www.windowsphone.com

- Microsoft Corporation -

Issued by Microsoft IT TLS CA 2

About this certificate

This digital certificate with serial number 20:00:00:d4:c4:db:16:99:8e:9a:31:9a:cf:00:00:00:00:d4:c4 was issued on by Microsoft Corporation.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 20:00:00:d4:c4:db:16:99:8e:9a:31:9a:cf:00:00:00:00:d4:c4
Serial Number (int): 713624129171448869450511413697122331000886468
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: df:0e:fa:33:b5:1f:1c:7f:85:9e:d4:82:1f:bf:0c:64:3f:9f:7a:b8
AuthorityKeyId: 91:9e:3b:44:6c:3d:57:9c:42:77:2a:34:d7:4f:d1:cc:4a:97:2c:da

Fingerprint (sha1): f9:91:cf:17:82:86:3c:85:15:fd:e1:b3:b5:47:e1:c2:54:c0:9b:7f
Fingerprint (sha256): 02:5a:1e:b5:84:94:5f:e0:fb:ac:05:86:0f:f6:a3:fa:c9:b5:e5:a2:c5:be:69:1e:95:cb:bb:c9:45:9d:f2:af

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%202.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl

Check the revocation status for certificate www.windowsphone.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.windowsphone.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prev.phonecompanion.windows.com
phonecompanion.windows.com
www.windowsphone.com
windowsphone.com
assets.windowsphone.com
resources.windowsphone.com
cdn-resources.windowsphone.com
cmsresources.windowsphone.com
cmspreviewresources.windowsphone.com

Other certificates including the domain name windowsphone.com

(limited to 100 certificates)
dgrepv2-frontend-ppe.trafficmanager.net
accesscontrol.windowsphone.com
images.partner.windowsphone.com
dgrepv2-frontend-ppe.trafficmanager.net
*.vo.msecnd.net
www.windowsphone.com
www.windowsphone.com
*.vo.msecnd.net
dgrepv2-frontend-prod.trafficmanager.net
*.vo.msecnd.net
*.windowsphone.com
workflowservice.dps.mp.microsoft.com
workflowservice.dps.mp.microsoft.com
dgrepv2-frontend-ppe.trafficmanager.net
dcpservice.windowsphone.com
dgrepv2-frontend-ppe.trafficmanager.net
storemanagement.microsoft.com
devx.windows.com
dgrepv2-frontend-ppe.trafficmanager.net
assets.windowsphone.com
*.vo.msecnd.net
*.windowsphone.com
storemanagement.microsoft.com
dgrepv2-frontend-ppe.trafficmanager.net
workflowservice.dps.mp.microsoft.com
*.vo.msecnd.net
simpleuserdeviceservice.windowsphone.com
api.windowsphone.com
www.windowsphone.com
dgrepv2-frontend-ppe.trafficmanager.net
*.windowsphone.com
*.windowsphone.com
nextrealms.windowsphone.com
workflowservice.dps.mp.microsoft.com
dcs-client.windowsphone.com
workflowservice.dps.mp.microsoft.com
dgrepv2-frontend-ppe.trafficmanager.net
www.windowsphone.com
discoveryservice.windowsphone.com
discoveryservice.windowsphone.com
*.scm.windowsphone.com
dgrepv2-frontend-ppe.trafficmanager.net
*.windowsphone.com
manualreview.dps.mp.microsoft.com
dgrepv2-frontend-ppe.trafficmanager.net
*.scm.windowsphone.com
dgrepv2-frontend-ppe.trafficmanager.net
*.vo.msecnd.net
workflowservice.dps.mp.microsoft.com
*.vo.msecnd.net
dgrepv2-frontend-ppe.trafficmanager.net
dgrepv2-frontend-prod.trafficmanager.net
dgrepv2-frontend-ppe.trafficmanager.net
workflowservice.dps.mp.microsoft.com
workflowservice.dps.mp.microsoft.com
workflowservice.dps.mp.microsoft.com
mockpreview.windowsphone.com
dgrepv2-frontend-ppe.trafficmanager.net
*.scm.windowsphone.com
*.vo.msecnd.net
workflowservice.dps.mp.microsoft.com
workflowservice.dps.mp.microsoft.com
devicecertificateservice.windowsphone.com
dgrepv2-frontend-ppe.trafficmanager.net
dgrepv2-frontend-ppe.trafficmanager.net
*.moservices.microsoft.com
ProdGemini.windowsphone.com
*.vo.msecnd.net
workflowservice.dps.mp.microsoft.com
dcpservice.windowsphone.com
workflowservice.dps.mp.microsoft.com
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
workflowservice.dps.mp.microsoft.com
dgrepv2-frontend-ppe.trafficmanager.net
preview.windowsphone.com
dgrepv2-frontend-ppe.trafficmanager.net
dgrepv2-frontend-ppe.trafficmanager.net
oaspcontent.microsoft.com
feedback.msdn.microsoft.com
loc.cmspreview.windowsphone.com
workflowservice.dps.mp.microsoft.com
dev.windows.com
www.windowsphone.com
oaspcontent.microsoft.com
*.windowsphone.com
wifiservice.windowsphone.com
oas.support.microsoft.com
beta.windowsphone.com
*.vo.msecnd.net
*.windowsphone.com
workflowservice.dps.mp.microsoft.com
*.vo.msecnd.net
dgrepv2-frontend-ppe.trafficmanager.net
manualreview.dps.mp.microsoft.com
manualreview.dps.mp.microsoft.com
www.windowsphone.com
workflowservice.dps.mp.microsoft.com
partner.windowsphone.com

Certificate

The complete raw certificate details for www.windowsphone.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BeOqe2WTColHE+SgJQS
A6VY3lGVhSYCJXKyT9V730BRw3Bw6SWuJgoEez191QMQ8aFl2SsIRsuz5cvA9N68
HvtGQ8tI1ieGG73dfwAtmps6hgIOSN9c4Asd1ol4H53huYZusarlBfxAQwR+YOWg
xZVQr9aTst9Z9FEOTdrBfeFk0+cWZTDPosujcmCQuqO3YTN1xhVJ+lbrQQr6qs/J
o/lpkpyib7WbFo5Ud9/iqUwe4gZ3jcqNytC94R30H4F273ZJk3CWdqidJ6xT+B9T
bacIn+V7YqrmuDhGCZnRklb/3Sm0XV/e/ucqbZvo14x6K+8VDze2ibQcIL9QJF+C
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 713624129171448869450511413697122331000886468
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-16 17:56:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 17:56:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.windowsphone.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28288996840314642258205016474946293697118248574032328689250241565112458295198333154740368869141764812165863856145913284408276371165746077245733556406379624689679003490302063587637844852770556605218832139046899392228211707528815704402123726612346474285731930289085866932353754502058478222950518289699756574129332790385752985773686968205991406022535478621843536819629161371375218670194461787479939384338349747318088811240018263229427078050108678564496555626687947964453894776960750424846398695915748990949191566756706122589058457530546855388886542499227817855619937879203023526714799408295382601626619160945958447973097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (258 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prev.phonecompanion.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonecompanion.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-resources.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsresources.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmspreviewresources.windowsphone.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df0efa33b51f1c7f859ed4821fbf0c643f9f7ab8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 919e3b446c3d579c42772a34d74fd1cc4a972cda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%202.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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