c-pke.dev1.ctrl.ml.mdn.skype.net

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 04

About this certificate

This digital certificate with serial number 33:00:55:a7:9f:4c:b7:63:46:82:4f:5b:14:00:00:00:55:a7:9f was issued on by Microsoft Corporation.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:55:a7:9f:4c:b7:63:46:82:4f:5b:14:00:00:00:55:a7:9f
Serial Number (int): 1137367151934456549183578175129437009813546911
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 37:40:49:da:6b:9a:3f:fe:d3:2d:dd:67:69:f0:06:1d:ea:c1:69:6a
AuthorityKeyId: 3b:70:d1:53:e9:76:25:9d:60:a8:ca:66:0f:c6:9b:ae:6f:54:16:6a

Fingerprint (sha1): a6:84:b4:a8:84:07:e9:a2:0d:9f:7d:dc:a1:db:fd:ac:bf:97:a0:14
Fingerprint (sha256): 03:ae:be:96:63:db:6e:f5:c6:7f:1c:e4:1b:f2:be:66:95:62:41:08:f1:4a:5c:4f:8c:49:bb:c6:74:88:72:e8

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl

Check the revocation status for certificate c-pke.dev1.ctrl.ml.mdn.skype.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for c-pke.dev1.ctrl.ml.mdn.skype.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

c-pke.dev1.ctrl.ml.mdn.skype.net
c-pke.dev.dev1.ctrl.ml.mdn.skype.net
*.c-pke.dev.dev1.ctrl.ml.mdn.skype.net
*.c-pke.ipdns.dev1.ctrl.ml.mdn.skype.net

Other certificates including the domain name skype.net

(limited to 100 certificates)
*.trouter-int.skype.net
c-signing.dev3.ml.mdn.skype.net
pnh-prod.mtls-client.skype.net
*.cc-dev.skype.net
usermap.skype.net
*.esaps-int.skype.net
pnh-prod.mtls-client.skype.net
*.tpc.skype.net
kd-encryption.asosnitski.ml.mdn.skype.net
*.config.skype.net
kd-encryption.dev1.ml.mdn.skype.net
c-signing.hmetssalu.ml.mdn.skype.net
ust-provisioner.qa.skype.net
*.vo.msecnd.net
*.messagingthread.skype.net
qaget.skype.net
reporting.fl.skype.net
pnh-prod.mtls-client.skype.net
pnh-prod.mtls-client.skype.net
issuer-test.skypetoken.skype.net
c-signing.imalkevich.ml.mdn.skype.net
storage.asm.skype.net
*.compliancecurator-dev.skype.net
c.angorozi.main.ml.mdn.skype.net
c.kristjanjogi.main.ml.mdn.skype.net
*.cc-dev.skype.net
lu4-sasbc.skypeconnect.skype.net
*.ccts-rc.skype.net
tnm-lnpsupport.e2e.nmp.mtls.skype.net
d-signing.dev3.ml.mdn.skype.net
*.vo.msecnd.net
pnh-prod.mtls-client.skype.net
d-signing.hmetssalu.ml.mdn.skype.net
o.hmetssalu.main.ml.mdn.skype.net
entitlement.teams.microsoft-int.com
*.meet.skype.net
csharp.net
client-amt-prod.mtls-client.skype.net
*.events-sandbox.data.microsoft.com
lgw-df.mtls-client.skype.net
pnh-prod.mtls-client.skype.net
calling.consumer.entitlement.dev.skype.net
entitlement.teams.microsoft-int.com
c.abartkoviak.ctrl.ml.mdn.skype.net
*.vo.msecnd.net
*.pipe.skype.net
srm.qa.skype.net
d.imalkevich.main.ml.mdn.skype.net
c-pke.dev1.ctrl.ml.mdn.skype.net
kd-encryption.kristjanjogi.ml.mdn.skype.net
fass.skype.net
dtr-signing.lt.ml.mdn.skype.net
calling.consumer.entitlement.dev.skype.net
csharp.net
*.tc-int.skype.net
dtr-signing.abartkoviak.ml.mdn.skype.net
*.cms.skype.net
csharp.net
urlp.asm.skype.net
api.bot.skype.net
kd-encryption.sasaares.ml.mdn.skype.net
c-signing.hmetssalu.ml.mdn.skype.net
fb.sasaares.main.ml.mdn.skype.net
*.ep-dev.skype.net
d-signing.sasaares.ml.mdn.skype.net
dtr-signing.dev1.ml.mdn.skype.net
o365.fass.skype.net
*.messagingthread.skype.net
*.ccts-rc.skype.net
config.edge.skype.net
a.qalogin.skype.net
premanager.skype.net
policyprocessor.teams.skype.net
*.cc-rc.skype.net
a.qalogin.skype.net
admin.local.peer5.skype.net
kd-encryption.dev2.ml.mdn.skype.net
inviteconnector.skype.net
c-signing.abartkoviak.ml.mdn.skype.net
d.dev3.main.ml.mdn.skype.net
*.ccts-dev.skype.net
*.pipe.aria.int.microsoft.com
prehelperapi.skype.net
storage.asm.skype.net
c.angorozi.ctrl.ml.mdn.skype.net
c-signing.lt.ml.mdn.skype.net
pnh-prod.mtls-client.skype.net
*.events-sandbox.data.microsoft.com
test.ans.messaging.core.microsoft
api.bot.skype.net
usermap.skype.net
d-signing.lt.ml.mdn.skype.net
tor.security.skype.net
*.afd.asm.skype.net
*.events-sandbox.data.microsoft.com
sip.pstnhub-ppe.skype.net
geneva.tpc.skype.net
notification-hub.skype.net
d-signing.hmetssalu.ml.mdn.skype.net
d-signing.abartkoviak.ml.mdn.skype.net

