dals.prod.adu.msft.net
- Microsoft Corporation -
Issued by Microsoft Azure RSA TLS Issuing CA 04
About this certificate
This digital certificate with serial number 33:00:50:05:e3:f9:f7:a4:e0:7f:e8:16:e2:00:00:00:50:05:e3 was issued on by Microsoft Corporation.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Microsoft Corporation
Organization:
Microsoft Corporation
State / Province:
WA
Locality: Redmond
Country: US
Locality: Redmond
Country: US
Microsoft Corporation
Organization:
Microsoft Corporation
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 33:00:50:05:e3:f9:f7:a4:e0:7f:e8:16:e2:00:00:00:50:05:e3Serial Number (int): 1137365235544276761481779243427165582455211491
Serial Number lenght: 150 bits, 19 octets
SubjectKeyId: b3:4f:35:ee:a9:3b:27:41:44:be:48:1e:0f:da:fd:5b:fd:46:c2:f3
AuthorityKeyId: 3b:70:d1:53:e9:76:25:9d:60:a8:ca:66:0f:c6:9b:ae:6f:54:16:6a
Fingerprint (sha1): 86:68:40:8e:a0:37:4c:b1:dd:f2:3e:88:ec:80:00:4c:32:f6:31:a8
Fingerprint (sha256): 02:b6:69:d7:10:cf:b1:f4:97:e7:50:34:24:2f:8f:00:9f:64:bb:53:3d:96:28:4d:4f:2d:3f:d4:97:1b:44:ed
Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt
Revocation information
OCSP Server: http://oneocsp.microsoft.com/ocspCRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl
Check the revocation status for certificate dals.prod.adu.msft.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dals.prod.adu.msft.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
12 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dals.prod.adu.msft.net
*.dals.prod.adu.msft.net
*.dals.prod.adu.msft.net
Other certificates including the domain name msft.net
(limited to 100 certificates)
liveid-idn.msoprd.msft.net
swe.prd.msft.net
015DAM1L40SE02.015d.mgd.msft.net
XlensClient.msoprd.msft.net
TestCert.msoppe.msft.net
19153.infrastructure.network10367.prod.msft.net
195126.ds.network12472.dprodmgd106.msft.net
am3027dl50wa1a.027D.mgd.msft.net
187079.infrastructure.network11301.dprodmgd104.msft.net
18513.ds.network880.prod.msft.net
provisioningandblocktest.msoppe.msft.net
FaultAgentClientForMsodsReplicasInProdAzure.msoprd.msft.net
12734.ds.network189.prod.msft.net
19905.federatedsearch.network10526.prod.msft.net
18629.ds.network890.prod.msft.net
replicamonitorcluster-prod-p155.msoprd.msft.net
rnz.swe.prd.msft.net
msodsdptclient.msoprd.msft.net
ProvisionAndSetCurrentTestCert.msoprd.msft.net
20034.ds.network10590.prod.msft.net
20178.ds.network10613.prod.msft.net
19665.sql.network10494.prod.msft.net
14297.sql.network302.prod.msft.net
jarvis.msftcloudes.com
191366.sql.network12015.dprodmgd105.msft.net
187737.infrastructure.network11454.dprodmgd104.msft.net
19830.ds.network10461.prod.msft.net
replicamonitorcluster-prod-p138.msoprd.msft.net
querylive.msoprd.msft.net
1787.network.network1906.edog.msft.net
NationalCloudSyncBlackforestToPPE.msoppe.msft.net
187521.federatedsearch.network11382.dprodmgd104.msft.net
mtf-azureemailorchestrator.msoppe.msft.net
137.pmachine.zone137.prod.msft.net
rocs-int-actions.dc.ad.msft.net
20439.admindebug.network10734.prod.msft.net
187838.content.network11471.dprodmgd104.msft.net
56251.infrastructure.network3629.dprod.msft.net
188929.content.network11731.dprodmgd104.msft.net
6893.pmachine.zone6893.dprodmgd104.msft.net
was.062d.dedicated.lync.com
fsa.prod.adu.msft.net
13975.infracore.network326.prod.msft.net
18443.federatedsearch.network860.prod.msft.net
ams.prod.adu.msft.net
187657.ds.network11430.dprodmgd104.msft.net
187855.content.network11478.dprodmgd104.msft.net
