usdodeast0-notifyg.svc.ms

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 08

About this certificate

This digital certificate with serial number 33:00:07:91:26:8c:e9:28:65:be:d5:97:bc:00:00:00:07:91:26 was issued on by Microsoft Corporation.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:07:91:26:8c:e9:28:65:be:d5:97:bc:00:00:00:07:91:26
Serial Number (int): 1137340580039854906233471044270240194974159142
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 94:27:34:ea:c3:b7:42:b4:92:b3:6e:ab:cb:58:4b:c7:ff:c7:5f:47
AuthorityKeyId: f6:7e:2f:bd:80:a3:4a:b2:70:5b:eb:df:9a:1f:d8:ed:ca:61:80:07

Fingerprint (sha1): 56:8d:c6:3f:f8:d2:74:3d:07:b5:9e:f9:13:1b:c5:f7:2f:5e:7d:17
Fingerprint (sha256): 03:43:fb:0d:e1:1d:24:b6:ad:8c:a5:5c:7c:b4:9e:57:18:dd:41:ec:db:7f:ce:c2:ec:18:1b:47:39:90:37:81

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl

Check the revocation status for certificate usdodeast0-notifyg.svc.ms

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for usdodeast0-notifyg.svc.ms

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

usdodeast0-notifyg.svc.ms
usdodeast1-notifyg.svc.ms
usdodeast2-notifyg.svc.ms
usdodeast3-notifyg.svc.ms
usdodeast4-notifyg.svc.ms
usdodeastr-notifyg.svc.ms
usdodcentral0-notifyg.svc.ms
usdodcentral1-notifyg.svc.ms
usdodcentral2-notifyg.svc.ms
usdodcentral3-notifyg.svc.ms
usdodcentral4-notifyg.svc.ms
usdodcentralr-notifyg.svc.ms
usdodeast0.notifyg.svc.ms
usdodeast1.notifyg.svc.ms
usdodeast2.notifyg.svc.ms
usdodeast3.notifyg.svc.ms
usdodeast4.notifyg.svc.ms
usdodeastr.notifyg.svc.ms
usdodcentral0.notifyg.svc.ms
usdodcentral1.notifyg.svc.ms
usdodcentral2.notifyg.svc.ms
usdodcentral3.notifyg.svc.ms
usdodcentral4.notifyg.svc.ms
usdodcentralr.notifyg.svc.ms

Other certificates including the domain name svc.ms

(limited to 100 certificates)
*.notifyd.svc.ms
servicefabric.pushns.svc.ms
*.badgers.svc.ms
*.mediap.svc.ms
*.hwp.svc.ms
SPO-BF-MS-AAD.svc.ms
*.pushng.svc.ms
*.hwp.svc.ms
usdodeast0-notifyg.svc.ms
sdesti.prod.servicecerts.svc.ms
*.mediap.svc.ms
*.pushb.svc.ms
*.hwp.svc.ms
usdodeast0-notifyg.svc.ms
*.pushfp.svc.ms
gcc-notify-sphomep.svc.ms
gcc-managementcert-sphomep.svc.ms
*.pushnp.svc.ms
*.badgerp.svc.ms
usdodeast0-mediag.svc.ms
usgovvirginia0-notifyg.svc.ms
*.badgerb.svc.ms
*.hwp.svc.ms
test.test.usgovvirginia0-mediap.svc.ms
*.pushng.svc.ms
sti.sphomep.svc.ms
*.pushnb.svc.ms
cma.pushs.svc.ms
SPO-DOD-AS-STI.notifyp.svc.ms
servicefabric.pushng.svc.ms
*.pushng.svc.ms
sdeazureauth.prod.servicecerts.svc.ms
api.tpst.svc.ms
*.badgerg.svc.ms
onedrive.com
usgovvirginia0-notifyg.svc.ms
servicefabric.pushfb.svc.ms
usgovvirginia0-notifyp.svc.ms
usgovvirginia0-notifyg.svc.ms
*.kmgcc.svc.ms
servicefabric.pushfp.svc.ms
*.pushfb.svc.ms
*.svc.ms
api.tpsprod.svc.ms
svc.ms
servicefabric.pushfp.svc.ms
*.pushfd.svc.ms
germanynortheast0-notifyp.svc.ms
germanynortheast0-notifyp.svc.ms
*.notifyp.svc.ms
*.badgerp.svc.ms
servicefabric.pushnb.svc.ms
servicefabric.pushfb.svc.ms
servicefabric.photostreamt.svc.ms
*.pushnp.svc.ms
*.badgers.svc.ms
*.pushnp.svc.ms
api.tpsedog.svc.ms
usgovvirginia0-notifyg.svc.ms
*.connectort.svc.ms
sdesti.prod.servicecerts.svc.ms
api.tpsprod.svc.ms
*.hwp.svc.ms
*.badgerb.svc.ms
spo-completenessprod-cma.servicecerts.svc.ms
sdegenevacert.prod.servicecerts.svc.ms
*.mediad.svc.ms
servicefabric.photostreamd.svc.ms
servicefabric.pushnb.svc.ms
SPO-PF-MS-MC-mediag.svc.ms
spo-completenessedog-cma.servicecerts.svc.ms
*.pushfb.svc.ms
*.badgerg.svc.ms
*.completenesss.svc.ms
SPO-BF-MS-AAD.svc.ms
gcc-sti-sphomep.svc.ms
SPO-BF-AS-CMA.svc.ms
usgovvirginia0-notifyg.svc.ms
managementcert.sphomep.svc.ms
onedrive.com
sti.sphomed.svc.ms
*.badgerb.svc.ms
gcc-griffinruntime-sphomep.svc.ms
spo-sscprod.cma.servicecerts.svc.ms
servicefabric.pushns.svc.ms
SPO-TB-STI-notifyg.svc.ms
usgovvirginia0-mediap.svc.ms
*.connectorp.svc.ms
*.pushng.svc.ms
usdodeast0-notifyg.svc.ms
api.tpsedog.svc.ms
spo-sscprod.cma.servicecerts.svc.ms
*.photostreamd.svc.ms
*.connectorp.svc.ms
api.tpsspdf.svc.ms
servicefabric.pushnb.svc.ms
kbstate.sphomeg.svc.ms
*.pushng.svc.ms
kbstate.sphomep.svc.ms
odspsscsiphonedog.servicecerts.svc.ms

