distribute-gateway-eus-ppe.ds.microsoft-ppe.com

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 05

About this certificate

This digital certificate with serial number 33:00:cf:ad:f8:b0:b2:72:e7:93:d7:74:00:00:00:00:cf:ad:f8 was issued on by Microsoft Corporation.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:00:cf:ad:f8:b0:b2:72:e7:93:d7:74:00:00:00:00:cf:ad:f8
Serial Number (int): 1137408674822731148451763193975651465815895544
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 49:15:20:58:09:81:c8:ea:54:35:18:82:81:0e:02:c5:05:55:d6:63
AuthorityKeyId: c7:b2:9c:7f:1c:e3:b8:5a:ef:e9:68:1a:a8:5d:94:c1:26:52:6a:68

Fingerprint (sha1): 2b:02:1e:73:0c:d0:6c:a5:de:7a:65:55:ba:cf:19:68:e5:70:ca:f0
Fingerprint (sha256): 06:b9:89:5d:2d:b8:00:b9:72:09:74:13:c6:f3:a0:7a:60:6f:70:f0:12:e5:d8:11:08:68:28:f4:af:5f:2b:18

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2005%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2005.crl

Check the revocation status for certificate distribute-gateway-eus-ppe.ds.microsoft-ppe.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for distribute-gateway-eus-ppe.ds.microsoft-ppe.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dl-proc.ds.microsoft.com
dl-eoc.ds.microsoft.com
dl-apoc.ds.microsoft.com
distribute.ds.microsoft-ppe.com
distribute-gateway-ppe.ds.microsoft-ppe.com
distribute-gateway-afd-ppe.ds.microsoft-ppe.com
distribute-gateway-eus-ppe.ds.microsoft-ppe.com

Other certificates including the domain name microsoft-ppe.com

(limited to 100 certificates)
mpnmembership.microsoft-ppe.com
seedtest-rd.msdx.microsoft-ppe.com
pas.windows.net
riskclient.order.cp.microsoft-ppe.com
deployment.usagesyncagent.cp.microsoft-ppe.com
*.controls.account.microsoft-ppe.com
graph.windows.net
login.windows.net
pas.windows.net
login.windows.net
partner.microsoft-tst.com
macc-ppe.cp.microsoft-ppe.com
partneraccounts-ppe.eastus2.cloudapp.azure.com
client.subscription.cp.microsoft-ppe.com
editor.catalog.cp.microsoft-ppe.com
graph.windows.net
pas.windows.net
graph.windows.net
graph.windows.net
redvpnpg01.microsoft-ppe.com
atm-partnerquote-ppe.trafficmanager.net
api.partnerreferrals.microsoft-ppe.com
login.windows.net
graph.windows.net
*.vo.msecnd.net
login.windows.net
graph.windows.net
pas.windows.net
pas.windows.net
monitoring.fulfillment.cp.microsoft-ppe.com
pas.windows.net
client.commercerestcommerceaccount.cp.microsoft-ppe.com
graph.windows.net
*.vo.msecnd.net
graph.windows.net
psx.spark.oneness.microsoft-ppe.com
login.windows.net
client.commercerestentitlement.cp.microsoft-ppe.com
graph.windows.net
azurepilot.cp.microsoft-ppe.com
api.usage.cp.microsoft-ppe.com
login.windows.net
leadmanagement-ppe.westus2.cloudapp.azure.com
healthprobe.gateway.cp.microsoft-ppe.com
graph.windows.net
client.commercerestauthorization.cp.microsoft-ppe.com
ngpproxy.microsoft-ppe.com
pas.windows.net
login.windows.net
graph.windows.net
api.cp.microsoft-ppe.com
data.tokens.microsoft-ppe.com
login.windows.net
api.partnercatalog.microsoft-ppe.com
login.windows.net
pas.windows.net
api.partnercenter.microsoft-ppe.com
graph.windows.net
notification.cp.microsoft-ppe.com
servicefabric.sds.microsoft-ppe.com
rewards.microsoft-ppe.com
profiles.view.api.account.microsoft-ppe.com
*.ds.microsoft-ppe.com
graph.windows.net
login.windows.net
graph.windows.net
login.windows.net
distribute-provision-eus-ppe.ds.microsoft-ppe.com
graph.windows.net
family.microsoft.com
graph.windows.net
pc-notifications-dispatch.microsoft-ppe.com
fulfillment.cp.microsoft-ppe.com
graph.microsoft-ppe.com
distribute-gateway-eus-ppe.ds.microsoft-ppe.com
graph.windows.net
login.windows.net
graph.windows.net
pas.windows.net
login.windows.net
graph.windows.net
api.partnerlookup.microsoft-ppe.com
login.windows.net
login.windows.net
api.invoice.microsoft-ppe.com
store.microsoft-ppe.com
graph.windows.net
atm-partnerquote-ppe.trafficmanager.net
graph.windows.net
pas.windows.net
graph.windows.net
download.store.microsoft-ppe.com
graph.windows.net
sharing.member.microsoft.com
graph.windows.net
*.vo.msecnd.net
monitoring.notification.cp.microsoft-ppe.com
orgaccount.microsoft-ppe.com
login.windows.net
graph.windows.net

Certificate

The complete raw certificate details for distribute-gateway-eus-ppe.ds.microsoft-ppe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137408674822731148451763193975651465815895544
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 05'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-24 20:10:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 20:10:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'distribute-gateway-eus-ppe.ds.microsoft-ppe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791648006534707212128469432995706754028802205214912958218609162369419257110404226312843055684790061050391923022810086099821283009279014846125818860535721392932428728461211853887245746691139563082011116785288496788515621165522841105490412928553618087700119498728348313798668453432632327273342343255005763357525909919599004182487677660711972404279035876123020198051656855715789494949110351306993032769564303753256284304207124230053410357354421864472871370077796647623012142740636927410427354334021465210630991217751582667542086245271476122965812202892173921563390831073547047223384464063716577789360323251379224942445489505974342314904665670437461010914675292372113034585256960296029520381241510548555824080542327907993853945430899201667670571506747316051282154033915595571706502191020891329796270291467670130960337780895934375941654027523672738655879237426698496860152501278353620704528799759810112215209337701100971626895943592303328489804209301499055021062994681404399537031397592355734753133298937209703675459380958472089128331275212738126773114867355729602581084103233537057109747570981338859468096751208245402882779948628615677014288504038930674033529504465451739880019074760333570456018182361552639523034782950632972357877309977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4912048.16480415
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2005%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							491520580981c8ea54351882810e02c50555d663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (256 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl-proc.ds.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl-eoc.ds.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl-apoc.ds.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distribute.ds.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distribute-gateway-ppe.ds.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distribute-gateway-afd-ppe.ds.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distribute-gateway-eus-ppe.ds.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2005.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c7b29c7f1ce3b85aefe9681aa85d94c126526a68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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