20948.content.network379.prod.msft.net
msaliveid.msoppe.msft.net
21043.federatedsearch.network10724.prod.msft.net
192389.sql.network12267.dprodmgd105.msft.net
17367.ds.network484.prod.msft.net
CertificateConfigSigning.msoprd.msft.net
21197.ds.network13128.prod.msft.net
BuildTrackingClientForExpress.msoppe.msft.net
883.pmachine.zone883.dprod.msft.net
aadg.int.windows.net
187792.network.network11460.dprodmgd104.msft.net
*.dc.ad.msft.net
jarvis-int.msftcloudes.com
191195.infrastructure.network11881.dprodmgd105.msft.net
CertOnboartingTest.msoppe.msft.net
dals.int.adu.msft.net
187605.content.network11404.dprodmgd104.msft.net
187844.ds.network11477.dprodmgd104.msft.net
191330.federatedsearch.network11923.dprodmgd105.msft.net
CommandAgent-ADR-P25.msoprd.msft.net
16879.infracore.network360.prod.msft.net
OnboardingWorkflowProviderNameTestCert.msoppe.msft.net
17914.infracore.network752.prod.msft.net
18732.sql.network10267.prod.msft.net
FaultAgentClientForMSODS.msoppe.msft.net
18552.federatedsearch.network908.prod.msft.net
AzureThrottleClient.msoprd.msft.net
sfm.genevametrics.msoppe.msft.net
18205.content.network714.prod.msft.net
195022.infrastructure.network12462.dprodmgd106.msft.net
187498.content.network11374.dprodmgd104.msft.net
20407.ds.network10647.prod.msft.net
fsa.prod.adu.msft.net
21073.ds.network10600.prod.msft.net
187825.content.network11474.dprodmgd104.msft.net
CertificateConfigSigning.msoppe.msft.net
replicamonitorcluster-prod-p40.msoprd.msft.net
846.pmachine.zone846.dprod.msft.net
DMSClientForConfigRolloutFunctionForBlackForest.msoprd.msft.net
19970.admindebug.network10587.prod.msft.net
DmsClientForStx.msoppe.msft.net
jarvis-int.msftcloudes.com
sobo.prod.adu.msft.net
MSODSAdMetricsClientForThrottleRunner.msoprd.msft.net
service.032d.mgd.msft.net
20383.content.network10653.prod.msft.net
GeoBackupReplicationKeyVaultClientCert.ar.msogov.us.msft.net
test.azureservicedeploy.msft.net
mcs.prod.adu.msft.net
20726.sql.network10789.prod.msft.net
DmsClientForAzureScheduledJobs.msoppe.msft.net
dals.prod.adu.msft.net
SecurityMonitoringTestCertificate.msoppe.msft.net
swe.prd.msft.net
015DAM1L40SE02.015d.mgd.msft.net
XlensClient.msoprd.msft.net
TestCert.msoppe.msft.net
19153.infrastructure.network10367.prod.msft.net
195126.ds.network12472.dprodmgd106.msft.net
am3027dl50wa1a.027D.mgd.msft.net
187079.infrastructure.network11301.dprodmgd104.msft.net
18513.ds.network880.prod.msft.net
provisioningandblocktest.msoppe.msft.net
FaultAgentClientForMsodsReplicasInProdAzure.msoprd.msft.net
12734.ds.network189.prod.msft.net
19905.federatedsearch.network10526.prod.msft.net
18629.ds.network890.prod.msft.net
replicamonitorcluster-prod-p155.msoprd.msft.net
rnz.swe.prd.msft.net
msodsdptclient.msoprd.msft.net
ProvisionAndSetCurrentTestCert.msoprd.msft.net
20034.ds.network10590.prod.msft.net
20178.ds.network10613.prod.msft.net
19665.sql.network10494.prod.msft.net
14297.sql.network302.prod.msft.net
jarvis.msftcloudes.com
191366.sql.network12015.dprodmgd105.msft.net
187737.infrastructure.network11454.dprodmgd104.msft.net
19830.ds.network10461.prod.msft.net
replicamonitorcluster-prod-p138.msoprd.msft.net
querylive.msoprd.msft.net
1787.network.network1906.edog.msft.net
NationalCloudSyncBlackforestToPPE.msoppe.msft.net
187521.federatedsearch.network11382.dprodmgd104.msft.net
mtf-azureemailorchestrator.msoppe.msft.net
137.pmachine.zone137.prod.msft.net
rocs-int-actions.dc.ad.msft.net
20439.admindebug.network10734.prod.msft.net
187838.content.network11471.dprodmgd104.msft.net
