*.dev.storage.live-int.com

Issued by Microsoft RSA TLS CA 01

About this certificate

This digital certificate with serial number 6b:00:01:09:b2:b3:24:d0:4a:40:de:49:4e:00:00:00:01:09:b2 was issued on by Microsoft Corporation.

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=*.dev.storage.live-int.com

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:00:01:09:b2:b3:24:d0:4a:40:de:49:4e:00:00:00:01:09:b2
Serial Number (int): 2386180089416057867961780540488218215043893682
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 01:55:93:7e:cf:e2:5f:c9:71:8d:13:5e:3d:7d:0b:c3:55:86:72:71
AuthorityKeyId: b5:76:0c:30:11:ce:c7:92:42:4d:4c:c7:5c:2c:c8:a9:0c:e8:0b:64

Fingerprint (sha1): a2:68:e6:ac:a9:4c:57:94:03:9b:8c:a9:bd:43:8c:47:6b:c0:18:b6
Fingerprint (sha256): 12:96:12:7e:29:c0:d8:bd:48:4c:6d:ea:83:b3:ca:6a:b3:d0:3d:89:b1:33:f3:79:13:80:3d:d8:71:52:3a:00

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl

Check the revocation status for certificate *.dev.storage.live-int.com

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dev.storage.live-int.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dev.storage.live-int.com
*.docs-dev.live-tst.net
*.skyapi-dev.live-tst.net
*.dev.docs.live-tst.net
*.dev.settings.live-int.net
*.dev.storage.msn-int.com
dev.docs.live-tst.net
dev.policies.live-int.net
dev.settings.live-int.net
dev.storage.live-int.com
dev.storage.msn-int.com
docs-dev.live-tst.net
skyapi-dev.live-tst.net
*.dev.policies.live-tst.net
*.dev.settings.live-tst.net
*.skyapi.skydrive-dev.live-int.com
dev.policies.live-tst.net
dev.settings.live-tst.net
skyapi.skydrive-dev.live-int.com
skyapi.onedrive-dev.live-int.com
*.skyapi.onedrive-dev.live-int.com
dev.s2s-policies.live-tst.net
dev.s2s-storage.live-int.com
s2s-skyapi-dev.live-tst.net
*.dev.policies.live-int.com
*.dev.s2s-policies.live-tst.net
*.dev.s2s-settings.live-tst.net
*.dev.s2s-storage.live-int.com
*.dev-files.1drv-int.com
dev.api.onedrive-tst.com
*.dev.api.onedrive-tst.com
dev.people.onedrive-tst.com
dev.s2s-api.onedrive-tst.com
*.dev.s2s-api.onedrive-tst.com
*.test.dev.settings.live-tst.net
*.test.dev.policies.live-tst.net
*.test.dev.docs.live-tst.net
*.test.docs-dev.live-tst.net
*.test.skyapi-dev.live-tst.net
*.test.skyapi.skydrive-dev.live-int.com
*.test.skyapi.onedrive-dev.live-int.com
*.test.dev.people.onedrive-tst.com
*.test.dev.s2s-api.onedrive-tst.com
*.test.dev.storage.live-int.com
*.test.dev-files.1drv-int.com
*.test.dev.s2s-storage.live-int.com
*.test.dev.s2s-policies.live-tst.net
*.test.dev.api.onedrive-tst.com
*.test.dev.settings.live-int.net
*.test.dev.storage.msn-int.com
*.test.dev.policies.live-int.net
*.test.s2s-skyapi-dev.live-tst.net
*.test.dev.policies.live-int.com
*.test.dev.s2s-settings.live-tst.net
d.dev.docs.live-tst.net
*.d.dev.docs.live-tst.net
dev.s2s-skyapi-dev.live-tst.net
*.dev.s2s-skyapi-dev.live-tst.net
cdn-origin.dc1.dev-files.1drv-int.com
cdn-origin.dc2.dev-files.1drv-int.com
dev.storage.live.com

