dev.login.partner.microsoftonline.cn
Issued by Microsoft Secure Server Authority
About this certificate
This digital certificate with serial number 15:9a:5c:5f:00:08:00:02:af:19 was issued on byMicrosoft Secure Server Authority.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
- Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
- Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
- The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
- Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate, for public certificates this should not be an internal name (BRs: 7.1.2.10.3)
Certificate Subject
CN=dev.login.partner.microsoftonline.cn
Microsoft Secure Server Authority
This certificate has expire since
Certificate Details
Serial Number (hex): 15:9a:5c:5f:00:08:00:02:af:19Serial Number (int): 102017150766422457233177
Serial Number lenght: 77 bits, 10 octets
SubjectKeyId: e9:92:a8:25:aa:38:4b:f5:a7:4e:dc:98:5c:98:26:64:92:e5:df:1c
AuthorityKeyId: 08:42:e3:db:4e:11:66:f3:b5:08:c5:40:db:55:7c:33:46:11:83:38
Fingerprint (sha1): 4c:12:81:1a:56:08:e0:23:02:e6:ee:ef:3f:39:dc:88:38:88:57:77
Fingerprint (sha256): 05:93:be:24:df:96:2f:96:45:ef:d6:14:ea:5b:0b:a9:15:14:a7:5d:57:26:59:6e:f9:a9:f8:d2:ae:5e:6c:46
Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20Secure%20Server%20Authority(8).crt
Issuing Certificate URL: http://corppki/aia/Microsoft%20Secure%20Server%20Authority(8).crt
Revocation information
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(8).crlCRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(8).crl
CRL Distribution Point: http://corppki/crl/Microsoft%20Secure%20Server%20Authority(8).crl
Check the revocation status for certificate dev.login.partner.microsoftonline.cn
0
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dev.login.partner.microsoftonline.cn
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
This certificate doesn't contain any subject alternative names.
Other certificates including the domain name microsoftonline.cn
(limited to 100 certificates)
IntuneDeviceUnlockAADSP.manage-ppe.microsoftonline.cn
acmsportal.infra.teams.microsoftonline.cn
usage.cp.microsoftonline.cn
acms.infra.teams.microsoftonline.cn
suite.partner.microsoftonline.cn
SCOnlinePREncryptionCert.manage.microsoftonline.cn
Portal.chinanorth2.manage-ppe.microsoftonline.cn
Portal.manage-ppe.microsoftonline.cn
mam.manage.microsoftonline.cn
adminwebservice.partner.microsoftonline.cn
test.microsoftonline.cn
msm-int-provision.partner.microsoftonline.cn
dms.partner.microsoftonline.cn
mambackendsp.mam.manage-ppe.microsoftonline.cn
msm.partner.microsoftonline.cn
CompanyManager.partner.microsoftonline.cn
companymanager.partner.microsoftonline.cn
syncservice.partner.microsoftonline.cn
JwtTokenSigning.manage.microsoftonline.cn
toolsclient.cp.partner.microsoftonline.cn
mosiot.partner.microsoftonline.cn
AdminWebService.partner.microsoftonline.cn
partner.partnercenter.microsoftonline.cn
IntuneServiceDiscoveryAADSP.manage.microsoftonline.cn
signupprd.partner.microsoftonline.cn
LogManagerService.manage.microsoftonline.cn
ocpmonitor.partner.microsoftonline.cn
onboarding-stx.partner.microsoftonline.cn
FEAADCertClient.CNPASU01.manage.microsoftonline.cn
dmsreadaccess.partner.microsoftonline.cn
dev.login.partner.microsoftonline.cn
becread.partner.microsoftonline.cn
FCS1.CNBASU01.manage-ppe.microsoftonline.cn
aadg.chinacloudapi.cn
mospop.partner.microsoftonline.cn
provisioningapi.partner.microsoftonline.cn
azurerdp.enterpriseregistration.partner.microsoftonline.cn
AdminWebService.partner.microsoftonline.cn
companymanager.partner.microsoftonline.cn
*.iga.azure.cn
client.kst.cp.partner.microsoftonline.cn
mygroups.microsoftonline.cn
CompanyManager.partner.microsoftonline.cn
myapplications.microsoftonline.cn
