cdn.onenote.net
- Microsoft Corporation -
Issued by Microsoft RSA TLS CA 01
About this certificate
This digital certificate with serial number 12:00:18:7f:d2:3a:be:26:b0:39:cf:b1:23:00:00:00:18:7f:d2 was issued on by Microsoft Corporation.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Microsoft Corporation
Organization:
Microsoft Corporation
Organization unit: Microsoft Corporation
Organization unit: Microsoft Corporation
State / Province:
WA
Locality: Redmond
Country: US
Locality: Redmond
Country: US
Microsoft Corporation
Organization:
Microsoft Corporation
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 12:00:18:7f:d2:3a:be:26:b0:39:cf:b1:23:00:00:00:18:7f:d2Serial Number (int): 401421750253886569128759541374761411053912018
Serial Number lenght: 149 bits, 19 octets
SubjectKeyId: 08:5b:f7:07:19:e4:0d:22:2e:5a:1c:4b:44:38:02:c0:08:ff:81:d8
AuthorityKeyId: b5:76:0c:30:11:ce:c7:92:42:4d:4c:c7:5c:2c:c8:a9:0c:e8:0b:64
Fingerprint (sha1): 59:68:e1:69:4b:25:da:a1:8c:98:51:fb:b5:ec:15:ad:b8:f6:58:d0
Fingerprint (sha256): 0c:27:80:2b:23:12:93:31:6a:bd:b9:2a:81:b5:33:f4:25:9d:2e:3c:62:68:40:be:74:ea:6b:fe:8b:b8:17:7e
Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt
Revocation information
OCSP Server: http://ocsp.msocsp.comCRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl
Check the revocation status for certificate cdn.onenote.net
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cdn.onenote.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cdn.onenote.net
onenote.com
*.onenote.com
*.edog.onenote.com
onenote.com
*.onenote.com
*.edog.onenote.com
Other certificates including the domain name onenote.net
(limited to 100 certificates)
site.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
site.edog.onenote.com
educdn.onenote.net
cdn.onenote.net
cdn.onenote.net
reverseproxy.edog.onenote.com
onenote.com
cdn.onenote.net
site.edog.onenote.com
cdn.onenote.net
cdn.onenote.net
reverseproxy.edog.onenote.com
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
site-cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
educdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
onenote.com
reverseproxy.edog.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
site.edog.onenote.com
site-cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
site.edog.onenote.com
Akamai-Rotation-Reminder-For-cdn.onenote.net
site.edog.onenote.com
site-cdn.onenote.net
sni2426egl.wpc.edgecastcdn.net
site-cdn.onenote.net
site.edog.onenote.com
reverseproxy.onenote.com
site-cdn.onenote.net
onenote.com
reverseproxy.onenote.com
onenote.com
site-cdn.onenote.net
reverseproxy.edog.onenote.com
site-cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
edu.cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
Akamai-Rotation-Reminder-For-cdn.onenote.net
site.edog.onenote.com
site-cdn.onenote.net
onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
site-cdn.onenote.net
reverseproxy.onenote.com
cdn.onenote.net
site.edog.onenote.com
educdn.onenote.net
cdn.onenote.net
cdn.onenote.net
reverseproxy.edog.onenote.com
onenote.com
cdn.onenote.net
site.edog.onenote.com
cdn.onenote.net
cdn.onenote.net
