*.osi.office-int.net

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 01

About this certificate

This digital certificate with serial number 33:00:85:21:54:fa:19:1c:25:a8:c1:bd:f0:00:00:00:85:21:54 was issued on by Microsoft Corporation.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:00:85:21:54:fa:19:1c:25:a8:c1:bd:f0:00:00:00:85:21:54
Serial Number (int): 1137383306985611653869194823365046991988269396
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 45:00:d1:b4:e2:04:9b:ed:78:1f:56:dc:40:f2:1f:bc:62:c1:90:55
AuthorityKeyId: 0f:20:5d:d7:a1:57:95:db:92:cf:2b:d0:c7:c2:77:04:ce:72:80:76

Fingerprint (sha1): 90:43:62:3f:59:e5:e8:35:8d:35:48:cc:61:59:33:63:51:57:1b:d0
Fingerprint (sha256): 0c:b9:8a:35:79:9c:1f:1a:9d:f5:c8:83:72:47:db:58:4f:8a:79:4a:1b:81:9a:d7:91:23:5a:32:8c:0f:0b:56

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.crl

Check the revocation status for certificate *.osi.office-int.net

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.osi.office-int.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.osi.office-int.net
*.osi.office-int.com
*.dev.office365-int.com
*.dev.officeapps.live-int.com
*.dev.onenote-int.com
*.dev.osi.office-int.com
*.dev.osi.office-int.net
*.dev.sway-int.com

Other certificates including the domain name office-int.net

(limited to 100 certificates)
officernr.osi.office-int.net
kaizalamessaging.osi.office-int.net
*.osi.office-int.net
augmentation.osi.office-int.net
*.osi.office-int.net
OsiDataEncrypt-Carmine-ALL-DEK.osi.office-int.net
icmconnector.griffinosiplatformtest.osi.office-int.net
kasmgmtportal.osi.office-int.net
Aqua-INT-MdmAdministrator.osi.office-int.net
msa-sapi.graph.office-int.net
Cobalt-INT-MdmAdministrator.osi.office-int.net
manage.osi.office-int.net
Cobalt-INT-MdmAdministrator.osi.office-int.net
inclient.store.office-int.com
store.office-int.com
Wheat-INT-MdmAdministrator.osi.office-int.net
Caelum-INT-MdmAdministrator.osi.office-int.net
insertmedia.osi.office-int.net
captions.officeapps.live-int.com
ssu.office-int.com
oliml.office-int.net
tasks.office-int.com
*.osi.office-int.net
graph.office-int.net
support.office-int.com
wdgfabric.osi.office-int.net
*.osi.office-int.net
*.osi.office-int.net
GriffinOsiPlatformTest-DataEncryptionCertife.office-int.net
manage.osi.office-int.net
entity-sti-int.osi.office-int.net
samplegateway.omex.office-int.net
manage.osi.office-int.net
Vela-INT-MdmAdministrator.osi.office-int.net
GriffinOsiPlatformTest-DataEncryptionCertife.office-int.net
griffinosiplatformtest.osi.office-int.net
*.osi.office-int.net
hubblecontent.osi.office-int.net
hubble.officeapps.live-int.com
Caelum-INT-MdmAdministrator.osi.office-int.net
icms.osi.office-int.net
*.accesscontrol.identity.office-int.net
oxocompliance-test.office-int.net
*.osi.office-int.net
*.osi.office-int.net
Wheat-INT-MdmAdministrator.osi.office-int.net
Mint-INT-Mds.osi.office-int.net
kevlar.marketwatch.office-int.net
validationgateway.omex.office-int.net
scram.osi.office-int.net
Bronze-INT-Mds.osi.office-int.net
enceladus.osi.office-int.net
officecheckoutpurchase.omex.office-int.net
helene.cosmosproxy.osi.office-int.net
arms.osi.office-int.net
arms.osi.office-int.net
cornsilkint-mds.osi.office-int.net
Wheat-INT-MdmAdministrator.osi.office-int.net
ogma.osi.office-int.net
externalgateway.omex.office-int.net
addinslicensing.store.office-int.com
augmentation.osi.office-int.net
tellmeservice.osi.office-int.net
Antlia-INT-MdmAdministrator.osi.office-int.net
eridanus-Int-Mdm.osi.office-int.net
Russet-INT-Mds.osi.office-int.net
macommunication.geneva.keyvault.fullvalue.omex.office-int.net
Aqua-INT-MdmAdministrator.osi.office-int.net
setup.office-int.com
Aqua-INT-MdmAdministrator.osi.office-int.net
*.graph.office-int.net
Carpo-INT-Mds.osi.office-int.net
*.osi.office-int.net
cluster.fullvalue.omex.office-int.net
*.osi.office-int.net
dataencryption.omex.office-int.net
hubble.officeapps.live-int.com
forms.office-int.com
Manatee-INT-Mds.osi.office-int.net
checkout.office-int.com
GriffinOsiPlatformTest-gcpcert.office-int.net
config.officeapps.live-int.com
GriffinOsiPlatformTest-gcpcert.office-int.net
pptcast-rps-int.osi.office-int.net
store.office-int.com
aurigasentryportal.office-int.net
tasman.osi.office-int.net
Asparagus-INT-Mds.osi.office-int.net
support.office-int.com
stores.office-int.com
diagnosticsgateway.omex.office-int.net
checkout.office-int.com
usershardextension-sti-int.osi.office-int.net
*.identity.office-int.net
Lynx-INT-Mds.osi.office-int.net
Snow-INT-Mds.osi.office-int.net
loopback.osi.office-int.net
patriarch.cosmosproxy.osi.office-int.net
mdoipdomainmgmt.office-int.net
uci.officeapps.live-int.com

