*.analytics.msftcloudes.com

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 03

About this certificate

This digital certificate with serial number 33:00:4b:b2:fe:11:e7:33:59:86:c7:ec:e8:00:00:00:4b:b2:fe was issued on by Microsoft Corporation.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:4b:b2:fe:11:e7:33:59:86:c7:ec:e8:00:00:00:4b:b2:fe
Serial Number (int): 1137363764224370620946722236900187918593405694
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 71:11:7c:81:76:70:00:33:33:a4:cc:bc:b7:92:2f:51:a4:34:b4:b3
AuthorityKeyId: fe:09:71:40:55:05:10:44:d8:a4:81:75:b8:9e:1a:e9:4a:06:88:c8

Fingerprint (sha1): 81:e7:97:06:d2:79:c0:d8:71:36:d0:ad:c5:ea:98:76:36:f9:21:a3
Fingerprint (sha256): 05:a4:0f:ba:bd:5c:8c:1a:0a:da:1c:f7:7e:98:d6:01:08:cc:ed:b1:6b:bf:79:c8:d9:99:cf:3d:9a:2f:7b:bf

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl

Check the revocation status for certificate *.analytics.msftcloudes.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.analytics.msftcloudes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.analytics.msftcloudes.com

Other certificates including the domain name msftcloudes.com

(limited to 100 certificates)
*.analytics.msftcloudes.com
clusterserver.azurenotifications.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
jarvis.msftcloudes.com
apiclient.icmppe.test-dsms.msftcloudes.com
server.fabric.prod.configuration.msftcloudes.com
armclientcaller.icm.test-dsms.msftcloudes.com
orchclient.v3workflow.icm.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
metagraph.clients.servicetree.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
arm.azsupport-staging.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
jarvis-int.msftcloudes.com
gcs.prod.monitoring.core.windows.net
ppe.Icm.test-dsms.msftcloudes.com
*.datastudiotest.msftcloudes.com
fcmppe.msftcloudes.com
encryptionservice.mds.Icm.test-dsms.msftcloudes.com
msupdatevsrm.icmppe.msftcloudes.com
prod.la.ingestion.msftcloudes.com
jarvis-int.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
Aad-hybridproxy-prod.msftcloudes.com
azureadsstagescus.southcentralus.cloudapp.azure.com
azureadsstagescus.southcentralus.cloudapp.azure.com
prod.ai.ingestion.msftcloudes.com
*.vnext.s360.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
ppe.hot.ingest.monitor.core.windows.net
*.fcmint.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
genevaprofiler.analytics.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
*.analyticsppe.msftcloudes.com
azurehealthprodjpe.japaneast.cloudapp.azure.com
azurehealthprodcus.centralus.cloudapp.azure.com
clusterserver.azurenotifications.msftcloudes.com
arm.azsupport-dev.msftcloudes.com
arm.azsupport-dev.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
azuresupportcenter.msftcloudes.com
azuresupportcenter.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
azureexpertprod.eastus.cloudapp.azure.com
test.Icm.test-dsms.msftcloudes.com
*.analytics.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
prod.warmpath.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
jarvis-int.msftcloudes.com
azurehealthprodscu.southcentralus.cloudapp.azure.com
prod.warm.ingest.monitor.core.windows.net
*.analytics.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
*.icm.msftcloudes.com
prod.la.ingest.monitor.core.windows.net
arm.azsupport.msftcloudes.com
prod.la.ingestion.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
jarvis.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
vnext.s360.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.warm.ingestion.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
servicemetadata.dscmclient.servicetree.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
assetlineageppe.analytics.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
feedservice.datastudiotest.msftcloudes.com
arm.azsupport.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
azuremgmt.fcmppe.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
pappdocs.msftcloudes.com
test.hot.ingest.monitor.core.windows.net
lens.msftcloudes.com
test.warm.ingest.monitor.core.windows.net
test.Icm.test-dsms.msftcloudes.com
horizon.msftcloudes.com
datastudio.analyticsppe.msftcloudes.com
greenteam.clients.servicetree.msftcloudes.com
icmlxppeoctopus.icm.msftcloudes.com
*.analytics.msftcloudes.com
prod.la.ingest.monitor.core.windows.net
azureexpertprod.westcentralus.cloudapp.azure.com
prod.warm.ingest.monitor.core.windows.net
jarvis-int.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net

Certificate

The complete raw certificate details for *.analytics.msftcloudes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfBzz4mGopO2MovXzc8V
BJt9fBVPb9Jd/8x17Ko66ij/+McE5Rt+Kl2iYbgv8Nkh3VOH1xdGrG0FIxxgqdvV
NFsOoNz/k1PwZkHAYOWt5hZVzlbqKzKiVd61i89vICDHAwQJw3h1jJKXoDiEUC+U
svb3Mln6Mf4dirrpZuFlwxxkNKZgQossOmou8kpkOW0r3OvKpyJUCXiOl9FULiVP
rDrpxGnM+v+EbZt5r67W/4ss+nCKWhbn7LBiNcw35iZM9AMkfInyOIk66tgDIx8U
OtqHvURmORNdzLYIlNYN3UvXiYHCIb85mTCXX4+JIjLQ2Tzvoqn1ilhkdahMfdVp
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137363764224370620946722236900187918593405694
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 13:44:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-15 13:44:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.analytics.msftcloudes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25492470788695949788745421400249562296725723723104725232310076064621090662159688135066229236306724355747471304769967138159803981893078072152127497672509811267152328484261619985073130515948541177004524103579417015198325810919785842402145964439441362316246656553534301089558662065005853918095125509620904329723961653759795887898751079941751656872269224661847060539454870449070847138977842254403454116517881213070648697258922931680238930043078215671527142576146396027639012578683748823292806670057875759343895760803968130718529279699820889241613437707174644745493399437031993160721921318869167602352073507322157430303009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71117c817670003333a4ccbcb7922f51a434b4b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analytics.msftcloudes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe09714055051044d8a48175b89e1ae94a0688c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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