reverseproxy.edog.onenote.com
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
site-cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
educdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
onenote.com
reverseproxy.edog.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
site.edog.onenote.com
site-cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
site.edog.onenote.com
Akamai-Rotation-Reminder-For-cdn.onenote.net
site.edog.onenote.com
site-cdn.onenote.net
sni2426egl.wpc.edgecastcdn.net
site-cdn.onenote.net
site.edog.onenote.com
reverseproxy.onenote.com
site-cdn.onenote.net
onenote.com
reverseproxy.onenote.com
onenote.com
site-cdn.onenote.net
reverseproxy.edog.onenote.com
site-cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
edu.cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
Akamai-Rotation-Reminder-For-cdn.onenote.net
site.edog.onenote.com
site-cdn.onenote.net
onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
site-cdn.onenote.net
Certificate
The complete raw certificate details for cdn.onenote.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIpDCCBoygAwIBAgITEgAYf9I6viawOc+xIwAAABh/0jANBgkqhkiG9w0BAQsF ADBPMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u MSAwHgYDVQQDExdNaWNyb3NvZnQgUlNBIFRMUyBDQSAwMTAeFw0yMTA5MTUyMzI5 MDFaFw0yMjA5MTUyMzI5MDFaMIGGMQswCQYDVQQGEwJVUzELMAkGA1UECBMCV0Ex EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv bjEeMBwGA1UECxMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRgwFgYDVQQDEw9jZG4u b25lbm90ZS5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLa7Xl vylK43z1MdnocKdzWANzXRDWGlELXVQKHd4gJzu/hk8Z5HQLsS3Gwcnx4sLvpOTZ T7+AKGDrVTrttsDySc9uTJ8xhLr+jpvEq/8yNLfWKCX929zsCVpvz983HqnrBtKp HjqI78uLIb/gHx0/acF+FRNg9gsxz93ylHVuIWuFnWv9eZ3ifmMBDYhA1PtXIbb7 vlMw7+dz7z/inDzJkBv2ruqNWd+MqjFdLk5uSCDF8NIjhkbTuFfd7pbgQhDBnpUa N/IzVt+0Qie+qdFfRkyu6hoccd7Y9zzABU6YTtWgeeSkcbHMcYNgdSsfQbTs8Ayz qgrRt4ZvikkUI+BPAgMBAAGjggQ/MIIEOzCCAX4GCisGAQQB1nkCBAIEggFuBIIB agFoAHUAKXm+8J45OSHwVnOfY6V35b5XfZxgCvj5TV0mXCVdx4QAAAF769QF4AAA BAMARjBEAiBO477AFtzCRvP+BudpvlRMGcek021y/irxFS1L/T7CpAIgQFg0AKin OHRRkjBvo7KOCP8NvIpNw6TT4eq7GUHkHFQAdwBByMqx3yJGShDGoToJQodeTjGL GwPr60vHaPCQYpYG9gAAAXvr1ARLAAAEAwBIMEYCIQDsGbwLRQqP77Av725UQmlb EQRqJoAHlga72kZp0wyIxwIhAKJUrzxjnOzGJK/9zC3yOUBrIdgxOfN01JpBk1Uv wRjHAHYARqVV63X6kSAwtaKJafTzfREsQXS+/Um4havy/HD+bUcAAAF769QEFQAA BAMARzBFAiEAnDKRdr46u7T740/lqkX4fFMgymJ9oZXbO9mIfGHK6zICIB/DkUr5 HZ7C8vBU9R0LIiLwXKNZpQBjjichcFgtDJwuMCcGCSsGAQQBgjcVCgQaMBgwCgYI KwYBBQUHAwIwCgYIKwYBBQUHAwEwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUI h9qGdYPu2QGCyYUbgbWeYYX062CBXbn4EIaR0HgCAWQCASUwgYcGCCsGAQUFBwEB BHsweTBTBggrBgEFBQcwAoZHaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9t c2NvcnAvTWljcm9zb2Z0JTIwUlNBJTIwVExTJTIwQ0ElMjAwMS5jcnQwIgYIKwYB BQUHMAGGFmh0dHA6Ly9vY3NwLm1zb2NzcC5jb20wHQYDVR0OBBYEFAhb9wcZ5A0i LlocS0Q4AsAI/4HYMA4GA1UdDwEB/wQEAwIEsDBKBgNVHREEQzBBgg9jZG4ub25l bm90ZS5uZXSCC29uZW5vdGUuY29tgg0qLm9uZW5vdGUuY29tghIqLmVkb2cub25l bm90ZS5jb20wgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIZNaHR0cDovL21zY3JsLm1p Y3Jvc29mdC5jb20vcGtpL21zY29ycC9jcmwvTWljcm9zb2Z0JTIwUlNBJTIwVExT