DmsClientForStx.msoppe.msft.net
Issued by Microsoft IT TLS CA 1
About this certificate
This digital certificate with serial number 7b:00:01:89:4e:a4:bf:aa:aa:1d:cb:9b:d5:00:00:00:01:89:4e was issued on by Microsoft Corporation.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Certificate Subject
CN=DmsClientForStx.msoppe.msft.net
Microsoft Corporation
Organization:
Microsoft Corporation
Organization unit: Microsoft IT
Organization unit: Microsoft IT
State / Province:
Washington
Locality: Redmond
Country: US
Locality: Redmond
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 7b:00:01:89:4e:a4:bf:aa:aa:1d:cb:9b:d5:00:00:00:01:89:4eSerial Number (int): 2742992182214209645418696815704389656776902990
Serial Number lenght: 151 bits, 19 octets
SubjectKeyId: aa:51:05:98:e0:9e:d2:ec:0a:de:31:6d:1e:0f:13:f1:7f:3d:d9:82
AuthorityKeyId: 58:88:9f:d6:dc:9c:48:22:b7:14:3e:ff:84:88:e8:e6:85:ff:fa:7d
Fingerprint (sha1): 73:af:6e:c9:ec:03:79:64:d1:77:cf:aa:b2:33:69:3d:ff:58:c3:94
Fingerprint (sha256): 02:73:a6:67:9c:42:82:2b:6c:56:6b:13:6f:d5:c5:5f:d5:20:fe:cf:f5:3b:e7:e9:af:08:94:33:7e:c8:5a:bc
Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%201.crt
Revocation information
OCSP Server: http://ocsp.msocsp.comCRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl
Check the revocation status for certificate DmsClientForStx.msoppe.msft.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for DmsClientForStx.msoppe.msft.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dmsclientforstx.msoppe.msft.net
Other certificates including the domain name msft.net
(limited to 100 certificates)
liveid-idn.msoprd.msft.net
swe.prd.msft.net
015DAM1L40SE02.015d.mgd.msft.net
XlensClient.msoprd.msft.net
TestCert.msoppe.msft.net
19153.infrastructure.network10367.prod.msft.net
195126.ds.network12472.dprodmgd106.msft.net
am3027dl50wa1a.027D.mgd.msft.net
187079.infrastructure.network11301.dprodmgd104.msft.net
18513.ds.network880.prod.msft.net
provisioningandblocktest.msoppe.msft.net
FaultAgentClientForMsodsReplicasInProdAzure.msoprd.msft.net
12734.ds.network189.prod.msft.net
19905.federatedsearch.network10526.prod.msft.net
18629.ds.network890.prod.msft.net
replicamonitorcluster-prod-p155.msoprd.msft.net
rnz.swe.prd.msft.net
msodsdptclient.msoprd.msft.net
ProvisionAndSetCurrentTestCert.msoprd.msft.net
20034.ds.network10590.prod.msft.net
20178.ds.network10613.prod.msft.net
19665.sql.network10494.prod.msft.net
14297.sql.network302.prod.msft.net
jarvis.msftcloudes.com
191366.sql.network12015.dprodmgd105.msft.net
187737.infrastructure.network11454.dprodmgd104.msft.net
19830.ds.network10461.prod.msft.net
replicamonitorcluster-prod-p138.msoprd.msft.net
querylive.msoprd.msft.net
1787.network.network1906.edog.msft.net
NationalCloudSyncBlackforestToPPE.msoppe.msft.net
187521.federatedsearch.network11382.dprodmgd104.msft.net
mtf-azureemailorchestrator.msoppe.msft.net
137.pmachine.zone137.prod.msft.net
rocs-int-actions.dc.ad.msft.net
20439.admindebug.network10734.prod.msft.net
187838.content.network11471.dprodmgd104.msft.net
56251.infrastructure.network3629.dprod.msft.net
188929.content.network11731.dprodmgd104.msft.net
6893.pmachine.zone6893.dprodmgd104.msft.net
was.062d.dedicated.lync.com
fsa.prod.adu.msft.net
13975.infracore.network326.prod.msft.net
18443.federatedsearch.network860.prod.msft.net
ams.prod.adu.msft.net
187657.ds.network11430.dprodmgd104.msft.net
187855.content.network11478.dprodmgd104.msft.net
