token.cp.microsoft-int.com

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 06

About this certificate

This digital certificate with serial number 33:00:02:e7:22:44:8e:3e:5b:85:b7:7d:fd:00:00:00:02:e7:22 was issued on by Microsoft Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:00:02:e7:22:44:8e:3e:5b:85:b7:7d:fd:00:00:00:02:e7:22
Serial Number (int): 1137338992919391215151838996011640887967934242
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 58:ee:a8:e4:22:cd:bc:46:1a:41:81:c6:ee:e1:be:97:82:25:5e:e2
AuthorityKeyId: d5:c1:67:3a:c2:a3:9d:f4:77:52:5b:59:12:38:29:e6:55:68:bb:a5

Fingerprint (sha1): 51:45:99:87:2c:16:aa:0e:dc:38:85:d6:3e:af:7a:02:88:01:55:2e
Fingerprint (sha256): 06:85:b5:c3:26:52:93:df:25:d0:cf:88:82:69:f9:08:c8:a4:e4:de:5f:9c:6b:e9:93:56:20:6b:fe:81:66:ce

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2006%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2006.crl

Check the revocation status for certificate token.cp.microsoft-int.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for token.cp.microsoft-int.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

token.cp.microsoft-int.com
minting.token.cp.microsoft-int.com

Other certificates including the domain name microsoft-int.com

(limited to 100 certificates)
ordersjournal.cp.microsoft-int.com
prod.geneva-action-deploy.pricing.cp.microsoft-int.com
orderadmin.aircapi.cp.microsoft-int.com
revenueallocatortimejournal.cp.microsoft-int.com
awasappe-ase.cloudapp.net
paymentsinstrumentservice.cp.microsoft-int.com
dds.microsoft-int.com
billinggroups-clientauth.cp.microsoft-int.com
*.diagnose-dfp.microsoft-int.com
sharing.member.microsoft-int.com
taxdocumentnep.microsoft-int.com
paymentstransactionservice.cp.microsoft-int.com
orchestration-int.paymentsinstrument.cp.microsoft-int.com
pub.api.ecs.mcfs.microsoft-int.com
prose.microsoft-int.com
replay.enterprisereportingservice.cp.microsoft-int.com
pmservices.cp.microsoft-int.com
api.tdrs.microsoft-int.com
taxdocumentnep.microsoft-int.com
cminternal.client.jcmfd.account.microsoft-int.com
journal.purchase.aircapi.commerce.microsoft-int.com
wdatpstg-eus2.internal.mdatp.microsoft-int.com
paymentconfigtool.cp.microsoft-int.com
invoicingjournal.aircapi.cp.microsoft-int.com
tokensigning.commerceroot.cp.microsoft-int.com
api.dfp4.dynamics-int.com
mdiot-ev2-int-app.int.internal.mdiot.microsoft-int.com
api.dfp.dynamics-int.com
service.accountextensions.commerce.microsoft-int.com
paymentmetadataservice.cp.microsoft-int.com
service.RecOrder-INT.commerce.microsoft.com
entitlement.teams.microsoft-int.com
es-kibana-int.incentives.microsoft-int.com
commercialsubscriptionjournal.cp.microsoft-int.com
identity.microsoft.com
api.paymentsinstrument.cp.microsoft-int.com
entitlement.teams.microsoft-int.com
ppecpf01wus2.insightsplatform.microsoft-int.com
reratingcoordinator-clientauth.cp.microsoft-int.com
dfp.microsoft-int.com
capping.cp.microsoft-int.com
ids.api.iris.microsoft-int.com
customer.cp.microsoft-int.com
assets.mcapiassets-aircapi.commerce.microsoft.com
dcs-pmdclientauth-int.cp.microsoft-int.com
manage.privacy.microsoft-int.com
enterprisefinancials-clientauth.cp.microsoft-int.com
api.choice.microsoft-int.com
wdatpstg-eus2.internal.mdatp.microsoft-int.com
support.msn-int.com
cm-stg-eus2.internal.mdatp.microsoft-int.com
identity.microsoft.com
*.notify.windows-int.com
quantifiableassets-clientauth.cp.microsoft-int.com
encryption.identity.microsoft-int.com
authorization-clientauth.cp.microsoft-int.com
int.iis.customermaster.fd.cloud.microsoft.com
contentservice.dps.microsoft-int.com
service.order.commerce.microsoft-int.com
policytokenService.microsoft-int.com
admin.order.aircapi.commerce.microsoft-int.com
paymentemulators.paymod.cp.microsoft-int.com
purchasejournalindex3.cp.microsoft-int.com
token.cp.microsoft-int.com
biztools.cp.microsoft-int.com
taxidmanagement.aircapi.cp.microsoft-int.com
safedriving.family.microsoft-int.com
paynotifications.cp.microsoft-int.com
test1.management.family.microsoft-int.com
p5.cp.microsoft-int.com
paymentspfintssl.cp.microsoft-int.com
fdk-test.cp.microsoft-int.com
journalindex.order.commerce.microsoft-int.com
omexsync.sellerdashboard.microsoft-int.com
recipients.mcapirecipients-aircapi.commerce.microsoft.com
test1.management.family.microsoft-int.com
DynamicConfigurationTool-clientauth-int.cp.microsoft-int.com
buy.microsoft-int.com
admin.order.commerce.microsoft-int.com
assetdunningprocessor.cp.microsoft-int.com
s2s.client.dfp.microsoft-int.com
cre.raas.microsoft-int.com
test1.management.family.microsoft-int.com
journal.RecOrder-INT.commerce.microsoft.com
endr.api.dfp.dynamics-int.com
test1.management.family.microsoft-int.com
api-registration-int.mp.dse.microsoft.com
certrenewtest.taxdocumentnep.microsoft-int.com
identity.microsoft-int.com
identity.microsoft-int.com
enforcementrisk.cpbizops.aia.cp.microsoft-int.com
meteredsubscriptions.cp.microsoft-int.com
test1.management.family.microsoft-int.com
certrenewtest.taxdocumentnep.microsoft-int.com
mcapicore-runnerclientauth.cp.microsoft-int.com
pgw.cp.microsoft-int.com
publicfileexchange.cp.microsoft-int.com
bo.teams.microsoft-int.com
service.billinggroups.test.cp.microsoft-int.com
pxs.privacy.microsoft-int.com

