manage.osi.office-int.net
- Microsoft Corporation -
Issued by Microsoft Azure TLS Issuing CA 02
About this certificate
This digital certificate with serial number 33:00:a5:78:9c:ef:f8:59:10:a6:d7:9e:44:00:00:00:a5:78:9c was issued on by Microsoft Corporation.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Microsoft Corporation
Organization:
Microsoft Corporation
State / Province:
WA
Locality: Redmond
Country: US
Locality: Redmond
Country: US
Microsoft Corporation
Organization:
Microsoft Corporation
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 33:00:a5:78:9c:ef:f8:59:10:a6:d7:9e:44:00:00:00:a5:78:9cSerial Number (int): 1137394312037828711230003811513861479896283292
Serial Number lenght: 150 bits, 19 octets
SubjectKeyId: 8d:5a:40:1c:7b:c8:6e:2a:45:c7:dc:44:10:47:90:63:a6:3a:47:17
AuthorityKeyId: 00:ab:91:fc:21:62:26:97:9a:a8:79:1b:61:41:90:60:a9:62:67:fd
Fingerprint (sha1): 39:c2:2d:cd:db:5c:15:63:4f:e6:db:6c:e9:c4:cc:e5:ec:36:0e:bd
Fingerprint (sha256): 0a:2a:bd:f5:ab:98:07:77:85:15:65:70:61:e8:9f:5c:7a:bf:11:2e:bd:24:c2:25:72:b9:6f:e3:4d:1b:e7:d2
Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt
Revocation information
OCSP Server: http://oneocsp.microsoft.com/ocspCRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl
Check the revocation status for certificate manage.osi.office-int.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for manage.osi.office-int.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
12 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
manage.osi.office-int.net
*.manage.osi.office-int.net
*.manage.osi.office-int.net
Other certificates including the domain name office-int.net
(limited to 100 certificates)
officernr.osi.office-int.net
kaizalamessaging.osi.office-int.net
*.osi.office-int.net
augmentation.osi.office-int.net
*.osi.office-int.net
OsiDataEncrypt-Carmine-ALL-DEK.osi.office-int.net
icmconnector.griffinosiplatformtest.osi.office-int.net
kasmgmtportal.osi.office-int.net
Aqua-INT-MdmAdministrator.osi.office-int.net
msa-sapi.graph.office-int.net
Cobalt-INT-MdmAdministrator.osi.office-int.net
manage.osi.office-int.net
Cobalt-INT-MdmAdministrator.osi.office-int.net
inclient.store.office-int.com
store.office-int.com
Wheat-INT-MdmAdministrator.osi.office-int.net
Caelum-INT-MdmAdministrator.osi.office-int.net
insertmedia.osi.office-int.net
captions.officeapps.live-int.com
ssu.office-int.com
oliml.office-int.net
tasks.office-int.com
*.osi.office-int.net
graph.office-int.net
support.office-int.com
wdgfabric.osi.office-int.net
*.osi.office-int.net
*.osi.office-int.net
GriffinOsiPlatformTest-DataEncryptionCertife.office-int.net
manage.osi.office-int.net
entity-sti-int.osi.office-int.net
samplegateway.omex.office-int.net
manage.osi.office-int.net
Vela-INT-MdmAdministrator.osi.office-int.net
GriffinOsiPlatformTest-DataEncryptionCertife.office-int.net
griffinosiplatformtest.osi.office-int.net
*.osi.office-int.net
hubblecontent.osi.office-int.net
hubble.officeapps.live-int.com
Caelum-INT-MdmAdministrator.osi.office-int.net
icms.osi.office-int.net
*.accesscontrol.identity.office-int.net
oxocompliance-test.office-int.net
*.osi.office-int.net
*.osi.office-int.net
Wheat-INT-MdmAdministrator.osi.office-int.net
