ppecpf01wus2.insightsplatform.microsoft-int.com

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 01

About this certificate

This digital certificate with serial number 33:00:46:69:67:67:aa:29:98:41:d1:5d:e0:00:00:00:46:69:67 was issued on by Microsoft Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:00:46:69:67:67:aa:29:98:41:d1:5d:e0:00:00:00:46:69:67
Serial Number (int): 1137361964996594949605774458968902606101309799
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 48:10:22:19:01:c7:e2:2b:c4:04:ae:0b:94:4c:cd:48:ed:1b:6a:58
AuthorityKeyId: 0f:20:5d:d7:a1:57:95:db:92:cf:2b:d0:c7:c2:77:04:ce:72:80:76

Fingerprint (sha1): 37:29:1c:2f:8b:d7:c0:47:41:2d:0b:9d:30:9f:55:87:75:cf:cb:d9
Fingerprint (sha256): 03:75:ee:e3:6f:1e:ab:45:1a:62:43:02:20:ac:d3:3d:45:70:84:13:b9:53:3f:d9:41:7f:74:09:8d:55:7e:1a

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.crl

Check the revocation status for certificate ppecpf01wus2.insightsplatform.microsoft-int.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ppecpf01wus2.insightsplatform.microsoft-int.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ppe.insightsplatform.microsoft-int.com
ppecpf01wus2.insightsplatform.microsoft-int.com

Other certificates including the domain name microsoft-int.com

(limited to 100 certificates)
ordersjournal.cp.microsoft-int.com
prod.geneva-action-deploy.pricing.cp.microsoft-int.com
orderadmin.aircapi.cp.microsoft-int.com
revenueallocatortimejournal.cp.microsoft-int.com
awasappe-ase.cloudapp.net
paymentsinstrumentservice.cp.microsoft-int.com
dds.microsoft-int.com
billinggroups-clientauth.cp.microsoft-int.com
*.diagnose-dfp.microsoft-int.com
sharing.member.microsoft-int.com
taxdocumentnep.microsoft-int.com
paymentstransactionservice.cp.microsoft-int.com
orchestration-int.paymentsinstrument.cp.microsoft-int.com
pub.api.ecs.mcfs.microsoft-int.com
prose.microsoft-int.com
replay.enterprisereportingservice.cp.microsoft-int.com
pmservices.cp.microsoft-int.com
api.tdrs.microsoft-int.com
taxdocumentnep.microsoft-int.com
cminternal.client.jcmfd.account.microsoft-int.com
journal.purchase.aircapi.commerce.microsoft-int.com
wdatpstg-eus2.internal.mdatp.microsoft-int.com
paymentconfigtool.cp.microsoft-int.com
invoicingjournal.aircapi.cp.microsoft-int.com
tokensigning.commerceroot.cp.microsoft-int.com
api.dfp4.dynamics-int.com
mdiot-ev2-int-app.int.internal.mdiot.microsoft-int.com
api.dfp.dynamics-int.com
service.accountextensions.commerce.microsoft-int.com
paymentmetadataservice.cp.microsoft-int.com
service.RecOrder-INT.commerce.microsoft.com
entitlement.teams.microsoft-int.com
es-kibana-int.incentives.microsoft-int.com
commercialsubscriptionjournal.cp.microsoft-int.com
identity.microsoft.com
api.paymentsinstrument.cp.microsoft-int.com
entitlement.teams.microsoft-int.com
ppecpf01wus2.insightsplatform.microsoft-int.com
reratingcoordinator-clientauth.cp.microsoft-int.com
dfp.microsoft-int.com
capping.cp.microsoft-int.com
ids.api.iris.microsoft-int.com
customer.cp.microsoft-int.com
assets.mcapiassets-aircapi.commerce.microsoft.com
dcs-pmdclientauth-int.cp.microsoft-int.com
manage.privacy.microsoft-int.com
enterprisefinancials-clientauth.cp.microsoft-int.com
api.choice.microsoft-int.com
wdatpstg-eus2.internal.mdatp.microsoft-int.com
support.msn-int.com
cm-stg-eus2.internal.mdatp.microsoft-int.com
identity.microsoft.com
*.notify.windows-int.com
quantifiableassets-clientauth.cp.microsoft-int.com
encryption.identity.microsoft-int.com
authorization-clientauth.cp.microsoft-int.com
int.iis.customermaster.fd.cloud.microsoft.com
contentservice.dps.microsoft-int.com
service.order.commerce.microsoft-int.com
policytokenService.microsoft-int.com
admin.order.aircapi.commerce.microsoft-int.com
paymentemulators.paymod.cp.microsoft-int.com
purchasejournalindex3.cp.microsoft-int.com
token.cp.microsoft-int.com
biztools.cp.microsoft-int.com
taxidmanagement.aircapi.cp.microsoft-int.com
safedriving.family.microsoft-int.com
paynotifications.cp.microsoft-int.com
test1.management.family.microsoft-int.com
p5.cp.microsoft-int.com
paymentspfintssl.cp.microsoft-int.com
fdk-test.cp.microsoft-int.com
journalindex.order.commerce.microsoft-int.com
omexsync.sellerdashboard.microsoft-int.com
recipients.mcapirecipients-aircapi.commerce.microsoft.com
test1.management.family.microsoft-int.com
DynamicConfigurationTool-clientauth-int.cp.microsoft-int.com
buy.microsoft-int.com
admin.order.commerce.microsoft-int.com
assetdunningprocessor.cp.microsoft-int.com
s2s.client.dfp.microsoft-int.com
cre.raas.microsoft-int.com
test1.management.family.microsoft-int.com
journal.RecOrder-INT.commerce.microsoft.com
endr.api.dfp.dynamics-int.com
test1.management.family.microsoft-int.com
api-registration-int.mp.dse.microsoft.com
certrenewtest.taxdocumentnep.microsoft-int.com
identity.microsoft-int.com
identity.microsoft-int.com
enforcementrisk.cpbizops.aia.cp.microsoft-int.com
meteredsubscriptions.cp.microsoft-int.com
test1.management.family.microsoft-int.com
certrenewtest.taxdocumentnep.microsoft-int.com
mcapicore-runnerclientauth.cp.microsoft-int.com
pgw.cp.microsoft-int.com
publicfileexchange.cp.microsoft-int.com
bo.teams.microsoft-int.com
service.billinggroups.test.cp.microsoft-int.com
pxs.privacy.microsoft-int.com

