*.msedge.net
- Microsoft Corporation -
Issued by Microsoft Azure RSA TLS Issuing CA 08
About this certificate
This digital certificate with serial number 33:00:05:21:b1:c9:46:36:67:47:ae:c6:ac:00:00:00:05:21:b1 was issued on by Microsoft Corporation.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Microsoft Corporation
Organization:
Microsoft Corporation
State / Province:
WA
Locality: Redmond
Country: US
Locality: Redmond
Country: US
Microsoft Corporation
Organization:
Microsoft Corporation
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 33:00:05:21:b1:c9:46:36:67:47:ae:c6:ac:00:00:00:05:21:b1Serial Number (int): 1137339751324539116912285630954989782663766449
Serial Number lenght: 150 bits, 19 octets
SubjectKeyId: 2f:bc:03:cd:51:38:f0:44:b2:7d:57:c3:22:a6:fd:b7:95:7e:69:68
AuthorityKeyId: f6:7e:2f:bd:80:a3:4a:b2:70:5b:eb:df:9a:1f:d8:ed:ca:61:80:07
Fingerprint (sha1): 49:23:22:77:00:51:62:05:f9:5d:65:d0:8f:ff:1a:47:c3:de:0a:26
Fingerprint (sha256): 0b:c2:e2:51:86:41:20:37:72:85:dc:c0:dc:61:84:3f:4b:ec:bc:ec:8d:32:ae:fd:3f:ad:53:07:78:9b:8e:2b
Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt
Revocation information
OCSP Server: http://oneocsp.microsoft.com/ocspCRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl
Check the revocation status for certificate *.msedge.net
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.msedge.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
12 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
a-msedge.net
*.a-msedge.net
b-msedge.net
*.b-msedge.net
c-msedge.net
*.c-msedge.net
dc-msedge.net
*.dc-msedge.net
*.lbas.msedge.net
*.test.msedge.net
*.msedge.net
*.azp.footprintdns.com
*.fp.measure.office.com
*.footprintdns.com
*.perf.msedge.net
*.clo.footprintdns.com
*.nrb.footprintdns.com
*.any.footprintdns.com
*.a-msedge.net
b-msedge.net
*.b-msedge.net
c-msedge.net
*.c-msedge.net
dc-msedge.net
*.dc-msedge.net
*.lbas.msedge.net
*.test.msedge.net
*.msedge.net
*.azp.footprintdns.com
*.fp.measure.office.com
*.footprintdns.com
*.perf.msedge.net
*.clo.footprintdns.com
*.nrb.footprintdns.com
*.any.footprintdns.com
Other certificates including the domain name msedge.net
(limited to 100 certificates)
compliantonnettesting.msedge.net
*.clo.footprintdns.com
*.msedge.net
*.msedge.net
*.msedge.net
complianttesting.msedge.net
onnettesting.msedge.net
compliantonnettesting.msedge.net
compliantonnettesting.msedge.net
cacti.msedge.net
*.msedge.net
*.msedge.net
compliantonnettesting.msedge.net
*.msedge.net
*.msedge.net
compliantonnettesting.msedge.net
*.msedge.net
complianttesting.msedge.net
*.clo.footprintdns.com
*.msedge.net
*.msedge.net
*.clo.footprintdns.com
onnettesting.msedge.net
*.msedge.net
complianttesting.msedge.net
onnettesting.msedge.net
*.msedge.net
*.clo.footprintdns.com
onnettesting.msedge.net
*.msedge.net
*.msedge.net
complianttesting.msedge.net