Mint-INT-Mds.osi.office-int.net
kevlar.marketwatch.office-int.net
validationgateway.omex.office-int.net
scram.osi.office-int.net
Bronze-INT-Mds.osi.office-int.net
enceladus.osi.office-int.net
officecheckoutpurchase.omex.office-int.net
helene.cosmosproxy.osi.office-int.net
arms.osi.office-int.net
arms.osi.office-int.net
cornsilkint-mds.osi.office-int.net
Wheat-INT-MdmAdministrator.osi.office-int.net
ogma.osi.office-int.net
externalgateway.omex.office-int.net
addinslicensing.store.office-int.com
augmentation.osi.office-int.net
tellmeservice.osi.office-int.net
Antlia-INT-MdmAdministrator.osi.office-int.net
eridanus-Int-Mdm.osi.office-int.net
Russet-INT-Mds.osi.office-int.net
macommunication.geneva.keyvault.fullvalue.omex.office-int.net
Aqua-INT-MdmAdministrator.osi.office-int.net
setup.office-int.com
Aqua-INT-MdmAdministrator.osi.office-int.net
*.graph.office-int.net
Carpo-INT-Mds.osi.office-int.net
*.osi.office-int.net
cluster.fullvalue.omex.office-int.net
*.osi.office-int.net
dataencryption.omex.office-int.net
hubble.officeapps.live-int.com
forms.office-int.com
Manatee-INT-Mds.osi.office-int.net
checkout.office-int.com
GriffinOsiPlatformTest-gcpcert.office-int.net
config.officeapps.live-int.com
GriffinOsiPlatformTest-gcpcert.office-int.net
pptcast-rps-int.osi.office-int.net
store.office-int.com
aurigasentryportal.office-int.net
tasman.osi.office-int.net
Asparagus-INT-Mds.osi.office-int.net
support.office-int.com
stores.office-int.com
diagnosticsgateway.omex.office-int.net
checkout.office-int.com
usershardextension-sti-int.osi.office-int.net
*.identity.office-int.net
Lynx-INT-Mds.osi.office-int.net
Snow-INT-Mds.osi.office-int.net
loopback.osi.office-int.net
patriarch.cosmosproxy.osi.office-int.net
mdoipdomainmgmt.office-int.net
uci.officeapps.live-int.com
kaizalamessaging.osi.office-int.net
*.osi.office-int.net
augmentation.osi.office-int.net
*.osi.office-int.net
OsiDataEncrypt-Carmine-ALL-DEK.osi.office-int.net
icmconnector.griffinosiplatformtest.osi.office-int.net
kasmgmtportal.osi.office-int.net
Aqua-INT-MdmAdministrator.osi.office-int.net
msa-sapi.graph.office-int.net
Cobalt-INT-MdmAdministrator.osi.office-int.net
manage.osi.office-int.net
Cobalt-INT-MdmAdministrator.osi.office-int.net
inclient.store.office-int.com
store.office-int.com
Wheat-INT-MdmAdministrator.osi.office-int.net
Caelum-INT-MdmAdministrator.osi.office-int.net
insertmedia.osi.office-int.net
captions.officeapps.live-int.com
ssu.office-int.com
oliml.office-int.net
tasks.office-int.com
*.osi.office-int.net
graph.office-int.net
support.office-int.com
wdgfabric.osi.office-int.net
*.osi.office-int.net
*.osi.office-int.net
GriffinOsiPlatformTest-DataEncryptionCertife.office-int.net
manage.osi.office-int.net
entity-sti-int.osi.office-int.net
samplegateway.omex.office-int.net
manage.osi.office-int.net
Vela-INT-MdmAdministrator.osi.office-int.net
GriffinOsiPlatformTest-DataEncryptionCertife.office-int.net
griffinosiplatformtest.osi.office-int.net
*.osi.office-int.net
hubblecontent.osi.office-int.net
hubble.officeapps.live-int.com
Caelum-INT-MdmAdministrator.osi.office-int.net
icms.osi.office-int.net
*.accesscontrol.identity.office-int.net
oxocompliance-test.office-int.net
