fsa.prod.adu.msft.net
- Microsoft Corporation -
Issued by Microsoft Azure RSA TLS Issuing CA 04
About this certificate
This digital certificate with serial number 33:00:50:4d:bb:d9:73:14:e8:0f:15:6d:b9:00:00:00:50:4d:bb was issued on by Microsoft Corporation.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Microsoft Corporation
Organization:
Microsoft Corporation
State / Province:
WA
Locality: Redmond
Country: US
Locality: Redmond
Country: US
Microsoft Corporation
Organization:
Microsoft Corporation
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 33:00:50:4d:bb:d9:73:14:e8:0f:15:6d:b9:00:00:00:50:4d:bbSerial Number (int): 1137365331040341043872857452245541800933084603
Serial Number lenght: 150 bits, 19 octets
SubjectKeyId: 6b:15:2a:53:96:a4:cf:7b:a7:53:31:1e:3c:d7:28:b6:dc:b2:9b:59
AuthorityKeyId: 3b:70:d1:53:e9:76:25:9d:60:a8:ca:66:0f:c6:9b:ae:6f:54:16:6a
Fingerprint (sha1): 5b:b2:d7:13:b3:69:8f:d4:ce:d2:9e:42:5e:71:10:aa:4f:bc:01:3d
Fingerprint (sha256): 02:3b:a3:af:c9:a6:38:f8:38:2b:dc:47:de:c4:66:b9:20:a9:15:6c:ab:4b:4b:7b:66:4b:0e:ec:e8:56:64:78
Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt
Revocation information
OCSP Server: http://oneocsp.microsoft.com/ocspCRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl
Check the revocation status for certificate fsa.prod.adu.msft.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fsa.prod.adu.msft.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
12 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fsa.prod.adu.msft.net
*.fsa.prod.adu.msft.net
*.fsa.prod.adu.msft.net
Other certificates including the domain name msft.net
(limited to 100 certificates)
liveid-idn.msoprd.msft.net
swe.prd.msft.net
015DAM1L40SE02.015d.mgd.msft.net
XlensClient.msoprd.msft.net
TestCert.msoppe.msft.net
19153.infrastructure.network10367.prod.msft.net
195126.ds.network12472.dprodmgd106.msft.net
am3027dl50wa1a.027D.mgd.msft.net
187079.infrastructure.network11301.dprodmgd104.msft.net
18513.ds.network880.prod.msft.net
provisioningandblocktest.msoppe.msft.net
FaultAgentClientForMsodsReplicasInProdAzure.msoprd.msft.net
12734.ds.network189.prod.msft.net
19905.federatedsearch.network10526.prod.msft.net
18629.ds.network890.prod.msft.net
replicamonitorcluster-prod-p155.msoprd.msft.net
rnz.swe.prd.msft.net
msodsdptclient.msoprd.msft.net
ProvisionAndSetCurrentTestCert.msoprd.msft.net
20034.ds.network10590.prod.msft.net
20178.ds.network10613.prod.msft.net
19665.sql.network10494.prod.msft.net
14297.sql.network302.prod.msft.net
jarvis.msftcloudes.com
191366.sql.network12015.dprodmgd105.msft.net
187737.infrastructure.network11454.dprodmgd104.msft.net
19830.ds.network10461.prod.msft.net
replicamonitorcluster-prod-p138.msoprd.msft.net
querylive.msoprd.msft.net
1787.network.network1906.edog.msft.net
NationalCloudSyncBlackforestToPPE.msoppe.msft.net
187521.federatedsearch.network11382.dprodmgd104.msft.net
mtf-azureemailorchestrator.msoppe.msft.net
137.pmachine.zone137.prod.msft.net
rocs-int-actions.dc.ad.msft.net
