usdodeast0-mediag.svc.ms

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 07

About this certificate

This digital certificate with serial number 33:00:07:e6:8a:68:c7:1c:77:77:ac:c3:f3:00:00:00:07:e6:8a was issued on by Microsoft Corporation.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:07:e6:8a:68:c7:1c:77:77:ac:c3:f3:00:00:00:07:e6:8a
Serial Number (int): 1137340693542731369609150564570296665118336650
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 39:29:7a:8c:85:56:73:86:e1:ac:82:c7:30:fc:4b:d9:9a:87:11:8e
AuthorityKeyId: ce:15:16:3b:ea:02:a3:a6:6b:da:d9:2b:fd:e5:8c:52:be:7a:50:a8

Fingerprint (sha1): 4c:fc:0d:c3:9c:f4:5b:8c:a7:12:9e:64:2d:e8:6c:60:06:c4:33:41
Fingerprint (sha256): 04:7a:9e:f6:69:e8:6b:76:2a:6c:46:19:84:24:50:fe:5c:d0:f1:f2:c7:f7:f6:83:6e:8e:df:c4:fd:25:3c:bc

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl

Check the revocation status for certificate usdodeast0-mediag.svc.ms

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for usdodeast0-mediag.svc.ms

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

usdodeast0-mediag.svc.ms
usdodeast1-mediag.svc.ms
usdodeast2-mediag.svc.ms
usdodeast3-mediag.svc.ms
usdodeast4-mediag.svc.ms
usdodeast0.mediag.svc.ms
usdodeast1.mediag.svc.ms
usdodeast2.mediag.svc.ms
usdodeast3.mediag.svc.ms
usdodeast4.mediag.svc.ms
usdodcentral0-mediag.svc.ms
usdodcentral1-mediag.svc.ms
usdodcentral2-mediag.svc.ms
usdodcentral3-mediag.svc.ms
usdodcentral4-mediag.svc.ms
usdodcentral0.mediag.svc.ms
usdodcentral1.mediag.svc.ms
usdodcentral2.mediag.svc.ms
usdodcentral3.mediag.svc.ms
usdodcentral4.mediag.svc.ms
usdodeastr-mediag.svc.ms
usdodcentralr-mediag.svc.ms

