gallerycanary.azure.ai
Issued by Microsoft IT TLS CA 2
About this certificate
This digital certificate with serial number 20:00:01:a2:b0:0a:ee:9f:74:66:a4:03:da:00:00:00:01:a2:b0 was issued on by Microsoft Corporation.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Certificate Subject
CN=gallerycanary.azure.ai
Microsoft Corporation
Organization:
Microsoft Corporation
Organization unit: Microsoft IT
Organization unit: Microsoft IT
State / Province:
Washington
Locality: Redmond
Country: US
Locality: Redmond
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 20:00:01:a2:b0:0a:ee:9f:74:66:a4:03:da:00:00:00:01:a2:b0Serial Number (int): 713624402884348155473659096348030886012363440
Serial Number lenght: 150 bits, 19 octets
SubjectKeyId: cd:50:9c:73:76:3b:69:7d:b8:e6:28:21:05:d5:d4:f1:7d:20:d0:d1
AuthorityKeyId: 91:9e:3b:44:6c:3d:57:9c:42:77:2a:34:d7:4f:d1:cc:4a:97:2c:da
Fingerprint (sha1): 6d:16:42:b9:7e:85:67:08:7b:d7:2d:77:ee:dc:3e:57:95:8f:1d:1f
Fingerprint (sha256): 12:69:d4:5c:7f:ce:e2:4e:01:8f:4a:e8:91:e9:aa:e8:44:54:fb:fa:0e:d8:47:6a:a9:f1:78:97:c9:e4:32:84
Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%202.crt
Revocation information
OCSP Server: http://ocsp.msocsp.comCRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl
Check the revocation status for certificate gallerycanary.azure.ai
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gallerycanary.azure.ai
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gallerycanary.azure.ai
gallerycanary.cortanaintelligence.com
gallery-ca-centraluseuap-1.cloudapp.net
gallerycanary.cortanaintelligence.net
gallerycanary.cortanaintelligence.com
gallery-ca-centraluseuap-1.cloudapp.net
gallerycanary.cortanaintelligence.net
Other certificates including the domain name azure.ai
(limited to 100 certificates)
westus2.mlhistory.azure.ai
eastus2euap.mlhistory.azure.ai
*.customtranslator.azure.ai
southcentralus.mlhistory.azure.ai
westcentralus.mlhistory.azure.ai
southcentralus.mlhistory.azure.ai
gallerycanary.azure.ai
eastus.mlhistory.azure.ai
*.customtranslator.azure.ai
westcentralus.mlcompute.azure.ai
legacy.portal.customtranslator.azure.ai
southeastasia.mlhistory.azure.ai
southcentralus.mlservices.azure.ai
app-quickstart-mooncake-test.azure.ai
eastus.mlhistory.azure.ai
quickstart.azure.ai
eastus.mlservices.azure.ai
southeastasia.mlcompute.azure.ai
westus2.mlhistory.azure.ai
southeastasia.mlcompute.azure.ai
northeurope.mlservices.azure.ai
eastus.mlcompute.azure.ai
*.customtranslator.azure.ai
app-quickstart-test.azure.ai
southeastasia.mlhistory.azure.ai
westcentralus.mlcompute.azure.ai
westeurope.mlhistory.azure.ai
centraluseuap.mlcompute.azure.ai
australiaeast.mlhistory.azure.ai
southeastasia.mlhistory.azure.ai
gallerycanary.azure.ai
eastus.mlcompute.azure.ai
customtranslator-int.azure.ai
westcentralus.mlservices.azure.ai
stagingus.portal.customtranslator.azure.ai
portal.customtranslator.azure.ai
australiaeast.mlhistory.azure.ai
eastus2euap.mlhistory.azure.ai
eastus2.mlcompute.azure.ai
portal.customtranslator.azure.ai
westeurope.mlcompute.azure.ai
next.portal.customtranslator.azure.ai
eastus.mlcompute.azure.ai
eastus.mlservices.azure.ai
legacy.portal.customtranslator.azure.ai
