horizon.msftcloudes.com
Issued by Microsoft IT TLS CA 1
About this certificate
This digital certificate with serial number 7b:00:05:db:21:0f:04:f2:bf:8b:23:be:25:00:00:00:05:db:21 was issued on by Microsoft Corporation.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Certificate Subject
CN=horizon.msftcloudes.com
Microsoft Corporation
Organization:
Microsoft Corporation
Organization unit: Microsoft IT
Organization unit: Microsoft IT
State / Province:
Washington
Locality: Redmond
Country: US
Locality: Redmond
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 7b:00:05:db:21:0f:04:f2:bf:8b:23:be:25:00:00:00:05:db:21Serial Number (int): 2742993652103682752513075250788167492911356705
Serial Number lenght: 151 bits, 19 octets
SubjectKeyId: cd:5a:c9:c3:1b:1f:88:51:5b:e3:8f:f8:93:f2:7f:69:72:fe:96:31
AuthorityKeyId: 58:88:9f:d6:dc:9c:48:22:b7:14:3e:ff:84:88:e8:e6:85:ff:fa:7d
Fingerprint (sha1): 17:d0:8c:b1:a9:55:f3:6c:af:34:dd:dd:98:8f:e1:62:7c:e8:0a:f6
Fingerprint (sha256): 08:61:2b:f1:88:de:e0:a5:e5:be:6a:5b:dc:2c:7e:1f:06:52:66:53:fd:d7:ef:0c:86:20:01:79:42:d2:fc:b3
Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%201.crt
Revocation information
OCSP Server: http://ocsp.msocsp.comCRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl
Check the revocation status for certificate horizon.msftcloudes.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for horizon.msftcloudes.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
horizon.msftcloudes.com
Other certificates including the domain name msftcloudes.com
(limited to 100 certificates)
*.analytics.msftcloudes.com
clusterserver.azurenotifications.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
jarvis.msftcloudes.com
apiclient.icmppe.test-dsms.msftcloudes.com
server.fabric.prod.configuration.msftcloudes.com
armclientcaller.icm.test-dsms.msftcloudes.com
orchclient.v3workflow.icm.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
metagraph.clients.servicetree.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
arm.azsupport-staging.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
jarvis-int.msftcloudes.com
gcs.prod.monitoring.core.windows.net
ppe.Icm.test-dsms.msftcloudes.com
*.datastudiotest.msftcloudes.com
fcmppe.msftcloudes.com
encryptionservice.mds.Icm.test-dsms.msftcloudes.com
msupdatevsrm.icmppe.msftcloudes.com
prod.la.ingestion.msftcloudes.com
jarvis-int.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
Aad-hybridproxy-prod.msftcloudes.com
azureadsstagescus.southcentralus.cloudapp.azure.com
azureadsstagescus.southcentralus.cloudapp.azure.com
prod.ai.ingestion.msftcloudes.com
*.vnext.s360.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
ppe.hot.ingest.monitor.core.windows.net
*.fcmint.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
genevaprofiler.analytics.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
*.analyticsppe.msftcloudes.com
azurehealthprodjpe.japaneast.cloudapp.azure.com
azurehealthprodcus.centralus.cloudapp.azure.com
clusterserver.azurenotifications.msftcloudes.com
arm.azsupport-dev.msftcloudes.com
arm.azsupport-dev.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
azuresupportcenter.msftcloudes.com
azuresupportcenter.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
azureexpertprod.eastus.cloudapp.azure.com
test.Icm.test-dsms.msftcloudes.com
*.analytics.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