JTIwQ0ElMjAwMS5jcmyGS2h0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNj b3JwL2NybC9NaWNyb3NvZnQlMjBSU0ElMjBUTFMlMjBDQSUyMDAxLmNybDBXBgNV HSAEUDBOMEIGCSsGAQQBgjcqATA1MDMGCCsGAQUFBwIBFidodHRwOi8vd3d3Lm1p Y3Jvc29mdC5jb20vcGtpL21zY29ycC9jcHMwCAYGZ4EMAQICMB8GA1UdIwQYMBaA FLV2DDARzseSQk1Mx1wsyKkM6AtkMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF BQcDATANBgkqhkiG9w0BAQsFAAOCAgEABrWdrkhf2gR6J7sScnLb4tM9ClpGZDv5 m2a4kinsZKlb/AHmaPfmeQrE3ttNpuTnDDI1pBpoDFZqDuLoKEeX2s9/YhMFCXP/ PmW4xwtz4U8s1yeePWWRm7p+c4PJw55uQtVU6oGJoYLt8B4G/Jmoa2WqrkOsIX5E So1pLAPNCXt0cnwfhnu82UnYIjSKKx14ZfenPuipnhvHfDAj2yWGio3ynceikoL6 gHCkp6K48T17bEEzqTWG5l43to9DyHeTUJQpX5bKq47zla+A5v3gNeHnfHYbpHe1 bjE/XKFiMenx3uGt4s2xmdfYamUGwvigqN5i51XU9xl+aagRx2UgkPKVs/EFoVoP 8Mc8v1hLHrZPC6tRbG9I022QCTIHX/FsaVg4asg36zgu0Z5hQn0NPCb6AkR4phpj BzsZux30BYMGvf/RFeAOlUv4Is4dNkYwvjJoztUbFpnQWgoX9JuDR+BLFnXu1X+s zxfw5dzESEQz3HL5s5m3UUFkjCL7C1RnUqwDHuYfYOfcqKvABLI+75jiU99DV+QZ qJf5RLFKn5DttPdr24KKcgbvCHNog2ihDu7azIDIT8VZZYw4puICdW+qus4eW9HN oBIMvIrIt6T5mGaqJ84SO7M0QN3MqOkNWVhT7opviduWnIoZhUkebiBRs8f6vaRZ ZiwtYH4XS0w= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2u15b8pSuN89THZ6HCn c1gDc10Q1hpRC11UCh3eICc7v4ZPGeR0C7EtxsHJ8eLC76Tk2U+/gChg61U67bbA 8knPbkyfMYS6/o6bxKv/MjS31igl/dvc7Alab8/fNx6p6wbSqR46iO/LiyG/4B8d P2nBfhUTYPYLMc/d8pR1biFrhZ1r/Xmd4n5jAQ2IQNT7VyG2+75TMO/nc+8/4pw8 yZAb9q7qjVnfjKoxXS5ObkggxfDSI4ZG07hX3e6W4EIQwZ6VGjfyM1bftEInvqnR X0ZMruoaHHHe2Pc8wAVOmE7VoHnkpHGxzHGDYHUrH0G07PAMs6oK0beGb4pJFCPg TwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 401421750253886569128759541374761411053912018 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft RSA TLS CA 01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-15 23:29:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-15 23:29:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.onenote.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25679489953446221046109841101541064635733944866839353206501724838721935222478469328016840358736754414894850630169364484363788329304783187108539434957066285083668599676386488648302179995396010092906812291979091300440868652914064057331173632967707835324044679653790603824046727668826855956771623074725407090560369461323407851303109907366238869329971323394943203609558322411292270136519994392560678374592689471237679536099853554507062443223384945973369190474700440475276016786815170486490897795552333863777064272195169836951238882961577266710693344398481692074995836794416705212656245500239880603603929161692675741835343 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.949264.12871800 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 37 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 085bf70719e40d222e5a1c4b443802c008ff81d8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.onenote.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onenote.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onenote.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edog.onenote.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b5760c3011cec792424d4cc75c2cc8a90ce80b64 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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