cosmos.osdinfra.net

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 01

About this certificate

This digital certificate with serial number 33:00:d1:f0:41:8b:1d:5f:b3:3e:b5:a1:c5:00:00:00:d1:f0:41 was issued on by Microsoft Corporation.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:d1:f0:41:8b:1d:5f:b3:3e:b5:a1:c5:00:00:00:d1:f0:41
Serial Number (int): 1137409443494788122711149057799053906837368897
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 5d:30:4e:b6:ee:fe:82:20:10:4e:71:bb:5d:67:02:a7:54:d4:8e:32
AuthorityKeyId: 0f:20:5d:d7:a1:57:95:db:92:cf:2b:d0:c7:c2:77:04:ce:72:80:76

Fingerprint (sha1): b1:13:ed:bb:39:ef:19:85:3f:5d:4c:f5:41:fa:3f:86:9b:90:76:07
Fingerprint (sha256): 01:c6:9a:84:b1:16:75:16:c3:8c:08:94:80:b0:cc:26:72:47:71:ff:c1:7e:21:02:6e:d3:45:66:98:9c:1f:c5

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.crl

Check the revocation status for certificate cosmos.osdinfra.net

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cosmos.osdinfra.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cosmos.osdinfra.net
*.cosmos.osdinfra.net
cosmos08.osdinfra.net
*.cosmos08.osdinfra.net
cosmos09.osdinfra.net
*.cosmos09.osdinfra.net
cosmos11.osdinfra.net
*.cosmos11.osdinfra.net
cosmos12.osdinfra.net
*.cosmos12.osdinfra.net
cosmos13.osdinfra.net
*.cosmos13.osdinfra.net
cosmos14.osdinfra.net
*.cosmos14.osdinfra.net
cosmos15.osdinfra.net
*.cosmos15.osdinfra.net
cosmos15migration.osdinfra.net
*.cosmos15migration.osdinfra.net
cosmos17.osdinfra.net
*.cosmos17.osdinfra.net
cosmosfreshbcp.osdinfra.net
*.cosmosfreshbcp.osdinfra.net
cosmoscorvus.osdinfra.net
*.cosmoscorvus.osdinfra.net

Other certificates including the domain name osdinfra.net

(limited to 100 certificates)
netgraph.osdinfra.net
cosmos.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
ndastreamingclienttest.osdinfra.net
cosmos14.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
cosmos11.osdinfra.net
netgraph.osdinfra.net
wsproxy.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
rdm.osdinfra.net
www.kiwitest.osdinfra.net
netperf.osdinfra.net
www.kiwitest.osdinfra.net
cabometadatamanager.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
kobo-2-aad.ppe.credential.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
wsproxy.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
pfportal.osdinfra.net
netperf.osdinfra.net
www.kiwitest.osdinfra.net
netperf.osdinfra.net
netval.osdinfra.net
cosmos14.osdinfra.net
netperf.osdinfra.net
*.cosmosdatamap.osdinfra.net
*.netperf.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
cosmos11.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
cws.cosmoslumen.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
phynet.osdinfra.net
*.perf.projectkonacompute.net
netgraph.osdinfra.net
ndm.osdinfra.net
netperf.osdinfra.net
*.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
cosmos14.osdinfra.net
*.kobotest03.osdinfra.net
netperf.osdinfra.net
*.osdinfra.net
netperf.osdinfra.net
*.kobotest02.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
*.netperf.osdinfra.net
netperf.osdinfra.net
ndastreamingservertest.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
kobo-2-aad.prod.credential.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
phynetwebui-client.osdinfra.net
rdm.osdinfra.net
*.cosmos.osdinfra.net
*.osdinfra.net
cosmos.osdinfra.net

Certificate

The complete raw certificate details for cosmos.osdinfra.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PFzwV5rxMV5kbpJS/jo
uOf+AB2pl6HcAx48mm5xATazA0esMlErmIaPpINJD4phkhdoFz7bf1+h7RFjtc6Y
CxpxJifqyYb6jDz1PtEQgTN3DWVV4tSloEwT58bTOafkT13i8xW+8x1P3BFW7hQa
AqNavHZuHIDPiysFvHkzhPviMujwW97GJ5Agfz1t6RGGqV5rH+U1UO+2QhD6KnYc
z0J19h+ggRWtQzFcHUdiCz0PNSpvcnX7w7jKJ2cuv6Z/oYpaU4iLz3FmaLvM2bQf
bPC+tkGTj1MSHosl9ly16bs/RDJa4CYdme+H/DnBb5giZKQ+p39W6H9ZN1cRGfzw
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137409443494788122711149057799053906837368897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 19:18:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cosmos.osdinfra.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30416257694142612293572151786057664932310835405379097262597589360605583903862445725914769840151429429286203761680489116587985725016322976038851663023143902150127881890926446951354589755965723143341101337683678646095400000287300507376703643416755792448330479797912024976916064931374569574159057392915039466013703741835773946076676087653439947204374582374371765252648465639123369788560519553562295461864213748583724141974522492660929632097745548647984362784596128771587380437823295408177778355726274637955822933059925832420733634473679975526462893849110895167968936635646210255023362045084300581972816301653991471509649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018afc2a38810000040300473045022100a020f69d2f4e12f8229f8429c87a3546cca5582b97aef6befe2c3c8337e670cb02202909cd22fb7a33e0b06c05b347684fed4b18ed8b3735aacce97f70353ee439fe007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018afc2a389d00000403004730450220025aaf121997e2e47fdf1b22910209ef0d8c46bdb40db4ea0e46ab6a30c66a0b022100d0c0f5fbc8c6cfb7b55dbabe355ea0fcff76783ceabdb5be9831e75245fede6d00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018afc2a38900000040300483046022100f992d04894f1d73930e32bdc29944d6e03338177aa7058e3f03ea83d9469cc26022100ee7c3ce05fa74ece2c8987a03659e421571aa9c798beac9026c3a12240cf5239
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d304eb6eefe8220104e71bb5d6702a754d48e32
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (614 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmos.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmos.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmos08.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmos08.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmos09.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmos09.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmos11.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmos11.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmos12.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmos12.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmos13.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmos13.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmos14.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmos14.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmos15.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmos15.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmos15migration.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmos15migration.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmos17.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmos17.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmosfreshbcp.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmosfreshbcp.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmoscorvus.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmoscorvus.osdinfra.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f205dd7a15795db92cf2bd0c7c27704ce728076
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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