Other certificates including the domain name svc.ms

(limited to 100 certificates)
*.notifyd.svc.ms
servicefabric.pushns.svc.ms
*.badgers.svc.ms
*.mediap.svc.ms
*.hwp.svc.ms
SPO-BF-MS-AAD.svc.ms
*.pushng.svc.ms
*.hwp.svc.ms
usdodeast0-notifyg.svc.ms
sdesti.prod.servicecerts.svc.ms
*.mediap.svc.ms
*.pushb.svc.ms
*.hwp.svc.ms
usdodeast0-notifyg.svc.ms
*.pushfp.svc.ms
gcc-notify-sphomep.svc.ms
gcc-managementcert-sphomep.svc.ms
*.pushnp.svc.ms
*.badgerp.svc.ms
usdodeast0-mediag.svc.ms
usgovvirginia0-notifyg.svc.ms
*.badgerb.svc.ms
*.hwp.svc.ms
test.test.usgovvirginia0-mediap.svc.ms
*.pushng.svc.ms
sti.sphomep.svc.ms
*.pushnb.svc.ms
cma.pushs.svc.ms
SPO-DOD-AS-STI.notifyp.svc.ms
servicefabric.pushng.svc.ms
*.pushng.svc.ms
sdeazureauth.prod.servicecerts.svc.ms
api.tpst.svc.ms
*.badgerg.svc.ms
onedrive.com
usgovvirginia0-notifyg.svc.ms
servicefabric.pushfb.svc.ms
usgovvirginia0-notifyp.svc.ms
usgovvirginia0-notifyg.svc.ms
*.kmgcc.svc.ms
servicefabric.pushfp.svc.ms
*.pushfb.svc.ms
*.svc.ms
api.tpsprod.svc.ms
svc.ms
servicefabric.pushfp.svc.ms
*.pushfd.svc.ms
germanynortheast0-notifyp.svc.ms
germanynortheast0-notifyp.svc.ms
*.notifyp.svc.ms
*.badgerp.svc.ms
servicefabric.pushnb.svc.ms
servicefabric.pushfb.svc.ms
servicefabric.photostreamt.svc.ms
*.pushnp.svc.ms
*.badgers.svc.ms
*.pushnp.svc.ms
api.tpsedog.svc.ms
usgovvirginia0-notifyg.svc.ms
*.connectort.svc.ms
sdesti.prod.servicecerts.svc.ms
api.tpsprod.svc.ms
*.hwp.svc.ms
*.badgerb.svc.ms
spo-completenessprod-cma.servicecerts.svc.ms
sdegenevacert.prod.servicecerts.svc.ms
*.mediad.svc.ms
servicefabric.photostreamd.svc.ms
servicefabric.pushnb.svc.ms
SPO-PF-MS-MC-mediag.svc.ms
spo-completenessedog-cma.servicecerts.svc.ms
*.pushfb.svc.ms
*.badgerg.svc.ms
*.completenesss.svc.ms
SPO-BF-MS-AAD.svc.ms
gcc-sti-sphomep.svc.ms
SPO-BF-AS-CMA.svc.ms
usgovvirginia0-notifyg.svc.ms
managementcert.sphomep.svc.ms
onedrive.com
sti.sphomed.svc.ms
*.badgerb.svc.ms
gcc-griffinruntime-sphomep.svc.ms
spo-sscprod.cma.servicecerts.svc.ms
servicefabric.pushns.svc.ms
SPO-TB-STI-notifyg.svc.ms
usgovvirginia0-mediap.svc.ms
*.connectorp.svc.ms
*.pushng.svc.ms
usdodeast0-notifyg.svc.ms
api.tpsedog.svc.ms
spo-sscprod.cma.servicecerts.svc.ms
*.photostreamd.svc.ms
*.connectorp.svc.ms
api.tpsspdf.svc.ms
servicefabric.pushnb.svc.ms
kbstate.sphomeg.svc.ms
*.pushng.svc.ms
kbstate.sphomep.svc.ms
odspsscsiphonedog.servicecerts.svc.ms

Certificate

The complete raw certificate details for usdodeast0-mediag.svc.ms in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3hINkrri4k/ogBQrMkn
0lFt9B2oiG22rH2Lsua+ZgT2eQz9Yk76AVI6XNCjEme2WOYampt3hnsQlnm2A+07
pkAkm8wlWXRXvcT6+6YsgDGhzQZL96JgPhU4EQZiNfA947GiXgUtQuqXJJQ05QtI
5iXQ4hHLz8oefxzXZOyb7SNlZgXUZe7/p4yaNYGxh91pdivB88o4ybNzZfJ5zntv
1+h8dr/macBz1z5zDDgIZ4Oaj3ikzxwdEfkMiZpAxm40+xhhmY1/6xr6Dh6WKnN+
/dyLM9r4W9Uqr+IzjYAAq3iS5qmCS4+b8YztmAfGJ63hcggDP4WemaQkYWZ4Kqxm
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137340693542731369609150564570296665118336650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 07'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 16:27:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-21 16:27:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'usdodeast0-mediag.svc.ms'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20636157012983511469128988171084242303091021313005118718099950973133138045910291263809117060292493239633863279158018462074566167075931583657548228180303854997744816258113562170787322421306147873625768734505563109958929436474377017775805091884593216893904999298578307399008313205606042399063135585781466671644631102097176680131825392015309784392823424668065247028947497707876546187517422872243993144673067340886817122839062921946716685104723742527727775194027566614831189343807863009854713017814108622167379149577388453784368749884265419000325444816986707082286742583124370136969209398079738678687371331086904950810141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39297a8c85567386e1ac82c730fc4bd99a87118e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (609 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast0-mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast1-mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast2-mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast3-mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast4-mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast0.mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast1.mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast2.mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast3.mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeast4.mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral0-mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral1-mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral2-mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral3-mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral4-mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral0.mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral1.mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral2.mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral3.mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentral4.mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodeastr-mediag.svc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdodcentralr-mediag.svc.ms'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ce15163bea02a3a66bdad92bfde58c52be7a50a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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