Other certificates including the domain name live-int.com

(limited to 100 certificates)
xd.live-int.com
entitlement.int2.onecare.live-int.com
login.live-int.com
images.partner.windowsphone.com
graph.windows.net
*.osi.office-int.net
*.osi.office-int.net
*.login.live-int.com
notify.mpnstress1.live-int.com
msm.live-int.com
graph.windows.net
graph.windows.net
SigningCert.login.live-int.com
graph.windows.net
skype-certapiqa-msaautocsrint.login.live-int.com
b.familysafety.microsoft.com
graph.windows.net
graph.windows.net
clientauthentication.retailer.officeapps.live-int.com
*.m2.tiles.live-int.com
profile-bvt.live-int.com
*.login.live-int.com
*.vo.msecnd.net
login.live-int.com
graph.windows.net
graph.windows.net
login.live-int.com
storage.live.com
graph.windows.net
Devices-gd.live-int.com
*.samples.live-int.com
graph.windows.net
buy.live-int.com
skype-certapiqa-msaautocsrint.login.live-int.com
api.choice.microsoft-int.com
support.msn-int.com
pptcs.officeapps.live-int.com
graph.windows.net
account.live-int.com
login.live-int.com
onedrive.live-int.com
graph.windows.net
graph.windows.net
*.login.live-int.com
login.live-int.com
graph.windows.net
graph.windows.net
msm.live-int.com
ieonline.live-int.com
account.live-int.com
graph.windows.net
graph.windows.net
stateservice.officeapps.live-int.com
PubSubAutoCSRClient.login.live-int.com
graph.windows.net
mid.live-int.com
captions.officeapps.live-int.com
login.live-int.com
f2.push.live-int.com
login.live.com
graph.windows.net
graph.windows.net
*.location.live-int.com
graph.windows.net
graph.windows.net
graph.windows.net
*.login.live-int.com
login.live-int.com
storage.live.com
api-s3.live-int.com
*.osi.office-int.net
pptcs.officeapps.live-int.com
graph.windows.net
busbuy.live-int.com
graph.windows.net
account.live-int.com
*.osi.office-int.net
*.osi.office-int.net
login.live-int.com
graph.windows.net
login.live-int.com
account.live-int.com
ols-idsapi.officeapps.live-int.com
ieonline.live-int.com
graph.windows.net
*.osi.office-int.net
hubblecontent.osi.office-int.net
hubble.officeapps.live-int.com
graph.windows.net
odcsm-aad-int.officeapps.live-int.com
*.login.live-int.com
graph.windows.net
onedrive.live-int.com
graph.windows.net
graph.windows.net
login.live-int.com
graph.windows.net
cns.fss.live-int.com
s2s.aliasdirectory.live-int.com
wus-000.pptcs.officeapps.live-int.com