Certificate

The complete raw certificate details for *.osi.office-int.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3ctFQwKEXws5GQCbFJR
LJ1YtgnSreCP1Hr+z6r7XiGBSkxD8gkPTi2jE79fg1joWsMP0FpEWW9IjCctwPyQ
GOD5+P18OCLtLj4WhGEk6WaRlAu0JR6Dxjxu2F2kC3CBrnoJbAkMaLsiVUCB/YU5
LowTd2jBgYpPY8UTJ2yjeLDXHgJIR1bOKNXT/HPptGkpmTI0i/9KgHry5eO03zqJ
j17rkR8IKk0FpRCy7wn8NfXq1arioj6I9CcOucH6U1+bX/r+iDfxl4LyLkqKYif6
F4MmOqvIFNW0H/8e6Pl+xv7VH6ulH+QfX1rizWK3O4lZYia8NuuHv6BMQ+/T0Br3
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137383306985611653869194823365046991988269396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-07 04:55:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 04:55:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.osi.office-int.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24675237394786554001268983190689955394786186058366101387112218475769002254651890498330970838107602135855487073985103923960478945939488770136890852426115316047112798900103750253308735305177236257804163775012329836574153891689233945449502848089052016485893754673155487543230623446442926757546110555944598088604623836091159272769655224458627479051151966511673285466947164099740894014332327740704613711009852522548761220370614953645229162118470439495367137645077587087615392151906516153479501343525665111079680132853611861753504635672173680254736064315968812056035012328504647291583655045922739595826822480685097306224513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4500d1b4e2049bed781f56dc40f21fbc62c19055
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (198 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osi.office-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osi.office-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.office365-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.officeapps.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.onenote-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.osi.office-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.osi.office-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.sway-int.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f205dd7a15795db92cf2bd0c7c27704ce728076
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0022c8bdde9e318cd28f2d930e6c29788b5f7964d8a140e4803b1e402248ef7f4b256cf4bed70381d160dcd08080b5907224a28df19cd79bb5e37f4ae5db57853f11a45e46810d1c8927c3f5f537e81d0246868f9856ddab15c861af3b7a3eb5513539ac172bc0b4bfc2d521ef0c667217f4764a5c44a5d5904e1f1a5a0fcbff81c8580fb67a0d3e0c91949975cf5c320a63c49470f46d08088f21b7dd385f43102e83193271742401d381645e085a4f83e317cf9618aba8331f79bfdf9ddcea5bc7716151c4b2235c31027c3e799d2ca387b751e6e216ab8f05ff7a96434dc2268a899a7fad38993e79a11448f3f5c56e8239f2f82766d571da4f749be5c17ecf795a97c79abe836f8a157b0b9d579ebf2a5ffab35cf0c7c3254510d9b919989ac06dab96ba5e43efd90fd76cabcc5e760996b5533d9b133b8eec27423740f6a359f1954934fa110b9f40df9dd2efeaa473a7d19a3d465c5e6afa6a00a1ad2b2575c97624f86bc25b74e3462f33e2ce1ebafa9458d918184fc017c8fa414f44747bee6b1cca408143d0b675198e8d9ed369a891d0068926c6716c9d06ddd78b6d916119c3d9ebb659d5e4be494d822de981e506e2e8d54683342f2607ba01acc3c405df1a482dd7f591d22c6e026961f6dfb908f5ac9e23bc83e86032cc0a373ac6038d8723d2b1d989760b2bfbd9d6841df8a57f220485cc68bd42990c5c2d34