20948.content.network379.prod.msft.net
msaliveid.msoppe.msft.net
21043.federatedsearch.network10724.prod.msft.net
192389.sql.network12267.dprodmgd105.msft.net
17367.ds.network484.prod.msft.net
CertificateConfigSigning.msoprd.msft.net
21197.ds.network13128.prod.msft.net
BuildTrackingClientForExpress.msoppe.msft.net
883.pmachine.zone883.dprod.msft.net
aadg.int.windows.net
187792.network.network11460.dprodmgd104.msft.net
*.dc.ad.msft.net
jarvis-int.msftcloudes.com
191195.infrastructure.network11881.dprodmgd105.msft.net
CertOnboartingTest.msoppe.msft.net
dals.int.adu.msft.net
187605.content.network11404.dprodmgd104.msft.net
187844.ds.network11477.dprodmgd104.msft.net
191330.federatedsearch.network11923.dprodmgd105.msft.net
CommandAgent-ADR-P25.msoprd.msft.net
16879.infracore.network360.prod.msft.net
OnboardingWorkflowProviderNameTestCert.msoppe.msft.net
17914.infracore.network752.prod.msft.net
18732.sql.network10267.prod.msft.net
FaultAgentClientForMSODS.msoppe.msft.net
18552.federatedsearch.network908.prod.msft.net
AzureThrottleClient.msoprd.msft.net
sfm.genevametrics.msoppe.msft.net
18205.content.network714.prod.msft.net
195022.infrastructure.network12462.dprodmgd106.msft.net
187498.content.network11374.dprodmgd104.msft.net
20407.ds.network10647.prod.msft.net
fsa.prod.adu.msft.net
21073.ds.network10600.prod.msft.net
187825.content.network11474.dprodmgd104.msft.net
CertificateConfigSigning.msoppe.msft.net
replicamonitorcluster-prod-p40.msoprd.msft.net
846.pmachine.zone846.dprod.msft.net
DMSClientForConfigRolloutFunctionForBlackForest.msoprd.msft.net
19970.admindebug.network10587.prod.msft.net
DmsClientForStx.msoppe.msft.net
jarvis-int.msftcloudes.com
sobo.prod.adu.msft.net
MSODSAdMetricsClientForThrottleRunner.msoprd.msft.net
service.032d.mgd.msft.net
20383.content.network10653.prod.msft.net
GeoBackupReplicationKeyVaultClientCert.ar.msogov.us.msft.net
test.azureservicedeploy.msft.net
mcs.prod.adu.msft.net
20726.sql.network10789.prod.msft.net
DmsClientForAzureScheduledJobs.msoppe.msft.net
dals.prod.adu.msft.net
SecurityMonitoringTestCertificate.msoppe.msft.net
swe.prd.msft.net
015DAM1L40SE02.015d.mgd.msft.net
XlensClient.msoprd.msft.net
TestCert.msoppe.msft.net
19153.infrastructure.network10367.prod.msft.net
195126.ds.network12472.dprodmgd106.msft.net
am3027dl50wa1a.027D.mgd.msft.net
187079.infrastructure.network11301.dprodmgd104.msft.net
18513.ds.network880.prod.msft.net
provisioningandblocktest.msoppe.msft.net
FaultAgentClientForMsodsReplicasInProdAzure.msoprd.msft.net
12734.ds.network189.prod.msft.net
19905.federatedsearch.network10526.prod.msft.net
18629.ds.network890.prod.msft.net
replicamonitorcluster-prod-p155.msoprd.msft.net
rnz.swe.prd.msft.net
msodsdptclient.msoprd.msft.net
ProvisionAndSetCurrentTestCert.msoprd.msft.net
20034.ds.network10590.prod.msft.net
20178.ds.network10613.prod.msft.net
19665.sql.network10494.prod.msft.net
14297.sql.network302.prod.msft.net
jarvis.msftcloudes.com
191366.sql.network12015.dprodmgd105.msft.net
187737.infrastructure.network11454.dprodmgd104.msft.net
19830.ds.network10461.prod.msft.net
replicamonitorcluster-prod-p138.msoprd.msft.net
querylive.msoprd.msft.net
1787.network.network1906.edog.msft.net
NationalCloudSyncBlackforestToPPE.msoppe.msft.net
187521.federatedsearch.network11382.dprodmgd104.msft.net
mtf-azureemailorchestrator.msoppe.msft.net
137.pmachine.zone137.prod.msft.net
rocs-int-actions.dc.ad.msft.net