gallerycanary.azure.ai
northeurope.mlhistory.azure.ai
westeurope.mlcompute.azure.ai
westus2.mlhistory.azure.ai
northeurope.mlservices.azure.ai
australiaeast.mlhistory.azure.ai
eastus2.mlhistory.azure.ai
australiaeast.mlservices.azure.ai
gallery.azure.ai
eastus2.mlhistory.azure.ai
*.customtranslator-int.azure.ai
southcentralus.mlcompute.azure.ai
app-quickstart-mooncake.azure.ai
centraluseuap.mlcompute.azure.ai
westcentralus.mlservices.azure.ai
eastus2euap.mlhistory.azure.ai
northeurope.mlcompute.azure.ai
southcentralus.mlservices.azure.ai
*.customtranslator.azure.ai
centraluseuap.mlhistory.azure.ai
app-quickstart-test.azure.ai
eastus2.mlcompute.azure.ai
westus2.mlcompute.azure.ai
eastus2.mlcompute.azure.ai
eastus.mlhistory.azure.ai
southcentralus.mlcompute.azure.ai
*.customtranslator.azure.ai
southcentralus.mlservices.azure.ai
eastus2euap.mlhistory.azure.ai
centraluseuap.mlhistory.azure.ai
westeurope.mlservices.azure.ai
eastus2euap.mlcompute.azure.ai
westeurope.mlservices.azure.ai
australiaeast.mlcompute.azure.ai
westus2.mlhistory.azure.ai
southeastasia.mlservices.azure.ai
next.portal.customtranslator.azure.ai
eastus.mlhistory.azure.ai
southcentralus.mlcompute.azure.ai
mamlgallerygcs-test.azure.ai
centraluseuap.mlservices.azure.ai
*.develop.portal.speech.azure.ai
westcentralus.mlcompute.azure.ai
eastus2euap.mlcompute.azure.ai
westus2.mlservices.azure.ai
develop.speech.azure.ai
westus2.mlhistory.azure.ai
*.customtranslator-testpub.azure.ai
eastus.mlcompute.azure.ai
westus.mlservices.azure.ai
australiaeast.mlservices.azure.ai
next.portal.customtranslator.azure.ai
southcentralus.mlhistory.azure.ai
eastus2euap.mlservices.azure.ai
southcentralus.mlhistory.azure.ai
eastus2euap.mlhistory.azure.ai
*.customtranslator.azure.ai
southcentralus.mlhistory.azure.ai
westcentralus.mlhistory.azure.ai
southcentralus.mlhistory.azure.ai
gallerycanary.azure.ai
eastus.mlhistory.azure.ai
*.customtranslator.azure.ai
westcentralus.mlcompute.azure.ai
legacy.portal.customtranslator.azure.ai
southeastasia.mlhistory.azure.ai
southcentralus.mlservices.azure.ai
app-quickstart-mooncake-test.azure.ai
eastus.mlhistory.azure.ai
quickstart.azure.ai
eastus.mlservices.azure.ai
southeastasia.mlcompute.azure.ai
westus2.mlhistory.azure.ai
southeastasia.mlcompute.azure.ai
northeurope.mlservices.azure.ai
eastus.mlcompute.azure.ai
*.customtranslator.azure.ai
app-quickstart-test.azure.ai
southeastasia.mlhistory.azure.ai
westcentralus.mlcompute.azure.ai
westeurope.mlhistory.azure.ai
centraluseuap.mlcompute.azure.ai
australiaeast.mlhistory.azure.ai
southeastasia.mlhistory.azure.ai
gallerycanary.azure.ai
eastus.mlcompute.azure.ai
customtranslator-int.azure.ai
westcentralus.mlservices.azure.ai
stagingus.portal.customtranslator.azure.ai
portal.customtranslator.azure.ai
australiaeast.mlhistory.azure.ai
eastus2euap.mlhistory.azure.ai
eastus2.mlcompute.azure.ai
portal.customtranslator.azure.ai
westeurope.mlcompute.azure.ai
next.portal.customtranslator.azure.ai
eastus.mlcompute.azure.ai
eastus.mlservices.azure.ai
legacy.portal.customtranslator.azure.ai
gallerycanary.azure.ai
northeurope.mlhistory.azure.ai
westeurope.mlcompute.azure.ai
westus2.mlhistory.azure.ai
northeurope.mlservices.azure.ai