prod.warmpath.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
jarvis-int.msftcloudes.com
azurehealthprodscu.southcentralus.cloudapp.azure.com
prod.warm.ingest.monitor.core.windows.net
*.analytics.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
*.icm.msftcloudes.com
prod.la.ingest.monitor.core.windows.net
arm.azsupport.msftcloudes.com
prod.la.ingestion.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
jarvis.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
vnext.s360.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.warm.ingestion.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
servicemetadata.dscmclient.servicetree.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
assetlineageppe.analytics.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
feedservice.datastudiotest.msftcloudes.com
arm.azsupport.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
azuremgmt.fcmppe.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
pappdocs.msftcloudes.com
test.hot.ingest.monitor.core.windows.net
lens.msftcloudes.com
test.warm.ingest.monitor.core.windows.net
test.Icm.test-dsms.msftcloudes.com
horizon.msftcloudes.com
datastudio.analyticsppe.msftcloudes.com
greenteam.clients.servicetree.msftcloudes.com
icmlxppeoctopus.icm.msftcloudes.com
*.analytics.msftcloudes.com
prod.la.ingest.monitor.core.windows.net
azureexpertprod.westcentralus.cloudapp.azure.com
prod.warm.ingest.monitor.core.windows.net
jarvis-int.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
clusterserver.azurenotifications.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
jarvis.msftcloudes.com
apiclient.icmppe.test-dsms.msftcloudes.com
server.fabric.prod.configuration.msftcloudes.com
armclientcaller.icm.test-dsms.msftcloudes.com
orchclient.v3workflow.icm.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
metagraph.clients.servicetree.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
arm.azsupport-staging.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
jarvis-int.msftcloudes.com
gcs.prod.monitoring.core.windows.net
ppe.Icm.test-dsms.msftcloudes.com
*.datastudiotest.msftcloudes.com
fcmppe.msftcloudes.com
encryptionservice.mds.Icm.test-dsms.msftcloudes.com
msupdatevsrm.icmppe.msftcloudes.com
prod.la.ingestion.msftcloudes.com
jarvis-int.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
Aad-hybridproxy-prod.msftcloudes.com
azureadsstagescus.southcentralus.cloudapp.azure.com
azureadsstagescus.southcentralus.cloudapp.azure.com
prod.ai.ingestion.msftcloudes.com
*.vnext.s360.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
ppe.hot.ingest.monitor.core.windows.net
*.fcmint.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
genevaprofiler.analytics.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
*.analyticsppe.msftcloudes.com
azurehealthprodjpe.japaneast.cloudapp.azure.com
azurehealthprodcus.centralus.cloudapp.azure.com
clusterserver.azurenotifications.msftcloudes.com
arm.azsupport-dev.msftcloudes.com
arm.azsupport-dev.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
azuresupportcenter.msftcloudes.com
azuresupportcenter.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
azureexpertprod.eastus.cloudapp.azure.com
test.Icm.test-dsms.msftcloudes.com
*.analytics.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
prod.warmpath.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