myoffer365elf.partner.microsoftonline.cn
HeadSecurityTokenServiceForOAuth.manage.microsoftonline.cn
UITailSTS.manage.microsoftonline.cn
FEF.cnpasu01.manage.microsoftonline.cn
KeyRecoveryAgent.manage-ppe.microsoftonline.cn
azurerdp.enterpriseregistration.partner.microsoftonline.cn
*.mdmrp-mooncake.msftcloudes.cn
drs.cp.partner.microsoftonline.cn
client.commercerestauthorization.partner.microsoftonline.cn
tools.cp.partner.microsoftonline.cn
api.scheduler.teams.microsoftonline.cn
Portal.manage-ppe.microsoftonline.cn
*.partner.microsoftonline.cn
bapkvsecretencryption.api.bap.partner.microsoftonline.cn
syncservice.partner.microsoftonline.cn
pgw.cp.partner.microsoftonline.cn
IntuneAccountRunnermooncakeProd.manage-ppe.microsoftonline.cn
api.myapps.microsoftonline.cn
partner.partnercenter.microsoftonline.cn
FEAADCertClient.CNPASU01.manage.microsoftonline.cn
FCS1.CNBASU01.manage-ppe.microsoftonline.cn
syncservice-stx.partner.microsoftonline.cn
buildtimepackage.dummy.partner.microsoftonline.cn
docret.wh.records.infra.teams.microsoftonline.cn
aadg.chinacloudapi.cn
tdsencryt.configure.partner.microsoftonline.cn
acisclient.cnpmsua01.manage.microsoftonline.cn
XLens.manage-ppe.microsoftonline.cn
deployment.usagesyncagent.cp.microsoftonline.cn
iwazprd.partner.microsoftonline.cn
myprofile.microsoftonline.cn
SCOnlinePREncryptionCert.manage.microsoftonline.cn
companymanager.partner.microsoftonline.cn
client.commercerestentitlement.partner.microsoftonline.cn
sps-archive.cp.partner.microsoftonline.cn
spssmoketest.cp.partner.microsoftonline.cn
commerce.partner.microsoftonline.cn
aadonboardingtest.bec.microsoftonline.cn
boxshellclient.partner.microsoftonline.cn
FCC1.CNPASU01.manage.microsoftonline.cn
vlp-test-client.partner.microsoftonline.cn
AdminApiService.manage.microsoftonline.cn
FCC1.CNPASU01.manage.microsoftonline.cn
aadg.chinacloudapi.cn
partner.partnercenter.microsoftonline.cn
dataagent.portal.partner.microsoftonline.cn
syncservice.partner.microsoftonline.cn
wip.mam.manage.microsoftonline.cn
GPAnalyticsStorage.manage.microsoftonline.cn
dcscheduler.partner.microsoftonline.cn
suite.partner.microsoftonline.cn
uidelegationclient.partner.microsoftonline.cn
commercepaycallback.cp.partner.microsoftonline.cn
signupprd.partner.microsoftonline.cn
DEServerAuthCert.cnpmsua01.manage.microsoftonline.cn
PcfAgent.ngpproxy.microsoftonline.cn
acmsportal.infra.teams.microsoftonline.cn
usage.cp.microsoftonline.cn
acms.infra.teams.microsoftonline.cn
suite.partner.microsoftonline.cn
SCOnlinePREncryptionCert.manage.microsoftonline.cn
Portal.chinanorth2.manage-ppe.microsoftonline.cn
Portal.manage-ppe.microsoftonline.cn
mam.manage.microsoftonline.cn
adminwebservice.partner.microsoftonline.cn
test.microsoftonline.cn
msm-int-provision.partner.microsoftonline.cn
dms.partner.microsoftonline.cn
mambackendsp.mam.manage-ppe.microsoftonline.cn
msm.partner.microsoftonline.cn
CompanyManager.partner.microsoftonline.cn
companymanager.partner.microsoftonline.cn
syncservice.partner.microsoftonline.cn
JwtTokenSigning.manage.microsoftonline.cn
toolsclient.cp.partner.microsoftonline.cn
mosiot.partner.microsoftonline.cn
AdminWebService.partner.microsoftonline.cn
partner.partnercenter.microsoftonline.cn
IntuneServiceDiscoveryAADSP.manage.microsoftonline.cn
signupprd.partner.microsoftonline.cn
LogManagerService.manage.microsoftonline.cn
ocpmonitor.partner.microsoftonline.cn
onboarding-stx.partner.microsoftonline.cn
FEAADCertClient.CNPASU01.manage.microsoftonline.cn
dmsreadaccess.partner.microsoftonline.cn
dev.login.partner.microsoftonline.cn
becread.partner.microsoftonline.cn
FCS1.CNBASU01.manage-ppe.microsoftonline.cn
aadg.chinacloudapi.cn
mospop.partner.microsoftonline.cn
provisioningapi.partner.microsoftonline.cn
azurerdp.enterpriseregistration.partner.microsoftonline.cn