*.msedge.net
*.msedge.net
*.msedge.net
onnettesting.msedge.net
*.msedge.net
*.msedge.net
ztna1p-ring.msedge.net
*.msedge.net
*.clo.footprintdns.com
onnettesting.msedge.net
chinaringtesting.msedge.net
complianttesting.msedge.net
onnettesting.msedge.net
complianttesting.msedge.net
complianttesting.msedge.net
complianttesting.msedge.net
*.clo.footprintdns.com
*.msedge.net
onnettesting.msedge.net
onnettesting.msedge.net
*.msedge.net
compliantonnettesting.msedge.net
*.clo.footprintdns.com
*.msedge.net
*.msedge.net
*.msedge.net
complianttesting.msedge.net
onnettesting.msedge.net
compliantonnettesting.msedge.net
compliantonnettesting.msedge.net
cacti.msedge.net
*.msedge.net
*.msedge.net
compliantonnettesting.msedge.net
*.msedge.net
*.msedge.net
compliantonnettesting.msedge.net
*.msedge.net
complianttesting.msedge.net
*.clo.footprintdns.com
*.msedge.net
*.msedge.net
*.clo.footprintdns.com
onnettesting.msedge.net
*.msedge.net
complianttesting.msedge.net
onnettesting.msedge.net
*.msedge.net
*.clo.footprintdns.com
onnettesting.msedge.net
*.msedge.net
*.msedge.net
complianttesting.msedge.net
*.msedge.net
*.msedge.net
*.msedge.net
onnettesting.msedge.net
*.msedge.net
*.msedge.net
ztna1p-ring.msedge.net
*.msedge.net
*.clo.footprintdns.com
onnettesting.msedge.net
chinaringtesting.msedge.net
complianttesting.msedge.net
onnettesting.msedge.net
complianttesting.msedge.net
complianttesting.msedge.net
complianttesting.msedge.net
*.clo.footprintdns.com
*.msedge.net
onnettesting.msedge.net
onnettesting.msedge.net
*.msedge.net
compliantonnettesting.msedge.net
Certificate
The complete raw certificate details for *.msedge.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJojCCB4qgAwIBAgITMwAFIbHJRjZnR67GrAAAAAUhsTANBgkqhkiG9w0BAQwF ADBdMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u MS4wLAYDVQQDEyVNaWNyb3NvZnQgQXp1cmUgUlNBIFRMUyBJc3N1aW5nIENBIDA4 MB4XDTIzMTExMzIxNDcyM1oXDTI0MTEwNzIxNDcyM1owYzELMAkGA1UEBhMCVVMx CzAJBgNVBAgTAldBMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv ZnQgQ29ycG9yYXRpb24xFTATBgNVBAMMDCoubXNlZGdlLm5ldDCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAOY3GAMq94Ir/KWnsSI5LyjKM/qmFzXiN5U7 ESnd/ze/3YKCQ/ICgXOkuNRWJ16kgcZLKMwFJVpK9jVYqtC9iWuXhm2nxzE+rDjq LChQx5z3eIRIPS27lVzboGY1QxURWSubXoViZWqGbQDwkrzLWawTxFprAv2BxxOu MTTfYr2YG5h4MLNyVzoVBo9TwCqQI+30aoz7Ix40ZSZKn6GA4eXfox1D6/3KfpJp Dbp4XeUN2fekE3Qzh7X/S5Voi02/Qspvjyk+q0THzBk+Tw3NJCQ6lrJTvb4zC1gJ FkB7+2Im8Qs/bguTRIVyu7BBqBjv6Mbw0GqNqo5FS7hHIMYIz/ECAwEAAaOCBVMw ggVPMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdwB2/4g/Crb7lVHCYcz1h7o0 tKTNuyncaEIKn+ZnTFo6dAAAAYvKsH7hAAAEAwBIMEYCIQDOiEYrVF+vmjJmFZq0 AJR8Xy6BeWeegovkxQ7yFYZcWgIhAOUFgNAjPz1ZAuUXdjRjTUi5YP/zHDvFonDp 4sbSW5caAHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGLyrB/ wwAABAMARjBEAiAmJClYiLa54PjlcxE5cPfENGSQw9z/Xn7BX8Uv3RWLTwIgOG3i 