msggw.services.skypeforbusiness.com

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 02

About this certificate

This digital certificate with serial number 33:00:d4:0c:7b:7c:a1:96:23:6e:0c:82:e3:00:00:00:d4:0c:7b was issued on by Microsoft Corporation.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:d4:0c:7b:7c:a1:96:23:6e:0c:82:e3:00:00:00:d4:0c:7b
Serial Number (int): 1137410161578765303181951312161398683237354619
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 3d:de:e3:c2:11:1c:22:ab:99:66:bc:73:c5:17:d2:3b:0f:42:b8:39
AuthorityKeyId: 00:ab:91:fc:21:62:26:97:9a:a8:79:1b:61:41:90:60:a9:62:67:fd

Fingerprint (sha1): 2a:7b:9c:0c:4b:b6:bb:c9:c1:e3:3b:2b:f8:00:aa:90:01:57:9e:16
Fingerprint (sha256): 05:4b:7a:c2:fe:b6:36:bd:b5:e8:f2:bb:0a:96:27:53:40:65:4a:d1:a1:99:eb:8a:3b:96:78:e2:ad:b5:30:12

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl

Check the revocation status for certificate msggw.services.skypeforbusiness.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for msggw.services.skypeforbusiness.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apac.msggw.services.sfb.trafficmanager.net
apac.msggw.services.skypeforbusiness.com
dogfood.msggw.services.sfb.trafficmanager.net
dogfood.msggw.services.skypeforbusiness.com
emea.msggw.services.sfb.trafficmanager.net
emea.msggw.services.skypeforbusiness.com
msggw.services.sfb.trafficmanager.net
msggw.services.skypeforbusiness.com
noam.msggw.services.sfb.trafficmanager.net
noam.msggw.services.skypeforbusiness.com
sfbmsggateway.eastasia.cloudapp.azure.com
sfbmsggateway.eastus.cloudapp.azure.com
sfbmsggateway.northeurope.cloudapp.azure.com
sfbmsggateway.southeastasia.cloudapp.azure.com
sfbmsggateway.westeurope.cloudapp.azure.com
sfbmsggateway.westus.cloudapp.azure.com
sfbmsggatewaydf.centralus.cloudapp.azure.com
sfbmsggatewaydf2.eastus2.cloudapp.azure.com
sfbmsggateway.japaneast.cloudapp.azure.com

Other certificates including the domain name skypeforbusiness.com

(limited to 100 certificates)
emea.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
*.mms.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
dpluck.skypeforbusiness.com
msggw.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
global.mediastorage.voiceapps.infra.teams.microsoft.com
*.mms.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
trap.skype.com
emea.bvd.services.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
tgs.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
global.mediastorage.voiceapps.infra.teams.microsoft.com
emeadf.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
adminportal.services.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
*.pinauth.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
*.oaa.services.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
trap.skype.com
noam.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
*.acms.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
*.pinauth.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
*.trouter.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
*.pinauth.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
trap.skype.com
noamdf.bvd.services.skypeforbusiness.com

Certificate

The complete raw certificate details for msggw.services.skypeforbusiness.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPhOaq/S9jRDml9UaX46
2Oqwg3kCij6uOYnqdCDxhhVw3w7Uu+MqND+znvGdJHDeo34yUEewodBtkSzjBDPF
6QgrS/0UR0kKxAKBA3iyt2uoekFVRWjU38ajulkp7xoLSND2XdSbvbVtplHyEw7q
GVPE+bZA/zlqV/cXWoAVthvcnZxsiCYD6cu7mMv/Jf+/Vw0u0MGZ9srou5zUhMqj
d8Wl8UV82aDamtUMvwUWSSy6xm/KTKLcJVivfMzhR1a+uFsp59nGauFLVaW8/LbV
i/m+Pa4iqmsXNKuqXjbq1vRd5CHIiHxc21rlXXVHeqD/XcGZD/u9e6wUgEUCz3aN
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137410161578765303181951312161398683237354619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-19 03:19:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'msggw.services.skypeforbusiness.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20320573202264396536185846799438503571150413121682159180304318570610478212559662788123874008451918102129164853511597065397525490278801308960315871138301138837082043757061424040185611783359344408917365490137837008773749488003012936253754127562685336807388603387155607405637845801036744725258751230131692893308412204323801298324117486056670563402011167137573746751242678539986719511421082272336144763079150792048882974307176949458456195962466659289286031999939354534103912307590632799394534364641184005509340046029939159917172221570940235435203938533049713505966991130909115210977669290856170408340624707633840116895173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ddee3c2111c22ab9966bc73c517d23b0f42b839
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (829 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.msggw.services.sfb.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.msggw.services.skypeforbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogfood.msggw.services.sfb.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogfood.msggw.services.skypeforbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emea.msggw.services.sfb.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emea.msggw.services.skypeforbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msggw.services.sfb.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msggw.services.skypeforbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noam.msggw.services.sfb.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noam.msggw.services.skypeforbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbmsggateway.eastasia.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbmsggateway.eastus.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbmsggateway.northeurope.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbmsggateway.southeastasia.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbmsggateway.westeurope.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbmsggateway.westus.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbmsggatewaydf.centralus.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbmsggatewaydf2.eastus2.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbmsggateway.japaneast.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 00ab91fc216226979aa8791b61419060a96267fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		001a24e16c5287d1038a18a35e95b6fed7ca61cab1ef2ca61d1a5d8c96e483945fd82f8b92268bed3ea054aea5e9a7e50e74c741d33b84b9a534dc922e5fe2be7fcc4dc1ef0b1bb63b3c5e80def941893594b03f24504931de2178f88ebd5fb6a4ef58df7952d9d6b1179a8d1b7da0e6b06b192f92c73d1e66fd96fc6037ad77b24b561a138ba4e4482db9f40af51f1c32af38bfa8f56b7a28963e11f315ba28b57c55e26d2ca9127d1f618b9dfefb3644a18ad013a896aef28d969bf8fda61148d7eb46565527b256304f5b8a783e177d4b7fbb168ba8c7cab695733d5ddba2ad393ec9b56bb835289b9144f4cea11e5f8343864c9fc5e29b0f760aad57aed583c3dda9943895e1f4ff6b5d4094f9abf953a4d3d4d6f46ea04657eb9ab427280a48aa5703d3d9ece4372a7f1614beef14c431e14062ca5157b7edafec5756c53298de0b40406f2bb8bf23ea84ebc744b049c36617a1a1789ef5c1b57b4c9528568fb60c2bbf487296a666fd147ba598552b75c4fb72c661e30dfe7cfec6cd940053093346d729593cbca3f86873b853b8652669302189b5534ef124437194f15e1ecb54948c45a5858bb73efcc5f669bd16970b43e90bbf1aa75889b17363077d3a779ed583ef60b0af944e39c4ef93b1139dd70ebaf6199231f283ac348e2372c1150aa0350552ddd3f159e75550230d84d3ed80adb175bb50fe532722c48be6