20439.admindebug.network10734.prod.msft.net
187838.content.network11471.dprodmgd104.msft.net
56251.infrastructure.network3629.dprod.msft.net
188929.content.network11731.dprodmgd104.msft.net
6893.pmachine.zone6893.dprodmgd104.msft.net
was.062d.dedicated.lync.com
fsa.prod.adu.msft.net
13975.infracore.network326.prod.msft.net
18443.federatedsearch.network860.prod.msft.net
ams.prod.adu.msft.net
187657.ds.network11430.dprodmgd104.msft.net
187855.content.network11478.dprodmgd104.msft.net
20948.content.network379.prod.msft.net
msaliveid.msoppe.msft.net
21043.federatedsearch.network10724.prod.msft.net
192389.sql.network12267.dprodmgd105.msft.net
17367.ds.network484.prod.msft.net
CertificateConfigSigning.msoprd.msft.net
21197.ds.network13128.prod.msft.net
BuildTrackingClientForExpress.msoppe.msft.net
883.pmachine.zone883.dprod.msft.net
aadg.int.windows.net
187792.network.network11460.dprodmgd104.msft.net
*.dc.ad.msft.net
jarvis-int.msftcloudes.com
191195.infrastructure.network11881.dprodmgd105.msft.net
CertOnboartingTest.msoppe.msft.net
dals.int.adu.msft.net
187605.content.network11404.dprodmgd104.msft.net
187844.ds.network11477.dprodmgd104.msft.net
191330.federatedsearch.network11923.dprodmgd105.msft.net
CommandAgent-ADR-P25.msoprd.msft.net
16879.infracore.network360.prod.msft.net
OnboardingWorkflowProviderNameTestCert.msoppe.msft.net
17914.infracore.network752.prod.msft.net
18732.sql.network10267.prod.msft.net
FaultAgentClientForMSODS.msoppe.msft.net
18552.federatedsearch.network908.prod.msft.net
AzureThrottleClient.msoprd.msft.net
sfm.genevametrics.msoppe.msft.net
18205.content.network714.prod.msft.net
195022.infrastructure.network12462.dprodmgd106.msft.net
187498.content.network11374.dprodmgd104.msft.net
20407.ds.network10647.prod.msft.net
fsa.prod.adu.msft.net
21073.ds.network10600.prod.msft.net
187825.content.network11474.dprodmgd104.msft.net
CertificateConfigSigning.msoppe.msft.net
replicamonitorcluster-prod-p40.msoprd.msft.net
846.pmachine.zone846.dprod.msft.net
DMSClientForConfigRolloutFunctionForBlackForest.msoprd.msft.net
19970.admindebug.network10587.prod.msft.net
DmsClientForStx.msoppe.msft.net
jarvis-int.msftcloudes.com
sobo.prod.adu.msft.net
MSODSAdMetricsClientForThrottleRunner.msoprd.msft.net
service.032d.mgd.msft.net
20383.content.network10653.prod.msft.net
GeoBackupReplicationKeyVaultClientCert.ar.msogov.us.msft.net
test.azureservicedeploy.msft.net
mcs.prod.adu.msft.net
20726.sql.network10789.prod.msft.net
DmsClientForAzureScheduledJobs.msoppe.msft.net
dals.prod.adu.msft.net
SecurityMonitoringTestCertificate.msoppe.msft.net
swe.prd.msft.net
015DAM1L40SE02.015d.mgd.msft.net
XlensClient.msoprd.msft.net
TestCert.msoppe.msft.net
19153.infrastructure.network10367.prod.msft.net
195126.ds.network12472.dprodmgd106.msft.net
am3027dl50wa1a.027D.mgd.msft.net
187079.infrastructure.network11301.dprodmgd104.msft.net
18513.ds.network880.prod.msft.net
provisioningandblocktest.msoppe.msft.net
FaultAgentClientForMsodsReplicasInProdAzure.msoprd.msft.net