56251.infrastructure.network3629.dprod.msft.net
188929.content.network11731.dprodmgd104.msft.net
6893.pmachine.zone6893.dprodmgd104.msft.net
was.062d.dedicated.lync.com
fsa.prod.adu.msft.net
13975.infracore.network326.prod.msft.net
18443.federatedsearch.network860.prod.msft.net
ams.prod.adu.msft.net
187657.ds.network11430.dprodmgd104.msft.net
187855.content.network11478.dprodmgd104.msft.net
20948.content.network379.prod.msft.net
msaliveid.msoppe.msft.net
21043.federatedsearch.network10724.prod.msft.net
192389.sql.network12267.dprodmgd105.msft.net
17367.ds.network484.prod.msft.net
CertificateConfigSigning.msoprd.msft.net
21197.ds.network13128.prod.msft.net
BuildTrackingClientForExpress.msoppe.msft.net
883.pmachine.zone883.dprod.msft.net
aadg.int.windows.net
187792.network.network11460.dprodmgd104.msft.net
*.dc.ad.msft.net
jarvis-int.msftcloudes.com
191195.infrastructure.network11881.dprodmgd105.msft.net
CertOnboartingTest.msoppe.msft.net
dals.int.adu.msft.net
187605.content.network11404.dprodmgd104.msft.net
187844.ds.network11477.dprodmgd104.msft.net
191330.federatedsearch.network11923.dprodmgd105.msft.net
CommandAgent-ADR-P25.msoprd.msft.net
16879.infracore.network360.prod.msft.net
OnboardingWorkflowProviderNameTestCert.msoppe.msft.net
17914.infracore.network752.prod.msft.net
18732.sql.network10267.prod.msft.net
FaultAgentClientForMSODS.msoppe.msft.net
18552.federatedsearch.network908.prod.msft.net
AzureThrottleClient.msoprd.msft.net
sfm.genevametrics.msoppe.msft.net
18205.content.network714.prod.msft.net
195022.infrastructure.network12462.dprodmgd106.msft.net
187498.content.network11374.dprodmgd104.msft.net
20407.ds.network10647.prod.msft.net
fsa.prod.adu.msft.net
21073.ds.network10600.prod.msft.net
187825.content.network11474.dprodmgd104.msft.net
CertificateConfigSigning.msoppe.msft.net
replicamonitorcluster-prod-p40.msoprd.msft.net
846.pmachine.zone846.dprod.msft.net
DMSClientForConfigRolloutFunctionForBlackForest.msoprd.msft.net
19970.admindebug.network10587.prod.msft.net
DmsClientForStx.msoppe.msft.net
jarvis-int.msftcloudes.com
sobo.prod.adu.msft.net
MSODSAdMetricsClientForThrottleRunner.msoprd.msft.net
service.032d.mgd.msft.net
20383.content.network10653.prod.msft.net
GeoBackupReplicationKeyVaultClientCert.ar.msogov.us.msft.net
test.azureservicedeploy.msft.net
mcs.prod.adu.msft.net
20726.sql.network10789.prod.msft.net
DmsClientForAzureScheduledJobs.msoppe.msft.net
dals.prod.adu.msft.net
SecurityMonitoringTestCertificate.msoppe.msft.net
Certificate
The complete raw certificate details for dals.prod.adu.msft.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHHjCCBQagAwIBAgITMwBQBeP596Tgf+gW4gAAAFAF4zANBgkqhkiG9w0BAQwF ADBdMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u MS4wLAYDVQQDEyVNaWNyb3NvZnQgQXp1cmUgUlNBIFRMUyBJc3N1aW5nIENBIDA0 MB4XDTI0MDUyMTE2NDMwNloXDTI1MDUxNjE2NDMwNlowbTELMAkGA1UEBhMCVVMx CzAJBgNVBAgTAldBMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv ZnQgQ29ycG9yYXRpb24xHzAdBgNVBAMTFmRhbHMucHJvZC5hZHUubXNmdC5uZXQw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVmCrm6ypMM/oCN7If94D4 XNeIZsvPqH6OW0hc+ge2mGliC9Oq+VP66eFK6kmWG2A04sEQLHOZ+3wHA/RE3bdu owQuumdDlkG5lZdAHaYWvqgzdCfaVMM06vhYW/qIb8X4SAzyBEFzJrVDXG9C601Q c+44LPFKdLljW5mvqtlJB7vqgQyCaZfxhkUcD+bI6jx6S4FjDbEKvuKlJmFOc0wn cPxTGem2Kk7DsfKDd/5UoR1clKY22NMnzf5tLn561cGPldNscyQxR0SGhpT3Rxo4 +worf4Az9OKy4lBBM/7jYnM07lcdUPWAot3rPh1uwXO81/3sZi7t9o9qIhh2Zdwl AgMBAAGjggLFMIICwTATBgorBgEEAdZ5AgQDAQH/BAIFADAnBgkrBgEEAYI3FQoE