*.appservices.staging.businesscentral.dynamics-tie.com

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 08

About this certificate

This digital certificate with serial number 33:00:2e:15:1e:c4:0b:cd:59:9c:05:69:8e:00:00:00:2e:15:1e was issued on by Microsoft Corporation.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:2e:15:1e:c4:0b:cd:59:9c:05:69:8e:00:00:00:2e:15:1e
Serial Number (int): 1137353686187473247971780691616184583150507294
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: ac:03:c8:37:0b:51:cf:e5:31:87:57:8b:8a:5a:d8:f6:30:5c:ff:1c
AuthorityKeyId: f6:7e:2f:bd:80:a3:4a:b2:70:5b:eb:df:9a:1f:d8:ed:ca:61:80:07

Fingerprint (sha1): 26:24:94:a1:0c:8f:95:72:97:b3:d8:ff:40:25:7c:e0:ea:a3:e4:08
Fingerprint (sha256): 02:03:d8:65:30:55:93:95:39:d0:d4:81:1b:4b:fe:e6:a2:03:16:18:da:b1:95:84:9c:87:a1:ea:d6:1f:1a:59

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl

Check the revocation status for certificate *.appservices.staging.businesscentral.dynamics-tie.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.appservices.staging.businesscentral.dynamics-tie.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.appservices.staging.businesscentral.dynamics-tie.com

Other certificates including the domain name dynamics-tie.com

(limited to 100 certificates)
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
cluster.services.dev.smb.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
syncdaemoninternal-aadapp.staging.smb.dynamics-tie.com
cluster.services.staging.smb.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
api.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
extensionmanagementproxy-aadapp.test.smb.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.services.smb.dynamics-tie.com

Certificate

The complete raw certificate details for *.appservices.staging.businesscentral.dynamics-tie.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUc2ncoQWc7HKgdSdxZK
cOi73fjsQbb+ZdBs+W5Zbq+61iyUSiypqemrt5XSzMvM2+EMyXzcH0Pu8lLWOSr7
+IHIx+NR+DTJlcPKFLhhHaYvl2h9GKnTc8Md53U+RoCjXD5nVJJ2vNuTLvgHs2xl
b0OAiu8kGwqLUWKuHxk/LSSk4N8FG0LJd8rXM/QoEYiN/VuFRLjgGnPATEmuXuFJ
PE4JB9veCsD2Q1oyqqm9APTVQoIeXFv9O/Mz0J6z6cxPkeuuugZmn2xb2TKW8J9J
oSZRKEkV2iq57enBWW6VbzBugQbzYcwxo1vadyvzkijA2lmE/iBRcLmdhQpPE3EM
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137353686187473247971780691616184583150507294
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 08'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 14:38:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-12 14:38:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.appservices.staging.businesscentral.dynamics-tie.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22884249808175778214379844816079289816084008248064229441993631813016310399352265716865229198641505025640518129831766818605556609887299389652064829893606390806528287190109523183747020197550285424045013828084722462895437455267040599485854943890610225891971707411963224943202173879546027453796026897469491129415317542483836257767134043439333205634380392246261155887399327641533226524194570720456019513916450623224360065603895345254144392373787812763833655183210411796884213553260749971994078642997831778989549995401488990651761350691933404890555075800050581765495656211776994587440168305457625245804405537267510735342793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac03c8370b51cfe53187578b8a5ad8f6305cff1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appservices.staging.businesscentral.dynamics-tie.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f67e2fbd80a34ab2705bebdf9a1fd8edca618007
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00786aaa315df063284b0e453cd53edfdddfacf0abda6f43c9d4d1fb6bae1b3a7647c73dc7f8ee3ab712159a2efb1ea715c1c89a72d2c3c8cf39bf2721bb1288de9f1fab0c2fed92088bd76312bb1aef04812463171e96db5a3354c2261c7a338db93b35201db5e07a084781f3b5d52659c6b0f6becd899174df8e8d1a38450ddce9405b7732f240873cc7175a9e8fd4c1be9f9d6294644e37fa549e0378233aef8744b81f8f30fa26683d5dae5987dfed07000b6ecb609122ba68cc2cd49eb5bea00a1e4b1fd6463b4396e4343ce06472c447fb5cc065c4c6ede7a47e94840a531d14dc90a7c3805c9c4242f5f990f8813645d25718d4f399fef8608be2e703d913e01f53f35c4c3b98beee362f8f6f92cb3cd33ded48b26b10e7293f6e19863f4edad6a69506cbd3dcf2d9ce0a657502cc15838ca8ca073d858f58619f8700e3db535935c70e9951a6475c7227d9840e5088cb50b82d5061356d47bce133c5dbbd098bb321b5d88f2bd2b7fc59b98b37639959958b6c644c7a29eaf24491a7f691edb57558ec94e485a0394e43b90ceeb2eff543092e99760f489441754f3e7fac275101bc69c8f68ad637adba1c0592a2e3f4eac17e03fefe671e78728eb2656cec428014dafa663e405e3778260cc26561ac9aff2121ee14e91ca5dea4ac1220bf163dbb2076c19056b3549c734ace0c995597948c1c98fe88d555a4378073