AdminWebService.partner.microsoftonline.cn
companymanager.partner.microsoftonline.cn
*.iga.azure.cn
client.kst.cp.partner.microsoftonline.cn
mygroups.microsoftonline.cn
CompanyManager.partner.microsoftonline.cn
myapplications.microsoftonline.cn
myoffer365elf.partner.microsoftonline.cn
HeadSecurityTokenServiceForOAuth.manage.microsoftonline.cn
UITailSTS.manage.microsoftonline.cn
FEF.cnpasu01.manage.microsoftonline.cn
KeyRecoveryAgent.manage-ppe.microsoftonline.cn
azurerdp.enterpriseregistration.partner.microsoftonline.cn
*.mdmrp-mooncake.msftcloudes.cn
drs.cp.partner.microsoftonline.cn
client.commercerestauthorization.partner.microsoftonline.cn
tools.cp.partner.microsoftonline.cn
api.scheduler.teams.microsoftonline.cn
Portal.manage-ppe.microsoftonline.cn
*.partner.microsoftonline.cn
bapkvsecretencryption.api.bap.partner.microsoftonline.cn
syncservice.partner.microsoftonline.cn
pgw.cp.partner.microsoftonline.cn
IntuneAccountRunnermooncakeProd.manage-ppe.microsoftonline.cn
api.myapps.microsoftonline.cn
partner.partnercenter.microsoftonline.cn
FEAADCertClient.CNPASU01.manage.microsoftonline.cn
FCS1.CNBASU01.manage-ppe.microsoftonline.cn
syncservice-stx.partner.microsoftonline.cn
buildtimepackage.dummy.partner.microsoftonline.cn
docret.wh.records.infra.teams.microsoftonline.cn
aadg.chinacloudapi.cn
tdsencryt.configure.partner.microsoftonline.cn
acisclient.cnpmsua01.manage.microsoftonline.cn
XLens.manage-ppe.microsoftonline.cn
deployment.usagesyncagent.cp.microsoftonline.cn
iwazprd.partner.microsoftonline.cn
myprofile.microsoftonline.cn
SCOnlinePREncryptionCert.manage.microsoftonline.cn
companymanager.partner.microsoftonline.cn
client.commercerestentitlement.partner.microsoftonline.cn
sps-archive.cp.partner.microsoftonline.cn
spssmoketest.cp.partner.microsoftonline.cn
commerce.partner.microsoftonline.cn
aadonboardingtest.bec.microsoftonline.cn
boxshellclient.partner.microsoftonline.cn
FCC1.CNPASU01.manage.microsoftonline.cn
vlp-test-client.partner.microsoftonline.cn
AdminApiService.manage.microsoftonline.cn
FCC1.CNPASU01.manage.microsoftonline.cn
aadg.chinacloudapi.cn
partner.partnercenter.microsoftonline.cn
dataagent.portal.partner.microsoftonline.cn
syncservice.partner.microsoftonline.cn
wip.mam.manage.microsoftonline.cn
GPAnalyticsStorage.manage.microsoftonline.cn
dcscheduler.partner.microsoftonline.cn
suite.partner.microsoftonline.cn
uidelegationclient.partner.microsoftonline.cn
commercepaycallback.cp.partner.microsoftonline.cn
signupprd.partner.microsoftonline.cn
DEServerAuthCert.cnpmsua01.manage.microsoftonline.cn
PcfAgent.ngpproxy.microsoftonline.cn
Certificate
The complete raw certificate details for dev.login.partner.microsoftonline.cn in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgIKFZpcXwAIAAKvGTANBgkqhkiG9w0BAQUFADCBizETMBEG CgmSJomT8ixkARkWA2NvbTEZMBcGCgmSJomT8ixkARkWCW1pY3Jvc29mdDEUMBIG CgmSJomT8ixkARkWBGNvcnAxFzAVBgoJkiaJk/IsZAEZFgdyZWRtb25kMSowKAYD VQQDEyFNaWNyb3NvZnQgU2VjdXJlIFNlcnZlciBBdXRob3JpdHkwHhcNMTIwOTEx MjI1MjI4WhcNMTMwNzMxMjEyNjU3WjAvMS0wKwYDVQQDEyRkZXYubG9naW4ucGFy dG5lci5taWNyb3NvZnRvbmxpbmUuY24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCtKdw/DTkcwIMCv/ab0vUMof6T8EfLu9BX4uWEloacgbUBfC43ClMP adHZItKeRVA+suxLsGsp7xcbouPGjdOqzDsX5quCGbAnK8wpF62WTFMjVF1AG0S7 uEpuD8schpKfBtEkpHEMWD2g8p8EkmAGUKlFnFDL3L7PQ63AQR1kCWfeqelFZdPi XpPP6WxzGlziRDZi5RJmyJ3Mb4EBJ7zDTiEI7yz8l4c5fh4i37EXlQpBwaObcGaV JU7+7ZpdKWytJaOqUuhAbCikwDhloMEAjI21398mLFtf4nas0l9QP90jdG8cFNwu xxQWFYySEtlqdu6SPEEj4A2vsnlGVYOhAgMBAAGjggKqMIICpjALBgNVHQ8EBAMC BLAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMB0GA1UdDgQWBBTpkqgl qjhL9adO3JhcmCZkkuXfHDAfBgNVHSMEGDAWgBQIQuPbThFm87UIxUDbVXwzRhGD ODCCAQoGA1UdHwSCAQEwgf4wgfuggfiggfWGWGh0dHA6Ly9tc2NybC5taWNyb3Nv