg8I8zLeykjRKmeqw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthdnIoZRvtKi7a1ZBYDL mRpwTlzgEt0X292HaVAnRdYi2BIuE/eiwlWrXiXJzxCfhaX1sjCJ/H7ELbIajSjM bsTI1/gp2PcRm9DQg9MU1KY3BcSygctsj0GPbs0DmMTZsPa5wIhaHqHw5l7IfRwT N9PawcewP+FCceBHeu+1Gy03BKPYowX7SM39YFBmZ3o0IX7QuGSv7zjSngXab2oZ 5kq4g+0OXCE1TK+73DaaiNEAAAmkQl7iw9AuMrtKA1/QM9BKp8/xiqRUhasFalL8 QHml66D6ZwaEi5Qed11ADCmxHqE8xA80zXSh/u1FkPd7DVXqFjyFJrbvtEIwl0Un yQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 490617273586435187638155923959405543529026931 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-16 18:12:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-16 18:12:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'orchclient.v3workflow.icm.msftcloudes.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22986911889409343311793913200450142015130698237802363123761605299538923465417251197508167190741822027439439810609493099207612341590743933826205523059702564491173161867307778344894156667426791322401629327858897881283579497651372322170693156862972170416481016478380322861640779952991688328891843830813213257000743833955811875143737980465202263659457678713799515599460761863098084934914432702206982393146689263218569811619300127574694599193029714161711083470383655543064645639797318998176747851904731061221785757392762024469995538752079533979139732038902145953342459425042449588346572641087311629828232919550319084775369 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%204.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 753fcc5bf17a77e41309fbad7b216409e1621db7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orchclient.v3workflow.icm.msftcloudes.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7a7b8cc1cfe7a0ca1cd46bfafbe133c30f1aa29d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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