GjAYMAoGCCsGAQUFBwMCMAoGCCsGAQUFBwMBMDwGCSsGAQQBgjcVBwQvMC0GJSsG AQQBgjcVCIe91xuB5+tGgoGdLo7QDIfw2h1dgoTlaYLzpz4CAWQCASYwgbQGCCsG AQUFBwEBBIGnMIGkMHMGCCsGAQUFBzAChmdodHRwOi8vd3d3Lm1pY3Jvc29mdC5j b20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMEF6dXJlJTIwUlNBJTIwVExTJTIw SXNzdWluZyUyMENBJTIwMDQlMjAtJTIweHNpZ24uY3J0MC0GCCsGAQUFBzABhiFo dHRwOi8vb25lb2NzcC5taWNyb3NvZnQuY29tL29jc3AwHQYDVR0OBBYEFLNPNe6p OydBRL5IHg/a/Vv9RsLzMA4GA1UdDwEB/wQEAwIFoDA7BgNVHREENDAyghZkYWxz LnByb2QuYWR1Lm1zZnQubmV0ghgqLmRhbHMucHJvZC5hZHUubXNmdC5uZXQwDAYD VR0TAQH/BAIwADBqBgNVHR8EYzBhMF+gXaBbhllodHRwOi8vd3d3Lm1pY3Jvc29m dC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBBenVyZSUyMFJTQSUyMFRMUyUy MElzc3VpbmclMjBDQSUyMDA0LmNybDBmBgNVHSAEXzBdMFEGDCsGAQQBgjdMg30B ATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3Bz L0RvY3MvUmVwb3NpdG9yeS5odG0wCAYGZ4EMAQICMB8GA1UdIwQYMBaAFDtw0VPp diWdYKjKZg/Gm65vVBZqMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAN BgkqhkiG9w0BAQwFAAOCAgEAOJjyiGf2SHjqdJGQK3bkUbeU2b1ZmpFLypyYini4 Crgcr2c6oHFrWdsgrjyVctGb2TadtAg+v9kf2lXfOS9pDnXCMTd3TqnnaUNzgXXM wVXSj6dqoxDdtQv9CpWLIOYQ3VoXn+gWOxRVYzatDcKWPupC91WwrPMZK41bCm64 qdkDlFMKgkoPGrGDHTGk8gtQCPW2ed2jrts1E6IAhavJSZNbcJZxFJls4EmeYuIC mhAtu2pu8F9/TuZ5gXdJ4kDKXDzZoupiPv8ok3O9FYLY7WmKqd88nlmG3RowBb83 HtN3YPh6UHuagvGeUvIVYiIvhUf3uTlSNu8WFrg/rMWD0CSGBeUbVs5fux7gwSfD fR4EiCdeTvvslTrwwNNnKU9MZJQ1edWgZ2JGwUpoOyT3mzucdaq7teSMP/mwOmXx 4bBC01T9SYkc6P+i1fkW6395y8qNWR7UXxSVcsDmdyh/35/rNM+G7X8Ys0O37f0N x90sUacNU2R5qyvgSE38IJzHyg8N9wCsUXqc3u9UoIqOjvuVAQN5BtXnnxKeFPNy TKXCkuqepvwxAKvSDZdjpr77GnIhW1x4K71YLbNk/TRGx+r2cQSvKNadCtmv+B7m iXt1vujO/irxuFH48ftTWSHwNSGi41avrCZoujviwXZbTTxNUAkRKlL6bD7VH77m 9Cs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Zgq5usqTDP6AjeyH/eA +FzXiGbLz6h+jltIXPoHtphpYgvTqvlT+unhSupJlhtgNOLBECxzmft8BwP0RN23 bqMELrpnQ5ZBuZWXQB2mFr6oM3Qn2lTDNOr4WFv6iG/F+EgM8gRBcya1Q1xvQutN UHPuOCzxSnS5Y1uZr6rZSQe76oEMgmmX8YZFHA/myOo8ekuBYw2xCr7ipSZhTnNM J3D8UxnptipOw7Hyg3f+VKEdXJSmNtjTJ83+bS5+etXBj5XTbHMkMUdEhoaU90ca OPsKK3+AM/TisuJQQTP+42JzNO5XHVD1gKLd6z4dbsFzvNf97GYu7faPaiIYdmXc JQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1137365235544276761481779243427165582455211491 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 04' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 16:43:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-16 16:43:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dals.prod.adu.msft.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26963795591099656639033686926507697034601572154306811107428786811542538544291630179495049297371505394918304790772763535784758449122369612858333495857668826027324049812552169993424445027571510536466881745514185240952224168006551811119980770797372665457941235842857882172471850266433888322038953595458791843992623419154376364428356358549486934636680249038731031748945698760995613140334715716266727215104454682874091170894890229350776375761301185222613621596569400276558323669416522684974949704616625535746858433454494408630366822453363256874523152803926413824349609708798731862146806093472614447133530467179684707032101 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b34f35eea93b274144be481e0fdafd5bfd46c2f3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dals.prod.adu.msft.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dals.prod.adu.msft.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3b70d153e976259d60a8ca660fc69bae6f54166a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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