educdn.onenote.net
Issued by Microsoft IT TLS CA 2
About this certificate
This digital certificate with serial number 1c:00:13:0f:d8:d6:ec:d2:e1:77:7f:82:bb:00:00:00:13:0f:d8 was issued on by Microsoft Corporation.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Certificate Subject
CN=educdn.onenote.net
Microsoft Corporation
Organization:
Microsoft Corporation
Organization unit: Microsoft IT
Organization unit: Microsoft IT
State / Province:
Washington
Locality: Redmond
Country: US
Locality: Redmond
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 1c:00:13:0f:d8:d6:ec:d2:e1:77:7f:82:bb:00:00:00:13:0f:d8Serial Number (int): 624427351988144202777026286589623116210835416
Serial Number lenght: 149 bits, 19 octets
SubjectKeyId: 5a:1c:6a:b9:04:df:18:ab:4e:c5:e3:b5:f2:ae:7b:b0:de:de:31:39
AuthorityKeyId: 91:9e:3b:44:6c:3d:57:9c:42:77:2a:34:d7:4f:d1:cc:4a:97:2c:da
Fingerprint (sha1): 75:88:3f:a0:b7:7b:47:95:a2:b1:b2:5e:e9:80:dd:e2:aa:05:c3:cd
Fingerprint (sha256): 0b:92:aa:3c:97:f1:4d:16:93:e3:85:aa:72:92:eb:c8:61:08:3d:dd:69:db:5e:69:53:8a:5f:58:e6:3c:ea:a0
Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%202.crt
Revocation information
OCSP Server: http://ocsp.msocsp.comCRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl
Check the revocation status for certificate educdn.onenote.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for educdn.onenote.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
educdn.onenote.net
Other certificates including the domain name onenote.net
(limited to 100 certificates)
site.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
site.edog.onenote.com
educdn.onenote.net
cdn.onenote.net
cdn.onenote.net
reverseproxy.edog.onenote.com
onenote.com
cdn.onenote.net
site.edog.onenote.com
cdn.onenote.net
cdn.onenote.net
reverseproxy.edog.onenote.com
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
site-cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
educdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
onenote.com
reverseproxy.edog.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
site.edog.onenote.com
site-cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
site.edog.onenote.com
Akamai-Rotation-Reminder-For-cdn.onenote.net
site.edog.onenote.com
site-cdn.onenote.net
sni2426egl.wpc.edgecastcdn.net
site-cdn.onenote.net
site.edog.onenote.com
reverseproxy.onenote.com
site-cdn.onenote.net
onenote.com
reverseproxy.onenote.com
onenote.com
site-cdn.onenote.net
site.edog.onenote.com
reverseproxy.edog.onenote.com
site-cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
edu.cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
Akamai-Rotation-Reminder-For-cdn.onenote.net
site.edog.onenote.com
site-cdn.onenote.net
onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
site.edog.onenote.com
educdn.onenote.net
cdn.onenote.net
cdn.onenote.net
reverseproxy.edog.onenote.com
onenote.com
cdn.onenote.net
site.edog.onenote.com
cdn.onenote.net
cdn.onenote.net
reverseproxy.edog.onenote.com
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
site-cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
educdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
onenote.com
reverseproxy.edog.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
site.edog.onenote.com
site-cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
site.edog.onenote.com
Akamai-Rotation-Reminder-For-cdn.onenote.net
site.edog.onenote.com
site-cdn.onenote.net
sni2426egl.wpc.edgecastcdn.net
site-cdn.onenote.net
site.edog.onenote.com
reverseproxy.onenote.com
site-cdn.onenote.net
onenote.com
reverseproxy.onenote.com
onenote.com
site-cdn.onenote.net
site.edog.onenote.com
reverseproxy.edog.onenote.com
site-cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
edu.cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
Akamai-Rotation-Reminder-For-cdn.onenote.net
site.edog.onenote.com
site-cdn.onenote.net
onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
Certificate