Certificate

The complete raw certificate details for usdodeast0-notifyg.svc.ms in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJoTCCB4mgAwIBAgITMwAHkSaM6ShlvtWXvAAAAAeRJjANBgkqhkiG9w0BAQwF
ADBdMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
MS4wLAYDVQQDEyVNaWNyb3NvZnQgQXp1cmUgUlNBIFRMUyBJc3N1aW5nIENBIDA4
MB4XDTIzMTIwNDEyMTc0NVoXDTI0MTEyODEyMTc0NVowcDELMAkGA1UEBhMCVVMx
CzAJBgNVBAgTAldBMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv
ZnQgQ29ycG9yYXRpb24xIjAgBgNVBAMTGXVzZG9kZWFzdDAtbm90aWZ5Zy5zdmMu
bXMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4AURkDUkm/x0NjFnW
hXzqbskzG80ylXvJ//eOIozX+WY0Ntq8EMUlu2PeqcvKwnc0VJ8myfCs5QJ//1pb
3w6SfB1BNP2Mm9RBWoe5Kr6AI56hRTxQDmmX50QRfekzPUEJmCJpUyBAJiTITO2p
N2tl1/HOnFlWhWQXvsCD7NS7a33LKj0LPzlhz+O5lLcS7kH4C/5wCCSPuRpP82xH
1Qa8ALbBhO46MJkCV5E47lPQDgdcT90HUBnayEvYkZVeZ0FT49ohl8IIXDjCwv9X
y33qgPDCDsPuixBNiAK540Bm0/ygQd/7xVlFxmbyyS5t5MA2f6JjvhucyZjBgDnA
MC8BAgMBAAGjggVFMIIFQTATBgorBgEEAdZ5AgQDAQH/BAIFADAnBgkrBgEEAYI3
FQoEGjAYMAoGCCsGAQUFBwMCMAoGCCsGAQUFBwMBMDwGCSsGAQQBgjcVBwQvMC0G
JSsGAQQBgjcVCIe91xuB5+tGgoGdLo7QDIfw2h1dgoTlaYLzpz4CAWQCASYwgbQG
CCsGAQUFBwEBBIGnMIGkMHMGCCsGAQUFBzAChmdodHRwOi8vd3d3Lm1pY3Jvc29m
dC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMEF6dXJlJTIwUlNBJTIwVExT
JTIwSXNzdWluZyUyMENBJTIwMDglMjAtJTIweHNpZ24uY3J0MC0GCCsGAQUFBzAB
hiFodHRwOi8vb25lb2NzcC5taWNyb3NvZnQuY29tL29jc3AwHQYDVR0OBBYEFJQn
NOrDt0K0krNuq8tYS8f/x19HMA4GA1UdDwEB/wQEAwIFoDCCArkGA1UdEQSCArAw
ggKsghl1c2RvZGVhc3QwLW5vdGlmeWcuc3ZjLm1zghl1c2RvZGVhc3QxLW5vdGlm
eWcuc3ZjLm1zghl1c2RvZGVhc3QyLW5vdGlmeWcuc3ZjLm1zghl1c2RvZGVhc3Qz
LW5vdGlmeWcuc3ZjLm1zghl1c2RvZGVhc3Q0LW5vdGlmeWcuc3ZjLm1zghl1c2Rv
ZGVhc3RyLW5vdGlmeWcuc3ZjLm1zghx1c2RvZGNlbnRyYWwwLW5vdGlmeWcuc3Zj
Lm1zghx1c2RvZGNlbnRyYWwxLW5vdGlmeWcuc3ZjLm1zghx1c2RvZGNlbnRyYWwy
LW5vdGlmeWcuc3ZjLm1zghx1c2RvZGNlbnRyYWwzLW5vdGlmeWcuc3ZjLm1zghx1
c2RvZGNlbnRyYWw0LW5vdGlmeWcuc3ZjLm1zghx1c2RvZGNlbnRyYWxyLW5vdGlm
eWcuc3ZjLm1zghl1c2RvZGVhc3QwLm5vdGlmeWcuc3ZjLm1zghl1c2RvZGVhc3Qx
Lm5vdGlmeWcuc3ZjLm1zghl1c2RvZGVhc3QyLm5vdGlmeWcuc3ZjLm1zghl1c2Rv
ZGVhc3QzLm5vdGlmeWcuc3ZjLm1zghl1c2RvZGVhc3Q0Lm5vdGlmeWcuc3ZjLm1z
ghl1c2RvZGVhc3RyLm5vdGlmeWcuc3ZjLm1zghx1c2RvZGNlbnRyYWwwLm5vdGlm
eWcuc3ZjLm1zghx1c2RvZGNlbnRyYWwxLm5vdGlmeWcuc3ZjLm1zghx1c2RvZGNl
bnRyYWwyLm5vdGlmeWcuc3ZjLm1zghx1c2RvZGNlbnRyYWwzLm5vdGlmeWcuc3Zj
Lm1zghx1c2RvZGNlbnRyYWw0Lm5vdGlmeWcuc3ZjLm1zghx1c2RvZGNlbnRyYWxy
Lm5vdGlmeWcuc3ZjLm1zMAwGA1UdEwEB/wQCMAAwagYDVR0fBGMwYTBfoF2gW4ZZ
aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0JTIw
QXp1cmUlMjBSU0ElMjBUTFMlMjBJc3N1aW5nJTIwQ0ElMjAwOC5jcmwwZgYDVR0g