12734.ds.network189.prod.msft.net
19905.federatedsearch.network10526.prod.msft.net
18629.ds.network890.prod.msft.net
replicamonitorcluster-prod-p155.msoprd.msft.net
rnz.swe.prd.msft.net
msodsdptclient.msoprd.msft.net
ProvisionAndSetCurrentTestCert.msoprd.msft.net
20034.ds.network10590.prod.msft.net
20178.ds.network10613.prod.msft.net
19665.sql.network10494.prod.msft.net
14297.sql.network302.prod.msft.net
jarvis.msftcloudes.com
191366.sql.network12015.dprodmgd105.msft.net
187737.infrastructure.network11454.dprodmgd104.msft.net
19830.ds.network10461.prod.msft.net
replicamonitorcluster-prod-p138.msoprd.msft.net
querylive.msoprd.msft.net
1787.network.network1906.edog.msft.net
NationalCloudSyncBlackforestToPPE.msoppe.msft.net
187521.federatedsearch.network11382.dprodmgd104.msft.net
mtf-azureemailorchestrator.msoppe.msft.net
137.pmachine.zone137.prod.msft.net
rocs-int-actions.dc.ad.msft.net
20439.admindebug.network10734.prod.msft.net
187838.content.network11471.dprodmgd104.msft.net
56251.infrastructure.network3629.dprod.msft.net
188929.content.network11731.dprodmgd104.msft.net
6893.pmachine.zone6893.dprodmgd104.msft.net
was.062d.dedicated.lync.com
fsa.prod.adu.msft.net
13975.infracore.network326.prod.msft.net
18443.federatedsearch.network860.prod.msft.net
ams.prod.adu.msft.net
187657.ds.network11430.dprodmgd104.msft.net
187855.content.network11478.dprodmgd104.msft.net
20948.content.network379.prod.msft.net
msaliveid.msoppe.msft.net
21043.federatedsearch.network10724.prod.msft.net
192389.sql.network12267.dprodmgd105.msft.net
17367.ds.network484.prod.msft.net
CertificateConfigSigning.msoprd.msft.net
21197.ds.network13128.prod.msft.net
BuildTrackingClientForExpress.msoppe.msft.net
883.pmachine.zone883.dprod.msft.net
aadg.int.windows.net
187792.network.network11460.dprodmgd104.msft.net
*.dc.ad.msft.net
jarvis-int.msftcloudes.com
191195.infrastructure.network11881.dprodmgd105.msft.net
CertOnboartingTest.msoppe.msft.net
dals.int.adu.msft.net
187605.content.network11404.dprodmgd104.msft.net
187844.ds.network11477.dprodmgd104.msft.net
191330.federatedsearch.network11923.dprodmgd105.msft.net
CommandAgent-ADR-P25.msoprd.msft.net
16879.infracore.network360.prod.msft.net
OnboardingWorkflowProviderNameTestCert.msoppe.msft.net
17914.infracore.network752.prod.msft.net
18732.sql.network10267.prod.msft.net
FaultAgentClientForMSODS.msoppe.msft.net
18552.federatedsearch.network908.prod.msft.net
AzureThrottleClient.msoprd.msft.net
sfm.genevametrics.msoppe.msft.net
18205.content.network714.prod.msft.net
195022.infrastructure.network12462.dprodmgd106.msft.net
187498.content.network11374.dprodmgd104.msft.net
20407.ds.network10647.prod.msft.net
fsa.prod.adu.msft.net
21073.ds.network10600.prod.msft.net
187825.content.network11474.dprodmgd104.msft.net
CertificateConfigSigning.msoppe.msft.net
replicamonitorcluster-prod-p40.msoprd.msft.net
846.pmachine.zone846.dprod.msft.net
DMSClientForConfigRolloutFunctionForBlackForest.msoprd.msft.net
