aadg.int.windows.net
Issued by MSIT Machine Auth CA 2
About this certificate
This digital certificate with serial number 20:d7:27:4a:00:01:00:00:cd:09 was issued on byMSIT Machine Auth CA 2.
With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
- Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
- Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
- Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate, for public certificates this should not be an internal name (BRs: 7.1.2.10.3)
Certificate Subject
CN=aadg.int.windows.net
MSIT Machine Auth CA 2
This certificate has expire since
Certificate Details
Serial Number (hex): 20:d7:27:4a:00:01:00:00:cd:09Serial Number (int): 155084608502996251233545
Serial Number lenght: 78 bits, 10 octets
SubjectKeyId: 23:c4:4d:d1:62:c9:37:15:d2:e8:c7:a6:ef:db:78:04:d3:dc:bf:cd
AuthorityKeyId: eb:db:11:5e:f8:09:9e:d8:d6:62:9c:fd:62:9d:e3:84:4a:28:e1:27
Fingerprint (sha1): 3a:13:d3:89:26:6a:07:99:13:7b:c0:6c:2d:ef:9a:81:1f:cc:f5:a1
Fingerprint (sha256): 01:d0:66:82:72:76:41:42:6c:ef:68:1c:1a:e5:10:04:e4:58:1b:5c:c5:5a:96:2c:7c:12:db:0e:04:24:9d:37
Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/MSIT%20Machine%20Auth%20CA%202(1).crt
Issuing Certificate URL: http://corppki/aia/MSIT%20Machine%20Auth%20CA%202(1).crt
Revocation information
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/MSIT%20Machine%20Auth%20CA%202(1).crlCRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/MSIT%20Machine%20Auth%20CA%202(1).crl
CRL Distribution Point: http://corppki/crl/MSIT%20Machine%20Auth%20CA%202(1).crl
Check the revocation status for certificate aadg.int.windows.net
27
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aadg.int.windows.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
login.microsoftonline-p-pst.com
login.microsoftonline-pst.com
reports-ppe.ad.msft.net
graph.ppe.windows.net
login.windows-ppe.net
*.login.windows-int.net
password.ccsctp.com
login.microsoftonline-p-int.com
*.appana-int.tfsallin.net
*.appana-sps-int.tfsallin.net
*.gateway.msol-nova.com
*.int2.microsoftatlanta-int.com
directoryproxy.ppe.windows.net
companymanager.ccsctp.com
aadg.int.windows.net
*.rms-bvt.testv1.com
*.na.rms-bvt.testv1.com
*.rms.na.rms-bvt.testv1.com
*.eu.rms-bvt.testv1.com
*.rms.eu.rms-bvt.testv1.com
login-dev1-mso.microsoftonline-tst.com
login-dev1-mso.microsoftonline-p-tst.com
login.microsoftonline-int.com
cloudvaultppe.msengsys.com
nova.msengsys.com
cloudvault.msengsys.com
novappe.msengsys.com
login.microsoftonline-pst.com
reports-ppe.ad.msft.net
graph.ppe.windows.net
login.windows-ppe.net
*.login.windows-int.net
password.ccsctp.com
login.microsoftonline-p-int.com
*.appana-int.tfsallin.net
*.appana-sps-int.tfsallin.net
*.gateway.msol-nova.com
*.int2.microsoftatlanta-int.com
directoryproxy.ppe.windows.net
companymanager.ccsctp.com
aadg.int.windows.net
*.rms-bvt.testv1.com
*.na.rms-bvt.testv1.com
*.rms.na.rms-bvt.testv1.com
*.eu.rms-bvt.testv1.com
*.rms.eu.rms-bvt.testv1.com
login-dev1-mso.microsoftonline-tst.com
login-dev1-mso.microsoftonline-p-tst.com
login.microsoftonline-int.com
cloudvaultppe.msengsys.com
nova.msengsys.com
cloudvault.msengsys.com
novappe.msengsys.com
Other certificates including the domain name windows.net
(limited to 100 certificates)