Certificate

The complete raw certificate details for ppecpf01wus2.insightsplatform.microsoft-int.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137361964996594949605774458968902606101309799
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-28 22:42:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-23 22:42:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ppecpf01wus2.insightsplatform.microsoft-int.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 665003493362900830472195475519154061613373046320885639853678389466189691945204074920355344468251734063312721612284582148670423809672267444806864438381757052002221062883392744752550141782619069684900752925722366335826410259395688267813095903136739773068300151151850519427472700227904292175011738242056321070106223595817784299217986523321851858937158998251979697815846149607397182255366445481579310551400096501409285976037863909843439815685749442571636161645977769791511300199633245279713740850596750006745243908948307446286906078723047158760519340435459639915818955863245488704290630355539585133055030824076618615657074288265269430705995329762183166129358400860712680286089773175785846062604352398786540314612706702012316456879639224476519524228868967867401135768108512941645218430532187574269639113001562346686681566371978413082588667467099690086976221495709926186627109805211992906874687441453073887878092030717868676456442953836127530698510961769900565264577043495264395086674282269665137047020656084915986505365457963579303708917460323780481852330820026354369836972212642911214021990724427626168323417343686603869719942007819491931460093913152337484649245286243294888550781352300322087962482726743648532674464770815751943998581801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4810221901c7e22bc404ae0b944ccd48ed1b6a58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppe.insightsplatform.microsoft-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppecpf01wus2.insightsplatform.microsoft-int.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f205dd7a15795db92cf2bd0c7c27704ce728076
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00add2e83471e4ece282764845640f5309d4daad32d69efe494eac3ac91dffcfc6f41f36602adbe8e0a2d21e0e29fb6561d6c119f2043c8d9e65b60bd75bb3664aa7f10a74826fb791ad4c10448982ae74cd2001d00c2e7dcda97ec31873109f2478184934cfeb7b8ec6c337da47bd4c88ae6d90117854e4cd14132082b2a7c84f6204e6315536558d6b2a3f5e6d28518a7b26b418e16ab107e4e6db8eeb264ec30ecde62d746fcfaa2dd389b2b4fcbe1c32557ee95ebb0ed72cc1360655c69f30b42e19607c6fe86be6e7a26b9cb07c996c091974ebe8af4a01cc7e889a6bfbfb866654861566e26ce236c9da20293ee47dd946505062606db77eeb6d28c3bb5734273ce0b4ee0603b897c38a824e1b8b3e149ebfc146d79df1161827615813183df8c51d3b658459f8d89c9ef604c97885bb4ab8a418bfa83b5fa43a606eec374171c84bd746d3f182fffe4b2eb987c17fa71ffe297c45ac46707fc050826bd810221293d89305723a1d5f1306a0259719b59ebcc5dd5dc869370436e5ce59e70381161a38ca5e4278095d240a71eb760fbdfef9010884dac343136a9f3cb9c387ae1ad1319c7945de9255184c5128fb5ebe9d410ec3d81d5e5e1eab7080bd2e9dfa664627c252c81836402bb0ef4ba14d7251ab204cd6a977b7f5a0355a91e8f0ffcc787c96c2cbd451c477cc171907add050e024f3178ad8dcd90e097822cd