www.bing.com

Issued by Microsoft IT SSL SHA2

About this certificate

This digital certificate with serial number 5a:00:02:b9:24:d7:77:7f:97:e7:b2:a5:92:00:01:00:02:b9:24 was issued on by Microsoft Corporation.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=www.bing.com

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:00:02:b9:24:d7:77:7f:97:e7:b2:a5:92:00:01:00:02:b9:24
Serial Number (int): 2007067994530962017436194367897512818472302884
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 24:59:22:86:e6:d2:db:9b:b7:dd:8b:1e:5b:c5:32:ad:a0:29:af:87
AuthorityKeyId: 51:af:24:26:9c:f4:68:22:57:80:26:2b:3b:46:62:15:7b:1e:cc:a5

Fingerprint (sha1): ed:91:49:0a:34:d6:8c:7f:b0:0d:19:02:85:ab:ef:9e:54:7c:dc:01
Fingerprint (sha256): 01:f9:18:8c:71:d9:25:1a:66:2a:8a:41:60:c7:5b:c1:1a:01:f2:01:6d:2a:9d:df:f6:2b:9e:06:a3:39:fd:17

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/msitwww2.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/msitwww2.crl

Check the revocation status for certificate www.bing.com

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bing.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bing.com
*.platform.bing.com
*.bing.com
bing.com
ieonline.microsoft.com
*.windowssearch.com
cn.ieonline.microsoft.com
*.origin.bing.com
*.mm.bing.net
*.api.bing.com
ecn.dev.virtualearth.net
*.cn.bing.net
*.cn.bing.com
*.ssl.bing.com
*.appex.bing.com
*.platform.cn.bing.com
ssl-api.bing.com
ssl-api.bing.net
*.api.bing.net
www.bingsandbox.com
*.bingapis.com
bingsandbox.com
feedback.microsoft.com
feedback-int.microsoft.com
insertmedia.bing.office.net
*.r.bat.bing.com
*.dict.bing.com.cn
*.dict.bing.com
dict.bing.com.cn

Other certificates including the domain name bing.com

(limited to 100 certificates)
ssl.chinanetcenter.com
fpt.microsoft.com
www.bing.com
*.bing.com
fpt.microsoft.com
cortana.bing.com
*.bing.com
g.msn.com
www.multimap.com
sydney.bing.com
api.choice.microsoft.com
fpt.microsoft.com
blogs.bing.com
www.bing.com
www.bing.com
fpt.microsoft.com
g.msn.com
llcupload.bing.com
XflowService-cosmosstreammonitoring.mmtools1.bing.com
api.choice.microsoft.com
ssl.chinanetcenter.com
pubhub.bing.com
pubhub.bing.com
fpt.microsoft.com
*.bing.com
ssl.chinanetcenter.com
cdn03.ccedge.net
wildcard.bingstatic.com
fpt.microsoft.com
websockets.platform.bing.com
*.bing.com
usdod.business.bing.com
akamai-san13.exacttarget.com
fpt.microsoft.com
fpt.microsoft.com
www.bing.com
pages.email3.bing.com
*.cortana.cn.bing.com
c.msn.com
*.cortana.cn.bing.com
pubhub.bing.com
mm-csam.cmp.bing.com
ssl.chinanetcenter.com
view.email3.bing.com
cdn03.ccedge.net
g.msn.com
g.msn.com
arc.msn.com
g.msn.com
voice.bing.com
binglocal.com
r.bing.com
c.msn.com
api.choice.microsoft.com
blogs.bing.com
*.bing.com
ssl.chinanetcenter.com
c.msn.com
www.bing.com
falcon.searchhighlights.bing.com
c.msn.com
akamai-san13.exacttarget.com
www.bing.com
h.msn.com
*.bing.com
finance.services.appex.bing-int.com
*.bing.com
c.msn.com
akamai-san13.exacttarget.com
c.msn.com
*.explicit.bing.net
c.msn.com
blogs.bing.com
fpt.microsoft.com
searchhighlights.bing.com
cf.bing.com
c.msn.com
webmaster.bing.com
ssl.chinanetcenter.com
*.bing.com
ssl.chinanetcenter.com
*.bing.com
usdod.business.bing.com
fpt.microsoft.com
*.explicit.bing.net
emoi-cn.bing.com
*.bing.com
blogs.bing.com
fpt.microsoft.com
voice.bing.com
webmaster.bing.com
www.bing.com
*.explicit.bing.net
fpt.microsoft.com
g.msn.com
speech.platform.bing.com
*.bing.com
usgovhigh.business.bing.com
choice.microsoft.com
wmstat.bing.com

Certificate

The complete raw certificate details for www.bing.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUg+x5uKXf2eH2umqPg2
1kB9mAKRK/8EAKeoaZrIY4HzuS/mx+JB08HafJNiHDK7lKdAV7Ihmr2MfxnAGyxg
ZZPIDcGVbmvg53W9PisLhk449aFpEiEra1TCHgRj3tYc0dIPyFk5bQ20J5Yir0/Q
FMYeBIiXQSxij22pNQlNvU5GW//YHK0g1MajdbajnGoS9rFe0XwTcUHTeVTMHaUi
cniZX4MSXmaKX33Oo+eqS9aQxCYxL7XFV9eT+vjZ5A0SoQpKIlQvsRWwcCff38F6
Ml5UPEQGI4uA17tXa9tKiy8sh5oC61JaepZz2vVRD1Gw0AsMajJFmPwnQa6vAlc0
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2007067994530962017436194367897512818472302884
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT SSL SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-11 18:10:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-10 18:10:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bing.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18845132892246942494375928580715074024193935098901917696174842974386548852838567121564194984038833254573308918281611810699091274873249192686511050111020058672663543738237202521062704269492507299021077767425916059833387252069762675101089075155171676453381079310185181698169359132912339406701475763422335259703948128411119590856825334648041520320827592738837743531056189177122035276954234302287981985497087055339233107226793778113921047849450303839821726911652247845861790792008295197995926051134614746336036456571113036155989013652794908930333872644621531322564348188851854623207015476099129636688573656635076024677523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24592286e6d2db9bb7dd8b1e5bc532ada029af87
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 51af24269cf468225780262b3b4662157b1ecca5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/msitwww2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/msitwww2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps�'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (557 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platform.bing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ieonline.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windowssearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.ieonline.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.bing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mm.bing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.bing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecn.dev.virtualearth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cn.bing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cn.bing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssl.bing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appex.bing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platform.cn.bing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-api.bing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-api.bing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.bing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bingsandbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bingapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bingsandbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback-int.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insertmedia.bing.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.r.bat.bing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dict.bing.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dict.bing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dict.bing.com.cn'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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