BF8wXTBRBgwrBgEEAYI3TIN9AQEwQTA/BggrBgEFBQcCARYzaHR0cDovL3d3dy5t
aWNyb3NvZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnkuaHRtMAgGBmeBDAEC
AjAfBgNVHSMEGDAWgBT2fi+9gKNKsnBb69+aH9jtymGABzAdBgNVHSUEFjAUBggr
BgEFBQcDAgYIKwYBBQUHAwEwDQYJKoZIhvcNAQEMBQADggIBADNv8n+71FbOmxfs
cYXuUmMHpDqxlv+nkp12A7gzefRwMIIAlF8eQGod+gyyfvQUoPZNCzhiAU8RgztK
tWpj93fkIlOpT+9f/HywORosiahOI/dUFpudlHnWiDkU7yOKa5qk9SYDoUFVn0hE
UZ3UNu06TRPem+xj1y6YeG/GgTHUzd10/yhJYj26KBlKOnlQg2vSoV+Y0fBJo+Kv
TknJFWhxAlmG6qmuDVS5hOEBxLG1EzcK+DCYtmcTxuSwYoDI9Wf7FUKHjI9BGT2p
H5SUO4DgtjtFpuNZsvFo73QGawzIfbEgLVhX5KimwqdOB0kJMmwg86i4CQ4nP9LL
5lfDj3+xm8nOv4u5s2gJt9QtAiKhMVLX6XLlWYXzmDvtHMlBrPXqp/YSDf2vPSJt
uGA8LtDN2pTZ5T5B//VGNTt0JubWZPf/XVdnCIsDcZvsRGYpnph9esATAQr64XDP
67NJihBv4qeOyDQn7vNBIkWMbmTMeE1vJobbyqLhTdZW9pOeS8jq6NDui59S1RVC
F4SvLd34f4A+3/2vSXiltqF8urPhVezzQ4rFAoxSZm45t9EFwsMo5heyM3Kor6K5
dQd39DOtE35U5EUMQjNOk3sHz0sRW3Czf75AcPzVg8IGySxBkxJJZxMUvT9WN7xT
TTIK8wlbAV6ck9hJw54y8rwII4sY
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAFEZA1JJv8dDYxZ1oV8
6m7JMxvNMpV7yf/3jiKM1/lmNDbavBDFJbtj3qnLysJ3NFSfJsnwrOUCf/9aW98O
knwdQTT9jJvUQVqHuSq+gCOeoUU8UA5pl+dEEX3pMz1BCZgiaVMgQCYkyEztqTdr
ZdfxzpxZVoVkF77Ag+zUu2t9yyo9Cz85Yc/juZS3Eu5B+Av+cAgkj7kaT/NsR9UG
vAC2wYTuOjCZAleROO5T0A4HXE/dB1AZ2shL2JGVXmdBU+PaIZfCCFw4wsL/V8t9
6oDwwg7D7osQTYgCueNAZtP8oEHf+8VZRcZm8skubeTANn+iY74bnMmYwYA5wDAv
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137340580039854906233471044270240194974159142
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 08'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 12:17:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-28 12:17:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'usdodeast0-notifyg.svc.ms'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23228472969532351112943011360175639061153016557899749792094917312192440079987006828644665373586262831578110355868801701896640082057406851970467406119662369634016731080930960946720452889322806779922473123507092613409590119866506858017512501690269060215716002950595500359253171544614586808626020146055184741904407114717079489004815173249921857677219951304753587551507376890958044800604361282094321349398937350219216800474642493292575185168818375314657937853656507905690889512511053518375385930817990579601525490800306921051511158489666149614083119006767932869057759959093700703879064499672092112989611699466710245453569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							942734eac3b742b492b36eabcb584bc7ffc75f47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (688 