tr522.westeurope1-a.worker.database.windows.net
ma.p.azurewebsites.windows.net
testonly.secretstore.windows.net
waws-prod-mwh-1e0d2a21-api.p.azurewebsites.windows.net
enc.p.azurewebsites.windows.net
ams-ts05-1-hos-rest-1-1.cloudapp.net
enc.p.azurewebsites.windows.net
tr1225.southcentralus1-a.worker.database.windows.net
testonly.secretstore.windows.net
waws-prod-bay-55440bad.publish.p.azurewebsites.windows.net
readonly-tr4659.eastus1-a.worker.database.windows.net
waws-prod-bay-e21e34c0-api.p.azurewebsites.windows.net
enc.p.azurewebsites.windows.net
tr1037.eastus1-a.worker.database.windows.net
*.store.core.windows.net
ams-ts46-1-hos-rest-1-1.cloudapp.net
metricsclient.geneva.core.windows.net
tr1075.westus2-a.worker.database.windows.net
*.blob.core.windows.net
*.sds-diagnostics.store.core.windows.net
waws-prod-am2-da5883af-api.p.azurewebsites.windows.net
metricsclient.geneva.core.windows.net
waws-prod-am2-c0d608da-api.p.azurewebsites.windows.net
tr455.australiasoutheast1-a.worker.database.windows.net
waws-prod-blu-df231187.publish.p.azurewebsites.windows.net
waws-prod-bay-6f6e9dfa.state.p.azurewebsites.windows.net
waws-prod-hk1-8db07b87-api.p.azurewebsites.windows.net
tr1686.northeurope1-a.worker.database.windows.net
BN2B.agent.core.windows.net
metricsclient.geneva.core.windows.net
DM3.agent.core.windows.net
tr354.australiaeast1-a.control.database.windows.net
waws-prod-sy3-fb5d9039-api.p.azurewebsites.windows.net
*.redis.cache.windows.net
testonly.secretstore.windows.net
waws-prod-ch1-3955dc27.publish.p.azurewebsites.windows.net
waws-prod-yt1-982c2880.publish.p.azurewebsites.windows.net
waws-prod-mwh-37f9bd5f.publish.p.azurewebsites.windows.net
waws-prod-am2-013.publish.azurewebsites.windows.net
tr469.australiaeast1-a.worker.database.windows.net
tr1348.westus1-a.worker.database.windows.net
waws-prod-bn1-009.state.azurewebsites.windows.net
tr409.westeurope1-a.worker.database.windows.net
metricsclient.geneva.core.windows.net
waws-prod-mwh-cbf02dd4.publish.p.azurewebsites.windows.net
enc.p.azurewebsites.windows.net
3f7611921e87.database.windows.net
metricsclient.geneva.core.windows.net
testonly.secretstore.windows.net
cpim.windows.net
ams-ts61-1-hos-rest-1-1.cloudapp.net
40b5d28d821e.database.windows.net
metricsclient.geneva.core.windows.net
waws-prod-sy3-87a8eac9.state.p.azurewebsites.windows.net
waws-prod-pn1-e4d07c21.api.p.azurewebsites.windows.net
waws-prod-bn1-e45ca43e-api.p.azurewebsites.windows.net
*.blob.core.windows.net
testonly.secretstore.windows.net
gwpdctosf-d9afa021808b.worker.database.windows.net
testonly.secretstore.windows.net
tr976.centralus1-a.worker.database.windows.net
metricsclient.geneva.core.windows.net
waws-prod-am2-04f0829f.publish.p.azurewebsites.windows.net
waws-prod-db3-a4287263.api.p.azurewebsites.windows.net
waws-prod-am2-6c285c27.publish.p.azurewebsites.windows.net
metricsclient.geneva.core.windows.net
*.stream-diagnostics.store.core.windows.net
testonly.secretstore.windows.net
SN3P.agent.core.windows.net
enc.p.azurewebsites.windows.net
tr832.australiaeast1-a.control.database.windows.net
enc.p.azurewebsites.windows.net
waws-prod-bay-a1bbcb3e-api.p.azurewebsites.windows.net
testonly.secretstore.windows.net
waws-prod-cw1-d3d1bfdf.publish.p.azurewebsites.windows.net
testonly.secretstore.windows.net