06aS52zBts0F6NgC+hom6PL/50hI+SkoXq4L6vUAdQBVgdTCFpA2AUrqC5tXPFPw wOQ4eHAlCBcvo6odBxPTDAAAAYvKsIATAAAEAwBGMEQCIB2IRtieJqf3/ugdqC/J l76vV7YQFlw5R42XioiSTx+6AiAc4JmxZvgerxk1Y3ty9PpThX9yquPoSebqCD8y G05MmDAnBgkrBgEEAYI3FQoEGjAYMAoGCCsGAQUFBwMCMAoGCCsGAQUFBwMBMDwG CSsGAQQBgjcVBwQvMC0GJSsGAQQBgjcVCIe91xuB5+tGgoGdLo7QDIfw2h1dgoTl aYLzpz4CAWQCASYwgbQGCCsGAQUFBwEBBIGnMIGkMHMGCCsGAQUFBzAChmdodHRw Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMEF6 dXJlJTIwUlNBJTIwVExTJTIwSXNzdWluZyUyMENBJTIwMDglMjAtJTIweHNpZ24u Y3J0MC0GCCsGAQUFBzABhiFodHRwOi8vb25lb2NzcC5taWNyb3NvZnQuY29tL29j c3AwHQYDVR0OBBYEFC+8A81ROPBEsn1XwyKm/beVfmloMA4GA1UdDwEB/wQEAwIF oDCCAVsGA1UdEQSCAVIwggFOggxhLW1zZWRnZS5uZXSCDiouYS1tc2VkZ2UubmV0 ggxiLW1zZWRnZS5uZXSCDiouYi1tc2VkZ2UubmV0ggxjLW1zZWRnZS5uZXSCDiou Yy1tc2VkZ2UubmV0gg1kYy1tc2VkZ2UubmV0gg8qLmRjLW1zZWRnZS5uZXSCESou bGJhcy5tc2VkZ2UubmV0ghEqLnRlc3QubXNlZGdlLm5ldIIMKi5tc2VkZ2UubmV0 ghYqLmF6cC5mb290cHJpbnRkbnMuY29tghcqLmZwLm1lYXN1cmUub2ZmaWNlLmNv bYISKi5mb290cHJpbnRkbnMuY29tghEqLnBlcmYubXNlZGdlLm5ldIIWKi5jbG8u Zm9vdHByaW50ZG5zLmNvbYIWKi5ucmIuZm9vdHByaW50ZG5zLmNvbYIWKi5hbnku Zm9vdHByaW50ZG5zLmNvbTAMBgNVHRMBAf8EAjAAMGoGA1UdHwRjMGEwX6BdoFuG WWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUy MEF6dXJlJTIwUlNBJTIwVExTJTIwSXNzdWluZyUyMENBJTIwMDguY3JsMGYGA1Ud IARfMF0wUQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cu bWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTAIBgZngQwB AgIwHwYDVR0jBBgwFoAU9n4vvYCjSrJwW+vfmh/Y7cphgAcwHQYDVR0lBBYwFAYI KwYBBQUHAwIGCCsGAQUFBwMBMA0GCSqGSIb3DQEBDAUAA4ICAQAoUS61W+9KedBG jvZaY0T2yspvtceQT8bqatS74prmwA2VBW2AtMUYWUMTq0K9At+8zYywg9XAdaLU +ITfXVJ1nWhtfUn1/CUuu06OTGtMHZ6y1vI2pqFquvRgtAQiENmrpEL3RUhqWCd8 YKtILaCPrfaoj5z56l5OY1zTg+MFUdQDLJh4coZ0hisD3yt5KigviKW2aZXmaJpn kQfePL8i+SSRFG6focHcNGTHHX3HLQq+g+qgvihTdGdCIW9Or8OU6qfRAWJdpWbX 642NZqXiASmY1EmkW+DbdsranvD0L2hFf3zfSBeW4Btei5B2GvESJK0q2EC4V3Kl Om0ExHk9Ai3eEnOray2nyOKsPhGlMN7wUa9lDXhfYcWw+kf2f0rwO+MfPooXajlD dqYg2FgAizJZPYnMVJ1lwHajtFPWJrsbVswwBdcYmZpKGx8IYMdXHUZEY0IAdJS1 2Buon9ouMVOFFUdYnWnq7kMiHw+/BAj/gx/Br7zvwxjytLfYXXVv/6cxDwkbrC9t kQ4rYFDZi0uso3YdtTdSYC6Tb6ErdXKsSWJ/F944P9fVPYtaSBNJUfSxiExYsgFH v/oRT7JYY5eaMchGqCYOn6QEio87G9CkxAuKmX7XD6PI64oqJ/ZQWYgjjcXhRxEy D01YPlaCt1e9UTBSWZUmxNHSsi3/RA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jcYAyr3giv8paexIjkv KMoz+qYXNeI3lTsRKd3/N7/dgoJD8gKBc6S41FYnXqSBxksozAUlWkr2NViq0L2J a5eGbafHMT6sOOosKFDHnPd4hEg9LbuVXNugZjVDFRFZK5tehWJlaoZtAPCSvMtZ rBPEWmsC/YHHE64xNN9ivZgbmHgws3JXOhUGj1PAKpAj7fRqjPsjHjRlJkqfoYDh 5d+jHUPr/cp+kmkNunhd5Q3Z96QTdDOHtf9LlWiLTb9Cym+PKT6rRMfMGT5PDc0k JDqWslO9vjMLWAkWQHv7YibxCz9uC5NEhXK7sEGoGO/oxvDQao2qjkVLuEcgxgjP 8QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1137339751324539116912285630954989782663766449 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 08' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 21:47:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-07 21:47:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.msedge.