mms-sdf.skype.com

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 04

About this certificate

This digital certificate with serial number 33:00:37:14:23:05:a7:85:ad:ae:f9:5c:30:00:00:00:37:14:23 was issued on by Microsoft Corporation.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:37:14:23:05:a7:85:ad:ae:f9:5c:30:00:00:00:37:14:23
Serial Number (int): 1137356747421647422103483447762009729223037987
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: a0:5d:77:44:0b:56:a8:3a:2c:60:7f:3e:b7:03:24:7b:b3:74:99:86
AuthorityKeyId: 3b:70:d1:53:e9:76:25:9d:60:a8:ca:66:0f:c6:9b:ae:6f:54:16:6a

Fingerprint (sha1): b4:92:5a:7d:5a:9e:37:47:f9:8b:14:ea:93:4d:10:1e:2f:fc:7f:98
Fingerprint (sha256): 07:d2:39:f0:c8:ce:71:eb:20:8a:37:ce:e1:f5:a6:55:ec:1e:1d:04:96:7b:ed:3b:b4:3b:92:c4:06:7e:5d:10

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl

Check the revocation status for certificate mms-sdf.skype.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mms-sdf.skype.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mms-sdf.skype.com
ic3-mms-api-service.p02.ic3-mms-core.eastus-sdf.cosmic-ppe.office.net
ic3-mms-processor-service.p02.ic3-mms-core.eastus-sdf.cosmic-ppe.office.net
ic3-mms-tgw-service.p02.ic3-mms-core.eastus-sdf.cosmic-ppe.office.net
ic3-mms-api-service.p01.ic3-mms-core.westus-sdf.cosmic-ppe.office.net
ic3-mms-processor-service.p01.ic3-mms-core.westus-sdf.cosmic-ppe.office.net
ic3-mms-tgw-service.p01.ic3-mms-core.westus-sdf.cosmic-ppe.office.net

Other certificates including the domain name skype.com

(limited to 100 certificates)
*.messagingthread.skype.com
dashboard.sms.skype.com
*.asm.skype.com
du5.media.vm.skype.com
x-lgw.lgw.skype.com
canary.pnh.skype.com
*.notifications.teams.microsoft.com
mp.load.sms.skype.com
*.callrecorder.skype.com
images.partner.windowsphone.com
*.config.skype.com
www.skype.com
brblogs.skype.com
dogfood.pnh.skype.com
bcr.tr.skype.com
*.vo.msecnd.net
*.config.skype.com
meet.skype.com
*.mps.skype.com
qaget.skype.net
*.events.data.microsoft.com
shortener.skype.com
srm.skype.com
*.asm.skype.com
*.notifications.teams.microsoft.com
*.config.skype.com
get.skype.com
csp.skype.com
secure05.stage.lithium.com
dogfood.pnh.skype.com
*.asm.skype.com
prod.registrar.skype.com
register.greenid.skype.com
*.pma.teams.microsoft.com
*.pilot1.notifications.skype.com
*.vo.msecnd.net
*.asm.skype.com
sdf.aps.infra.teams.microsoft.com
*.meet.skype.net
csharp.net
messagingexporter-staging.skype.com
heartbeat.skype.com
www.skype.com
a.lw.skype.com
*.vo.msecnd.net
*.asm.skype.com
*.config.skype.com
ui.skype.com
phobot-live.skype.com
sso.skypetoken.skype.com
dashboard.sms.skype.com
csharp.net
msit.aps.infra.teams.microsoft.com
emulator.sms.skype.com
*.cms.skype.net
*.contacts.skype.com
csharp.net
hc.asm.skype.com
*.email.skype.com
*.entitlement.teams.microsoft.com
uic.login.skype.com
bcr.tr.skype.com
*.contacts.skype.com
prd01caeattnsvc.cloudapp.net
settings.teams.internal.office.com
dreamspace.ie
*.notifications.teams.microsoft.com
msgsearch.skype.com
trap.skype.com
latest-webclient.skype.com
go.skype.com
*.conversationservice.skype.com
api.skype.com
*.pilot1.notifications.skype.com
notification-hub.skype.com
recommend.skype.com
partners.cc.skype.com
uic.login.skype.com
*.notifications.teams.microsoft.com
fpt.microsoft.com
ic3-voiceauth.skype.com
heartbeat.skype.com
tr.skype.com
inviteconnector.skype.com
*.pilot2.notifications.skype.com
*.messagingthread.skype.com
profile.skype.com
*.pma.teams.microsoft.com
*.promotions.skype.com
prod-jwt.botapi.skype.com
interviews.skype.com
upgrade-api.skype.com
*.pilot1.notifications.skype.com
a.lw.skype.com
*.events.data.microsoft.com
msgsearch.skype.com
*.mps.skype.com
presence.skype.com
heartbeat.skype.com
mms-sdf.skype.com