australiaeast.mlhistory.azure.ai
eastus2.mlhistory.azure.ai
australiaeast.mlservices.azure.ai
gallery.azure.ai
eastus2.mlhistory.azure.ai
*.customtranslator-int.azure.ai
southcentralus.mlcompute.azure.ai
app-quickstart-mooncake.azure.ai
centraluseuap.mlcompute.azure.ai
westcentralus.mlservices.azure.ai
eastus2euap.mlhistory.azure.ai
northeurope.mlcompute.azure.ai
southcentralus.mlservices.azure.ai
*.customtranslator.azure.ai
centraluseuap.mlhistory.azure.ai
app-quickstart-test.azure.ai
eastus2.mlcompute.azure.ai
westus2.mlcompute.azure.ai
eastus2.mlcompute.azure.ai
eastus.mlhistory.azure.ai
southcentralus.mlcompute.azure.ai
*.customtranslator.azure.ai
southcentralus.mlservices.azure.ai
eastus2euap.mlhistory.azure.ai
centraluseuap.mlhistory.azure.ai
westeurope.mlservices.azure.ai
eastus2euap.mlcompute.azure.ai
westeurope.mlservices.azure.ai
australiaeast.mlcompute.azure.ai
westus2.mlhistory.azure.ai
southeastasia.mlservices.azure.ai
next.portal.customtranslator.azure.ai
eastus.mlhistory.azure.ai
southcentralus.mlcompute.azure.ai
mamlgallerygcs-test.azure.ai
centraluseuap.mlservices.azure.ai
*.develop.portal.speech.azure.ai
westcentralus.mlcompute.azure.ai
eastus2euap.mlcompute.azure.ai
westus2.mlservices.azure.ai
develop.speech.azure.ai
westus2.mlhistory.azure.ai
*.customtranslator-testpub.azure.ai
eastus.mlcompute.azure.ai
westus.mlservices.azure.ai
australiaeast.mlservices.azure.ai
next.portal.customtranslator.azure.ai
southcentralus.mlhistory.azure.ai
eastus2euap.mlservices.azure.ai
southcentralus.mlhistory.azure.ai
Certificate
The complete raw certificate details for gallerycanary.azure.ai in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHODCCBSCgAwIBAgITIAABorAK7p90ZqQD2gAAAAGisDANBgkqhkiG9w0BAQsF ADCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UE CxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDIw HhcNMTcxMjEyMDAxMTQ4WhcNMTkxMjEyMDAxMTQ4WjAhMR8wHQYDVQQDExZnYWxs ZXJ5Y2FuYXJ5LmF6dXJlLmFpMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhtFmJjOP8dDXZaIV0cje4zou/ld2Ksq+HLjLxk2TpEHqquCg0WPdvRB2iW8 R0gJZ4zB0Ck5kt67oBpjFdmXXlkCgcMh7QOAB2hd+1KuOBJgmBwiJMnDrIqrV9LW p6rPUXp8w3oRcE7v4S/2IowGnHLEGwn6LxgnSHBN+Bz+GjXFc0RXAKMSSTMbnksb 4anIHM/8lE7TtcjQDhNiYFPtx0qT0po0EN9Ehs83yIU4vqALPJaynHN/zB520DTY AopYfQwvGgCUOSbXQjbzPaecNMBRlNv43mXWk/qz9R2XGIaIVUxRUjo4mrjjM9nc BFvoXpztxSGwjCEzGwTJF+c5TQIDAQABo4IC/DCCAvgwCwYDVR0PBAQDAgSwMB0G A1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATCBmgYDVR0RBIGSMIGPghZnYWxs ZXJ5Y2FuYXJ5LmF6dXJlLmFpgiVnYWxsZXJ5Y2FuYXJ5LmNvcnRhbmFpbnRlbGxp Z2VuY2UuY29tgidnYWxsZXJ5LWNhLWNlbnRyYWx1c2V1YXAtMS5jbG91ZGFwcC5u ZXSCJWdhbGxlcnljYW5hcnkuY29ydGFuYWludGVsbGlnZW5jZS5uZXQwHQYDVR0O BBYEFM1QnHN2O2l9uOYoIQXV1PF9INDRMB8GA1UdIwQYMBaAFJGeO0RsPVecQncq NNdP0cxKlyzaMIGsBgNVHR8EgaQwgaEwgZ6ggZuggZiGS2h0dHA6Ly9tc2NybC5t aWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL01pY3Jvc29mdCUyMElUJTIwVExT JTIwQ0ElMjAyLmNybIZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9tc2Nv cnAvY3JsL01pY3Jvc29mdCUyMElUJTIwVExTJTIwQ0ElMjAyLmNybDCBhQYIKwYB BQUHAQEEeTB3MFEGCCsGAQUFBzAChkVodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v cGtpL21zY29ycC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUyMENBJTIwMi5jcnQwIgYI