useractivitycanary.cortanaintelligence.com

Issued by Microsoft IT TLS CA 1

About this certificate

This digital certificate with serial number 7b:00:04:15:c1:63:ea:bd:64:cb:1b:e4:1c:00:00:00:04:15:c1 was issued on by Microsoft Corporation.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=useractivitycanary.cortanaintelligence.com

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:00:04:15:c1:63:ea:bd:64:cb:1b:e4:1c:00:00:00:04:15:c1
Serial Number (int): 2742993049466662091898510710638286091483092417
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 22:79:f5:e1:0d:c2:61:46:82:b6:04:c7:01:d8:67:51:c3:d6:d2:8f
AuthorityKeyId: 58:88:9f:d6:dc:9c:48:22:b7:14:3e:ff:84:88:e8:e6:85:ff:fa:7d

Fingerprint (sha1): fd:64:15:bd:27:27:b7:50:56:c7:e3:f8:cf:4b:67:0b:21:74:44:eb
Fingerprint (sha256): 09:ec:34:4f:9c:a4:23:21:f8:5e:eb:ae:a9:24:aa:65:81:7a:e3:3c:cc:c0:37:2e:d7:c7:5b:12:0e:32:e5:47

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%201.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl

Check the revocation status for certificate useractivitycanary.cortanaintelligence.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for useractivitycanary.cortanaintelligence.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

useractivitycanary.cortanaintelligence.com
useractivity-ca-centraluseuap-1.cloudapp.net
useractivitycanary.cortanaintelligence.net

Other certificates including the domain name cortanaintelligence.com

(limited to 100 certificates)
catalog-encryption-prod.cortanaintelligence.com
useractivitycanary.cortanaintelligence.com
gallerycanary.azure.ai
useractivity.cortanaanalytics.com
community-logging-encryption-cert.cortanaintelligence.com
clientlogging.cortanaanalytics.com
quickstart.azure.ai
gallery.cortanaintelligence.com
catalog-to-packing.cortanaintelligence.com
useractivity.cortanaanalytics.com
auth-catalogcanary-to-indexcanary.cortanaintelligence.com
auth-useractivitycanary-to-catalogcanary.cortanaintelligence.com
cigalleryindex-test.cortanaintelligence.com
clientloggingcanary.cortanaintelligence.com
gallerycanary.azure.ai
catalog.cortanaanalytics.com
index.cortanaanalytics.com
index.cortanaanalytics.com
useractivity.cortanaanalytics.com
gallery.cortanaintelligence.com
catalogcanary.cortanaintelligence.com
gallery.cortanaintelligence.com
gallerycanary.azure.ai
index.cortanaanalytics.com
useractivity.cortanaanalytics.com
index.cortanaanalytics.com
cigallerycatalog-test.cortanaintelligence.com
cigallerylogging-test.cortanaintelligence.com
gallerycanary.cortanaintelligence.com
useractivitycanary.cortanaintelligence.com
gallery.azure.ai
catalog.cortanaanalytics.com
cigalleryua-test.cortanaintelligence.com
indexcanary.cortanaintelligence.com
auth-useractivitycanary-to-catalogcanary.cortanaintelligence.com
clientlogging.cortanaanalytics.com
catalog.cortanaanalytics.com
clientlogging.cortanaanalytics.com
useractivity.cortanaanalytics.com
gallery.azure.ai
gallery.azure.ai
gallery.azure.ai
gallerycanary.cortanaintelligence.com
catalog.cortanaanalytics.com
catalogcanary.cortanaintelligence.com
useractivity.cortanaanalytics.com
index.cortanaanalytics.com
start.cortanaintelligence.com
useractivity.cortanaanalytics.com