testonly.secretstore.windows.net
*.stream-diagnostics.store.core.windows.net
tr1419.centralus1-a.worker.database.windows.net
waws-prod-blu-96e6d8f2-api.p.azurewebsites.windows.net
waws-prod-blu-edf2d934-api.p.azurewebsites.windows.net
waws-prod-bn1-53f95518-api.p.azurewebsites.windows.net
uswest12.rnm.core.windows.net
*.redis.cache.windows.net
tr16.southcentralus1-a.worker.database.windows.net
waws-prod-sn1-ea02b418-api.p.azurewebsites.windows.net
*.redis.cache.windows.net
metricsclient.geneva.core.windows.net
metricsclient.geneva.core.windows.net
waws-prod-sy3-24d1ce36.state.p.azurewebsites.windows.net
testonly.secretstore.windows.net
testonly.secretstore.windows.net
HK2.agent.core.windows.net
gwpdctosf-e77d764d22ff.worker.database.windows.net
waws-prod-am2-13bb9e6c.state.p.azurewebsites.windows.net
waws-prod-db3-92f298be.publish.p.azurewebsites.windows.net
testonly.secretstore.windows.net
waws-prod-bay-f5246b21.publish.p.azurewebsites.windows.net
tr165.ukwest1-a.worker.database.windows.net
testonly.secretstore.windows.net
ma.p.azurewebsites.windows.net
testonly.secretstore.windows.net
waws-prod-mwh-1e0d2a21-api.p.azurewebsites.windows.net
enc.p.azurewebsites.windows.net
ams-ts05-1-hos-rest-1-1.cloudapp.net
enc.p.azurewebsites.windows.net
tr1225.southcentralus1-a.worker.database.windows.net
testonly.secretstore.windows.net
waws-prod-bay-55440bad.publish.p.azurewebsites.windows.net
readonly-tr4659.eastus1-a.worker.database.windows.net
waws-prod-bay-e21e34c0-api.p.azurewebsites.windows.net
enc.p.azurewebsites.windows.net
tr1037.eastus1-a.worker.database.windows.net
*.store.core.windows.net
ams-ts46-1-hos-rest-1-1.cloudapp.net
metricsclient.geneva.core.windows.net
tr1075.westus2-a.worker.database.windows.net
*.blob.core.windows.net
*.sds-diagnostics.store.core.windows.net
waws-prod-am2-da5883af-api.p.azurewebsites.windows.net
metricsclient.geneva.core.windows.net
waws-prod-am2-c0d608da-api.p.azurewebsites.windows.net
tr455.australiasoutheast1-a.worker.database.windows.net
waws-prod-blu-df231187.publish.p.azurewebsites.windows.net
waws-prod-bay-6f6e9dfa.state.p.azurewebsites.windows.net
waws-prod-hk1-8db07b87-api.p.azurewebsites.windows.net
tr1686.northeurope1-a.worker.database.windows.net
BN2B.agent.core.windows.net
metricsclient.geneva.core.windows.net
DM3.agent.core.windows.net
tr354.australiaeast1-a.control.database.windows.net
waws-prod-sy3-fb5d9039-api.p.azurewebsites.windows.net
*.redis.cache.windows.net
testonly.secretstore.windows.net
waws-prod-ch1-3955dc27.publish.p.azurewebsites.windows.net
waws-prod-yt1-982c2880.publish.p.azurewebsites.windows.net
waws-prod-mwh-37f9bd5f.publish.p.azurewebsites.windows.net
waws-prod-am2-013.publish.azurewebsites.windows.net
tr469.australiaeast1-a.worker.database.windows.net
tr1348.westus1-a.worker.database.windows.net
waws-prod-bn1-009.state.azurewebsites.windows.net
tr409.westeurope1-a.worker.database.windows.net
metricsclient.geneva.core.windows.net
waws-prod-mwh-cbf02dd4.publish.p.azurewebsites.windows.net
enc.p.azurewebsites.windows.net
3f7611921e87.database.windows.net
metricsclient.geneva.core.windows.net
testonly.secretstore.windows.net
cpim.windows.net
ams-ts61-1-hos-rest-1-1.cloudapp.net
40b5d28d821e.database.windows.net
metricsclient.geneva.core.windows.net
