portfolios.officeppe.com

Issued by Microsoft IT TLS CA 4

About this certificate

This digital certificate with serial number 16:00:02:07:d5:f8:f5:d8:b9:f0:61:16:05:00:00:00:02:07:d5 was issued on by Microsoft Corporation.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=portfolios.officeppe.com

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 16:00:02:07:d5:f8:f5:d8:b9:f0:61:16:05:00:00:00:02:07:d5
Serial Number (int): 490617085348012267908112289894952843610294229
Serial Number lenght: 149 bits, 19 octets

SubjectKeyId: 48:03:1d:aa:b3:02:ab:eb:6f:91:e1:2f:31:d0:2d:aa:3c:db:06:92
AuthorityKeyId: 7a:7b:8c:c1:cf:e7:a0:ca:1c:d4:6b:fa:fb:e1:33:c3:0f:1a:a2:9d

Fingerprint (sha1): 81:90:91:9a:fb:88:54:8e:9b:99:25:bf:0c:d4:6b:1d:74:b7:2b:91
Fingerprint (sha256): 06:f6:fc:b6:78:e3:98:81:af:8b:e3:5c:d7:1b:75:1c:db:f9:34:ef:c8:a9:d0:27:36:de:44:a8:9b:7a:8f:4a

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%204.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl

Check the revocation status for certificate portfolios.officeppe.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portfolios.officeppe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portfolios.officeppe.com
*.op.trafficManager.net
*.westus.cloudapp.azure.com
*.westus2.cloudapp.azure.com
*.eastus.cloudapp.azure.com
*.centralus.cloudapp.azure.com
*.eastus2.cloudapp.azure.com
*.northcentralus.cloudapp.azure.com
*.southcentralus.cloudapp.azure.com
*.westcentralus.cloudapp.azure.com

Other certificates including the domain name officeppe.com

(limited to 100 certificates)
portfolios.officeppe.com
sway.officeppe.com
trustportal.officeppe.com
project.officeppe.com
officeapps.live.com
vanquishppe.securitysignals-siphonclient.officeppe.com
cisurvey.officeppe.com
vanquishppe.securitysignals-siphonclient.officeppe.com
shell.suite.officeppe.com
cert00016-azurecdn.akamaized.net
status.officeppe.com
c.msn-int.com
vanquishppe.securitysignals.tracegenevaconsumer.officeppe.com
manage.officeppe.com
*.lifecycle.officeppe.com
uci.edog.officeapps.live.com
redemptionservice.setup.officeppe.com
secure06.stage.lithium.com
support.officeppe.com
vanquishppe.securitysignals.tracegenevaconsumer.officeppe.com
test.augloop.svc.cloud-dev.microsoft
manage.officeppe.com
idsapi-edog-s2s.store.officeppe.com
*.lifecycle.officeppe.com
portal.officeppe.com
cisurvey.officeppe.com
portal.azure
mock.m365admin.officeppe.com
cdn.forms.office.net
cert00016-azurecdn.akamaized.net
cert00016-azurecdn.akamaized.net
mysmallbusiness.officeppe.com
pubsub.augloop-test.officeppe.com
secure06.stage.lithium.com
pubsub.augloop-int.officeppe.com
int.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
support.officeppe.com
augloop-test.officeppe.com
c.msn-int.com
uci.edog.officeapps.live.com
portfolios.officeppe.com
test.augloop.svc.cloud-dev.microsoft
augloop-test.officeppe.com
webjobs.servicetrust.officeppe.com
kevlar-ssl.augloop-dogfood.officeppe.com
augloop-test.officeppe.com
cisurvey.officeppe.com
sway.officeppe.com
protection.officeppe.com
odc.edog.officeapps.live.com
api.augloop-tools.officeppe.com
manage.officeppe.com
store.officeppe.com
vanquishppe.securitysignals.tracegenevaconsumer.officeppe.com
status.office365.com
manage.officeppe.com
connectivity.officeppe.com
webjobs.servicetrust.officeppe.com
portfolios.officeppe.com
store.officeppe.com
offlineconsumer.suite.officeppe.com
portal.azure
status.office365.com
cisurvey.officeppe.com
sway.officeppe.com
portal.officeppe.com
bcqr.officeppe.com
augloop-test.officeppe.com
setup.officeppe.com
cisurvey.officeppe.com
portal.azure
cert00016-azurecdn.akamaized.net
appamangement-ppe.officeppe.com
localization.checkout.office.net
cisurvey.officeppe.com
augloop-test.officeppe.com
cert00016-azurecdn.akamaized.net
dragongate.officeppe.com
messaging.officeppe.com
uci.edog.officeapps.live.com
api.servicetrust.officeppe.com
cisurvey.officeppe.com
msn.co
augloop-int.officeppe.com
setup.officeppe.com
sway.officeppe.com
augloop-test.officeppe.com
pubsub.augloop-dogfood.officeppe.com
ifttt.edog.office.com
dogfood.augloop.svc.cloud.microsoft
uci.edog.officeapps.live.com
augloop-int.officeppe.com
stores.officeppe.com
cisurvey.officeppe.com
portfolios.officeppe.com
endpoints.officeppe.com
cisurvey.officeppe.com
portfolios.officeppe.com
vanquishppe.securitysignals.tracegenevaconsumer.officeppe.com

