verification.omex.office.net

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 06

About this certificate

This digital certificate with serial number 33:00:9b:c1:14:11:7d:c4:9c:bc:f0:53:e4:00:00:00:9b:c1:14 was issued on by Microsoft Corporation.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:00:9b:c1:14:11:7d:c4:9c:bc:f0:53:e4:00:00:00:9b:c1:14
Serial Number (int): 1137391005537138414671741430419826622586405140
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 5c:d5:8b:89:78:b2:76:a7:4d:63:f3:69:0e:63:a9:42:d4:35:52:d4
AuthorityKeyId: d5:c1:67:3a:c2:a3:9d:f4:77:52:5b:59:12:38:29:e6:55:68:bb:a5

Fingerprint (sha1): c7:2d:a6:d9:1d:c3:18:7e:00:79:f3:81:66:1c:16:95:d5:71:f2:55
Fingerprint (sha256): 04:f3:41:c8:77:ce:d8:91:8b:3f:0c:b6:53:f4:1f:cf:d2:dc:f6:2f:b2:2b:26:ba:4e:cd:68:e4:0e:c4:1b:2f

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2006%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2006.crl

Check the revocation status for certificate verification.omex.office.net

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for verification.omex.office.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

verification.omex.office.net
*.verification.omex.office.net
verificationservice.osi.office.net
*.verificationservice.osi.office.net
verificationservice.officeapps.live.com
*.verificationservice.officeapps.live.com
external.omex.office.net
*.external.omex.office.net

Other certificates including the domain name office.net

(limited to 100 certificates)
pavo.keyvault.office.net
prv.config.office.net
otcms.osi.office.net
displaycatalog.templatesproxy.office.net
prv.config.office.net
securitysignalsapi-slice.office.net
statics.teams.cdn.office.net
outlook.com
odc.officeapps.live.com
o365auditrealtimeingestion.manage.office.com
diagnosticsportal.outlook.com
test.office.net
domaincontrollerclient.prod.torus.office.net
api.businesscentral.dynamics.com
support.office.net
testsslcert.office.net
griffinazureicmcert.office.net
videoplayer.osi.office.net
kasmgmtportal.osi.office.net
testrpscert.office.net
bookings.outlookapps.com
www.bing.com
c2r.ts.cdn.office.net
manage.officeppe.com
store.office.com
prv.config.office.net
mars-adls-mt-aus.office.net
prv.config.office.net
test.office.net
outlook.com
*.content.office.net
setup.office.com
agave.myanalytics.cdn.office.net
cws-escalation.office.net
nl.osi.office.net
uci.edog.officeapps.live.com
outlook.com
shredder.osi.office.net
test.office.net
tasman.osi.office.net
sfcluster.apc.complianceposturemanagement.office.net
support.officeppe.com
prv.config.office.net
testdataencryptioncert.office.net
outlook.live.com
support.office.com
macommunication.geneva.keyvault.fullvalue.omex.office.net
test-s01-800-nam-westus.substrate.cosmic-int.office.net
galo.checkin.partner.office.net
sway-to-sds-replication.office.net
prv.config.office.net
config.office.com
outlook.com
wevedata.office.net
ocws.officeapps.live.com
testicmcertyiqwan.office.net
mars-encryptionmaster-mt-gov.office.net
o365auditrealtimeingestion.manage.office.com
outlook.com
partners.portal.office.net
cdn.forms.office.net
verification.omex.office.net
macommunication.geneva.keyvault.fullvalue.omex.office.net
hybridDMS.office.net
comments-ppe.office.net
test-s01-800-nam-westus.substrate.cosmic-int.office.net
bcws-client.office.net
esign.svc.cloud.microsoft
outlook.com
outlook.com
prv.config.office.net
partners.portal.office.net
cluster.osp.office.net
signalStore-client.office.net
gcp.comments.office.net
outlook.com
www.bing.com
outlook.com
support.officeppe.com
invites.office.com
www.bing.com
outlook.com
outlook.com
uci.edog.officeapps.live.com
test-s01-800-nam-westus.substrate.cosmic-int.office.net
eop.pavcservice.office.net
mars-tokenservice-datawriterclient-mt-aus.office.net
test-s01-800-nam-westus.substrate.cosmic-int.office.net
outlook.com
cdn.uci.officeapps.live.com
outlook.com
sfcluster.kor.unifiedfeedback.office.net
substratecerttext.office.net
wac-icmppe.s2s.office.net
westus-ingress.ic3-swat-test.office.net
pavo.monitoring.geneva.office.net
Outlook.office.com
test-s01-800-nam-westus.substrate.cosmic-int.office.net
outlook.com
griffinazureev2extension.test.office.net