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29061977906710100116050853258572072818978501744851555731971266180490417397230688218694295950105648903273988114318653191438369389973202784694915298137298563350688193190641043581151290371586579398713002353637828951588616494736439668854279385640165092548861762437082006871368794156578499950721614419911060718729373391449355484790944669421306844370701629588066997606041122260598324766676602031492951179781831492023596384119950927732304042014428848851298447983464723431606221010046183793028026495142153754030909717258632694998154320037951748360332433432231217625221588820871913768156341167993485356856552692680023696003057 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2fbc03cd5138f044b27d57c322a6fdb7957e6968 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (338 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b-msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c-msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc-msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dc-msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lbas.msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azp.footprintdns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp.measure.office.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footprintdns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perf.msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clo.footprintdns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrb.footprintdns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.any.footprintdns.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f67e2fbd80a34ab2705bebdf9a1fd8edca618007 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 0028512eb55bef4a79d0468ef65a6344f6caca6fb5c7904fc6ea6ad4bbe29ae6c00d95056d80b4c518594313ab42bd02dfbccd8cb083d5c075a2d4f884df5d52759d686d7d49f5fc252ebb4e8e4c6b4c1d9eb2d6f236a6a16abaf460b4042210d9aba442f745486a58277c60ab482da08fadf6a88f9cf9ea5e4e635cd383e30551d4032c9878728674862b03df2b792a282f88a5b66995e6689a679107de3cbf22f92491146e9fa1c1dc3464c71d7dc72d0abe83eaa0be2853746742216f4eafc394eaa7d101625da566d7eb8d8d66a5e2012998d449a45be0db76cada9ef0f42f68457f7cdf481796e01b5e8b90761af11224ad2ad840b85772a53a6d04c4793d022dde1273ab6b2da7c8e2ac3e11a530def051af650d785f61c5b0fa47f67f4af03be31f3e8a176a394376a620d858008b32593d89cc549d65c076a3b453d626bb1b56cc3005d718999a4a1b1f0860c7571d46446342007494b5d81ba89fda2e3153851547589d69eaee43221f0fbf0408ff831fc1afbcefc318f2b4b7d85d756fffa7310f091bac2f6d910e2b6050d98b4baca3761db53752602e936fa12b7572ac49627f17de383fd7d53d8b5a48134951f4b1884c58b20147bffa114fb25863979a31c846a8260e9fa4048a8f3b1bd0a4c40b8a997ed70fa3c8eb8a2a27f6505988238dc5e14711320f4d583e5682b757bd513052599526c4d1d2b22dff44