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast0-notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast1-notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast2-notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast3-notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast4-notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeastr-notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral0-notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral1-notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral2-notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral3-notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral4-notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentralr-notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast0.notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast1.notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast2.notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast3.notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast4.notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeastr.notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral0.notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral1.notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral2.notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral3.notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral4.notifyg.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentralr.notifyg.svc.ms'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f67e2fbd80a34ab2705bebdf9a1fd8edca618007
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00336ff27fbbd456ce9b17ec7185ee526307a43ab196ffa7929d7603b83379f470308200945f1e406a1dfa0cb27ef414a0f64d0b3862014f11833b4ab56a63f777e42253a94fef5ffc7cb0391a2c89a84e23f754169b9d9479d6883914ef238a6b9aa4f52603a141559f4844519dd436ed3a4d13de9bec63d72e98786fc68131d4cddd74ff2849623dba28194a3a7950836bd2a15f98d1f049a3e2af4e49c9156871025986eaa9ae0d54b984e101c4b1b513370af83098b66713c6e4b06280c8f567fb1542878c8f41193da91f94943b80e0b63b45a6e359b2f168ef74066b0cc87db1202d5857e4a8a6c2a74e074909326c20f3a8b8090e273fd2cbe657c38f7fb19bc9cebf8bb9b36809b7d42d0222a13152d7e972e55985f3983bed1cc941acf5eaa7f6120dfdaf3d226db8603c2ed0cdda94d9e53e41fff546353b7426e6d664f7ff5d5767088b03719bec4466299e987d7ac013010afae170cfebb3498a106fe2a78ec83427eef34122458c6e64cc784d6f2686dbcaa2e14dd656f6939e4bc8eae8d0ee8b9f52d515421784af2dddf87f803edffdaf4978a5b6a17cbab3e155ecf3438ac5028c52666e39b7d105c2c328e617b23372a8afa2b9750777f433ad137e54e4450c42334e937b07cf4b115b70b37fbe4070fcd583c206c92c41931249671314bd3f5637bc534d320af3095b015e9c93d849c39e32f2bc08238b18