Certificate

The complete raw certificate details for token.cp.microsoft-int.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqpJEY9aj8b1PoOPdkOP
0BNxW6/jjMFO+0Fv+9Po3rfuGpQNLaAHvMDhDvz3TMyVdX2f88Xin+Xe9Xjr73AW
yfP2YqQEFfAvyNj4zucelHxgpx+vC1iQm+rotFVF5YWZsfibbdWGkxeZ8YTObZ5r
kqlfQBOHnQded2WscelOUGeFgQPMWgfsgwXycAcD70028KGsvPEP+hEN1Q3jN6E+
QaFRTmlOhTeI0UjRc/FNNCAXPwR80yUEfEQdO2pVdsVQw7uc/35f8Of/q++Bp/K0
oqteTAafCjHsGEyG4QDN6pLLr2NWb7+YxSVDSeuaeBOVNp0jjraYkVsHxkqUL0hr
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137338992919391215151838996011640887967934242
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 06'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-23 21:34:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-22 21:34:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'token.cp.microsoft-int.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22554389156265748271240104058681655654840205003312669663651968276102829458412285037351726034955855736748527140114573437024238156835736711229021396894508113396155796180640382316527917309912996491246744630994599232669647686815403043918852569862171428899884085833168934728809032893916786207921633909825892553984301443018282889908366627867408681967061229114910261416000688257857626716304861349681383680911298621542160003671749310821148314963299879998508666656728825159461761062504233728251373669638769358807988164069994114563220747687562840989958507400117984843953719389317846012364273239823040430149561608722164467919771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.12433322.3813685
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2006%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58eea8e422cdbc461a4181c6eee1be9782255ee2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'token.cp.microsoft-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minting.token.cp.microsoft-int.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2006.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5c1673ac2a39df477525b59123829e65568bba5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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