*.osi.office-int.net
*.osi.office-int.net
Wheat-INT-MdmAdministrator.osi.office-int.net
Mint-INT-Mds.osi.office-int.net
kevlar.marketwatch.office-int.net
validationgateway.omex.office-int.net
scram.osi.office-int.net
Bronze-INT-Mds.osi.office-int.net
enceladus.osi.office-int.net
officecheckoutpurchase.omex.office-int.net
helene.cosmosproxy.osi.office-int.net
arms.osi.office-int.net
arms.osi.office-int.net
cornsilkint-mds.osi.office-int.net
Wheat-INT-MdmAdministrator.osi.office-int.net
ogma.osi.office-int.net
externalgateway.omex.office-int.net
addinslicensing.store.office-int.com
augmentation.osi.office-int.net
tellmeservice.osi.office-int.net
Antlia-INT-MdmAdministrator.osi.office-int.net
eridanus-Int-Mdm.osi.office-int.net
Russet-INT-Mds.osi.office-int.net
macommunication.geneva.keyvault.fullvalue.omex.office-int.net
Aqua-INT-MdmAdministrator.osi.office-int.net
setup.office-int.com
Aqua-INT-MdmAdministrator.osi.office-int.net
*.graph.office-int.net
Carpo-INT-Mds.osi.office-int.net
*.osi.office-int.net
cluster.fullvalue.omex.office-int.net
*.osi.office-int.net
dataencryption.omex.office-int.net
hubble.officeapps.live-int.com
forms.office-int.com
Manatee-INT-Mds.osi.office-int.net
checkout.office-int.com
GriffinOsiPlatformTest-gcpcert.office-int.net
config.officeapps.live-int.com
GriffinOsiPlatformTest-gcpcert.office-int.net
pptcast-rps-int.osi.office-int.net
store.office-int.com
aurigasentryportal.office-int.net
tasman.osi.office-int.net
Asparagus-INT-Mds.osi.office-int.net
support.office-int.com
stores.office-int.com
diagnosticsgateway.omex.office-int.net
checkout.office-int.com
usershardextension-sti-int.osi.office-int.net
*.identity.office-int.net
Lynx-INT-Mds.osi.office-int.net
Snow-INT-Mds.osi.office-int.net
loopback.osi.office-int.net
patriarch.cosmosproxy.osi.office-int.net
mdoipdomainmgmt.office-int.net
uci.officeapps.live-int.com
Certificate
The complete raw certificate details for manage.osi.office-int.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHFzCCBP+gAwIBAgITMwCleJzv+FkQpteeRAAAAKV4nDANBgkqhkiG9w0BAQwF ADBZMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u MSowKAYDVQQDEyFNaWNyb3NvZnQgQXp1cmUgVExTIElzc3VpbmcgQ0EgMDIwHhcN MjMwNDA3MDk0MzA3WhcNMjQwNDAxMDk0MzA3WjBwMQswCQYDVQQGEwJVUzELMAkG A1UECBMCV0ExEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD b3Jwb3JhdGlvbjEiMCAGA1UEAxMZbWFuYWdlLm9zaS5vZmZpY2UtaW50Lm5ldDCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJuXukCO1HyjOQHqHUZUaNfG /V+vGzb0INWAspbtHzSI43jKjGKy1JWtDJVcU7kC9ehOqSjr+bRif6GdPQ4FGx0e 7RCHviQHHLDQTkAtkBpbIUx80Hoa8hYjcjDm9HapXA3+8NPcg8bRkAOvS9/epMbj diLVGpiphhJNGuuTU5knF8uUuTOmnSBm0Kw3odeRso30pfwDreT5QR1+OJAweVoH +5B4euJhegc/LWHsXYntF7PC9WAHHchTJYd9oa96KeiUi8dTtB001fYcBGm71wqE GZ6SWzB3XwY8Dc2ZywtoEgaaaxZ9zbgNwtK9vEQaj6TE8D7XUe5GqqdrryU7jrUC AwEAAaOCAr8wggK7MBMGCisGAQQB1nkCBAMBAf8EAgUAMCcGCSsGAQQBgjcVCgQa MBgwCgYIKwYBBQUHAwIwCgYIKwYBBQUHAwEwPAYJKwYBBAGCNxUHBC8wLQYlKwYB BAGCNxUIh73XG4Hn60aCgZ0ujtAMh/DaHV2ChOVpgvOnPgIBZAIBJTCBrgYIKwYB BQUHAQEEgaEwgZ4wbQYIKwYBBQUHMAKGYWh0dHA6Ly93d3cubWljcm9zb2Z0LmNv bS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQXp1cmUlMjBUTFMlMjBJc3N1aW5n JTIwQ0ElMjAwMiUyMC0lMjB4c2lnbi5jcnQwLQYIKwYBBQUHMAGGIWh0dHA6Ly9v