19970.admindebug.network10587.prod.msft.net
DmsClientForStx.msoppe.msft.net
jarvis-int.msftcloudes.com
sobo.prod.adu.msft.net
MSODSAdMetricsClientForThrottleRunner.msoprd.msft.net
service.032d.mgd.msft.net
20383.content.network10653.prod.msft.net
GeoBackupReplicationKeyVaultClientCert.ar.msogov.us.msft.net
test.azureservicedeploy.msft.net
mcs.prod.adu.msft.net
20726.sql.network10789.prod.msft.net
DmsClientForAzureScheduledJobs.msoppe.msft.net
dals.prod.adu.msft.net
SecurityMonitoringTestCertificate.msoppe.msft.net
Certificate
The complete raw certificate details for fsa.prod.adu.msft.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHGzCCBQOgAwIBAgITMwBQTbvZcxToDxVtuQAAAFBNuzANBgkqhkiG9w0BAQwF ADBdMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u MS4wLAYDVQQDEyVNaWNyb3NvZnQgQXp1cmUgUlNBIFRMUyBJc3N1aW5nIENBIDA0 MB4XDTI0MDUyMjAzMjkxNVoXDTI1MDUxNzAzMjkxNVowbDELMAkGA1UEBhMCVVMx CzAJBgNVBAgTAldBMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv ZnQgQ29ycG9yYXRpb24xHjAcBgNVBAMTFWZzYS5wcm9kLmFkdS5tc2Z0Lm5ldDCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL6XI1UhCeZPYTUFC2F5U+kC XqurdR0xMuV6+wLhLg/1A85UX7W7bYPP1DU4KpOuoKod43/vNKaIk8dYVEZh5BYq wRHhZZ5EorJkDZEPpvPhZYDUw4VG4qOS8o4Y/RvnTGUD64I+YQvWHexot/dbNv4S P/FDZhS6dpVeP0WFllGEi+n5LC+NM1gDf/TZsmgkABg/9NVTS8z9VJNBoVJA+BvV M0D6ns4kznibNFzstmzANwmWTlrerfvdE9/OBqcgF7Cor8LYR0pjFUe26paVdvf0 6HWTH6AjrUsPAcd2RUsi49wOdyS4JpRJX6bLHRJKwxAF4AgkrvYSx/snCLge5SUC AwEAAaOCAsMwggK/MBMGCisGAQQB1nkCBAMBAf8EAgUAMCcGCSsGAQQBgjcVCgQa MBgwCgYIKwYBBQUHAwIwCgYIKwYBBQUHAwEwPAYJKwYBBAGCNxUHBC8wLQYlKwYB BAGCNxUIh73XG4Hn60aCgZ0ujtAMh/DaHV2ChOVpgvOnPgIBZAIBJjCBtAYIKwYB BQUHAQEEgacwgaQwcwYIKwYBBQUHMAKGZ2h0dHA6Ly93d3cubWljcm9zb2Z0LmNv bS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQXp1cmUlMjBSU0ElMjBUTFMlMjBJ c3N1aW5nJTIwQ0ElMjAwNCUyMC0lMjB4c2lnbi5jcnQwLQYIKwYBBQUHMAGGIWh0 dHA6Ly9vbmVvY3NwLm1pY3Jvc29mdC5jb20vb2NzcDAdBgNVHQ4EFgQUaxUqU5ak z3unUzEePNcottyym1kwDgYDVR0PAQH/BAQDAgWgMDkGA1UdEQQyMDCCFWZzYS5w cm9kLmFkdS5tc2Z0Lm5ldIIXKi5mc2EucHJvZC5hZHUubXNmdC5uZXQwDAYDVR0T AQH/BAIwADBqBgNVHR8EYzBhMF+gXaBbhllodHRwOi8vd3d3Lm1pY3Jvc29mdC5j b20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBBenVyZSUyMFJTQSUyMFRMUyUyMElz c3VpbmclMjBDQSUyMDA0LmNybDBmBgNVHSAEXzBdMFEGDCsGAQQBgjdMg30BATBB MD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0Rv Y3MvUmVwb3NpdG9yeS5odG0wCAYGZ4EMAQICMB8GA1UdIwQYMBaAFDtw0VPpdiWd YKjKZg/Gm65vVBZqMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATANBgkq hkiG9w0BAQwFAAOCAgEAO66gHO5yxCrIu+t8jUlivSDAuR0+hpuBlU0MLu2d4xS6 /9965bd5AyBIOcQyDvI8RPryfUSHL75JRwxdVhgEUKfa+khO7AOz49jDeIJxlJhf /N1u/4e78pGM4ExVZK0l6ZVEXi2rc+OO56+GE8tcUM0bJUuheB/gcMxHiWk8h197 TMMiLyaRjrKCsngdpv2sXHzkOQ2/K/DaT88CsBMD50w9dd1f8jdwK7QQEABqrHz9 wk61VrM2zsqEJE+rIV8riUtI6IoniOZVuSESCVg4gV2raI1Gwl3m7w8MZmAw6jyd nWuoMVDI3b9IQIEZo2ABaVkmmill2QGk2y+rJP9nCXn2E02R36s4lRmn2TtxQ5rn FREU0FbKq4B8Fr+UaoH8wlb73oLfnpwQMWA0zqo+BtS4+pmjl3t6cGWXQR1J6aZ6 oHrSMT+CwIh+eNHyCJAdM0ajimiDZkDi7jgDfGwTY2hwWUx3ppXGDdOSSTKVa8x2 