store.officeppe.com

Issued by Microsoft IT TLS CA 5

About this certificate

This digital certificate with serial number 2d:00:05:ba:75:2b:40:c1:af:7f:4d:78:d8:00:00:00:05:ba:75 was issued on by Microsoft Corporation.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=store.officeppe.com

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:00:05:ba:75:2b:40:c1:af:7f:4d:78:d8:00:00:00:05:ba:75
Serial Number (int): 1003535483190495868662479850136716797446306421
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 38:98:cd:9c:d1:c8:ca:e8:7b:80:52:0a:28:28:cf:f6:79:64:2e:87
AuthorityKeyId: 08:fe:25:9f:74:ea:87:04:c2:bc:bb:8e:a8:38:5f:33:c6:d1:6c:65

Fingerprint (sha1): e7:db:9b:df:c9:71:ad:96:43:c9:3a:25:24:bd:f0:75:c9:dc:9e:6c
Fingerprint (sha256): 0b:86:c7:47:64:be:97:77:67:83:1e:94:6b:b7:9c:9a:70:f2:07:d5:57:79:53:cd:5a:1c:4c:d3:17:67:e7:3b

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%205.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl

Check the revocation status for certificate store.officeppe.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for store.officeppe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

store.officeppe.com
*.officeapps.live.net
officeapps.live.net
*.edog.office365.com
*.edog.officeapps.live.com
edog.office365.com
*.officeppe.com
*.store.officeppe.com
*.edog.osi.office.net
*.osi.officeppe.net
*.canaryretailer.osi.officeppe.net
*.omexinventorylumber.osi.officeppe.net
*.omexdatastore.osi.officeppe.net
*.orgidentitlement.osi.officeppe.net
*.omexentitlementservice.osi.officeppe.net
*.supplychain.osi.officeppe.net
*.verificationservice.osi.officeppe.net
*.retailer.osi.officeppe.net
*.omexentitlementservice.edog.officeapps.live.com
*.supplychain.edog.officeapps.live.com
*.verificationservice.edog.officeapps.live.com

Other certificates including the domain name officeppe.com

(limited to 100 certificates)
portfolios.officeppe.com
sway.officeppe.com
trustportal.officeppe.com
project.officeppe.com
officeapps.live.com
vanquishppe.securitysignals-siphonclient.officeppe.com
cisurvey.officeppe.com
vanquishppe.securitysignals-siphonclient.officeppe.com
shell.suite.officeppe.com
cert00016-azurecdn.akamaized.net
status.officeppe.com
c.msn-int.com
vanquishppe.securitysignals.tracegenevaconsumer.officeppe.com
manage.officeppe.com
*.lifecycle.officeppe.com
uci.edog.officeapps.live.com
redemptionservice.setup.officeppe.com
secure06.stage.lithium.com
support.officeppe.com
vanquishppe.securitysignals.tracegenevaconsumer.officeppe.com
test.augloop.svc.cloud-dev.microsoft
manage.officeppe.com
idsapi-edog-s2s.store.officeppe.com
*.lifecycle.officeppe.com
portal.officeppe.com
cisurvey.officeppe.com
portal.azure
mock.m365admin.officeppe.com
cdn.forms.office.net
m365rca.officeppe.com
cert00016-azurecdn.akamaized.net
cert00016-azurecdn.akamaized.net
mysmallbusiness.officeppe.com
pubsub.augloop-test.officeppe.com
pubsub.augloop-test.officeppe.com
secure06.stage.lithium.com
pubsub.augloop-int.officeppe.com
int.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
support.officeppe.com
augloop-test.officeppe.com
c.msn-int.com
uci.edog.officeapps.live.com
portfolios.officeppe.com
test.augloop.svc.cloud-dev.microsoft
augloop-test.officeppe.com
webjobs.servicetrust.officeppe.com
kevlar-ssl.augloop-dogfood.officeppe.com
augloop-test.officeppe.com
cisurvey.officeppe.com
sway.officeppe.com
protection.officeppe.com
odc.edog.officeapps.live.com
api.augloop-tools.officeppe.com
manage.officeppe.com
store.officeppe.com
vanquishppe.securitysignals.tracegenevaconsumer.officeppe.com
status.office365.com
manage.officeppe.com
connectivity.officeppe.com
webjobs.servicetrust.officeppe.com
portfolios.officeppe.com
store.officeppe.com
offlineconsumer.suite.officeppe.com
portal.azure
status.office365.com
cisurvey.officeppe.com
sway.officeppe.com
portal.officeppe.com
bcqr.officeppe.com
augloop-test.officeppe.com
setup.officeppe.com
cisurvey.officeppe.com
portal.azure
cert00016-azurecdn.akamaized.net
appamangement-ppe.officeppe.com
test.augloop.svc.cloud.dev.microsoft
localization.checkout.office.net
cisurvey.officeppe.com
augloop-test.officeppe.com
cert00016-azurecdn.akamaized.net
dragongate.officeppe.com
messaging.officeppe.com
uci.edog.officeapps.live.com
api.servicetrust.officeppe.com
cisurvey.officeppe.com
msn.co
augloop-int.officeppe.com
setup.officeppe.com
sway.officeppe.com
augloop-test.officeppe.com
pubsub.augloop-dogfood.officeppe.com
ifttt.edog.office.com
dogfood.augloop.svc.cloud.microsoft
uci.edog.officeapps.live.com
augloop-int.officeppe.com
stores.officeppe.com
cisurvey.officeppe.com
portfolios.officeppe.com
endpoints.officeppe.com