KwYBBQUHMAGGFmh0dHA6Ly9vY3NwLm1zb2NzcC5jb20wPgYJKwYBBAGCNxUHBDEw LwYnKwYBBAGCNxUIh9qGdYPu2QGCyYUbgbWeYYX062CBXYTS30KC55N6AgFkAgEa ME0GA1UdIARGMEQwQgYJKwYBBAGCNyoBMDUwMwYIKwYBBQUHAgEWJ2h0dHA6Ly93 d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NwczAnBgkrBgEEAYI3FQoEGjAY MAoGCCsGAQUFBwMCMAoGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4ICAQBLUnCP VCfF3saxySswgdGlON8+PRPdYDJC5KPzYkQHDxAX57KTphjlcd+/QwVrVWuwrw1u Qm5g2jrNfDka4amkr4tzdv7hOeLSkyzOf5wUyJktR0B+tQurQz+H37zMF4J4AZZp 3G2GyS1Fvu7sJgt2ktACsrRlHcfXxtCCZYrZmBVzcCPzFTnLItXzRD08P83Sl6Lb 140dXOy41+to7KtUG694oB4v3kxS+6Pbviwl+jNyRxkmbmb34mCyRUxAHtu90AoU 5MhDadn1BhDabQ27aaGI5ykRJYWxYTwOaxB/x9DrSyk6YfgLqWULjOvPsPFXbd6I 5m8SNPosywrGCq/zOPio/Y6Bhgjq6hKHSMTEbbrVG3wcsId4igykJ7Bq/MsYePxM Znbs/otSlaqeaWgd7sPuhP3sJJdwedrPcGL7Ajb6IKYFnkrsQkJX+Uy3AuSMz3NI NZyY1FyNymqSneIdr62KgipW/yQIEEskhwA4ea0UW7K5a5y3YIQXWM/J8IaEy0WF dkwKXcNIWaGwuZ53nUjVLzLA8cgJF9Uy4nOm4KCPohBHBtdc5WX+SomrXDCZHieG BBTjDJ0R7/DGl18rzMGkOv8vEGBYlUEmcHm12rWGuRgtcDgGTB06YS3AeoOOOnPn CB4lpUeV9bv3mH7ZsedY1i4t2r3TaMr2wcFPtg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhtFmJjOP8dDXZaIV0cj e4zou/ld2Ksq+HLjLxk2TpEHqquCg0WPdvRB2iW8R0gJZ4zB0Ck5kt67oBpjFdmX XlkCgcMh7QOAB2hd+1KuOBJgmBwiJMnDrIqrV9LWp6rPUXp8w3oRcE7v4S/2IowG nHLEGwn6LxgnSHBN+Bz+GjXFc0RXAKMSSTMbnksb4anIHM/8lE7TtcjQDhNiYFPt x0qT0po0EN9Ehs83yIU4vqALPJaynHN/zB520DTYAopYfQwvGgCUOSbXQjbzPaec NMBRlNv43mXWk/qz9R2XGIaIVUxRUjo4mrjjM9ncBFvoXpztxSGwjCEzGwTJF+c5 TQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 713624402884348155473659096348030886012363440 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-12 00:11:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 00:11:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gallerycanary.azure.ai' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21473960099468347209890666811644148551995973326113176857627086871576862945192722545260188497912503399531702838508884450336262715330866861836349477403194758655024319394720508841330219811275568533379878764499825729550636815760851875761926761861746951918769910962802375121424306517115236185311300317903684396374820715329581802441226897228394053490389280751877679654650065025618490357109046951929110316341499772267417557941093205943681057814089150584032055254067115095663342562601654490674770092658346114935582340025490006952938090235991861957754691974970154642732035640255020981082480791770389527734827924304319197165901 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (146 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallerycanary.azure.ai' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallerycanary.cortanaintelligence.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallery-ca-centraluseuap-1.cloudapp.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallerycanary.cortanaintelligence.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cd509c73763b697db8e6282105d5d4f17d20d0d1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 919e3b446c3d579c42772a34d74fd1cc4a972cda . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%202.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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