wdatpprd-canc.securitycenter.windows.com

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 02

About this certificate

This digital certificate with serial number 33:00:d6:be:0b:cd:1f:8c:19:6e:b1:20:c7:00:00:00:d6:be:0b was issued on by Microsoft Corporation.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:d6:be:0b:cd:1f:8c:19:6e:b1:20:c7:00:00:00:d6:be:0b
Serial Number (int): 1137411078166177719027835532566956922459569675
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 30:3f:1d:15:fe:b6:d4:dc:8e:43:e5:6e:c3:a9:22:b0:22:72:5c:11
AuthorityKeyId: 00:ab:91:fc:21:62:26:97:9a:a8:79:1b:61:41:90:60:a9:62:67:fd

Fingerprint (sha1): b8:5b:69:cb:9e:a7:c5:79:45:ec:58:80:f0:b0:1b:69:e6:6f:79:29
Fingerprint (sha256): 03:5f:94:42:c9:06:9d:9a:bf:fb:7a:e4:b0:c6:9c:b9:e1:43:00:da:6d:a0:da:b0:5e:ae:29:07:aa:46:a0:39

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl

Check the revocation status for certificate wdatpprd-canc.securitycenter.windows.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wdatpprd-canc.securitycenter.windows.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wdatpprd-canc.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
wdatpprd-can.securitycenter.windows.com
mde-cfgmgmt-apisiam-can-canc.securitycenter.windows.com
mde-cfgmgmt-apisiam-can-cane.securitycenter.windows.com

Other certificates including the domain name windows.com

(limited to 100 certificates)
wdatpprd-jpe.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
ingress.wdatpstg.windows.com
wdatpprd-cin.securitycenter.windows.com
wdatpprd-weu3.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-cus.securitycenter.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-weu.securitycenter.windows.com
wdatpprd-sin.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-neu.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-neu.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-cin.securitycenter.windows.com
CyberDataPrefetcher-PRD.trafficmanager.net
andrew.rancher.poc.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-aus.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
ti.securitycenter.windows.com
www.windowsphone.com
wdatpprd-sin.securitycenter.windows.com
*.wns.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-cus3.securitycenter.windows.com
CyberDataCtrl-PRD.trafficmanager.net
wdatpprd-cus3.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
CyberDataPrefetcher-PRD.trafficmanager.net
wdatpprd-cane.securitycenter.windows.com
wdatpprd-weu.securitycenter.windows.com
wdatpprd-uks.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
www.windowsphone.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-neu3.securitycenter.windows.com
heartbeat.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-jpe.securitycenter.windows.com
ineportalapi-stg.trafficmanager.net
wdatpprd-cus3.securitycenter.windows.com
OnboardingService-PRD.trafficmanager.net
cache.datamart.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-cin.securitycenter.windows.com
WdatpApi-PRD.trafficmanager.net
akamai-san15.exacttarget.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-cus3.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
csharp.net
wdatpstg-eus2.securitycenter.windows.com
insidersurveys.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-sin.securitycenter.windows.com
wdatpprd-ukw.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-neu3.securitycenter.windows.com
wdatpprd-swn0a.securitycenter.windows.com
wdatpprd-cus.securitycenter.windows.com
assets.activity.windows.com
wdatpprd-cus.securitycenter.windows.com
wdatpprd-cus.securitycenter.windows.com
wdatpprd-weu.securitycenter.windows.com
wdatpmdev-eus1.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-weu.securitycenter.windows.com
wdatpprd-neu.securitycenter.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
wdatpprd-neu3.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-cin.securitycenter.windows.com
wdatpprd-ukw.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-swn0a.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-aue.securitycenter.windows.com
wdatpprd-jpe.securitycenter.windows.com
wdatpprd-cus3.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-sin.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-swn0a.securitycenter.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com

Certificate

The complete raw certificate details for wdatpprd-canc.securitycenter.windows.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+aer6MdvVAmrAjKsPtQ
maia4kLVTGcfwX2N8EY5cewpE2r7ROxYZrAJD0h/OpywSMfuIKOA/Tq3DsENAsVa
MGw8KOPBQAi/SQi1hKuL8cxQtBu6KceV5n1x3CTf9JyYxf6uQnjFjogCHgeVKyKc
kFU3Yk7ING6P+rrQ3m6kjdB04V3Lf8Mmjpjg2iX54o75oHb2ymuvEP3/5+zRtOXy
lnqFT0I7VG5O9uLPm5eOPjwWl/QnTJiMiMYvEquKvg29iCMZgg2KwBsdprhiWsUC
XuVdW9LVFCtkl3LYX8VjaZqIQ5fWbqHAtaTIlaynmsicfCrY58G1sqFIO5hC5L7W
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137411078166177719027835532566956922459569675
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 18:11:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wdatpprd-canc.securitycenter.windows.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18670753725190426184337986935220101459162019580456644317885313802131018244518324706089639420712801892454257886523676048455688010461418247963044349302527177136802006765326027195480616196360201070847555961773635712556139520031914928183568996324169896772708689106178969328575001474404648613365874331526583498229142004868841868854085450457772353451314762766771349019238749631925927603980502667685857187337314916005245734911983439002758251616612217517548363026147005505499248395651174395479040496183873002856134302351580389517042890321142815869562644152281891512573423062206352549291469901524571083943398515066994805364433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							303f1d15feb6d4dc8e43e56ec3a922b022725c11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdatpprd-canc.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdatpprd-cane.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdatpprd-can.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mde-cfgmgmt-apisiam-can-canc.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mde-cfgmgmt-apisiam-can-cane.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 00ab91fc216226979aa8791b61419060a96267fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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