Certificate

The complete raw certificate details for c-pke.dev1.ctrl.ml.mdn.skype.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhnxsAC6cHMUiCC6ELcF
RfBDZJ1nXzSXymXafYGmta3XJuzuQve9W9h9x9d34U9XkQp7Cf3Eo+cDnbir0kiP
wYJVCo43GFUGZDE3zNpwn+6kZszS0GM/2PvzGbU95U0zRjg8Eihb6D9l6ZWSDgRZ
R5J3WAq1WyfGHk7DsNv5M4i5il1ScjHmzvSyHolPl8z/S09FVmpkr+U9Lx3zcKNO
aNNZtoP7eE0cK/g/w4kcT0qnDHxD1i6gxKXFvB7Nj5drGcjeCadWe0T8yNNEpAde
hv1UO0vsw78s+GasSi27ScCW1p0utHh9pnc/FOl4V8TovY3fvMzdXpZqf6WeMXAC
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137367151934456549183578175129437009813546911
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 04'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 21:33:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-25 21:33:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'c-pke.dev1.ctrl.ml.mdn.skype.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23493118232193939585175077193657033545635275394262616008487287967535206974158005265659865358699334211061082700389838832716404732667139181036303344020318921124864230549668739990551440436085750970900200714764505594139870154428976458313933754863730274282860220546329079387231025972798456406307415417740073275966898597054550096535455337789909002153882541533922419579575785230558437462942660247954046049981144980157157119838617887677386523728883140473916143024284367485285432428168279963708838042338196926595921941503287584958071572390421370498406962740254783593823345950332398768642193152807265549495007182053858155168429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							374049da6b9a3ffed32ddd6769f0061deac1696a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-pke.dev1.ctrl.ml.mdn.skype.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-pke.dev.dev1.ctrl.ml.mdn.skype.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c-pke.dev.dev1.ctrl.ml.mdn.skype.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c-pke.ipdns.dev1.ctrl.ml.mdn.skype.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3b70d153e976259d60a8ca660fc69bae6f54166a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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