*.appservices.staging.businesscentral.dynamics-tie.com

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 08

About this certificate

This digital certificate with serial number 33:00:2d:b4:8f:93:48:39:19:b4:81:41:71:00:00:00:2d:b4:8f was issued on by Microsoft Corporation.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:2d:b4:8f:93:48:39:19:b4:81:41:71:00:00:00:2d:b4:8f
Serial Number (int): 1137353557838098150815673895531646649205896335
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: ac:93:d5:6a:11:90:7f:9f:fd:a8:30:d0:8a:bd:87:dd:48:a6:c7:f5
AuthorityKeyId: f6:7e:2f:bd:80:a3:4a:b2:70:5b:eb:df:9a:1f:d8:ed:ca:61:80:07

Fingerprint (sha1): f7:76:51:d7:78:a5:65:7a:62:40:a0:ad:2f:4b:75:f7:6a:0c:10:d8
Fingerprint (sha256): 02:c8:1c:0c:a4:3a:e7:7e:23:9a:f6:6c:0a:c5:37:6d:77:b7:89:d0:7f:1f:63:c8:7b:c3:84:3c:c3:92:3c:35

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl

Check the revocation status for certificate *.appservices.staging.businesscentral.dynamics-tie.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.appservices.staging.businesscentral.dynamics-tie.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.appservices.staging.businesscentral.dynamics-tie.com

Other certificates including the domain name dynamics-tie.com

(limited to 100 certificates)
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
cluster.services.dev.smb.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
syncdaemoninternal-aadapp.staging.smb.dynamics-tie.com
cluster.services.staging.smb.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
api.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
extensionmanagementproxy-aadapp.test.smb.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.services.smb.dynamics-tie.com

Certificate

The complete raw certificate details for *.appservices.staging.businesscentral.dynamics-tie.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZMp0RttzjMHsD2CMPVg
kSMaNxg3HQGb62uXToFGcYsozOXHdJTWcMbTeBjHZeFnrAs+3WH7c7QpV322fYLk
9Gb2oakOjAkGXM8fFlwIsp7YP/2HZrzt326/1pDor/apXX/KWBPls8kwuHQdtBxv
GbyA846WWCq7XoaPVm0Wx8Qe7vKyHBABucCxDqH38zsGMtfRIMpbX8eqSizFJgp0
D/4OimrU1C2HtjbDoz5YKpMHXWbKoaXv82N8Bm2HKtsmwj4o3mtAI49McElZSEtV
WOkcAB0t1opwJzBkVA/h5tfBMiKACeqMW31fkaayJKmbUBy9bGFG+SP/SguKSPRt
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137353557838098150815673895531646649205896335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 08'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 03:19:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-12 03:19:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.appservices.staging.businesscentral.dynamics-tie.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27971234348572598835859228215510101896511001505793324253303004481072277473614469719049452224373007576190686469698776364138500652391384937886056218078264904370859632513174557505339927199762986990726587731298943910768126027593778310605915334414505720738936674996964209081025987464193103608461772589933250880873324407529569960287096983233199670441970177881171408504815933916810237327004359017443285148802267997872500817070293398975459213901432646238544111133092212187387877929876407398225438596298119838843662184977680579658346355518248737579578371380758011747527007651549843527287357617020730495223484752183764410723681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac93d56a11907f9ffda830d08abd87dd48a6c7f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appservices.staging.businesscentral.dynamics-tie.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f67e2fbd80a34ab2705bebdf9a1fd8edca618007
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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