20439.admindebug.network10734.prod.msft.net
187838.content.network11471.dprodmgd104.msft.net
56251.infrastructure.network3629.dprod.msft.net
188929.content.network11731.dprodmgd104.msft.net
6893.pmachine.zone6893.dprodmgd104.msft.net
was.062d.dedicated.lync.com
fsa.prod.adu.msft.net
13975.infracore.network326.prod.msft.net
18443.federatedsearch.network860.prod.msft.net
ams.prod.adu.msft.net
187657.ds.network11430.dprodmgd104.msft.net
187855.content.network11478.dprodmgd104.msft.net
20948.content.network379.prod.msft.net
msaliveid.msoppe.msft.net
21043.federatedsearch.network10724.prod.msft.net
192389.sql.network12267.dprodmgd105.msft.net
17367.ds.network484.prod.msft.net
CertificateConfigSigning.msoprd.msft.net
21197.ds.network13128.prod.msft.net
BuildTrackingClientForExpress.msoppe.msft.net
883.pmachine.zone883.dprod.msft.net
aadg.int.windows.net
187792.network.network11460.dprodmgd104.msft.net
*.dc.ad.msft.net
jarvis-int.msftcloudes.com
191195.infrastructure.network11881.dprodmgd105.msft.net
CertOnboartingTest.msoppe.msft.net
dals.int.adu.msft.net
187605.content.network11404.dprodmgd104.msft.net
187844.ds.network11477.dprodmgd104.msft.net
191330.federatedsearch.network11923.dprodmgd105.msft.net
CommandAgent-ADR-P25.msoprd.msft.net
16879.infracore.network360.prod.msft.net
OnboardingWorkflowProviderNameTestCert.msoppe.msft.net
17914.infracore.network752.prod.msft.net
18732.sql.network10267.prod.msft.net
FaultAgentClientForMSODS.msoppe.msft.net
18552.federatedsearch.network908.prod.msft.net
AzureThrottleClient.msoprd.msft.net
sfm.genevametrics.msoppe.msft.net
18205.content.network714.prod.msft.net
195022.infrastructure.network12462.dprodmgd106.msft.net
187498.content.network11374.dprodmgd104.msft.net
20407.ds.network10647.prod.msft.net
fsa.prod.adu.msft.net
21073.ds.network10600.prod.msft.net
187825.content.network11474.dprodmgd104.msft.net
CertificateConfigSigning.msoppe.msft.net
replicamonitorcluster-prod-p40.msoprd.msft.net
846.pmachine.zone846.dprod.msft.net
DMSClientForConfigRolloutFunctionForBlackForest.msoprd.msft.net
19970.admindebug.network10587.prod.msft.net
DmsClientForStx.msoppe.msft.net
jarvis-int.msftcloudes.com
sobo.prod.adu.msft.net
MSODSAdMetricsClientForThrottleRunner.msoprd.msft.net
service.032d.mgd.msft.net
20383.content.network10653.prod.msft.net
GeoBackupReplicationKeyVaultClientCert.ar.msogov.us.msft.net
test.azureservicedeploy.msft.net
mcs.prod.adu.msft.net
20726.sql.network10789.prod.msft.net
DmsClientForAzureScheduledJobs.msoppe.msft.net
dals.prod.adu.msft.net
SecurityMonitoringTestCertificate.msoppe.msft.net
Certificate
The complete raw certificate details for DmsClientForStx.msoppe.msft.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG5TCCBM2gAwIBAgITewABiU6kv6qqHcub1QAAAAGJTjANBgkqhkiG9w0BAQsF ADCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UE CxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDEw HhcNMTgwNDI3MDkwNDAzWhcNMjAwNDI3MDkwNDAzWjAqMSgwJgYDVQQDEx9EbXND bGllbnRGb3JTdHgubXNvcHBlLm1zZnQubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAufrxGRPtRbuthURL5F89WcP41uA3CTwUdEDEWw5a/peX8B0n hUX2Qoo65+UeTbs+rwg73bNrVOe5PAUO6HP77esnVqkr3T2il4+9jpl5hbj7DoSd UNaVD7TYn596tRws0UNlsryLBd6WOaADe8K1h/SxgSugkNWSoV9FS2N2DBDcJA8w jy6NXQ2JBX09ZVqYRk12UD6fNMWAgub3ZvtyFUmwDNZWOp3FH/9pLqC6V4PuqG5D AyrGrv0rShq8+j+FSMR4IPVIm76kxpn5ajGqY/Zc+Apfw7e9awmV4Va/CvRVFTnG AczfzyV8kIi7+ArQDwZ073wezOSXT8E1EQl9zQIDAQABo4ICoDCCApwwEwYKKwYB BAHWeQIEAwEB/wQCBQAwJwYJKwYBBAGCNxUKBBowGDAKBggrBgEFBQcDAjAKBggr