account.live-int.com

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 04

About this certificate

This digital certificate with serial number 33:00:0d:dc:f1:14:00:bc:4b:10:bb:9b:c8:00:00:00:0d:dc:f1 was issued on by Microsoft Corporation.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:0d:dc:f1:14:00:bc:4b:10:bb:9b:c8:00:00:00:0d:dc:f1
Serial Number (int): 1137342722477740074472735488010904749428563185
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 53:12:cc:6e:3f:65:ed:5c:60:42:03:9a:a0:b6:ce:b8:da:d1:fe:20
AuthorityKeyId: 3b:70:d1:53:e9:76:25:9d:60:a8:ca:66:0f:c6:9b:ae:6f:54:16:6a

Fingerprint (sha1): 0f:3c:70:fc:bf:75:53:ed:33:0b:e5:28:f3:ba:5b:dc:d0:3b:80:ab
Fingerprint (sha256): 09:b6:fb:23:81:e8:80:87:e7:19:5f:13:f2:c1:5e:df:36:b9:37:6f:6d:db:5f:7d:32:db:af:20:ae:a5:12:4e

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl

Check the revocation status for certificate account.live-int.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for account.live-int.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

account.live-int.com
signup.live-int.com
wus2.account.live-int.com
eus.account.live-int.com
wus2.signuprecovery.account.live-int.com

Other certificates including the domain name live-int.com

(limited to 100 certificates)
xd.live-int.com
entitlement.int2.onecare.live-int.com
login.live-int.com
images.partner.windowsphone.com
graph.windows.net
*.osi.office-int.net
*.osi.office-int.net
*.login.live-int.com
notify.mpnstress1.live-int.com
msm.live-int.com
graph.windows.net
graph.windows.net
SigningCert.login.live-int.com
graph.windows.net
skype-certapiqa-msaautocsrint.login.live-int.com
b.familysafety.microsoft.com
graph.windows.net
graph.windows.net
clientauthentication.retailer.officeapps.live-int.com
*.m2.tiles.live-int.com
profile-bvt.live-int.com
*.login.live-int.com
*.vo.msecnd.net
login.live-int.com
graph.windows.net
graph.windows.net
login.live-int.com
storage.live.com
graph.windows.net
Devices-gd.live-int.com
*.samples.live-int.com
graph.windows.net
buy.live-int.com
skype-certapiqa-msaautocsrint.login.live-int.com
api.choice.microsoft-int.com
support.msn-int.com
pptcs.officeapps.live-int.com
graph.windows.net
account.live-int.com
login.live-int.com
onedrive.live-int.com
graph.windows.net
graph.windows.net
*.login.live-int.com
login.live-int.com
graph.windows.net
graph.windows.net
msm.live-int.com
ieonline.live-int.com
account.live-int.com
graph.windows.net
graph.windows.net
stateservice.officeapps.live-int.com
PubSubAutoCSRClient.login.live-int.com
graph.windows.net
mid.live-int.com
captions.officeapps.live-int.com
login.live-int.com
f2.push.live-int.com
login.live.com
graph.windows.net
graph.windows.net
*.location.live-int.com
graph.windows.net
graph.windows.net
graph.windows.net
*.login.live-int.com
login.live-int.com
storage.live.com
api-s3.live-int.com
*.osi.office-int.net
pptcs.officeapps.live-int.com
graph.windows.net
busbuy.live-int.com
graph.windows.net
account.live-int.com
*.osi.office-int.net
*.osi.office-int.net
login.live-int.com
graph.windows.net
login.live-int.com
account.live-int.com
ols-idsapi.officeapps.live-int.com
ieonline.live-int.com
graph.windows.net
*.osi.office-int.net
hubblecontent.osi.office-int.net
hubble.officeapps.live-int.com
graph.windows.net
odcsm-aad-int.officeapps.live-int.com
*.login.live-int.com
graph.windows.net
onedrive.live-int.com
graph.windows.net
graph.windows.net
login.live-int.com
graph.windows.net
*.osi.office-int.net
cns.fss.live-int.com
s2s.aliasdirectory.live-int.com

Certificate

The complete raw certificate details for account.live-int.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6SbWw54xH5yeG36srFV
H1H9TcfJNPbQr/0SLHlKGDTW9joumFPMErapiBuIQ7Tn/rkyLFQl3b4CKyitDdXB
tafjW2JfgOYvh2YtALTkrs/tounGxxrJzO+6RiSSAZo8ZbLklOI9ap7NpAazEN2W
9DnhOrIdKQWhhHCpeCsTyRGZ8OK2spajSrD3Nf0zBVsObIENFROx1/lbWX5HfFcO
lmKBFp0Lc5+fx0UG4Mb4/TzmD8/j2ZFKAuHyyD+Hg5J0trrcrtFrlcJjK4up0PxA
PKcFcCa2hA+7zjvbFkIS9g3JY+4oIirsjNGGUpBBGtWTleB8dlBj+zwzmZ8cts4L
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137342722477740074472735488010904749428563185
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 04'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 20:24:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-26 20:24:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'account.live-int.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24697640135413495034417712819897631220459898321496261115934781035121798599103244222780943000410778735630675604933052457818411707647404003059272552850674953511689896003456400546373051520373079957621818131303913626971929391802593966658303075041672449650262621864311231503603342787150673381379852983395514312796563789851167242607083877302734281573837316412493025405976006602677160484824759878236551790444791608210869727940930627735134713709714193208732094751222892875013036329751218181590899085071376956046948343914907511087594820137731619568156344473955452507316659480213510014567495895213923557233275092144689033120657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b8c9897230000040300473045022100eaf035cd59fec20764de3d14b450483b127a0740103e0e249ec0326745fbe12f022013a8522022a66aa06f1c981e298354419946b5b93440980fc9f3f7f71c2bf682007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b8c9897500000040300473045022100df2cb696779852ed26a668f36df3b02f45f58410dedefcf8323a8f3fa0ab5d44022059bc31dc7a6a225c0bc6f2f187cc3e712794c3a1c8b8d7be48a5628a1efa7e3f00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b8c98972f0000040300463044022043d11195da3d2d31bde17b791d25f2dc3560508454e3d1ebd34d4ae382aa0598022058e01bc2d964d86d0d5259c5e2988fdb1e7e0a3600be773dfdfcc9cf59fdc842
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:1|t:19|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wus2.account.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eus.account.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wus2.signuprecovery.account.live-int.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3b70d153e976259d60a8ca660fc69bae6f54166a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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