jarvis-int.msftcloudes.com
azurehealthprodscu.southcentralus.cloudapp.azure.com
prod.warm.ingest.monitor.core.windows.net
*.analytics.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.ai.ingestion.msftcloudes.com
*.icm.msftcloudes.com
prod.la.ingest.monitor.core.windows.net
arm.azsupport.msftcloudes.com
prod.la.ingestion.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
jarvis.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
vnext.s360.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
prod.warm.ingestion.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
servicemetadata.dscmclient.servicetree.msftcloudes.com
prod.warm.ingest.monitor.core.windows.net
assetlineageppe.analytics.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
feedservice.datastudiotest.msftcloudes.com
arm.azsupport.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
azuremgmt.fcmppe.msftcloudes.com
prod.ai.ingestion.msftcloudes.com
pappdocs.msftcloudes.com
test.hot.ingest.monitor.core.windows.net
lens.msftcloudes.com
test.warm.ingest.monitor.core.windows.net
test.Icm.test-dsms.msftcloudes.com
horizon.msftcloudes.com
datastudio.analyticsppe.msftcloudes.com
greenteam.clients.servicetree.msftcloudes.com
icmlxppeoctopus.icm.msftcloudes.com
*.analytics.msftcloudes.com
prod.la.ingest.monitor.core.windows.net
azureexpertprod.westcentralus.cloudapp.azure.com
prod.warm.ingest.monitor.core.windows.net
jarvis-int.msftcloudes.com
prod.hot.ingest.monitor.core.windows.net
Certificate
The complete raw certificate details for horizon.msftcloudes.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG1TCCBL2gAwIBAgITewAF2yEPBPK/iyO+JQAAAAXbITANBgkqhkiG9w0BAQsF ADCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UE CxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDEw HhcNMTkwNzE4MTgxMTU1WhcNMjEwNzE4MTgxMTU1WjAiMSAwHgYDVQQDExdob3Jp em9uLm1zZnRjbG91ZGVzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKyatIEAp3jBNj6Bj2cOh3l5nlb8Le5AsE1QqipeGEuaAv0P3rlB9IUTLD3U rER7phvB9BR+iow69kxywQT8QdIK5m+u0/kv7/u+JBpOymIUsJ9kTuTew7SHQdwB M+dM1ALfq3TdR8CIAp1iZf3IWr0pMPehV6O4F2NU2mKt7BYTmVjQuahsX4Bg99M1 yRPesWEvktlK9TJzcI7cpUbjXiDWsdrkYoVsHVuC/cNs/Q1E7z5iZTHgPNOZVWOd //yHUGxAF9EXNc+lThC1/DZ62ZZbJFO/nkWoqdN6YgSXJlOTzDxdJRfD++G1fhsr A8e4tj2SyAnF0UUL2GRXv0LWcPsCAwEAAaOCApgwggKUMBMGCisGAQQB1nkCBAMB Af8EAgUAMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwIwCgYIKwYBBQUHAwEw PgYJKwYBBAGCNxUHBDEwLwYnKwYBBAGCNxUIh9qGdYPu2QGCyYUbgbWeYYX062CB XYTS30KC55N6AgFkAgEdMIGFBggrBgEFBQcBAQR5MHcwUQYIKwYBBQUHMAKGRWh0 dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL01pY3Jvc29mdCUyMElU JTIwVExTJTIwQ0ElMjAxLmNydDAiBggrBgEFBQcwAYYWaHR0cDovL29jc3AubXNv Y3NwLmNvbTAdBgNVHQ4EFgQUzVrJwxsfiFFb44/4k/J/aXL+ljEwCwYDVR0PBAQD AgSwMCIGA1UdEQQbMBmCF2hvcml6b24ubXNmdGNsb3VkZXMuY29tMIGsBgNVHR8E gaQwgaEwgZ6ggZuggZiGS2h0dHA6Ly9tc2NybC5taWNyb3NvZnQuY29tL3BraS9t c2NvcnAvY3JsL01pY3Jvc29mdCUyMElUJTIwVExTJTIwQ0ElMjAxLmNybIZJaHR0 cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL01pY3Jvc29mdCUy MElUJTIwVExTJTIwQ0ElMjAxLmNybDBNBgNVHSAERjBEMEIGCSsGAQQBgjcqATA1 MDMGCCsGAQUFBwIBFidodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL21zY29y cC9jcHMwHwYDVR0jBBgwFoAUWIif1tycSCK3FD7/hIjo5oX/+n0wHQYDVR0lBBYw FAYIKwYBBQUHAwIGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4ICAQAXuHONFzlN Bd2v+daoDAhBak/bQHQ6Hqq873FiKKvo3Gc4ZRgPKtnoDLsa7dmRpgBoaXEP6odR