*.appservices.staging.businesscentral.dynamics-tie.com

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 07

About this certificate

This digital certificate with serial number 33:00:3a:67:ca:84:3d:46:52:01:ad:ce:71:00:00:00:3a:67:ca was issued on by Microsoft Corporation.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:3a:67:ca:84:3d:46:52:01:ad:ce:71:00:00:00:3a:67:ca
Serial Number (int): 1137357879464352858668258521539572258733451210
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 33:1e:90:f2:f2:8e:53:a9:3d:16:e8:f2:9a:63:29:ae:99:97:78:9e
AuthorityKeyId: ce:15:16:3b:ea:02:a3:a6:6b:da:d9:2b:fd:e5:8c:52:be:7a:50:a8

Fingerprint (sha1): 4d:ef:05:e6:94:8e:5f:f2:bc:d1:8c:a0:9b:e1:c6:d6:e2:66:7c:f1
Fingerprint (sha256): 04:a5:f0:f6:24:78:de:52:39:90:b4:ba:6e:f4:fd:89:7f:53:c3:1d:7b:1b:30:a3:35:3f:55:c1:29:ea:8a:ff

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl

Check the revocation status for certificate *.appservices.staging.businesscentral.dynamics-tie.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.appservices.staging.businesscentral.dynamics-tie.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.appservices.staging.businesscentral.dynamics-tie.com

Other certificates including the domain name dynamics-tie.com

(limited to 100 certificates)
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
cluster.services.dev.smb.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
syncdaemoninternal-aadapp.staging.smb.dynamics-tie.com
cluster.services.staging.smb.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
api.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
extensionmanagementproxy-aadapp.test.smb.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.appservices.staging.businesscentral.dynamics-tie.com
*.services.smb.dynamics-tie.com

Certificate

The complete raw certificate details for *.appservices.staging.businesscentral.dynamics-tie.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U0pf7vPgMVSrGLflIdt
gKuxCGJNVbUtAYLpQvqL+3Mi8Cj/yXigFwXXFtgn7R1TBn4MD3YnTRrswE1puqm0
MvLdUOmLsrYJSozOmyGfeCPFQ7vTMo9Cq5VGBQ7ftR2OPoI88MCWQNB+hJsnKuon
RsPwvYZ+JUuREZMy6KWutZRQosPny5DMsCqQOHh2MvK7PfDMRcoHjZuMDVvq2JE0
aP3DrNlD2ff6hEitKtefpOjP4mehj82cPWfPwAFyufXjlJgtIOCYFKhFQnbvwn6E
AirAbdb+GoOBrIIvOnMTk206OKJR76oRw9KRX1Htg9+4dQ6dwmQIKp3NE1CPrlqn
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137357879464352858668258521539572258733451210
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 07'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 10:00:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-12 10:00:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.appservices.staging.businesscentral.dynamics-tie.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26421855790179774383906324834230653971824105001398385697981694522246462408799462369060662430594975737772589033380854477122577205067016434168781901359740659088033360103779254585308994555670951739289620339011843460817209477753942103101301456669292270524012810969170728332062763385857167631405605830952483479129490769931949657356109225103166968253550346461726871261442900864558173424154941414236819768858640722397353253526646666754080983096314952811239726650149808092586463511181554028278818066728294278706342064386356387686753250396251534405524888815590315183370602031212457018239950625316030156617558976924537914566553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							331e90f2f28e53a93d16e8f29a6329ae9997789e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appservices.staging.businesscentral.dynamics-tie.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ce15163bea02a3a66bdad92bfde58c52be7a50a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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