BgEFBQcDATA+BgkrBgEEAYI3FQcEMTAvBicrBgEEAYI3FQiH2oZ1g+7ZAYLJhRuB tZ5hhfTrYIFdhNLfQoLnk3oCAWQCAR0wgYUGCCsGAQUFBwEBBHkwdzBRBggrBgEF BQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvTWljcm9z b2Z0JTIwSVQlMjBUTFMlMjBDQSUyMDEuY3J0MCIGCCsGAQUFBzABhhZodHRwOi8v b2NzcC5tc29jc3AuY29tMB0GA1UdDgQWBBSqUQWY4J7S7AreMW0eDxPxfz3ZgjAL BgNVHQ8EBAMCBLAwKgYDVR0RBCMwIYIfZG1zY2xpZW50Zm9yc3R4Lm1zb3BwZS5t c2Z0Lm5ldDCBrAYDVR0fBIGkMIGhMIGeoIGboIGYhktodHRwOi8vbXNjcmwubWlj cm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUy MENBJTIwMS5jcmyGSWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3Jw L2NybC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUyMENBJTIwMS5jcmwwTQYDVR0gBEYw RDBCBgkrBgEEAYI3KgEwNTAzBggrBgEFBQcCARYnaHR0cDovL3d3dy5taWNyb3Nv ZnQuY29tL3BraS9tc2NvcnAvY3BzMB8GA1UdIwQYMBaAFFiIn9bcnEgitxQ+/4SI 6OaF//p9MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATANBgkqhkiG9w0B AQsFAAOCAgEAICNXFR27kYmCGHKGtGAp2HBqtKo5iO2Biq4Pkzw5rzkEVcIpNPAl dbyod1XOWF5fQKpJc5qD0lX5WAkVw9fROQ0w+PEAy2/YKon8PyT2UL5rafGEObsp tDFlp8l/aJK6kgQx41aSOE/Yf/34X2KE1KovNQ0WcfDTUxOrko/2E9nefIePW4xC /VlPAXfuQ5TmrtkL+lGHkoZX3/BTzHSJDfdsJELxyiiCBe34IKn37csMoETSzQng oPeF5h7PQepn/gNpgczilpDWwFy0CxTLbMOXrlc1aGzvg92B7ycUQyt3orOMoHZ5 aqLp+13IXTh4QVzx9I7EMjOBcSHpIKFZin1PxRo7nggfEERajoFOLLwsoqKjvyRN KvupWBMwDpxBTyJs4o2wFOmQgUnhR1sUOMZVZ8j9W9NLrtg1AtJjSWimyX7GW22W 0Mi9DmmUP9+z7H5xmRzB9J96FgsmTbBTooWX7FDzm7IFVa5r7BfPL/XYcsIfDZl6 pyBlJFvO4pfsR/WRaXIAKoQ5BZChMqSiZdVdL0DZcEpY1kBM0FtD1Q8aGGelkWrg 7wHYe3UkxolH6nTmPs40imwZekoT0+CIEJO9S54yN6xZI3yyEdOWCYVpoCvOblju pcs+9LCDyEp32Ido+vjI7ZT/v7huJ/mOC9eOzi9V3fHnEioxBAygaXY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufrxGRPtRbuthURL5F89 WcP41uA3CTwUdEDEWw5a/peX8B0nhUX2Qoo65+UeTbs+rwg73bNrVOe5PAUO6HP7 7esnVqkr3T2il4+9jpl5hbj7DoSdUNaVD7TYn596tRws0UNlsryLBd6WOaADe8K1 h/SxgSugkNWSoV9FS2N2DBDcJA8wjy6NXQ2JBX09ZVqYRk12UD6fNMWAgub3Zvty FUmwDNZWOp3FH/9pLqC6V4PuqG5DAyrGrv0rShq8+j+FSMR4IPVIm76kxpn5ajGq Y/Zc+Apfw7e9awmV4Va/CvRVFTnGAczfzyV8kIi7+ArQDwZ073wezOSXT8E1EQl9 zQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2742992182214209645418696815704389656776902990 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-27 09:04:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 09:04:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DmsClientForStx.msoppe.msft.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23477830426833454995836130990949028945444261364720863886003668850327801731491666027901947895076013722545316897635689389709593054592122307044783982004287202110925588664143660730592462058535119619499366292342292192204013268938556743901240793949848634961193282183711418817166539131247147594497865082883391162634950337641734808224529000376127233614863515188741039304800492676814590018989674641159818249336071069069226546777225660440446366263086370381573770222364046295924027715457156442420291899547831134462161713242947890683585460663009029622961911439896977329129667549974229567928840599748579297660756471934301936123341 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%201.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) aa510598e09ed2ec0ade316d1e0f13f17f3dd982 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmsclientforstx.msoppe.msft.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 58889fd6dc9c4822b7143eff8488e8e685fffa7d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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