Certificate

The complete raw certificate details for mms-sdf.skype.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKIzCCCAugAwIBAgITMwA3FCMFp4WtrvlcMAAAADcUIzANBgkqhkiG9w0BAQwF
ADBdMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
MS4wLAYDVQQDEyVNaWNyb3NvZnQgQXp1cmUgUlNBIFRMUyBJc3N1aW5nIENBIDA0
MB4XDTI0MDQxNjIxNTExMVoXDTI1MDQxMTIxNTExMVowaDELMAkGA1UEBhMCVVMx
CzAJBgNVBAgTAldBMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv
ZnQgQ29ycG9yYXRpb24xGjAYBgNVBAMTEW1tcy1zZGYuc2t5cGUuY29tMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZdsUqWzwj9BW/ozCWOz9Y70E58j
of3XJXZCPpYp5+TrprFSx+g4rX/+jHdg0IsIBTDYZvFArOlwwOvAtnUJQH3i9y9m
TVUrcFhwrmZOhkwuZR5Sw+xLve9d2802G/g5gp4WlDn74dMyg3p0YEw4EempdPKR
giqUqGo+UFF9D5hXUsvYo/ixGqGHfnkdm0oxSncsKZxOOc22J8i8XQsfJddeqvkf
LzQXajMqUwqkahq6qHliWnRMB9EA15ow1a3OsD18QfNGYKxEXkzuZ6E0WnrVdDiP
lpSCGqEEsUBbt4Nnf9LxTGtuTwDUOjMNXkOLXVM67hIhmq2PwxI3FRFeXQIDAQAB
o4IFzzCCBcswggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB1AM8RVu7VLnyv84db
2Wkum+kacWdKsBfsrAHSW3fOzDsIAAABjujtsIMAAAQDAEYwRAIgHuHlyLW+GQuW
lbClNqy7wo4gPybsVD2HczSlEwhwzuICIB4+e2XJ0Ir5oohDaSIW746oL1T1rdn2
IZ2mbaqVsjUYAHYAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowuebgAAAGO
6O2wMwAABAMARzBFAiAzSBoMW7qTeMDw8ULpV81sFHyEOsaE9mXJsK8H5PmdJwIh
AOux5KEpysmHIOTuBCGrzBFnfAMcl7lcRKpAT1Mr/uLQAHcAVYHUwhaQNgFK6gub
VzxT8MDkOHhwJQgXL6OqHQcT0wwAAAGO6O2wqwAABAMASDBGAiEA30pdHcfWZZmx
dw9o45CkYZkW1gP6RSy0rvQqtiLtHX0CIQClfE+D+Mynf1HAjzaDw7ZTIyBzoWWI
847A1nJS120nAjAnBgkrBgEEAYI3FQoEGjAYMAoGCCsGAQUFBwMCMAoGCCsGAQUF
BwMBMDwGCSsGAQQBgjcVBwQvMC0GJSsGAQQBgjcVCIe91xuB5+tGgoGdLo7QDIfw
2h1dgoTlaYLzpz4CAWQCASYwgbQGCCsGAQUFBwEBBIGnMIGkMHMGCCsGAQUFBzAC
hmdodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29m
dCUyMEF6dXJlJTIwUlNBJTIwVExTJTIwSXNzdWluZyUyMENBJTIwMDQlMjAtJTIw
eHNpZ24uY3J0MC0GCCsGAQUFBzABhiFodHRwOi8vb25lb2NzcC5taWNyb3NvZnQu
Y29tL29jc3AwHQYDVR0OBBYEFKBdd0QLVqg6LGB/PrcDJHuzdJmGMA4GA1UdDwEB
/wQEAwIFoDCCAdYGA1UdEQSCAc0wggHJghFtbXMtc2RmLnNreXBlLmNvbYJFaWMz
LW1tcy1hcGktc2VydmljZS5wMDIuaWMzLW1tcy1jb3JlLmVhc3R1cy1zZGYuY29z
bWljLXBwZS5vZmZpY2UubmV0gktpYzMtbW1zLXByb2Nlc3Nvci1zZXJ2aWNlLnAw
Mi5pYzMtbW1zLWNvcmUuZWFzdHVzLXNkZi5jb3NtaWMtcHBlLm9mZmljZS5uZXSC
RWljMy1tbXMtdGd3LXNlcnZpY2UucDAyLmljMy1tbXMtY29yZS5lYXN0dXMtc2Rm
LmNvc21pYy1wcGUub2ZmaWNlLm5ldIJFaWMzLW1tcy1hcGktc2VydmljZS5wMDEu
aWMzLW1tcy1jb3JlLndlc3R1cy1zZGYuY29zbWljLXBwZS5vZmZpY2UubmV0gktp
YzMtbW1zLXByb2Nlc3Nvci1zZXJ2aWNlLnAwMS5pYzMtbW1zLWNvcmUud2VzdHVz
LXNkZi5jb3NtaWMtcHBlLm9mZmljZS5uZXSCRWljMy1tbXMtdGd3LXNlcnZpY2Uu
cDAxLmljMy1tbXMtY29yZS53ZXN0dXMtc2RmLmNvc21pYy1wcGUub2ZmaWNlLm5l
dDAMBgNVHRMBAf8EAjAAMGoGA1UdHwRjMGEwX6BdoFuGWWh0dHA6Ly93d3cubWlj
cm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMEF6dXJlJTIwUlNBJTIw
VExTJTIwSXNzdWluZyUyMENBJTIwMDQuY3JsMGYGA1UdIARfMF0wUQYMKwYBBAGC
N0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9w
a2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTAIBgZngQwBAgIwHwYDVR0jBBgwFoAU
O3DRU+l2JZ1gqMpmD8abrm9UFmowHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUF
BwMBMA0GCSqGSIb3DQEBDAUAA4ICAQAdppV8D1xfc+0Vy9DqSz+cU/z1uNKmTVTi
o6ycD258c58YF5mWtrx6GQv/19BqaAavQtN3lJaJfEv1K/GQu0HwW1cePyCHrl1b
