hc.asm.skype.com

Issued by MSIT Machine Auth CA 2

About this certificate

This digital certificate with serial number 72:d3:1c:62:00:01:00:00:c9:5a was issued on byMSIT Machine Auth CA 2.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate, for public certificates this should not be an internal name (BRs: 7.1.2.10.3)

Certificate Subject

CN=hc.asm.skype.com

MSIT Machine Auth CA 2

This certificate has expire since

Certificate Details

Serial Number (hex): 72:d3:1c:62:00:01:00:00:c9:5a
Serial Number (int): 542244087243877344397658
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: bf:7e:98:e8:d8:f7:61:53:be:89:84:b5:fc:b1:04:34:61:6a:0e:b8
AuthorityKeyId: eb:db:11:5e:f8:09:9e:d8:d6:62:9c:fd:62:9d:e3:84:4a:28:e1:27

Fingerprint (sha1): c5:cb:4c:cd:a1:d1:24:e6:e7:45:cd:60:07:c4:90:45:4f:eb:9d:e1
Fingerprint (sha256): 04:48:73:62:e7:6a:b7:ab:08:9d:27:02:ff:27:85:3b:98:0e:b0:0a:f5:cd:32:b6:1b:e2:96:35:23:34:83:c5

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/MSIT%20Machine%20Auth%20CA%202(1).crt
Issuing Certificate URL: http://corppki/aia/MSIT%20Machine%20Auth%20CA%202(1).crt

Revocation information

CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/MSIT%20Machine%20Auth%20CA%202(1).crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/MSIT%20Machine%20Auth%20CA%202(1).crl
CRL Distribution Point: http://corppki/crl/MSIT%20Machine%20Auth%20CA%202(1).crl

Check the revocation status for certificate hc.asm.skype.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hc.asm.skype.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hc.asm.skype.com
nus1-hc.asm.skype.com
sus1-hc.asm.skype.com
wus1-hc.asm.skype.com
eus1-hc.asm.skype.com
neu1-hc.asm.skype.com
weu1-hc.asm.skype.com
ea1-hc.asm.skype.com
sa1-hc.asm.skype.com

Other certificates including the domain name skype.com

(limited to 100 certificates)
*.messagingthread.skype.com
dashboard.sms.skype.com
*.asm.skype.com
du5.media.vm.skype.com
x-lgw.lgw.skype.com
canary.pnh.skype.com
*.notifications.teams.microsoft.com
*.callrecorder.skype.com
images.partner.windowsphone.com
*.config.skype.com
www.skype.com
brblogs.skype.com
dogfood.pnh.skype.com
bcr.tr.skype.com
*.vo.msecnd.net
*.config.skype.com
meet.skype.com
*.mps.skype.com
qaget.skype.net
*.events.data.microsoft.com
shortener.skype.com
srm.skype.com
*.asm.skype.com
*.notifications.teams.microsoft.com
get.skype.com
csp.skype.com
secure05.stage.lithium.com
dogfood.pnh.skype.com
*.asm.skype.com
prod.registrar.skype.com
register.greenid.skype.com
*.pma.teams.microsoft.com
*.pilot1.notifications.skype.com
*.vo.msecnd.net
*.asm.skype.com
*.meet.skype.net
csharp.net
messagingexporter-staging.skype.com
heartbeat.skype.com
www.skype.com
*.vo.msecnd.net
*.config.skype.com
ui.skype.com
phobot-live.skype.com
sso.skypetoken.skype.com
dashboard.sms.skype.com
csharp.net
emulator.sms.skype.com
*.cms.skype.net
*.contacts.skype.com
csharp.net
hc.asm.skype.com
*.email.skype.com
uic.login.skype.com
bcr.tr.skype.com
prd01caeattnsvc.cloudapp.net
settings.teams.internal.office.com
dreamspace.ie
*.notifications.teams.microsoft.com
msgsearch.skype.com
latest-webclient.skype.com
go.skype.com
*.conversationservice.skype.com
api.skype.com
*.pilot1.notifications.skype.com
notification-hub.skype.com
recommend.skype.com
partners.cc.skype.com
uic.login.skype.com
*.notifications.teams.microsoft.com
fpt.microsoft.com
ic3-voiceauth.skype.com
heartbeat.skype.com
tr.skype.com
inviteconnector.skype.com
*.pilot2.notifications.skype.com
*.messagingthread.skype.com
profile.skype.com
*.pma.teams.microsoft.com
*.promotions.skype.com
prod-jwt.botapi.skype.com
interviews.skype.com
upgrade-api.skype.com
*.pilot1.notifications.skype.com
*.events.data.microsoft.com
msgsearch.skype.com
*.mps.skype.com
*.notifications.teams.microsoft.com
*.events.data.microsoft.com
*.notifications.teams.microsoft.com
*.events.data.microsoft.com
*.callrecorder.skype.com
*.vo.msecnd.net
skypegraph.skype.com
msgsearch.skype.com
s2g-skypesms-prod.sms.skype.com
calling.consumer.entitlement.skype.com
trap.skype.com
open-ai-connect-msit.skype.com
*.events.data.microsoft.com

Certificate

The complete raw certificate details for hc.asm.skype.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqt7zZkapPm991r+1hS6
Xy9GckkCw2V19bn1/E0D9uqZip/EqF0iT3GKIjNYnwlkQPEghQsXGxZL6l3/LRrK
oAG2x/JD15Z6vKbESUPmt/QpSLmeIsLg+13gA0ui+1Nsn5FwzojrQ+531x+IIdNV
WuUFfCH+RK0xfh59n3wBkQcZa5zcHKcbyWMMhsXl1TFuX/cqj8ZeW1lLvg8JqrAY
Er6f/F/ajMRlxU9YBLU8wfaEFjCSCrsJxd+AOr5aGXO+ikr4H7ABrNFKC1YQdjOY
yf+aqQ/nHtXiJsiSfhNLAJH1nmn/KfTIqCmsWnknd0hcqEvsOThGtYylM7r8TMA2
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 542244087243877344397658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'microsoft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'corp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MSIT Machine Auth CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-27 04:23:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-27 04:23:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hc.asm.skype.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21545073561971183135370700634635562665497028267854884053950665115551997392683284733255672145339138331049234644245412386798984787331775462804047593459825743631295901776878636721419697575243982944192357522275618410764538053828654184382336173384897983013102325721566029863880031818532741957814038892897083498801884474617455824947655909249619249862910348729272809218653451876971196144471668632700930307650469988741567286882465371402315585321041819800121655135922521533248803992019441507073587369390768543595382760652565800465392726669799728748980051708850731929662410723393386714620282621286889583466061627507492421383861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf7e98e8d8f76153be8984b5fcb10434616a0eb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebdb115ef8099ed8d6629cfd629de3844a28e127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (230 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/MSIT%20Machine%20Auth%20CA%202(1).crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/MSIT%20Machine%20Auth%20CA%202(1).crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://corppki/crl/MSIT%20Machine%20Auth%20CA%202(1).crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/MSIT%20Machine%20Auth%20CA%202(1).crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://corppki/aia/MSIT%20Machine%20Auth%20CA%202(1).crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER asn1: structure error: base 128 integer too large
1.3.6.1.4.1.311.21.8.7587021.751874.11030412.6202749.3702260.207.945504904.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (203 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hc.asm.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nus1-hc.asm.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sus1-hc.asm.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wus1-hc.asm.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eus1-hc.asm.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neu1-hc.asm.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weu1-hc.asm.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ea1-hc.asm.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa1-hc.asm.skype.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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