api.cp.microsoft-ppe.com

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 01

About this certificate

This digital certificate with serial number 33:00:01:e0:88:25:82:3d:34:61:13:99:c7:00:00:00:01:e0:88 was issued on by Microsoft Corporation.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DigitalSignature KeyEncipherment DataEncipherment] (00001101) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:00:01:e0:88:25:82:3d:34:61:13:99:c7:00:00:00:01:e0:88
Serial Number (int): 1137338643861412897497047322221987154687549576
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: a5:d9:c0:81:c9:0a:c0:87:d2:f7:09:e8:8c:fb:e0:ed:d8:d2:0c:09
AuthorityKeyId: 0f:20:5d:d7:a1:57:95:db:92:cf:2b:d0:c7:c2:77:04:ce:72:80:76

Fingerprint (sha1): ba:80:83:37:4f:0d:85:5e:93:90:63:61:2c:ca:f0:93:7d:2b:b2:01
Fingerprint (sha256): 04:8d:05:1c:10:6d:b5:79:c4:54:db:55:c5:a4:11:40:8c:ea:00:0f:60:c2:cb:77:32:ac:46:fe:c8:54:81:7a

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.crl

Check the revocation status for certificate api.cp.microsoft-ppe.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.cp.microsoft-ppe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

commerce.ccsctp.com
api.cp.microsoft-ppe.com
api-deploy.cp.microsoft-ppe.com
commerce-deploy.ccsctp.com
sts.cp.microsoft-ppe.com
order.cp.microsoft-ppe.com
partner.cp.microsoft-ppe.com
order.store.microsoft-ppe.com
customer.account.microsoft-ppe.com
sts-deploy.cp.microsoft-ppe.com
commerceaccount.cp.microsoft-ppe.com
commerceaccount-deploy.cp.microsoft-ppe.com
partner-deploy.cp.microsoft-ppe.com
order-deploy.cp.microsoft-ppe.com
api.co4.cp.microsoft-ppe.com
api.ch1d.cp.microsoft-ppe.com
*.api.cp.microsoft-ppe.com

Other certificates including the domain name microsoft-ppe.com

(limited to 100 certificates)
mpnmembership.microsoft-ppe.com
seedtest-rd.msdx.microsoft-ppe.com
pas.windows.net
riskclient.order.cp.microsoft-ppe.com
deployment.usagesyncagent.cp.microsoft-ppe.com
*.controls.account.microsoft-ppe.com
graph.windows.net
login.windows.net
pas.windows.net
login.windows.net
partner.microsoft-tst.com
macc-ppe.cp.microsoft-ppe.com
partneraccounts-ppe.eastus2.cloudapp.azure.com
client.subscription.cp.microsoft-ppe.com
editor.catalog.cp.microsoft-ppe.com
graph.windows.net
pas.windows.net
graph.windows.net
graph.windows.net
redvpnpg01.microsoft-ppe.com
atm-partnerquote-ppe.trafficmanager.net
api.partnerreferrals.microsoft-ppe.com
login.windows.net
graph.windows.net
*.vo.msecnd.net
login.windows.net
graph.windows.net
pas.windows.net
pas.windows.net
monitoring.fulfillment.cp.microsoft-ppe.com
pas.windows.net
client.commercerestcommerceaccount.cp.microsoft-ppe.com
graph.windows.net
*.vo.msecnd.net
graph.windows.net
psx.spark.oneness.microsoft-ppe.com
login.windows.net
client.commercerestentitlement.cp.microsoft-ppe.com
graph.windows.net
azurepilot.cp.microsoft-ppe.com
api.usage.cp.microsoft-ppe.com
login.windows.net
leadmanagement-ppe.westus2.cloudapp.azure.com
healthprobe.gateway.cp.microsoft-ppe.com
graph.windows.net
client.commercerestauthorization.cp.microsoft-ppe.com
ngpproxy.microsoft-ppe.com
pas.windows.net
login.windows.net
graph.windows.net
api.cp.microsoft-ppe.com
data.tokens.microsoft-ppe.com
login.windows.net
api.partnercatalog.microsoft-ppe.com
login.windows.net
pas.windows.net
api.partnercenter.microsoft-ppe.com
graph.windows.net
notification.cp.microsoft-ppe.com
servicefabric.sds.microsoft-ppe.com
rewards.microsoft-ppe.com
profiles.view.api.account.microsoft-ppe.com
*.ds.microsoft-ppe.com
graph.windows.net
login.windows.net
graph.windows.net
login.windows.net
distribute-provision-eus-ppe.ds.microsoft-ppe.com
graph.windows.net
family.microsoft.com
graph.windows.net
pc-notifications-dispatch.microsoft-ppe.com
fulfillment.cp.microsoft-ppe.com
graph.microsoft-ppe.com
distribute-gateway-eus-ppe.ds.microsoft-ppe.com
graph.windows.net
login.windows.net
graph.windows.net
pas.windows.net
login.windows.net
graph.windows.net
api.partnerlookup.microsoft-ppe.com
login.windows.net
login.windows.net
api.invoice.microsoft-ppe.com
store.microsoft-ppe.com
graph.windows.net
atm-partnerquote-ppe.trafficmanager.net
graph.windows.net
pas.windows.net
graph.windows.net
download.store.microsoft-ppe.com
graph.windows.net
sharing.member.microsoft.com
graph.windows.net
*.vo.msecnd.net
monitoring.notification.cp.microsoft-ppe.com
orgaccount.microsoft-ppe.com
login.windows.net
graph.windows.net

Certificate

The complete raw certificate details for api.cp.microsoft-ppe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyARzCeU4RbydVdjtEU2
J7csyGxd17GEUuXUgdIqZFM+6L4fmjicKLIAivntmwwwkSFbtltV537V4rIKoLSt
lhncK6u1/BttY97SV4x1NKfEjrqXqsjPcdowIx5i8hk3ZyY71j9s9T00wRmRVM/G
k+AF+9tC704m3IoBsWvgXA8nnZKy7TMIAemJ4URX29ndUyayNmanjonnpahlAiZ4
KX3X6RhQ209GCyvkTBtWk+152Ftl13bUK6P2gF18Be8GgeIZjof8mJsY9NneO7uM
5nptlul8jc0h1rWW5x+cI1r0BQE2OaP0PJzkfk0bfUdQcN8FtP71gmzHZXkqpPbr
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137338643861412897497047322221987154687549576
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-05 18:47:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-30 18:47:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.cp.microsoft-ppe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23622377099054869309413983243491067995438793396173556527112641847056130849916253120903047900780802884355003182703500760908991712407033003884375153224659204703577807328492389824899453967347269078369763557123130709741156801729091907792490563668840055041488836052944227444788326713650830029920941381201196854037864618301720486745703296644863103335666513540441571577578949702606204809357641618194426644649591231986184851903332009766643717084959775530429488748051648714728873195042249552968546932359854704272063189093560422751502537437987921697708928139204450544471056217334842079318483440324198869377851193276519310355309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.2977488.11009781
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5d9c081c90ac087d2f709e88cfbe0edd8d20c09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (540 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce.ccsctp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cp.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-deploy.cp.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce-deploy.ccsctp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.cp.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.cp.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.cp.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.store.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.account.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts-deploy.cp.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerceaccount.cp.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerceaccount-deploy.cp.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-deploy.cp.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order-deploy.cp.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.co4.cp.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ch1d.cp.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.cp.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f205dd7a15795db92cf2bd0c7c27704ce728076
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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