CompanyManager.microsoftonline.com

- Microsoft Corporation -

Issued by Microsoft IT TLS CA 2

About this certificate

This digital certificate with serial number 20:00:0b:1b:ed:81:d2:9f:80:93:b7:5c:23:00:00:00:0b:1b:ed was issued on by Microsoft Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 20:00:0b:1b:ed:81:d2:9f:80:93:b7:5c:23:00:00:00:0b:1b:ed
Serial Number (int): 713627626581379430634279495976367478853540845
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: ac:f0:30:bc:2c:ef:b3:2b:9f:f3:84:ab:ee:50:91:dc:27:e5:9e:84
AuthorityKeyId: 91:9e:3b:44:6c:3d:57:9c:42:77:2a:34:d7:4f:d1:cc:4a:97:2c:da

Fingerprint (sha1): 38:f8:08:21:bf:3b:cd:b5:3c:90:c3:8d:e4:88:b2:71:ee:86:6e:cc
Fingerprint (sha256): 03:86:17:32:f4:b9:44:a0:bf:36:9b:fc:e7:97:ed:8a:1b:12:f5:08:87:2d:32:1a:fa:26:e1:94:72:d9:92:37

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%202.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl

Check the revocation status for certificate CompanyManager.microsoftonline.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for CompanyManager.microsoftonline.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

companymanager.microsoftonline.com

Other certificates including the domain name microsoftonline.com

(limited to 100 certificates)
syncservice.microsoftonline.com
atv300.microsoftonline.com
becws-gov-us.microsoftonline.com
*.certauth.login.microsoftonline.com
api.cp.microsoft.com
login.microsoftonline.com
cert.ccs.login.microsoftonline.com
outlook.com
stamp2.login.microsoftonline.com
graph.windows.net
login.windows.net
*.sharepoint.com
login.windows.net
tip.passwordreset.microsoftonline.com
syncservice.microsoftonline.com
*.sharepoint.emea.microsoftonline.com
*.segmentation.bdm.microsoftonline.com
graph.windows.net
graph.windows.net
graph.windows.net
outlook.com
mail.apac.microsoftonline.com
login.windows.net
becws-gov-us.microsoftonline.com
outlook.com
management.microsoftonline.com
graph.windows.net
login.windows.net
graph.windows.net
rps-prd.microsoftonline.com
akamai-san17.exacttarget.com
portal.office.com
graph.windows.net
adminwebservice.microsoftonline.com
CompanyManager.microsoftonline.com
g.msn.com
graph.windows.net
syncservice.microsoftonline.com
portal.office.com
login.windows.net
graph.windows.net
portal.office.com
login.windows.net
syncservice.ccsctp.com
dcscheduler.msogov.us.microsoftonline.com
graph.windows.net
provisioningapi.microsoftonline.com
syncservice.microsoftonline.com
ssprdataencrypt.microsoftonline.com
syncservice.eu.microsoftonline.com
login.windows.net
graph.windows.net
login.windows.net
outlook.com
migreports.microsoftonline.com
login.windows.net
companymanager.microsoftonline.com
graph.windows.net
CompanyManager.microsoftonline.com
*.certauth.login.microsoftonline.com
commerce.microsoftonline.com
stamp2.login.microsoftonline.com
graph.windows.net
login.windows.net
syncservice.ccsctp.com
outlook.com
outlook.com
stamp2.login.microsoftonline.com
stamp2.login.microsoftonline.com
graph.windows.net
portal.office.com
syncservice.ccsctp.com
graph.windows.net
syncservice.gov.us.microsoftonline.com
login.windows.net
companymanager.microsoftonline.com
syncservice.ccsctp.com
graph.windows.net
stamp2.login.microsoftonline.com
outlook.com
graph.windows.net
outlook.com
*.mail.emea.microsoftonline.com
stamp2.login.microsoftonline.com
syncservice.microsoftonline.com
portal.office.com
ccs.login.microsoftonline.com
outlook.com
outlook.com
graph.windows.net
ocpclient.microsoftonline.com
login.windows.net
graph.windows.net
stamp2.login.microsoftonline.com
login.windows.net
*.sharepoint.com
outlook.com
*.sharepoint.com
outlook.com
portal.office.com

Certificate

The complete raw certificate details for CompanyManager.microsoftonline.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk0RCnG8Ia9G6rYUTOQS
DkdDxu+gC1ko0bMMFHIi2HFPEG7ktpOU+1qsJy+z87K2oPaklasgGJnjadzac8s3
AkupxhF1bCIxgAlG7oEjVBQOG5dvq5vgA1zWHMjmpPyEStQ3EiGhOpqtNrDzjsJ8
TBColbf/l+a91izKVzMXX7wvpJlGGeDl73ykVwFDBOafZwJkQ20hRXJNfDQfQQZh
EAgvewBPHsWiQsXoyaCwi8KYTIrnXV2sfhlK6hVxYVJaWTJhzvdO093obS8iHc8t
YvoLx84bV6c1+Dqm0/nn2NalkA+O5jXf7vKGZummQCGbbjdWrn2JOqqMZFGW6TfO
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 713627626581379430634279495976367478853540845
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-09 20:37:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-09 20:37:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CompanyManager.microsoftonline.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20993561564260449740372632922166586425123494418543409309313773190323551320229265949030910057793370700330217864199192097391085775145136211671281025849642925658092118851591864625892961162792354513266301125597837576123381981519832845510012954779002891924951280998674452892232868783406622402863711372115557096082115170139047520410441833782661288288142433999188225444487274681396832113353178807225053884832046578394040501848379121407747461477539633856654848153499976972040566867766135820464804297476686351747493793688153465346549248000762423004589479623960371634735844880875301842133536911315077842101390261238589751283221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e00076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000016d17c7ac870000040300473045022100cbb156208d31781b3b8c200181e79075da14e323be28e4146aea59eb2342343202202e699196e334d334bfa20943701144eb59e2cab26b5801971c6cc18fab215ec30077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016d17c7a9b70000040300483046022100f431948531c9b8a9988c4ea0151c6b58a59e28ac752ce571ce28d67ab5c0317c02210081c474ba1fdaf2562342ff4b004a86e1615e919dc7f721126ae682223bb270600075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000016d17c7aa17000004030046304402204b657a161121ab45467a1dce96096e5a2d0986e280829797f39d8d2c955af7cc0220747d374685da216eb54564c14816c664e2c8baa90b675fa2989510740a4c6b47007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016d17c7a92a0000040300473045022100e3a8042512a68605f4cb136a3b1e0d280859b8e17eb1181e1a3d6ce3a8cefe2202204cc796945d205f822e380cf36a1c54cecd75eb44327e5df230b933605d00c043
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%202.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							acf030bc2cefb32b9ff384abee5091dc27e59e84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companymanager.microsoftonline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 919e3b446c3d579c42772a34d74fd1cc4a972cda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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