waws-prod-sy3-87a8eac9.state.p.azurewebsites.windows.net
waws-prod-pn1-e4d07c21.api.p.azurewebsites.windows.net
waws-prod-bn1-e45ca43e-api.p.azurewebsites.windows.net
*.blob.core.windows.net
testonly.secretstore.windows.net
gwpdctosf-d9afa021808b.worker.database.windows.net
testonly.secretstore.windows.net
tr976.centralus1-a.worker.database.windows.net
metricsclient.geneva.core.windows.net
waws-prod-am2-04f0829f.publish.p.azurewebsites.windows.net
waws-prod-db3-a4287263.api.p.azurewebsites.windows.net
waws-prod-am2-6c285c27.publish.p.azurewebsites.windows.net
metricsclient.geneva.core.windows.net
*.stream-diagnostics.store.core.windows.net
testonly.secretstore.windows.net
SN3P.agent.core.windows.net
enc.p.azurewebsites.windows.net
tr832.australiaeast1-a.control.database.windows.net
enc.p.azurewebsites.windows.net
waws-prod-bay-a1bbcb3e-api.p.azurewebsites.windows.net
testonly.secretstore.windows.net
waws-prod-cw1-d3d1bfdf.publish.p.azurewebsites.windows.net
testonly.secretstore.windows.net
testonly.secretstore.windows.net
*.stream-diagnostics.store.core.windows.net
tr1419.centralus1-a.worker.database.windows.net
waws-prod-blu-96e6d8f2-api.p.azurewebsites.windows.net
waws-prod-blu-edf2d934-api.p.azurewebsites.windows.net
waws-prod-bn1-53f95518-api.p.azurewebsites.windows.net
uswest12.rnm.core.windows.net
*.redis.cache.windows.net
tr16.southcentralus1-a.worker.database.windows.net
waws-prod-sn1-ea02b418-api.p.azurewebsites.windows.net
*.redis.cache.windows.net
metricsclient.geneva.core.windows.net
metricsclient.geneva.core.windows.net
waws-prod-sy3-24d1ce36.state.p.azurewebsites.windows.net
testonly.secretstore.windows.net
testonly.secretstore.windows.net
HK2.agent.core.windows.net
gwpdctosf-e77d764d22ff.worker.database.windows.net
waws-prod-am2-13bb9e6c.state.p.azurewebsites.windows.net
waws-prod-db3-92f298be.publish.p.azurewebsites.windows.net
testonly.secretstore.windows.net
waws-prod-bay-f5246b21.publish.p.azurewebsites.windows.net
tr165.ukwest1-a.worker.database.windows.net
testonly.secretstore.windows.net
Certificate
The complete raw certificate details for aadg.int.windows.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIInjCCB4agAwIBAgIKINcnSgABAADNCTANBgkqhkiG9w0BAQUFADCBgDETMBEG CgmSJomT8ixkARkWA2NvbTEZMBcGCgmSJomT8ixkARkWCW1pY3Jvc29mdDEUMBIG CgmSJomT8ixkARkWBGNvcnAxFzAVBgoJkiaJk/IsZAEZFgdyZWRtb25kMR8wHQYD VQQDExZNU0lUIE1hY2hpbmUgQXV0aCBDQSAyMB4XDTE0MDMxMjAwNDEyN1oXDTE2 MDMxMTAwNDEyN1owHzEdMBsGA1UEAxMUYWFkZy5pbnQud2luZG93cy5uZXQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaeUgpn4H1dOV1CVcEMujXAGrD 0pN0hjVkC13AEd9HxtTiT9sw4hIAY9vE2wA8ca6QXiFkAPlhZww2F+dKJS8yHodh D7ItcIs0xLFDhkx9vQc+beOLu3Z7ruY8N9DzGpqs2ul/eBjqE6wCOa7lz62ahJC+ bDsI+I6ONK2cvyoY9d8EwALIn7cGbb4E9dlcfWrH7kQhtcuAxs+FWJnFIn9CDx57 JFCkEWKfeVnMUEID/65hulzuziCIOV8sTcgLwsXG+1ayxB00m+CRV5nYNHW0YFEE CMlT/YdAR9ft7Y/mwqaEBVzrZfaW+37UKSjMLc1jKDv9v9NCjNINlSlFkRDLAgMB AAGjggV4MIIFdDAdBgNVHQ4EFgQUI8RN0WLJNxXS6Mem79t4BNPcv80wCwYDVR0P BAQDAgSwMB8GA1UdIwQYMBaAFOvbEV74CZ7Y1mKc/WKd44RKKOEnMIHuBgNVHR8E geYwgeMwgeCggd2ggdqGT2h0dHA6Ly9tc2NybC5taWNyb3NvZnQuY29tL3BraS9t c2NvcnAvY3JsL01TSVQlMjBNYWNoaW5lJTIwQXV0aCUyMENBJTIwMigxKS5jcmyG TWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9NU0lUJTIw TWFjaGluZSUyMEF1dGglMjBDQSUyMDIoMSkuY3JshjhodHRwOi8vY29ycHBraS9j