Certificate

The complete raw certificate details for useractivitycanary.cortanaintelligence.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHWDCCBUCgAwIBAgITewAEFcFj6r1kyxvkHAAAAAQVwTANBgkqhkiG9w0BAQsF
ADCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT
B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UE
CxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDEw
HhcNMTkwMjA1MTgwNzExWhcNMjEwMjA1MTgwNzExWjA1MTMwMQYDVQQDEyp1c2Vy
YWN0aXZpdHljYW5hcnkuY29ydGFuYWludGVsbGlnZW5jZS5jb20wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrUdXrtiuyJn36otqN5gLlvRbsIknhRyzr
duc6pWBZwl1C/YwTxYs1cyDiBdyTuZq2hf0usfE5+m5cdAyyfL+f0uGmcSdBqxQU
u+hNITUq2gKXx+ATwsFW45CsyYPuyK96UL8IH1LQG17nLZiruwN/ohr3JyGoNhih
PelFnCnDlyAeZrKjf3ksMgTumji8/1tJFW8LLigMPaEeG5RO+vgobu14Ih+Yr4Lp
wNzSo5lercRLWo1wTzkc2zyzwDZvLGTbQy8Z1/rZdH8vIyjIKzUs2Y2OHJym3Je8
t4GuNmt7jkmYghGu+Ahs64olehpJLSn1N5e7UFvQT4z38ul919lxAgMBAAGjggMI
MIIDBDATBgorBgEEAdZ5AgQDAQH/BAIFADAnBgkrBgEEAYI3FQoEGjAYMAoGCCsG
AQUFBwMCMAoGCCsGAQUFBwMBMD4GCSsGAQQBgjcVBwQxMC8GJysGAQQBgjcVCIfa
hnWD7tkBgsmFG4G1nmGF9OtggV2E0t9CgueTegIBZAIBHTCBhQYIKwYBBQUHAQEE
eTB3MFEGCCsGAQUFBzAChkVodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL21z
Y29ycC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUyMENBJTIwMS5jcnQwIgYIKwYBBQUH
MAGGFmh0dHA6Ly9vY3NwLm1zb2NzcC5jb20wHQYDVR0OBBYEFCJ59eENwmFGgrYE
xwHYZ1HD1tKPMAsGA1UdDwQEAwIEsDCBkQYDVR0RBIGJMIGGgip1c2VyYWN0aXZp
dHljYW5hcnkuY29ydGFuYWludGVsbGlnZW5jZS5jb22CLHVzZXJhY3Rpdml0eS1j
YS1jZW50cmFsdXNldWFwLTEuY2xvdWRhcHAubmV0gip1c2VyYWN0aXZpdHljYW5h
cnkuY29ydGFuYWludGVsbGlnZW5jZS5uZXQwgawGA1UdHwSBpDCBoTCBnqCBm6CB
mIZLaHR0cDovL21zY3JsLm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9jcmwvTWlj
cm9zb2Z0JTIwSVQlMjBUTFMlMjBDQSUyMDEuY3JshklodHRwOi8vY3JsLm1pY3Jv
c29mdC5jb20vcGtpL21zY29ycC9jcmwvTWljcm9zb2Z0JTIwSVQlMjBUTFMlMjBD
QSUyMDEuY3JsME0GA1UdIARGMEQwQgYJKwYBBAGCNyoBMDUwMwYIKwYBBQUHAgEW
J2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NwczAfBgNVHSME
GDAWgBRYiJ/W3JxIIrcUPv+EiOjmhf/6fTAdBgNVHSUEFjAUBggrBgEFBQcDAgYI
KwYBBQUHAwEwDQYJKoZIhvcNAQELBQADggIBAATGJvNZ6bVBdsqwDGq6ad6Z1SLg
oBTZeCVGEeQb7izIBjN3ojK08mb70FcSl0F9jkl/valq0ueNfrmp/paGn2EcUFAC
o0aL0iP7OoIe5Yol+a2reD4qLdzGLcz48P0N7P4g4Yg5Ld1EgqcYyerWEuYgttKA
6bFxRsaS9eUf8GjxzH5b8e9U0YYkRjO7QSU9nOkQ3iDlvedqAD6dRbdwK4awDSeS
5lpgeoTo052nLhhQPUtA3LCe6LqfYgaizMYUpBvHhHGAp2eGHNX0LFC2oAjQoEve
1O6d4/0dsgFpf7E0SG6aL8vqftRBefnIgVuTt5gyAXcFDtkkfw6R4bOwoh6qNnRA
0LBZ6fQq14mujpaCqUg60Vz2owhcXWeC6HTh/PcajbZvXPjJKVwaqs54egb+I+sE
VJl7kHJRXzZgIVjtD76WV9J7ujpNf1+fp+csNITdoTx8zLIrfyO1Wbjtu1467FWT
RjAjOc4KKTRN3GzwdVvVVdlcUaKPlW8cHA22zCKpIGiAHKC7IgkRu0bv87IDa/UW
o6fyd9AaYbhMlxqOF/HcueaQd8xDW7i+yT4rgEiJ7AHCH+GK3wOp2wK5HYi9ljIC
TA4/uId8tzuuby8zjo8rv69vXpXOjw8pq2e4sSQs98NWBiAE0zsruYAxU9RBszzt
i9UkTFHzmjeh6iMn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1HV67YrsiZ9+qLajeYC
5b0W7CJJ4Ucs63bnOqVgWcJdQv2ME8WLNXMg4gXck7matoX9LrHxOfpuXHQMsny/
n9LhpnEnQasUFLvoTSE1KtoCl8fgE8LBVuOQrMmD7sivelC/CB9S0Bte5y2Yq7sD
f6Ia9ychqDYYoT3pRZwpw5cgHmayo395LDIE7po4vP9bSRVvCy4oDD2hHhuUTvr4
KG7teCIfmK+C6cDc0qOZXq3ES1qNcE85HNs8s8A2byxk20MvGdf62XR/LyMoyCs1
LNmNjhycptyXvLeBrjZre45JmIIRrvgIbOuKJXoaSS0p9TeXu1Bb0E+M9/LpfdfZ
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2742993049466662091898510710638286091483092417
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 18:07:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-05 18:07:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'useractivitycanary.cortanaintelligence.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21627104801363659085957788139985978038756381536793820089790228118865843528986801956808283131010138083244218883782192488813509074631955809047984368325410103349800558116925040686210498045908695032098320216567672496622922172521881468755777597349341607174095433627099388132122335957449037154296085326053919314569633235196549002521029425741330648500310664844031225194516978332317918110142223613821461566807456277198504905482633794713046368511313961052199516140636662072809080744271130301573133619481481489407345364015347319310256716583598116915845889146015675928074723477464914193406457180478928781412559234965033627146609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%201.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2279f5e10dc2614682b604c701d86751c3d6d28f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivitycanary.cortanaintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity-ca-centraluseuap-1.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivitycanary.cortanaintelligence.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 58889fd6dc9c4822b7143eff8488e8e685fffa7d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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