msn.co

Issued by Microsoft RSA TLS CA 01

About this certificate

This digital certificate with serial number 12:00:12:56:87:35:b8:89:4e:79:02:34:06:00:00:00:12:56:87 was issued on by Microsoft Corporation.

With 134 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=msn.co

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:00:12:56:87:35:b8:89:4e:79:02:34:06:00:00:00:12:56:87
Serial Number (int): 401419653671813095030162238841029489140586119
Serial Number lenght: 149 bits, 19 octets

SubjectKeyId: c7:d3:bc:26:e8:d1:2f:e1:08:89:a7:e9:14:5b:d8:f2:e6:79:54:25
AuthorityKeyId: b5:76:0c:30:11:ce:c7:92:42:4d:4c:c7:5c:2c:c8:a9:0c:e8:0b:64

Fingerprint (sha1): e2:54:9d:62:b9:c7:32:a2:3b:fa:ea:11:89:cc:c9:55:56:46:fa:a1
Fingerprint (sha256): 0c:2f:b6:b0:64:e4:08:a5:82:62:f3:d9:ed:9b:3c:d1:e1:f3:5e:07:26:2a:6d:d2:75:0f:54:bc:3e:62:ed:8a

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl

Check the revocation status for certificate msn.co

134

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for msn.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

msn.co
msn.cd
msn.cm
msn.dk
msn.do
msn.ec
msn.fr
msn.gd
msn.gt
msn.hk
msn.kn
msn.kz
msn.la
msn.lu
msn.me
msn.ms
msn.mt
msn.mx
msn.my
msn.pa
msn.pw
msn.sa
msn.se
msn.ua
msn.uy
msn.cat
msn.asia
msn.info
msn.jobs
msn.co.at
msn.co.dm
msn.co.il
msn.co.in
msn.co.jp
msn.co.ke
msn.co.kr
msn.co.ug
msn.com.cy
msn.com.do
msn.com.kn
msn.com.kz
msn.com.mx
msn.com.ru
msn.com.sa
msn.com.sb
msn.com.sv
msn.com.tw
msn.com.uy
msn.com.vi
www.msn.cd
www.msn.cm
www.msn.co
www.msn.dk
www.msn.do
www.msn.ec
www.msn.fr
www.msn.gd
www.msn.gt
www.msn.hk
www.msn.kn
www.msn.kz
www.msn.la
www.msn.lu
www.msn.me
www.msn.ms
www.msn.mt
www.msn.mx
www.msn.my
www.msn.pa
www.msn.pw
www.msn.sa
www.msn.se
www.msn.ua
www.msn.uy
msnauto.biz
msnauto.com
msnauto.net
msnauto.org
www.msn.cat
msnauto.info
msnautos.biz
msnvideo.com
www.msn.asia
msnautos.info
msnautos.mobi
msnsupport.us
www.msn.co.at
www.msn.co.dm
www.msn.co.il
www.msn.co.in
www.msn.co.jp
www.msn.co.ke
www.msn.co.kr
www.msn.co.ug
msnsupport.com
www.msn.com.cy
www.msn.com.do
www.msn.com.kn
www.msn.com.kz
www.msn.com.mx
www.msn.com.ru
www.msn.com.sa
www.msn.com.sb
www.msn.com.sv
www.msn.com.tw
www.msn.com.uy
www.msn.com.vi
www.msnauto.biz
www.msnauto.com
www.msnauto.net
www.msnauto.org
www.msnauto.info
www.msnautos.biz
www.msnvideo.com
msnmotortrend.com
msnmotortrend.net
msnmotortrend.org
www.msnautos.info
www.msnautos.mobi
www.msnsupport.us
microsoftberita.id
www.msnsupport.com
microsoftberita.com
microsoftberita.org
www.msnmotortrend.com
www.msnmotortrend.net
www.msnmotortrend.org
microsoftactualite.org
www.microsoftberita.id
www.microsoftberita.com
www.microsoftberita.org
www.microsoftactualite.org
www.msn.info
www.msn.jobs

Other certificates including the domain name msn.co

(limited to 100 certificates)
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co
msn.co