xLCLleGj0qGRhXVxEn/O81fRS5Lxlfj4QUIEp4OYmbaS5wSoXrYmjJllPEVFze8P pr3NXUcWDuk5rLXCDqymupd7DzaN68An5ldsoVLaeJR6IaQG7r3rIQClzkHEVKTu 1RFxKif27zmDwvmJ3FRYZna85psdtsIVa4cK/genoN9ED+KZdR/xgMWIvp1/brvZ RyHbu26YIaJhPSIKr7SU6t0j2hsCNT45R4xMPh5jS9Ie7psc22lDGy4NudV8tgwR bwJ3t53ZlbVZ+10tBY6SAdGKUoS2k1gOOtix+dGLY8BnDxv+U3i2RA+QOQa61fya 9jD36+eeNl5jElokpWk6HA4hjwW2z/DP6TTwgqDySTL5c2lO0jFGLHn2eO9dQo3x A+4GSzrvQ9yx+7UAEEs8JNuPo08WW6QWZm2syWH0mCsYzdWouclUdhg2VKfRIuOG eHSu0K3hP/tpezdb0PVdgF8KXJ2aGnXai5m8Lpgpy7la5gHVK3Iq5zNGNgoy64NM r+AhHdeFUxz9Az6kyL+hfyHE4UkIDzZT00RG4rw7uT3EcgcAeu6eaMyJSUsPE9FA GELzmu7Sz8RUlbgeaC/rWV3gGcYcvGxx2A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJq0gQCneME2PoGPZw6H eXmeVvwt7kCwTVCqKl4YS5oC/Q/euUH0hRMsPdSsRHumG8H0FH6KjDr2THLBBPxB 0grmb67T+S/v+74kGk7KYhSwn2RO5N7DtIdB3AEz50zUAt+rdN1HwIgCnWJl/cha vSkw96FXo7gXY1TaYq3sFhOZWNC5qGxfgGD30zXJE96xYS+S2Ur1MnNwjtylRuNe INax2uRihWwdW4L9w2z9DUTvPmJlMeA805lVY53//IdQbEAX0Rc1z6VOELX8NnrZ llskU7+eRaip03piBJcmU5PMPF0lF8P74bV+GysDx7i2PZLICcXRRQvYZFe/QtZw +wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2742993652103682752513075250788167492911356705 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 18:11:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-18 18:11:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'horizon.msftcloudes.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21789276379018753710972891452942222311784938813161703627891761942222428767869344847438155923042481272550550866994308738113576580986191660679651338103819501252011984016040147485180416116803088620411209568450217762677586576696114719039882876805706282612536824719371827661144146224650506361951369704343544003614323816317285935185251520246949737548056633105667797343922414040593336782707818549223394473445405206932122849576488993628666679520978265306276743310155439643730803068779868903390654505585997052411614157296541765306427556599677970940809961391693584264325589346462885766734802515028297604367713041448882033553659 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%201.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cd5ac9c31b1f88515be38ff893f27f6972fe9631 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horizon.msftcloudes.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 58889fd6dc9c4822b7143eff8488e8e685fffa7d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 0017b8738d17394d05ddaff9d6a80c08416a4fdb40743a1eaabcef716228abe8dc673865180f2ad9e80cbb1aedd991a6006869710fea8751c4b08b95e1a3d2a191857571127fcef357d14b92f195f8f8414204a7839899b692e704a85eb6268c99653c4545cdef0fa6bdcd5d47160ee939acb5c20eaca6ba977b0f368debc027e6576ca152da78947a21a406eebdeb2100a5ce41c454a4eed511712a27f6ef3983c2f989dc54586676bce69b1db6c2156b870afe07a7a0df440fe299751ff180c588be9d7f6ebbd94721dbbb6e9821a2613d220aafb494eadd23da1b02353e39478c4c3e1e634bd21eee9b1cdb69431b2e0db9d57cb60c116f0277b79dd995b559fb5d2d058e9201d18a5284b693580e3ad8b1f9d18b63c0670f1bfe5378b6440f903906bad5fc9af630f7ebe79e365e63125a24a5693a1c0e218f05b6cff0cfe934f082a0f24932f973694ed231462c79f678ef5d428df103ee064b3aef43dcb1fbb500104b3c24db8fa34f165ba416666dacc961f4982b18cdd5a8b9c95476183654a7d122e3867874aed0ade13ffb697b375bd0f55d805f0a5c9d9a1a75da8b99bc2e9829cbb95ae601d52b722ae73346360a32eb834cafe0211dd785531cfd033ea4c8bfa17f21c4e149080f3653d34446e2bc3bb93dc47207007aee9e68cc89494b0f13d1401842f39aeed2cfc45495b81e682feb595de019c61cbc6c71d8