*.udc.backup.windowsazure.us

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 08

About this certificate

This digital certificate with serial number 33:00:05:3d:7d:2e:5f:4b:5b:69:ec:93:2d:00:00:00:05:3d:7d was issued on by Microsoft Corporation.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:05:3d:7d:2e:5f:4b:5b:69:ec:93:2d:00:00:00:05:3d:7d
Serial Number (int): 1137339788269781775946455680131466089120218493
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: af:a7:85:e4:8c:6f:4d:e0:4a:7f:98:52:dc:a2:24:9d:e0:7b:b4:e5
AuthorityKeyId: f6:7e:2f:bd:80:a3:4a:b2:70:5b:eb:df:9a:1f:d8:ed:ca:61:80:07

Fingerprint (sha1): c3:0e:5c:5b:36:11:22:af:6a:0c:01:13:79:13:62:09:b1:fa:d0:43
Fingerprint (sha256): 05:9d:57:28:ad:3f:75:a8:3d:fd:ae:1d:d0:77:37:9e:77:96:a0:cd:00:ef:31:79:d0:4f:ea:1c:c9:c0:c7:25

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl

Check the revocation status for certificate *.udc.backup.windowsazure.us

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.udc.backup.windowsazure.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.privatelink.udc.backup.windowsazure.us
*.privatelink.udc.siterecovery.windowsazure.us
*.udc.backup.windowsazure.us

Other certificates including the domain name windowsazure.us

(limited to 100 certificates)
internalep.ugv.backup.windowsazure.us
directoryprovisioning.windowsazure.us
graph.windows.net
directoryprovisioning.windowsazure.us
*.ugi.backup.windowsazure.us
*.udc.backup.windowsazure.us
azuresupportrp.windowsazure.us
*.ugt.hypervrecoverymanager.windowsazure.us
graph.windows.net
graph.windows.net
*.ugv.backup.windowsazure.us
graph.windows.net
*.uga.backup.windowsazure.us
lswsasclient.adnotifications.windowsazure.us
*.uga.backup.windowsazure.us
*.ugi.backup.windowsazure.us
*.udc.backup.windowsazure.us
graph.windows.net
SasCappClient.adnotifications.windowsazure.us
graph.windows.net
*.ude.backup.windowsazure.us
azuresupportmds.windowsazure.us
bearer.syncfabric.windowsazure.us
graph.windows.net
graph.windows.net
*.ugt.backup.windowsazure.us
dcaasmdscert.aadc.activedirectory.windowsazure.us
*.ugt.backup.windowsazure.us
*.uga.backup.windowsazure.us
*.ugv.backup.windowsazure.us
graph.windows.net
*.udc.backup.windowsazure.us
encrypt.syncfabric.windowsazure.us
cab-prv-dsts.windowsazure.us
graph.windows.net
*.ude.hypervrecoverymanager.windowsazure.us
*.uga.backup.windowsazure.us
authorization-fairfax-primary.windowsazure.us
*.ugt.backup.windowsazure.us
internalep.ugv.backup.windowsazure.us
*.ude.backup.windowsazure.us
graph.windows.net
*.ugi.hypervrecoverymanager.windowsazure.us
*.ugi.backup.windowsazure.us
*.ugt.backup.windowsazure.us
*.uga.hypervrecoverymanager.windowsazure.us
*.ugt.backup.windowsazure.us
*.ude.backup.windowsazure.us
graph.windows.net
*.udc.backup.windowsazure.us
*.ugv.backup.windowsazure.us
graph.windows.net
*.ugv.azureregionmove.windowsazure.us
*.ugv.backup.windowsazure.us
*.uga.backup.windowsazure.us
graph.windows.net
*.uga.backup.windowsazure.us
graph.windows.net
credentials.windowsazure.us
*.ugv.backup.windowsazure.us
AzureResourceGraphAppCert.backup.windowsazure.us
*.ugv.backup.windowsazure.us
graph.windows.net
*.ugv.backup.windowsazure.us
graph.windows.net
internalep.ugv.backup.windowsazure.us
graph.windows.net
*.ude.backup.windowsazure.us
*.udc.backup.windowsazure.us
AzureResourceGraphAppCert.backup.windowsazure.us
*.ude.backup.windowsazure.us
*.ugt.backup.windowsazure.us
portal.azure.us
*.ugi.storsimple.windowsazure.us
graph.windows.net
graph.windows.net
graph.windows.net
encrypt.aaddc.activedirectory.windowsazure.us
*.ugv.backup.windowsazure.us
internalep.ugv.backup.windowsazure.us
*.ugv.backup.windowsazure.us
azuremanagement.aaddc.activedirectory.windowsazure.us
graph.windows.net
*.ude.backup.windowsazure.us
graph.windows.net
*.prod.migration.windowsazure.us
*.support.ext.windowsazure.us
*.ugi.storsimple.windowsazure.us
graph.windows.net
azuresupportmds.windowsazure.us
*.ugv.backup.windowsazure.us
graph.windows.net
*.ugv.backup.windowsazure.us
*.udc.backup.windowsazure.us
*.ugt.hypervrecoverymanager.windowsazure.us
*.ude.backup.windowsazure.us
*.ugi.backup.windowsazure.us
*.prod.migration.windowsazure.us
*.udc.backup.windowsazure.us
graph.windows.net

Certificate

The complete raw certificate details for *.udc.backup.windowsazure.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1VM1W1c6uj7rV37khOo
cyAr8NjN0bvZ/7E211ipjoRAmqoO9o5ToHt2bVbSiV7HbmVYYfdAqw8C3s1ejsRJ
CY98FlC+IXp/gUuNTY46uv57wVelISD2IHpOxE/jfEInrNeLySusoz2JsoiVY2Sj
QZJtIMPIxDW2dpuj50Tal4PSftBvV7YOCRyiRpPy0BBhr0ks+EnhfOhtzVreAkox
cBQh9pOwfkf1PNDQzYhK1tXSPbP7xykjiJX9eb0jvNmMYx0xXaciO1WOXTNXgBuY
jKtp++ZMQRmr6RBRQtUvttRccplhmAtlrVOGhbvw8InbE6UNR4lv6c1uUdHwk8V8
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137339788269781775946455680131466089120218493
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 08'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 05:51:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-08 05:51:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.udc.backup.windowsazure.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25163485750869464093569062500953292102726187779294278879250656970146393496532117528747926760883836153291571841359211206904512736476762351078174832800300383052141292663520489135180449075849489749945150134597713608336937707215463683292657621293416605354935478332721914600441858203621157973597196395850938762272248267264429126750081320932185615271950938093773925074849033822879548205963728589426525583989750616779957349517912858366195627769096139821208624894379540472031667383452994496081287871813281588957936896118134318152060016214811676335859607637024351292573533635401284114258383459606282166908235736341446054476949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afa785e48c6f4de04a7f9852dca2249de07bb4e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privatelink.udc.backup.windowsazure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privatelink.udc.siterecovery.windowsazure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.udc.backup.windowsazure.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f67e2fbd80a34ab2705bebdf9a1fd8edca618007
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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