cmwvTVNJVCUyME1hY2hpbmUlMjBBdXRoJTIwQ0ElMjAyKDEpLmNybDCBrQYIKwYB BQUHAQEEgaAwgZ0wVQYIKwYBBQUHMAKGSWh0dHA6Ly93d3cubWljcm9zb2Z0LmNv bS9wa2kvbXNjb3JwL01TSVQlMjBNYWNoaW5lJTIwQXV0aCUyMENBJTIwMigxKS5j cnQwRAYIKwYBBQUHMAKGOGh0dHA6Ly9jb3JwcGtpL2FpYS9NU0lUJTIwTWFjaGlu ZSUyMEF1dGglMjBDQSUyMDIoMSkuY3J0MD8GCSsGAQQBgjcVBwQyMDAGKCsGAQQB gjcVCIPPiU2t8gKFoZ8MgvrKfYHh+3SBT4PC7YUIjqnShWMCAWQCAQowHQYDVR0l BBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYB BQUHAwIwCgYIKwYBBQUHAwEwggL5BgNVHREEggLwMIIC7IIfbG9naW4ubWljcm9z b2Z0b25saW5lLXAtcHN0LmNvbYIdbG9naW4ubWljcm9zb2Z0b25saW5lLXBzdC5j b22CF3JlcG9ydHMtcHBlLmFkLm1zZnQubmV0ghVncmFwaC5wcGUud2luZG93cy5u ZXSCFWxvZ2luLndpbmRvd3MtcHBlLm5ldIIXKi5sb2dpbi53aW5kb3dzLWludC5u ZXSCE3Bhc3N3b3JkLmNjc2N0cC5jb22CH2xvZ2luLm1pY3Jvc29mdG9ubGluZS1w LWludC5jb22CGSouYXBwYW5hLWludC50ZnNhbGxpbi5uZXSCHSouYXBwYW5hLXNw cy1pbnQudGZzYWxsaW4ubmV0ghcqLmdhdGV3YXkubXNvbC1ub3ZhLmNvbYIfKi5p bnQyLm1pY3Jvc29mdGF0bGFudGEtaW50LmNvbYIeZGlyZWN0b3J5cHJveHkucHBl LndpbmRvd3MubmV0ghljb21wYW55bWFuYWdlci5jY3NjdHAuY29tghRhYWRnLmlu dC53aW5kb3dzLm5ldIIUKi5ybXMtYnZ0LnRlc3R2MS5jb22CFyoubmEucm1zLWJ2 dC50ZXN0djEuY29tghsqLnJtcy5uYS5ybXMtYnZ0LnRlc3R2MS5jb22CFyouZXUu cm1zLWJ2dC50ZXN0djEuY29tghsqLnJtcy5ldS5ybXMtYnZ0LnRlc3R2MS5jb22C JmxvZ2luLWRldjEtbXNvLm1pY3Jvc29mdG9ubGluZS10c3QuY29tgihsb2dpbi1k ZXYxLW1zby5taWNyb3NvZnRvbmxpbmUtcC10c3QuY29tgh1sb2dpbi5taWNyb3Nv ZnRvbmxpbmUtaW50LmNvbYIaY2xvdWR2YXVsdHBwZS5tc2VuZ3N5cy5jb22CEW5v dmEubXNlbmdzeXMuY29tghdjbG91ZHZhdWx0Lm1zZW5nc3lzLmNvbYIUbm92YXBw ZS5tc2VuZ3N5cy5jb20wDQYJKoZIhvcNAQEFBQADggEBACu3YMIQ+6M6Yv2Cbrgc YSm18yEvkdV1p9ASkUzipzx8F3EfLzf/u84ydi7VXwPNUgBcb/UHd8+oz7nbZJFm 3CGqfdipEgG3tt32f39DTJVqGm4+VzaIvA+1Bcr4Vc7sCDy2R0x66hDKvSTxUkyv 1/2KIq2Sp5MnKwesW57CLXFZ1irqVVVBUjm5Z71DmZ7Ax2xzpRYXGWw4zlCzbCEq LiqJvA//owLz6WyPR2V3QEaNyC5/wMvkt0I/iGbHcVxTzALHb7Kegy1yN9WpgIvX NUtco05dRlevRJP1V+I/0hArrs5Y+So9RnBRrfzf/yHIddlcQ1ztX2nhkhpfR6/Y lAQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nlIKZ+B9XTldQlXBDLo 1wBqw9KTdIY1ZAtdwBHfR8bU4k/bMOISAGPbxNsAPHGukF4hZAD5YWcMNhfnSiUv Mh6HYQ+yLXCLNMSxQ4ZMfb0HPm3ji7t2e67mPDfQ8xqarNrpf3gY6hOsAjmu5c+t moSQvmw7CPiOjjStnL8qGPXfBMACyJ+3Bm2+BPXZXH1qx+5EIbXLgMbPhViZxSJ/ Qg8eeyRQpBFin3lZzFBCA/+uYbpc7s4giDlfLE3IC8LFxvtWssQdNJvgkVeZ2DR1 tGBRBAjJU/2HQEfX7e2P5sKmhAVc62X2lvt+1CkozC3NYyg7/b/TQozSDZUpRZEQ ywIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 155084608502996251233545 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'microsoft' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'corp' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MSIT Machine Auth CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-12 00:41:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-11 00:41:27 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aadg.int.windows.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27579756809164657852921774573063390030058826620436193885242362505471474377560496206669061527220125765306336971272930335989863395093209493445345865101655505807308197268752234331837465362823680867888715729637682779248138156848233102089545561894824206414637716576632483832647148194183405305115866619115517014794438200053571016469428529317625631731464839852988993453538274524307439631247783377968602447308158256767161756554202854401461397210476533512767010274821474277029900936862081666304277976699370864825059676284718871054331559508232960395491741479670616973176111613301435859169851701496630576822838181505452389503179 