bmVvY3NwLm1pY3Jvc29mdC5jb20vb2NzcDAdBgNVHQ4EFgQUjVpAHHvIbipFx9xE EEeQY6Y6RxcwDgYDVR0PAQH/BAQDAgSwMEEGA1UdEQQ6MDiCGW1hbmFnZS5vc2ku b2ZmaWNlLWludC5uZXSCGyoubWFuYWdlLm9zaS5vZmZpY2UtaW50Lm5ldDAMBgNV HRMBAf8EAjAAMGQGA1UdHwRdMFswWaBXoFWGU2h0dHA6Ly93d3cubWljcm9zb2Z0 LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMEF6dXJlJTIwVExTJTIwSXNzdWlu ZyUyMENBJTIwMDIuY3JsMGYGA1UdIARfMF0wUQYMKwYBBAGCN0yDfQEBMEEwPwYI KwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9S ZXBvc2l0b3J5Lmh0bTAIBgZngQwBAgIwHwYDVR0jBBgwFoAUAKuR/CFiJpeaqHkb YUGQYKliZ/0wHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMA0GCSqGSIb3 DQEBDAUAA4ICAQCX0/vFePppYFyY+r0GOGuhv1OaYQ+2F2VozAgMriblpbP632u3 Q5kktXPWWf2qV7rNd6ZilzzVJAhfUsbGLsZbT0YCyM760u2IGavSxd3Z1HI27kdP gYtzuUsBP14gZyPypRvhw0mxf7ZyMN4hoLQrvBixsFydNnvEqAdvAcVlEcEnq927 VzZbwdp3zw+n4m/ybZgEN65SMzw9QOSeyRSDYheTQiZ+6CyFF97bEu8k6gzJrcck 9/VWqKZXFAkSmxQh+ouwwbc1TpnD8jbeEHnSgDnPUN2/SjN3NZOmN15NcHuva9nb SIT4qnZLPLtWr0zKnfGrKoMPn5lymXxfTa4+akFRrPANCQOXoNA5tzVYjeNFD4gd KGk/yXiz0LUw6HNPzrmTeGJN8j5YNxoPVgaO7/XdHwoHk21c2lXuXnPiJ8EO3Wpv /xEglRDgIJkVgITEY7JLGFf9G5c1QFQhodseD+EB5+66voGQjZkh52u/aIT/+B4+ +VSq899oAJ+GPpQ4szdkobhwul36xHYS9gS7ALf1zCqWy0/KJclpDpgU/m5XUu9P qFt3om6OgH4fqQm9Dfgd0/WB1XPkPjVp1Ab3xo+hjRY87L7t8ZKKYdk1BW33QN/M lKvPQNJlmkTJTJ3QqVF39SuoD3GH9BWfMyRfByjkYuhSdwLUg9wM7FxNQg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5e6QI7UfKM5AeodRlRo 18b9X68bNvQg1YCylu0fNIjjeMqMYrLUla0MlVxTuQL16E6pKOv5tGJ/oZ09DgUb HR7tEIe+JAccsNBOQC2QGlshTHzQehryFiNyMOb0dqlcDf7w09yDxtGQA69L396k xuN2ItUamKmGEk0a65NTmScXy5S5M6adIGbQrDeh15GyjfSl/AOt5PlBHX44kDB5 Wgf7kHh64mF6Bz8tYexdie0Xs8L1YAcdyFMlh32hr3op6JSLx1O0HTTV9hwEabvX CoQZnpJbMHdfBjwNzZnLC2gSBpprFn3NuA3C0r28RBqPpMTwPtdR7kaqp2uvJTuO tQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1137394312037828711230003811513861479896283292 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-07 09:43:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 09:43:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'manage.osi.office-int.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19641756912014985578036055837620036675160959733073541763996634457591674735656308007078455889517935792132799530941057365824952752469795369122806497879141565747899506291435875405548361493352712122689400673500420988054656101955899590923250717320701773297319861967039614105654050567084777960223968506141918392719000546420510040772169740335300467732939667639356111000545738573754448726425673434402366220424030497964835532989205776510252823464870371269529787789629151605251640493130749445966421620886491969357753952349559375549635395884415241309670630294214315397010200995465550202415404004852403064393712521368022921481909 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 37 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8d5a401c7bc86e2a45c7dc4410479063a63a4717 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage.osi.office-int.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manage.osi.office-int.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 00ab91fc216226979aa8791b61419060a96267fd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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