Certificate

The complete raw certificate details for portfolios.officeppe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslm57iTv6G5ZWvUVXqCB
BLsg2evfbswBcu5TPBSJDnLQc+0Qz8U5gpcE6EzwWptkpVPRPGbe355QPiyMH5EL
25fA1f8fcJU7pp+em3pKU7yQzKU6b0Ghy61zT2uVxoRlNuJsEvN8ltl8zmEJOEaA
r9n4WFatPCOQhszGlHhZ+QoneZpK5ODl6+a7Lpk9VYU3BYnu5ZaLDITrvP0frLva
6rPFTdmYY4VsqsKSEl9DW3mamYrsZx6NFQ6s85o5RZkVI9GmQHsJV8QkGPJP/bnx
iz1DLmTC1oDln5madh9Hk+Q6Pw0fIJE5kwqb0QRdqAvshyM2RozwyWUL8hBQOQj5
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 490617085348012267908112289894952843610294229
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-12 16:56:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-12 16:56:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portfolios.officeppe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22514663966638022796896914211049353801912391772009216494341468358884590393847147009098451145661347629471686442412344605776042182565158086985129732330917750748399246592732419885468626388759768742611805252987435235808571497205469033431855190255437585687983042238095619315499449191124394343533427840046328691245187360408597986728506848762710779460688873157913198920689782107743427490552496090541698824042597002980119088381507979486065698383320718890791413944299587901648020835866933417179860719053949437818080709066859125540484401864601564754582244377455266890791612172806391663324638191353520551023683270135389457283339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%204.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48031daab302abeb6f91e12f31d02daa3cdb0692
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (315 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolios.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.op.trafficManager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westus.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westus2.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eastus.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centralus.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eastus2.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northcentralus.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southcentralus.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westcentralus.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7a7b8cc1cfe7a0ca1cd46bfafbe133c30f1aa29d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		001696ad8ab11416effd2f722588d50aeafe088cbe8202f21eb519b32af4f914b834d5c9496b7afc5efe537ec4ff31e82600ebc3f008978056e9d7f2e7f37f0423d505955dd097aa3398cf4a0f2bb5a6bec8602dffbbb625863752c55d03e266ca92ddf8adc140bd64eb77be9eae3c655a11ed012ef605f10b16c13b4c06fd9957bd74bdcb1390e1b9feb5bd36e56cb422851322d724dfa84fe7891988f7ca9fbe521235cb8264f3be0a681ab563c51e3e272c237ad412b3919379511a0b23da848a568029bd8c9a72c717b782b28cc11408c01d503232008ed8ff6c1dc4b5a1056bb6e6a6b06f175e7dc173bb4febb7eae688022128b5f1ad9e5e4b05ae88d503b415e10a6e4d7de7761e50a1706626996be0fcf66ce5229520ac1accaf52dedd4d2376b5424a1febc3d548445a983c1a2f844f9bf758b6af7e269d59676056791078c4f7a31f80c0b135e5217800b5c981d65396841f4e8d7d67745730e866d03a618d96f5fc0e253bb94b1aed3564d6b2bf02491f3f35af791ba84c218faf5e3bf31f845672fc09321c7a6cc09b54f0b7761936fcdc95d69a0010422caaf8385a1412133721df6c960187e21ee06122392a003b8fa092b771e8a15750efb074b8289d7edb6cd646aa643286fedddb4e747bbaac4dbb1ef508c737a502524cf4b2e82f616d51be6f8a1f7fd6afba5f27643ffe6c47842b51d1ba6e209bf7b2f6