setup.officeppe.com

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 08

About this certificate

This digital certificate with serial number 33:00:1d:6b:b4:1f:df:ac:b5:82:4c:f1:18:00:00:00:1d:6b:b4 was issued on by Microsoft Corporation.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:1d:6b:b4:1f:df:ac:b5:82:4c:f1:18:00:00:00:1d:6b:b4
Serial Number (int): 1137348016476357946984835915931510392101890996
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: bd:32:00:5a:a3:dd:3e:50:00:19:61:53:fe:2b:fa:d2:cb:86:a4:3f
AuthorityKeyId: f6:7e:2f:bd:80:a3:4a:b2:70:5b:eb:df:9a:1f:d8:ed:ca:61:80:07

Fingerprint (sha1): b9:5c:60:18:d4:ef:ff:13:6b:93:dc:01:60:d4:08:71:12:af:a5:46
Fingerprint (sha256): 12:7f:98:04:b5:f6:fd:1e:10:9d:45:74:d7:dd:ea:c4:a3:42:74:a5:6e:b8:74:a2:d1:0b:bd:f9:75:4a:53:df

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl

Check the revocation status for certificate setup.officeppe.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for setup.officeppe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

setup.officeppe.com
*.setup.officeppe.com
setupoffice.omex.officeppe.net
*.setupoffice.omex.officeppe.net
*.external.omex.officeppe.net
external.omex.officeppe.net
setup.microsoft365ppe.com
*.setup.microsoft365ppe.com

Other certificates including the domain name officeppe.com

(limited to 100 certificates)
portfolios.officeppe.com
sway.officeppe.com
trustportal.officeppe.com
project.officeppe.com
officeapps.live.com
vanquishppe.securitysignals-siphonclient.officeppe.com
cisurvey.officeppe.com
vanquishppe.securitysignals-siphonclient.officeppe.com
shell.suite.officeppe.com
cert00016-azurecdn.akamaized.net
status.officeppe.com
c.msn-int.com
vanquishppe.securitysignals.tracegenevaconsumer.officeppe.com
manage.officeppe.com
*.lifecycle.officeppe.com
uci.edog.officeapps.live.com
redemptionservice.setup.officeppe.com
secure06.stage.lithium.com
support.officeppe.com
vanquishppe.securitysignals.tracegenevaconsumer.officeppe.com
test.augloop.svc.cloud-dev.microsoft
manage.officeppe.com
idsapi-edog-s2s.store.officeppe.com
*.lifecycle.officeppe.com
portal.officeppe.com
cisurvey.officeppe.com
portal.azure
mock.m365admin.officeppe.com
cdn.forms.office.net
cert00016-azurecdn.akamaized.net
cert00016-azurecdn.akamaized.net
mysmallbusiness.officeppe.com
pubsub.augloop-test.officeppe.com
secure06.stage.lithium.com
pubsub.augloop-int.officeppe.com
int.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
support.officeppe.com
augloop-test.officeppe.com
c.msn-int.com
uci.edog.officeapps.live.com
portfolios.officeppe.com
test.augloop.svc.cloud-dev.microsoft
augloop-test.officeppe.com
webjobs.servicetrust.officeppe.com
kevlar-ssl.augloop-dogfood.officeppe.com
augloop-test.officeppe.com
cisurvey.officeppe.com
sway.officeppe.com
protection.officeppe.com
odc.edog.officeapps.live.com
api.augloop-tools.officeppe.com
manage.officeppe.com
store.officeppe.com
vanquishppe.securitysignals.tracegenevaconsumer.officeppe.com
status.office365.com
manage.officeppe.com
connectivity.officeppe.com
webjobs.servicetrust.officeppe.com
portfolios.officeppe.com
store.officeppe.com
offlineconsumer.suite.officeppe.com
portal.azure
status.office365.com
cisurvey.officeppe.com
sway.officeppe.com
portal.officeppe.com
bcqr.officeppe.com
augloop-test.officeppe.com
setup.officeppe.com
cisurvey.officeppe.com
portal.azure
cert00016-azurecdn.akamaized.net
appamangement-ppe.officeppe.com
localization.checkout.office.net
cisurvey.officeppe.com
augloop-test.officeppe.com
cert00016-azurecdn.akamaized.net
dragongate.officeppe.com
messaging.officeppe.com
uci.edog.officeapps.live.com
api.servicetrust.officeppe.com
cisurvey.officeppe.com
msn.co
augloop-int.officeppe.com
setup.officeppe.com
sway.officeppe.com
augloop-test.officeppe.com
pubsub.augloop-dogfood.officeppe.com
ifttt.edog.office.com
dogfood.augloop.svc.cloud.microsoft
uci.edog.officeapps.live.com
augloop-int.officeppe.com
stores.officeppe.com
cisurvey.officeppe.com
portfolios.officeppe.com
endpoints.officeppe.com
cisurvey.officeppe.com
portfolios.officeppe.com
vanquishppe.securitysignals.tracegenevaconsumer.officeppe.com

Certificate

The complete raw certificate details for setup.officeppe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91U8zkdLnZjMr3491sog
u4e61kI4OCttxdqWxFETMF1WFVy7Zt1qrxxtRDcB4xW7zqyqaQOqEJtUrB0VRp1A
eAq6pQ4yJJzvGWsaEnbCsZeddLWfr2SCnY+9ni+4sGhOHF1IfamjFejFt3WP3NAC
tTKJ7umWVm95rfox2QKEUvh+mtWpiBxMBoYq+GDVBc5wO8IVvHBHc97GHGIlBvAA
J3G3m9lwilAUHxXnaA/r+NCvXKtwrUtRvIjPg2I/PiP1qHpvlNe3QE4BlNKBBbQ/
11hv+3DV1+XODfvAyJDRqaiLUHlCBrLGqY0LAy3tETJYEj+q6aCCQkmUXGXibdDq
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137348016476357946984835915931510392101890996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 08'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 07:47:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-28 07:47:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'setup.officeppe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31222893515551991299814208284826661815385440763248970125543740591786383618767043233117713793162885895688705710229260341652303890122691303918556929232387961261456194592358474490690498102234200801397591813190023189719959718757961893881460830247707868084053448623929877287961021080602248305309601709950896718684148086270880630219546641793431848922956668864913685080182916502920879271279420749495057806619569101588573466909598153497608369085292894624086776638661165814902047376375698420209495528637029830562125119610459181061750323988764215402222810784801053112583318413050768258043240334124639600074244071265366252251693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd32005aa3dd3e5000196153fe2bfad2cb86a43f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (229 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setup.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.setup.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setupoffice.omex.officeppe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.setupoffice.omex.officeppe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external.omex.officeppe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'external.omex.officeppe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setup.microsoft365ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.setup.microsoft365ppe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f67e2fbd80a34ab2705bebdf9a1fd8edca618007
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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