Certificate

The complete raw certificate details for verification.omex.office.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9BFugoVQNpDBC4KzCi3
+neUOkLFzhfVF2px87WCSTC47jLJvMhfYHNE9P/K+7jTJKbo2+2JUR4tgMcXr5gZ
Iz4fw7Az7O7sZ8CskBvZjvw7O9wRpxyfxpscqgbnQj74wlLC5vcZppIjGY3UaWeW
PSID5ygTsZ67ts6JwUKRco6dEuUYeVWlFo2jwGlE6MmT7jC5t7cMeZSxxlhZ3b+D
HmIPCdxl9+ZU789fkoCLVzj8CT4jUF8lxN4OEcEwF5lLt9kNZwgbDxOcGTTOoBgH
Qhf7bE8OyErGZgzxfeKV1rRybtqk450Ct6RLDe36liErIq5bjEsU32BvoEX7fdSK
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137391005537138414671741430419826622586405140
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 06'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-09 05:52:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 05:52:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'verification.omex.office.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22699359522355220840709071355409028355830909770960100802527847822382787169689073752614283689193386949668500105350453792968575411612205432061708405313874995792071689764149236749747227282192487766530530994621356812892407695667607964366211296848633502335758423163199208582000461713681691079984345794815634462904297345520197302642466744000542577089559473753358341791358174968092275404472567217260303767496934537548145568619510031391756750750219667361039926094889690337522810320301182328434138443054889401830783891449372813633575166989302815807946558812408753271454499096603388366729425610178387807825469785447408325659273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2006%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5cd58b8978b276a74d63f3690e63a942d43552d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (278 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verification.omex.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verification.omex.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verificationservice.osi.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verificationservice.osi.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verificationservice.officeapps.live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verificationservice.officeapps.live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'external.omex.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external.omex.office.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2006.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5c1673ac2a39df477525b59123829e65568bba5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00436be5ff7df75366663779f46a78ef314ed8f1c39b5ec8474e45d0d7789d37fc1c6578dc2a74af56e7dd98a18cdb8879442c78f0f31c41adac478a541512732364e2368ca7d2b06b63c41ac684f30b0c31e5ef34b6effe3c1ed8a8c787fe75d08be635852b67473fad7a9210ae1135f191d0152d4d11ad9e1181539a0e66adfbacdcf8bb309fd565b4259aaee9fc4c8eb8c1e2b665b5c9b91d4b6e244c0d2993c95bd2d70e2f4745475d9d364b9105b8c6a9ab9db0b7b1c0152c513124311ffce120838e81fb7ccd0aeed9a160da99d9e4f9d34e418b801f0038f3d6cec18e3e19400618ddf418e03750b6adce366329f125f70d56cc243bbe55163d99b48d7fb7024b4e3356f1068fc56925ad453ee8ccec7c71d30e75c6a7dbc890e1dcf1eca19c75250ad64361460a68fd66de80de20f3f20fc01636a0178c165c0daa56b2e98686aaecd044f1acf7a9ab71383ac4b2c103e3de4730621e4b5521a282ee564256770121e0eb1ff14a141ca8d23a8bc325a8202d0298658bcd748c1e0974fd4af346e0309a308c6694ff2cfb4704a6d6e392f436ffda2709e404d8592eca1e1a65e0ef07750dfb7849ea1fe3cbbcf1b7c01dbfc97d2bb1efd9eb89c603729ac82df6c9e930d44863fd1699626e232c82435c2672877cba67571927923f7ddee60aa3e7154f65f9006ae00044034c39275d43f7877b0d15a0069d226fb779b4