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 23c44dd162c93715d2e8c7a6efdb7804d3dcbfcd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebdb115ef8099ed8d6629cfd629de3844a28e127 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (230 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/MSIT%20Machine%20Auth%20CA%202(1).crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/MSIT%20Machine%20Auth%20CA%202(1).crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://corppki/crl/MSIT%20Machine%20Auth%20CA%202(1).crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/MSIT%20Machine%20Auth%20CA%202(1).crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://corppki/aia/MSIT%20Machine%20Auth%20CA%202(1).crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER asn1: structure error: base 128 integer too large 1.3.6.1.4.1.311.21.8.7587021.751874.11030412.6202749.3702260.207.945504904.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 10 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (752 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.microsoftonline-p-pst.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.microsoftonline-pst.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports-ppe.ad.msft.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graph.ppe.windows.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.windows-ppe.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.login.windows-int.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'password.ccsctp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.microsoftonline-p-int.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appana-int.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appana-sps-int.tfsallin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gateway.msol-nova.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int2.microsoftatlanta-int.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directoryproxy.ppe.windows.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companymanager.ccsctp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aadg.int.windows.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rms-bvt.testv1.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.na.rms-bvt.testv1.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rms.na.rms-bvt.testv1.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.rms-bvt.testv1.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rms.eu.rms-bvt.testv1.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-dev1-mso.microsoftonline-tst.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-dev1-mso.microsoftonline-p-tst.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.microsoftonline-int.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudvaultppe.msengsys.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nova.msengsys.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudvault.msengsys.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novappe.msengsys.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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