wdatpprd-eus3.securitycenter.windows.com

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 02

About this certificate

This digital certificate with serial number 33:00:d1:76:3a:c8:f3:d7:b7:1e:37:6e:2a:00:00:00:d1:76:3a was issued on by Microsoft Corporation.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:d1:76:3a:c8:f3:d7:b7:1e:37:6e:2a:00:00:00:d1:76:3a
Serial Number (int): 1137409281293880777897153012703080609362310714
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 68:e1:6a:85:f8:be:d3:64:0d:52:cf:0f:54:88:99:43:23:e6:35:54
AuthorityKeyId: 00:ab:91:fc:21:62:26:97:9a:a8:79:1b:61:41:90:60:a9:62:67:fd

Fingerprint (sha1): da:44:77:c2:89:45:01:a8:9f:7a:43:40:a3:c4:2e:90:fc:b5:bd:88
Fingerprint (sha256): 02:61:91:2d:5a:28:a6:d0:b0:c6:99:56:b1:1f:2f:00:14:f5:63:97:86:bb:bf:16:e0:95:65:e4:b9:52:e8:98

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl

Check the revocation status for certificate wdatpprd-eus3.securitycenter.windows.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wdatpprd-eus3.securitycenter.windows.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wdatpprd-eus3.securitycenter.windows.com
wdatpprd-cus3.securitycenter.windows.com
wdatpprd-us3.securitycenter.windows.com
mde-cfgmgmt-apiuniexp-prd-eus3.securitycenter.windows.com
mde-cfgmgmt-apiuniexp-prd-cus3.securitycenter.windows.com

Other certificates including the domain name windows.com

(limited to 100 certificates)
wdatpprd-jpe.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
ingress.wdatpstg.windows.com
wdatpprd-cin.securitycenter.windows.com
wdatpprd-weu3.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-cus.securitycenter.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-weu.securitycenter.windows.com
wdatpprd-sin.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-neu.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-neu.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-cin.securitycenter.windows.com
CyberDataPrefetcher-PRD.trafficmanager.net
andrew.rancher.poc.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-aus.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
ti.securitycenter.windows.com
www.windowsphone.com
wdatpprd-sin.securitycenter.windows.com
*.wns.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-cus3.securitycenter.windows.com
CyberDataCtrl-PRD.trafficmanager.net
wdatpprd-cus3.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
CyberDataPrefetcher-PRD.trafficmanager.net
wdatpprd-cane.securitycenter.windows.com
wdatpprd-weu.securitycenter.windows.com
wdatpprd-uks.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
www.windowsphone.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-neu3.securitycenter.windows.com
heartbeat.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-jpe.securitycenter.windows.com
ineportalapi-stg.trafficmanager.net
wdatpprd-cus3.securitycenter.windows.com
OnboardingService-PRD.trafficmanager.net
cache.datamart.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-cin.securitycenter.windows.com
WdatpApi-PRD.trafficmanager.net
akamai-san15.exacttarget.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-cus3.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
csharp.net
wdatpstg-eus2.securitycenter.windows.com
insidersurveys.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-sin.securitycenter.windows.com
wdatpprd-ukw.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-neu3.securitycenter.windows.com
wdatpprd-swn0a.securitycenter.windows.com
wdatpprd-cus.securitycenter.windows.com
assets.activity.windows.com
wdatpprd-cus.securitycenter.windows.com
wdatpprd-cus.securitycenter.windows.com
wdatpprd-weu.securitycenter.windows.com
wdatpmdev-eus1.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-weu.securitycenter.windows.com
wdatpprd-neu.securitycenter.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
wdatpprd-neu3.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-cin.securitycenter.windows.com
wdatpprd-ukw.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-swn0a.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-aue.securitycenter.windows.com
wdatpprd-jpe.securitycenter.windows.com
wdatpprd-cus3.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-sin.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-swn0a.securitycenter.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com

Certificate

The complete raw certificate details for wdatpprd-eus3.securitycenter.windows.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph75sgDBbgF41In1PIjE
17xredh5MnSoxBqx1ZN+Z/T7DcIIlsx/KDiJOo9WsEbs3R+HZ4keBqLh/3MFixQX
3zuHuPM1WOz+yGkCgAKNUzgJAcGLxcW3asLV+D3kG/NQTQ3aayvAH8RW8/7XXy53
oZ1OnFZ74XV3vviQuE/qHqp1CT94NLZnu1uVni+tCfk/vaOGwVgHgz++8oxM4EBz
Fu0UMqmID28BNuAWzCcQjtoFd4UJ4rQXYK505Vv4sc2qzbWH1FX4CJRfl9K5EedZ
cSvjudwCN1QyqJsdfZVpXBjLGA0ZcIdRLMvAQm+7CRkp9LPr+cIpQaUfdeAuNrWF
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137409281293880777897153012703080609362310714
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-03 15:25:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wdatpprd-eus3.securitycenter.windows.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20970833149765553393927939457502873091773881305226767583578419714582314649143079426589405710168362403661024443417412803436599122844721969892177186510008540573785684628384776058888916944193076292945613098027777507412265161163137581200588169217298391495461931026153440874231008767651515170699081215914657469792320349264035561700584124008233849152785694074502047247855135108280809541778992514222818410009672767061783656856469099731765294964660242475146164459569879572679251087757534921967194651913741579184025350853241912520417226537925669835787108520747914366368760663495922639752875797456857856684772213287868043724057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68e16a85f8bed3640d52cf0f5488994323e63554
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdatpprd-eus3.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdatpprd-cus3.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdatpprd-us3.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mde-cfgmgmt-apiuniexp-prd-eus3.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mde-cfgmgmt-apiuniexp-prd-cus3.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 00ab91fc216226979aa8791b61419060a96267fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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