82iGUo++17Hli9Yo8yq4wm6t/Gpxl92hzE5jfo9k3iqY7sfxgTPsPizPmTc7YsqE
jaVx6XVQ46CcHAr+dMKkt/PIOQ7eh/tAYyXWN086h7EGWIhlU9Syf5UjvN9DTaHV
aFV6UUsRS/MqEs2fq4h3KN04uyASVUmXw6f2cfsSIxDqCQjpAhyADsdFwEqHb8Ia
ffyitjaWYbJGiCTiEdVB5MueIMnVRSl/NMbPBd3oUrOWpsAoNOf9SEkaf/moEB3x
TBuayM081xw+sLAYTvO2iD3zHqGsmmker1PGAS9uc60jNwXOwwKbUxbZBO9JX6Im
BTqpSNdeZU7M5SM6YhHMRjN+UrcMwwgoRJpDHe5syfgqeBu/Q82y62dfH/J8mOIO
oF6MIReMEagd5FCku1v48Y3y8Jwe/+ZVeX2QB9HWd+lpbpNwly811XJ6701dZZWg
h8yFv3QtIWaL54nVLJ/D8p1R7upH2pV3qAKu8gGswLQ7cRzo6bkvLJt4FUquk8ld
SijG0Tldz+3mu6HVhCPJI5Tg5kx+xcoYOn61GsINIlOuIX5iMDJPLarwlUUDyPmy
9az0KZ9Djg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZdsUqWzwj9BW/ozCWOz
9Y70E58jof3XJXZCPpYp5+TrprFSx+g4rX/+jHdg0IsIBTDYZvFArOlwwOvAtnUJ
QH3i9y9mTVUrcFhwrmZOhkwuZR5Sw+xLve9d2802G/g5gp4WlDn74dMyg3p0YEw4
EempdPKRgiqUqGo+UFF9D5hXUsvYo/ixGqGHfnkdm0oxSncsKZxOOc22J8i8XQsf
JddeqvkfLzQXajMqUwqkahq6qHliWnRMB9EA15ow1a3OsD18QfNGYKxEXkzuZ6E0
WnrVdDiPlpSCGqEEsUBbt4Nnf9LxTGtuTwDUOjMNXkOLXVM67hIhmq2PwxI3FRFe
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137356747421647422103483447762009729223037987
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 04'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 21:51:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-11 21:51:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mms-sdf.skype.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21408943070645043271320711584359191768404569858019270776275512247620929960416569856262758932773951089727045774686275448386606296621081582798111689884832969296181039416192226693834160871647923516079515571927858437881612801979121271091124527157385535395130307338322256398330847742394259411783312054321289638338675515628614370359789538078661176767388399591977047964483228961689951597068978306609671561997474598319398769915400746621928819609848913592345804051013404552934612963781682279078900581242477404347734974006046990411464628467586580353617198391092317142563374224138893028245133493374443825656250407195602924428893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a05d77440b56a83a2c607f3eb703247bb3749986
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (461 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms-sdf.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ic3-mms-api-service.p02.ic3-mms-core.eastus-sdf.cosmic-ppe.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ic3-mms-processor-service.p02.ic3-mms-core.eastus-sdf.cosmic-ppe.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ic3-mms-tgw-service.p02.ic3-mms-core.eastus-sdf.cosmic-ppe.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ic3-mms-api-service.p01.ic3-mms-core.westus-sdf.cosmic-ppe.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ic3-mms-processor-service.p01.ic3-mms-core.westus-sdf.cosmic-ppe.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ic3-mms-tgw-service.p01.ic3-mms-core.westus-sdf.cosmic-ppe.office.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3b70d153e976259d60a8ca660fc69bae6f54166a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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