Certificate

The complete raw certificate details for msn.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINlTCCC32gAwIBAgITEgASVoc1uIlOeQI0BgAAABJWhzANBgkqhkiG9w0BAQsF
ADBPMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
MSAwHgYDVQQDExdNaWNyb3NvZnQgUlNBIFRMUyBDQSAwMTAeFw0yMTA2MjkyMTM1
MTBaFw0yMjA2MjkyMTM1MTBaMBExDzANBgNVBAMTBm1zbi5jbzCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBALm7vul5XTFcknvE5BxN9jQPmRGOm8l8aUlT
Dq47sR+pQJSzUqlEElzGKY+kS9e4bln7VFVl9q2VFKgC7oySxN1KzxoMRM9BU22p
UZZ6p77UDYWGN6yHUVa8K86DNMDEXg3tqkZzf0ERWMrVYUR+f/iYjeWR6v4CA5Hz
dIcil0FikBEiODaER7yM+syqi4HbKXFKmDHD6AOk9o+SAeOZlr7s14JLP0JtPVzd
IcdVquvFtx+uG6W24ASJbrEHbudbEM4byf1Yaqp4ptkbS3+hgE1+J5M53lG/4oE2
PXP5qtZ6puE6XFHjLm9keB0q1Efvsn3FuZPqnE9st6kSAKtox7UCAwEAAaOCCaYw
ggmiMBMGCisGAQQB1nkCBAMBAf8EAgUAMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYB
BQUHAwEwCgYIKwYBBQUHAwIwPgYJKwYBBAGCNxUHBDEwLwYnKwYBBAGCNxUIh9qG
dYPu2QGCyYUbgbWeYYX062CBXYWGjkGHwphQAgFkAgEnMIGHBggrBgEFBQcBAQR7
MHkwUwYIKwYBBQUHMAKGR2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNj
b3JwL01pY3Jvc29mdCUyMFJTQSUyMFRMUyUyMENBJTIwMDEuY3J0MCIGCCsGAQUF
BzABhhZodHRwOi8vb2NzcC5tc29jc3AuY29tMB0GA1UdDgQWBBTH07wm6NEv4QiJ
p+kUW9jy5nlUJTAOBgNVHQ8BAf8EBAMCBLAwggcbBgNVHREEggcSMIIHDoIGbXNu
LmNvggZtc24uY2SCBm1zbi5jbYIGbXNuLmRrggZtc24uZG+CBm1zbi5lY4IGbXNu
LmZyggZtc24uZ2SCBm1zbi5ndIIGbXNuLmhrggZtc24ua26CBm1zbi5reoIGbXNu
LmxhggZtc24ubHWCBm1zbi5tZYIGbXNuLm1zggZtc24ubXSCBm1zbi5teIIGbXNu
Lm15ggZtc24ucGGCBm1zbi5wd4IGbXNuLnNhggZtc24uc2WCBm1zbi51YYIGbXNu
LnV5ggdtc24uY2F0gghtc24uYXNpYYIIbXNuLmluZm+CCG1zbi5qb2Jzggltc24u
Y28uYXSCCW1zbi5jby5kbYIJbXNuLmNvLmlsggltc24uY28uaW6CCW1zbi5jby5q
cIIJbXNuLmNvLmtlggltc24uY28ua3KCCW1zbi5jby51Z4IKbXNuLmNvbS5jeYIK
bXNuLmNvbS5kb4IKbXNuLmNvbS5rboIKbXNuLmNvbS5reoIKbXNuLmNvbS5teIIK
bXNuLmNvbS5ydYIKbXNuLmNvbS5zYYIKbXNuLmNvbS5zYoIKbXNuLmNvbS5zdoIK
bXNuLmNvbS50d4IKbXNuLmNvbS51eYIKbXNuLmNvbS52aYIKd3d3Lm1zbi5jZIIK
d3d3Lm1zbi5jbYIKd3d3Lm1zbi5jb4IKd3d3Lm1zbi5ka4IKd3d3Lm1zbi5kb4IK
d3d3Lm1zbi5lY4IKd3d3Lm1zbi5mcoIKd3d3Lm1zbi5nZIIKd3d3Lm1zbi5ndIIK
d3d3Lm1zbi5oa4IKd3d3Lm1zbi5rboIKd3d3Lm1zbi5reoIKd3d3Lm1zbi5sYYIK
d3d3Lm1zbi5sdYIKd3d3Lm1zbi5tZYIKd3d3Lm1zbi5tc4IKd3d3Lm1zbi5tdIIK
d3d3Lm1zbi5teIIKd3d3Lm1zbi5teYIKd3d3Lm1zbi5wYYIKd3d3Lm1zbi5wd4IK
d3d3Lm1zbi5zYYIKd3d3Lm1zbi5zZYIKd3d3Lm1zbi51YYIKd3d3Lm1zbi51eYIL
bXNuYXV0by5iaXqCC21zbmF1dG8uY29tggttc25hdXRvLm5ldIILbXNuYXV0by5v
cmeCC3d3dy5tc24uY2F0ggxtc25hdXRvLmluZm+CDG1zbmF1dG9zLmJpeoIMbXNu
dmlkZW8uY29tggx3d3cubXNuLmFzaWGCDW1zbmF1dG9zLmluZm+CDW1zbmF1dG9z
Lm1vYmmCDW1zbnN1cHBvcnQudXOCDXd3dy5tc24uY28uYXSCDXd3dy5tc24uY28u
ZG2CDXd3dy5tc24uY28uaWyCDXd3dy5tc24uY28uaW6CDXd3dy5tc24uY28uanCC
DXd3dy5tc24uY28ua2WCDXd3dy5tc24uY28ua3KCDXd3dy5tc24uY28udWeCDm1z
bnN1cHBvcnQuY29tgg53d3cubXNuLmNvbS5jeYIOd3d3Lm1zbi5jb20uZG+CDnd3
dy5tc24uY29tLmtugg53d3cubXNuLmNvbS5reoIOd3d3Lm1zbi5jb20ubXiCDnd3
dy5tc24uY29tLnJ1gg53d3cubXNuLmNvbS5zYYIOd3d3Lm1zbi5jb20uc2KCDnd3
dy5tc24uY29tLnN2gg53d3cubXNuLmNvbS50d4IOd3d3Lm1zbi5jb20udXmCDnd3
dy5tc24uY29tLnZpgg93d3cubXNuYXV0by5iaXqCD3d3dy5tc25hdXRvLmNvbYIP
d3d3Lm1zbmF1dG8ubmV0gg93d3cubXNuYXV0by5vcmeCEHd3dy5tc25hdXRvLmlu
Zm+CEHd3dy5tc25hdXRvcy5iaXqCEHd3dy5tc252aWRlby5jb22CEW1zbm1vdG9y
dHJlbmQuY29tghFtc25tb3RvcnRyZW5kLm5ldIIRbXNubW90b3J0cmVuZC5vcmeC
EXd3dy5tc25hdXRvcy5pbmZvghF3d3cubXNuYXV0b3MubW9iaYIRd3d3Lm1zbnN1
cHBvcnQudXOCEm1pY3Jvc29mdGJlcml0YS5pZIISd3d3Lm1zbnN1cHBvcnQuY29t
ghNtaWNyb3NvZnRiZXJpdGEuY29tghNtaWNyb3NvZnRiZXJpdGEub3JnghV3d3cu
bXNubW90b3J0cmVuZC5jb22CFXd3dy5tc25tb3RvcnRyZW5kLm5ldIIVd3d3Lm1z
bm1vdG9ydHJlbmQub3JnghZtaWNyb3NvZnRhY3R1YWxpdGUub3JnghZ3d3cubWlj
cm9zb2Z0YmVyaXRhLmlkghd3d3cubWljcm9zb2Z0YmVyaXRhLmNvbYIXd3d3Lm1p