Certificate

The complete raw certificate details for store.officeppe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOu1xxr9aC6Sd7HQYoVE
GgxqzIR9RFl3ymKaMbAX8Vyl/2sL1EexLCofUROcXy5UPI8VrhcA2W7umhXNOaE5
iGYCdJVJkPpBMn2Cgb9+fZ6hnGvNZfj1ofS6y7hnat8s6Dkl/rhHbalRUXqq51zk
Q5PToHC5wpcLwTbooF/k+b+6HrKB914meoB1nQPBX/nNKuWPH0HhnfR7Wf1DAHzj
xIXBLHQs7UYnXFbY33uEHMH7v5BAK//4C4y9LexcxFwmaZoQVMVJ7EBgdYrxoSfM
NYmWndV8m7hLdIk9rwaz5QUBb6SF3wyOahUTA9QlPXjc8nYfm0sY1r2RqCkBVbdC
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1003535483190495868662479850136716797446306421
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-25 16:43:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-25 16:43:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'store.officeppe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19304455322103230336683850467837384799753669954334221620127715287333474173626105299301143789040640317009622669034751520470553491875446377448589305695137318719562221058304597681144915394079354761557635243254930999449047623008317953817192381646764216682154981080128701742881992543345522511941653826680444927219654749476579390726482769394447830733189125269079377357218822902596747998009461889639056559044255887332039249416643872338103797537475382549467325409768280554725379316671046294540660528070088236300043645138076267858823567907579283525545531299810495372319485035247290936419940022030012609295125747590454375301759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%205.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3898cd9cd1c8cae87b80520a2828cff679642e87
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (660 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officeapps.live.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officeapps.live.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edog.office365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edog.officeapps.live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edog.office365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.store.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edog.osi.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osi.officeppe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canaryretailer.osi.officeppe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omexinventorylumber.osi.officeppe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omexdatastore.osi.officeppe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orgidentitlement.osi.officeppe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omexentitlementservice.osi.officeppe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supplychain.osi.officeppe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verificationservice.osi.officeppe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retailer.osi.officeppe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omexentitlementservice.edog.officeapps.live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supplychain.edog.officeapps.live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verificationservice.edog.officeapps.live.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 08fe259f74ea8704c2bcbb8ea8385f33c6d16c65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00071f36a0062d10d35b4876b3ed80024fc41df1bc76ca4fa1d93366a3e31599a88905c46b0098215010faa85fa08c943772b87e5465103e39f1f01a8e2e13edf4114ac906c349c936718d50a004ae660c72cd1226acdaed982b65a985c737537fc2c989c1ef36b9f3369f68170146f7328688232bcc9d9ab86ecdc778afc41ba10f1cee404cb7908a2b85072ebbc489fddfbd5956763d2a8540e1d85eb297bf1d3c61a5d4736842ab2e933bb8a6d6bffe9d6ff88da496f93ebd0db48090c2acd4193ddd4f84d9528dd232054fbfe22a79fd8e349106497a7c1eaf082d492038eb76e6ddf4221d10c8e743510a8676fce8becbc190d9d12825f1834e9e8242374241c4391f8cea974046d10dba43e47bb16f30fc25fe56c92ece88041bb259f24c1847f471b5855be6399039cd58e370e5ee21ef9a051310fca4a55a890877a1abc3cd890f8ca8abe43a92a81baf7af5faaeb34586a49e5be3286cecca79c30fd79eb2000faa9186c6d931391894ea400cfdf90347312e1087ee4a071637464d6c85a77bbd3971ce3fcb698414a519f1dc8a9a83923bb2d5e6d2a4a284bc31ec552e8e307fd579dd16030cf98f785a39fc5794e9cd183a1164a311b6070aaa3921c6f6dff31813bd7c853577bd93735fcb0a7b85c16dd37028db808ff6e41f5aa8ed2f432596a758d3be4d876e2d63d882cd004816b0ce801f04720f1c17035e69