The complete raw certificate details for educdn.onenote.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGyzCCBLOgAwIBAgITHAATD9jW7NLhd3+CuwAAABMP2DANBgkqhkiG9w0BAQsF ADCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UE CxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDIw HhcNMjAwMzAyMjIwNTU3WhcNMjIwMzAyMjIwNTU3WjAdMRswGQYDVQQDExJlZHVj ZG4ub25lbm90ZS5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg eFE7GX8v4tAeZN3beSZ++7rvMDudAUGozK8aPKG2PRXHnyYJRJY/y1geFNkWBrDl hsegNfvHxB4AtdNoYuj4KpI2FyXufKJ7ibsYZWgKO/4eT0ccFQqIq6zIJ7vmWBTr qWXqfC7PSYmnQvOdpTTBKb++gcpRtVQSmS5HQ34tFTIskn7yR/KaL15zd+52Jqrl /aAaOd4Xx4FDRrWjrskQybujWa4nLxxmfyTTZE9HO4z71lAz1G1KDoKkIsjtwuba lFCXh6bxJ8HVXMraUNypxNOPRWPztLOECWNuvfLzio3yEJ4NQgbJ8S9LHMKQ6UT8 olbdNo4XJDrwzSvGeaHZAgMBAAGjggKTMIICjzATBgorBgEEAdZ5AgQDAQH/BAIF ADAnBgkrBgEEAYI3FQoEGjAYMAoGCCsGAQUFBwMCMAoGCCsGAQUFBwMBMD4GCSsG AQQBgjcVBwQxMC8GJysGAQQBgjcVCIfahnWD7tkBgsmFG4G1nmGF9OtggV2E0t9C gueTegIBZAIBHTCBhQYIKwYBBQUHAQEEeTB3MFEGCCsGAQUFBzAChkVodHRwOi8v d3d3Lm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9NaWNyb3NvZnQlMjBJVCUyMFRM UyUyMENBJTIwMi5jcnQwIgYIKwYBBQUHMAGGFmh0dHA6Ly9vY3NwLm1zb2NzcC5j b20wHQYDVR0OBBYEFFocarkE3xirTsXjtfKue7De3jE5MAsGA1UdDwQEAwIEsDAd BgNVHREEFjAUghJlZHVjZG4ub25lbm90ZS5uZXQwgawGA1UdHwSBpDCBoTCBnqCB m6CBmIZLaHR0cDovL21zY3JsLm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9jcmwv TWljcm9zb2Z0JTIwSVQlMjBUTFMlMjBDQSUyMDIuY3JshklodHRwOi8vY3JsLm1p Y3Jvc29mdC5jb20vcGtpL21zY29ycC9jcmwvTWljcm9zb2Z0JTIwSVQlMjBUTFMl MjBDQSUyMDIuY3JsME0GA1UdIARGMEQwQgYJKwYBBAGCNyoBMDUwMwYIKwYBBQUH AgEWJ2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NwczAfBgNV HSMEGDAWgBSRnjtEbD1XnEJ3KjTXT9HMSpcs2jAdBgNVHSUEFjAUBggrBgEFBQcD AgYIKwYBBQUHAwEwDQYJKoZIhvcNAQELBQADggIBAI0jVL9YPMYJ0ZlTGhJmOAUz CGhYhP1P18VA4exqjpfYm8kvYNdrnJqyYb9zNTj4Y4FrqVNRaegRmTjQM9dwDr2w pKJFX6U1p9ZDO4kgyeFyBKvwCJG8qMF6Gv1fooWNUg1isFQqquT1TIIOeenyAXt/ mFV/FjEwlOsf+3kUHmVpyn0ztXdJ/+4ayHoh+uHmKbxFUEkROp98jMwph6TCciHz RF9ipjil6x76BnM9s+FWfvekRgvYDzIWiSdDaNuEsoYCZQtWXl66/LDBceZTbGoA ooyDUyuTZtakzupbKCbGxVyM4XAIZb1Ui8Jo8X/kLZUgNrNK2+q9oQ4BXeu7Gywq yaN9h7G62CdQHd4/PkR+Z4pNBGv3Rzb+0N6q7LlmoWgZvMQxcaDftYdWxfWmxH/0 yDLWnGh9+7fLVEzVzp0n3/xBjQeBkdzVbtMxCCtudQL755K4ZhxUy28T6BQ5+IAK z1fkbFn+t6yZ675szLr23M9Y3bK4MUa3ULTLz2nIby9IxN/pGthq9WHoGDppIyOn bXBTKEYKlwv6dAkj6p0dcYdXYw435M+4fwNyPEdB20cqJT8fBmBKPXjxsv4neipj 5ypz8ZQMdmHaXVxLi4C4k7E/i8elSHbCn1SUHUtScuNuXuVEEexqLd7RoeOgUEc7 ykwH+PmsyYE34dajKiJf -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HhROxl/L+LQHmTd23km fvu67zA7nQFBqMyvGjyhtj0Vx58mCUSWP8tYHhTZFgaw5YbHoDX7x8QeALXTaGLo +CqSNhcl7nyie4m7GGVoCjv+Hk9HHBUKiKusyCe75lgU66ll6nwuz0mJp0LznaU0 wSm/voHKUbVUEpkuR0N+LRUyLJJ+8kfymi9ec3fudiaq5f2gGjneF8eBQ0a1o67J EMm7o1muJy8cZn8k02RPRzuM+9ZQM9RtSg6CpCLI7cLm2pRQl4em8SfB1VzK2lDc qcTTj0Vj87SzhAljbr3y84qN8hCeDUIGyfEvSxzCkOlE/KJW3TaOFyQ68M0rxnmh 2QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 624427351988144202777026286589623116210835416 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 22:05:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-02 22:05:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'educdn.onenote.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28336710988275381752262653914919783726092282226487422944425742768972217424122996744431539929047110539965520231846164558826366459549358128660659716150963106528843287971657252022815288217981439810173396617253467699414662212089840060366988084797323131929559588613041544148317889459321682598895428080782088667749886005506030186388346666992278007278209914706002888203193615017400112127336028031021030515237934775836987509092825669372256922146910921964714905154704455855932738032960437825737408135278447046261132855792002717337260859392283253604307524649899851309207631632104251627405434312757599221050465759350274465047001 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%202.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5a1c6ab904df18ab4ec5e3b5f2ae7bb0dede3139 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educdn.onenote.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 919e3b446c3d579c42772a34d74fd1cc4a972cda . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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