Y3Jvc29mdGJlcml0YS5vcmeCGnd3dy5taWNyb3NvZnRhY3R1YWxpdGUub3Jnggx3
d3cubXNuLmluZm+CDHd3dy5tc24uam9iczCBsAYDVR0fBIGoMIGlMIGioIGfoIGc
hk1odHRwOi8vbXNjcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9NaWNy
b3NvZnQlMjBSU0ElMjBUTFMlMjBDQSUyMDAxLmNybIZLaHR0cDovL2NybC5taWNy
b3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL01pY3Jvc29mdCUyMFJTQSUyMFRMUyUy
MENBJTIwMDEuY3JsMFcGA1UdIARQME4wQgYJKwYBBAGCNyoBMDUwMwYIKwYBBQUH
AgEWJ2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NwczAIBgZn
gQwBAgEwHwYDVR0jBBgwFoAUtXYMMBHOx5JCTUzHXCzIqQzoC2QwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMA0GCSqGSIb3DQEBCwUAA4ICAQADQn9OtUIu
9Uiw3TD7xgZ+G15Fe7wYDDgYn9GBuh+TGD6bQa40m5E/R8Feh81i9Te5//BQQm1l
8Kza8Q9Y79toOCrajh0a2HHuajehzJ7s+wX0xTMWQ7sOgwrG2jRrVOa+LqWIwI2k
0nLgsvznGMPS6w+C2lRGl2QqTngaYt8jbDfyCu8fV/K3mzfkDLu5ulztOHkF9wOU
DFsMr8RjIQ8JPickP8S3A9oPITDsVAan+vKNdW1Nnp12HjatqSiTIszJ9ajMoOm2
MkSAo9uG+Ba9uS3d6s7Kpw0Mce7QL20j8T3AhfKmuUkNnWAaA1jiidZE03Eqriuz
Pl4FAStT9N5PDhDpdwpO9pHRMX8COVmTqYVjVweY58vrbGE1LvwUlyxMWgM6tcul
sPxR6hS5vYb/7h1lMGAUioqcHujpr35SiCDpZsVBbzBN0CtTEhn08YJ5tBqqqVJV
Ut25WO/7Md8JRdiDOHbON6xNUY0Jraa5Q2ZOIGnHxHaoY5w5RwbnYJk+h8lRuQaw
qp3mrOFjmOQWwZbOb/iIHjjRremdHv8xaHSGKdnG5bys2DOSAfd0KpZs1sSSdhxd
nbHcIhdJI6DQTh2YNzrz2c9cZn3efv2A55CxQo5kvF8cVC6G+KCataYcwn1PaLaT
0uDFwuKt4hsZYYOCD5+z4UMBXRbnVvJh1g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubu+6XldMVySe8TkHE32
NA+ZEY6byXxpSVMOrjuxH6lAlLNSqUQSXMYpj6RL17huWftUVWX2rZUUqALujJLE
3UrPGgxEz0FTbalRlnqnvtQNhYY3rIdRVrwrzoM0wMReDe2qRnN/QRFYytVhRH5/
+JiN5ZHq/gIDkfN0hyKXQWKQESI4NoRHvIz6zKqLgdspcUqYMcPoA6T2j5IB45mW
vuzXgks/Qm09XN0hx1Wq68W3H64bpbbgBIlusQdu51sQzhvJ/Vhqqnim2RtLf6GA
TX4nkzneUb/igTY9c/mq1nqm4TpcUeMub2R4HSrUR++yfcW5k+qcT2y3qRIAq2jH
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401419653671813095030162238841029489140586119
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft RSA TLS CA 01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-29 21:35:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-29 21:35:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'msn.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23446667298598128849757091797416620406755789474807760232797671694720829199558750445062686400823152347460488601817275363570249783947399738179109549801612792833073287015002353310090372706790521777704018499460008818553355040033567921390058816506279761680452332726802283079861795006274641078785871254812149694932892981285657071821211523173285948981867523200474216022182944268489041719543300606775669946865077608412562885142027899102213560142484493401074007736282455313443338851115187978848868610755798131431059780772952309784404720967057714510295515259000053957428516035404159639048909932559455068176622940939365242161077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.10585921.15764560
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7d3bc26e8d12fe10889a7e9145bd8f2e6795425
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1810 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.cd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.gd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.kn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.jobs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.co.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.co.dm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.co.ug'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.com.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.com.kn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.com.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.com.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.com.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.com.sb'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.com.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.com.vi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.cd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.gd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.kn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msnauto.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msnauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msnauto.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msnauto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msnauto.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msnautos.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msnvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msnautos.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msnautos.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msnsupport.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.co.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.co.dm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.co.ug'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msnsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.com.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.com.kn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.com.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.com.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.com.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.com.sb'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.com.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.com.vi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msnauto.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msnauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msnauto.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msnauto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msnauto.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msnautos.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msnvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msnmotortrend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msnmotortrend.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msnmotortrend.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msnautos.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msnautos.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msnsupport.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoftberita.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msnsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoftberita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoftberita.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msnmotortrend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msnmotortrend.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msnmotortrend.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoftactualite.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microsoftberita.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microsoftberita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microsoftberita.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microsoftactualite.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msn.jobs'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b5760c3011cec792424d4cc75c2cc8a90ce80b64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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