ZnQuY29tL3BraS9tc2NvcnAvY3JsL01pY3Jvc29mdCUyMFNlY3VyZSUyMFNlcnZl ciUyMEF1dGhvcml0eSg4KS5jcmyGVmh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9w a2kvbXNjb3JwL2NybC9NaWNyb3NvZnQlMjBTZWN1cmUlMjBTZXJ2ZXIlMjBBdXRo b3JpdHkoOCkuY3JshkFodHRwOi8vY29ycHBraS9jcmwvTWljcm9zb2Z0JTIwU2Vj dXJlJTIwU2VydmVyJTIwQXV0aG9yaXR5KDgpLmNybDCBvwYIKwYBBQUHAQEEgbIw ga8wXgYIKwYBBQUHMAKGUmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNj b3JwL01pY3Jvc29mdCUyMFNlY3VyZSUyMFNlcnZlciUyMEF1dGhvcml0eSg4KS5j cnQwTQYIKwYBBQUHMAKGQWh0dHA6Ly9jb3JwcGtpL2FpYS9NaWNyb3NvZnQlMjBT ZWN1cmUlMjBTZXJ2ZXIlMjBBdXRob3JpdHkoOCkuY3J0MD8GCSsGAQQBgjcVBwQy MDAGKCsGAQQBgjcVCIPPiU2t8gKFoZ8MgvrKfYHh+3SBT4PC7YUIjqnShWMCAWQC AQowJwYJKwYBBAGCNxUKBBowGDAKBggrBgEFBQcDAjAKBggrBgEFBQcDATANBgkq hkiG9w0BAQUFAAOCAQEABqsqm7NYJKj7R8bU/34jo1B+0vkCnmX4IY6PuubYWGsL Vvz3cHhke90zQoIJKRHivMfbf5xutqkzk15asZJ0dmgIU3rlWD7YmkEaUxYY6gLW vvxNSdbrRLDu+mC/0F5oXa14yG1hyRwtO/Gubrdc/hSp9+nvE92qIwzOTU1dBytz ElIC8/PKvwfAHBs+jiAGzEQldqS6uW+XNYXn5IMRonpDv0+u+Ik3874ttU6Co/Z7 9gtD7nmE4purFGXfITtOwtgmwSkOzDpfT+D6Zf7s003KC5+oAJLRB/CB4g9ULctN jdhyL0cwZBHScLqtwip2ZIi6ZIDRLjwgLIEamf6uKA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSncPw05HMCDAr/2m9L1 DKH+k/BHy7vQV+LlhJaGnIG1AXwuNwpTD2nR2SLSnkVQPrLsS7BrKe8XG6Ljxo3T qsw7F+arghmwJyvMKRetlkxTI1RdQBtEu7hKbg/LHIaSnwbRJKRxDFg9oPKfBJJg BlCpRZxQy9y+z0OtwEEdZAln3qnpRWXT4l6Tz+lscxpc4kQ2YuUSZsidzG+BASe8 w04hCO8s/JeHOX4eIt+xF5UKQcGjm3BmlSVO/u2aXSlsrSWjqlLoQGwopMA4ZaDB AIyNtd/fJixbX+J2rNJfUD/dI3RvHBTcLscUFhWMkhLZanbukjxBI+ANr7J5RlWD oQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 102017150766422457233177 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'microsoft' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'corp' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Secure Server Authority' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-09-11 22:52:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-31 21:26:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.login.partner.microsoftonline.cn' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21859868860689803180203643784050093712881371377356321196470224582142225964583842558569808123974330806928132833092241109767808721870782966342598320863748249504657526476529147512964502017582339882460437543087829835544950634396211435628829417015880399596817599648091683874729066772107043807572436754999652122172909853706165952873966320527131193941589629256791276410316055790302737491739473405257840053702194742353617087642125022153753599730353713018910957984894230419970303327595195991083577186166530737612909104923327252968068096191602531195790880736961686264707956436442269009355219711046342760392187691496467877692321 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e992a825aa384bf5a74edc985c98266492e5df1c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0842e3db4e1166f3b508c540db557c3346118338 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (257 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(8).crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(8).crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://corppki/crl/Microsoft%20Secure%20Server%20Authority(8).crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (178 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20Secure%20Server%20Authority(8).crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://corppki/aia/Microsoft%20Secure%20Server%20Authority(8).crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER asn1: structure error: base 128 integer too large 1.3.6.1.4.1.311.21.8.7587021.751874.11030412.6202749.3702260.207.945504904.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 10 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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