T1t7K0G5KhTlXCYlMGM0wfByjEe9dUTmJOoKnWgntuIAVHYYRR7JMkLSLSPPPJVT EGEwGBZkpRS9IuPSP+DWCoLdo+cJnhgfXs2jLXIJei5rQYGKRBhTZpzx9pWgeVkT hwPMtbMfKvfIKWcgbK+EbRJkaaB1d/kpteDmVHslBFYBr62v97WGNtgNr/N/1lQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpcjVSEJ5k9hNQULYXlT 6QJeq6t1HTEy5Xr7AuEuD/UDzlRftbttg8/UNTgqk66gqh3jf+80poiTx1hURmHk FirBEeFlnkSismQNkQ+m8+FlgNTDhUbio5Lyjhj9G+dMZQPrgj5hC9Yd7Gi391s2 /hI/8UNmFLp2lV4/RYWWUYSL6fksL40zWAN/9NmyaCQAGD/01VNLzP1Uk0GhUkD4 G9UzQPqeziTOeJs0XOy2bMA3CZZOWt6t+90T384GpyAXsKivwthHSmMVR7bqlpV2 9/TodZMfoCOtSw8Bx3ZFSyLj3A53JLgmlElfpssdEkrDEAXgCCSu9hLH+ycIuB7l JQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1137365331040341043872857452245541800933084603 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 04' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 03:29:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-17 03:29:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fsa.prod.adu.msft.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24059806877818479840815541100203905172707578885075326010955605592410119284385127068678310803825804526483348796079420640553244132223377742328155445160076482573037100608605836269105168658114246454684869235165229230655121470279583529588676173452634182660795129020874641141888809082077594548742525255352286060675574550936657264392364896835201138099708929940135379334140085655620487618400365102720448290817884375680345346072274360042382734715179050161856977300818221362832515268075208764500530558434188311115395283540735625769599222954355883278726280509115577623270297422368573497195426287569441177508849291213757457818917 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6b152a5396a4cf7ba753311e3cd728b6dcb29b59 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa.prod.adu.msft.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fsa.prod.adu.msft.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3b70d153e976259d60a8ca660fc69bae6f54166a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 003baea01cee72c42ac8bbeb7c8d4962bd20c0b91d3e869b81954d0c2eed9de314baffdf7ae5b77903204839c4320ef23c44faf27d44872fbe49470c5d56180450a7dafa484eec03b3e3d8c378827194985ffcdd6eff87bbf2918ce04c5564ad25e995445e2dab73e38ee7af8613cb5c50cd1b254ba1781fe070cc4789693c875f7b4cc3222f26918eb282b2781da6fdac5c7ce4390dbf2bf0da4fcf02b01303e74c3d75dd5ff237702bb41010006aac7cfdc24eb556b336ceca84244fab215f2b894b48e88a2788e655b92112095838815dab688d46c25de6ef0f0c666030ea3c9d9d6ba83150c8ddbf48408119a360016959269a2965d901a4db2fab24ff670979f6134d91dfab389519a7d93b71439ae7151114d056caab807c16bf946a81fcc256fbde82df9e9c10316034ceaa3e06d4b8fa99a3977b7a706597411d49e9a67aa07ad2313f82c0887e78d1f208901d3346a38a68836640e2ee38037c6c13636870594c77a695c60dd3924932956bcc764f5b7b2b41b92a14e55c2625306334c1f0728c47bd7544e624ea0a9d6827b6e200547618451ec93242d22d23cf3c9553106130181664a514bd22e3d23fe0d60a82dda3e7099e181f5ecda32d72097a2e6b41818a441853669cf1f695a07959138703ccb5b31f2af7c82967206caf846d126469a07577f929b5e0e6547b25045601afadaff7b58636d80daff37fd654