Certificate

The complete raw certificate details for *.dev.storage.live-int.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN/DCCC+SgAwIBAgITawABCbKzJNBKQN5JTgAAAAEJsjANBgkqhkiG9w0BAQsF
ADBPMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
MSAwHgYDVQQDExdNaWNyb3NvZnQgUlNBIFRMUyBDQSAwMTAeFw0yMDEwMjAyMDE3
MjFaFw0yMTEwMjAyMDE3MjFaMCUxIzAhBgNVBAMMGiouZGV2LnN0b3JhZ2UubGl2
ZS1pbnQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM7W/rbl
Lqh2iFH9IYZ9eZ4TLlFEat4u8Cv3i7YnWfxrCUTxl+UtVEiCTISCGvN4jxRUW7H6
WCECAAPdqUzDfoqZmBJIc12rkVUc2/jxsrszVb4MSrX1FnQgs2zs79PgZKGZJZ/k
tjamFNZOrLJHWTC+uPJ/sWRefwy2co5UFsu8nnVoZ0qKx+UFFcmAISitJi5u/Qx0
OiFbzqAAJzTYcN0u1AePDK7lWyUX9JZ1lC/xQ04+zpaoq6BG5xXSRPjmAq2O6vYb
NmFQL83JpoYdFcp42rqXrhqt3d8Kih9vq/H3XHsDZD0ez9gkApJ3FxEF9v7KrYzQ
71uD6LvN1YbYwQIDAQABo4IJ+TCCCfUwEwYKKwYBBAHWeQIEAwEB/wQCBQAwJwYJ
KwYBBAGCNxUKBBowGDAKBggrBgEFBQcDATAKBggrBgEFBQcDAjA+BgkrBgEEAYI3
FQcEMTAvBicrBgEEAYI3FQiH2oZ1g+7ZAYLJhRuBtZ5hhfTrYIFdhYaOQYfCmFAC
AWQCASUwgYcGCCsGAQUFBwEBBHsweTBTBggrBgEFBQcwAoZHaHR0cDovL3d3dy5t
aWNyb3NvZnQuY29tL3BraS9tc2NvcnAvTWljcm9zb2Z0JTIwUlNBJTIwVExTJTIw
Q0ElMjAwMS5jcnQwIgYIKwYBBQUHMAGGFmh0dHA6Ly9vY3NwLm1zb2NzcC5jb20w
HQYDVR0OBBYEFAFVk37P4l/JcY0TXj19C8NVhnJxMAsGA1UdDwQEAwIEsDCCB3EG
A1UdEQSCB2gwggdkghoqLmRldi5zdG9yYWdlLmxpdmUtaW50LmNvbYIXKi5kb2Nz
LWRldi5saXZlLXRzdC5uZXSCGSouc2t5YXBpLWRldi5saXZlLXRzdC5uZXSCFyou
ZGV2LmRvY3MubGl2ZS10c3QubmV0ghsqLmRldi5zZXR0aW5ncy5saXZlLWludC5u
ZXSCGSouZGV2LnN0b3JhZ2UubXNuLWludC5jb22CFWRldi5kb2NzLmxpdmUtdHN0
Lm5ldIIZZGV2LnBvbGljaWVzLmxpdmUtaW50Lm5ldIIZZGV2LnNldHRpbmdzLmxp
dmUtaW50Lm5ldIIYZGV2LnN0b3JhZ2UubGl2ZS1pbnQuY29tghdkZXYuc3RvcmFn
ZS5tc24taW50LmNvbYIVZG9jcy1kZXYubGl2ZS10c3QubmV0ghdza3lhcGktZGV2
LmxpdmUtdHN0Lm5ldIIbKi5kZXYucG9saWNpZXMubGl2ZS10c3QubmV0ghsqLmRl
di5zZXR0aW5ncy5saXZlLXRzdC5uZXSCIiouc2t5YXBpLnNreWRyaXZlLWRldi5s
aXZlLWludC5jb22CGWRldi5wb2xpY2llcy5saXZlLXRzdC5uZXSCGWRldi5zZXR0
aW5ncy5saXZlLXRzdC5uZXSCIHNreWFwaS5za3lkcml2ZS1kZXYubGl2ZS1pbnQu
Y29tgiBza3lhcGkub25lZHJpdmUtZGV2LmxpdmUtaW50LmNvbYIiKi5za3lhcGku
b25lZHJpdmUtZGV2LmxpdmUtaW50LmNvbYIdZGV2LnMycy1wb2xpY2llcy5saXZl
LXRzdC5uZXSCHGRldi5zMnMtc3RvcmFnZS5saXZlLWludC5jb22CG3Mycy1za3lh
cGktZGV2LmxpdmUtdHN0Lm5ldIIbKi5kZXYucG9saWNpZXMubGl2ZS1pbnQuY29t
gh8qLmRldi5zMnMtcG9saWNpZXMubGl2ZS10c3QubmV0gh8qLmRldi5zMnMtc2V0
dGluZ3MubGl2ZS10c3QubmV0gh4qLmRldi5zMnMtc3RvcmFnZS5saXZlLWludC5j
b22CGCouZGV2LWZpbGVzLjFkcnYtaW50LmNvbYIYZGV2LmFwaS5vbmVkcml2ZS10
c3QuY29tghoqLmRldi5hcGkub25lZHJpdmUtdHN0LmNvbYIbZGV2LnBlb3BsZS5v
bmVkcml2ZS10c3QuY29tghxkZXYuczJzLWFwaS5vbmVkcml2ZS10c3QuY29tgh4q
LmRldi5zMnMtYXBpLm9uZWRyaXZlLXRzdC5jb22CICoudGVzdC5kZXYuc2V0dGlu
Z3MubGl2ZS10c3QubmV0giAqLnRlc3QuZGV2LnBvbGljaWVzLmxpdmUtdHN0Lm5l
dIIcKi50ZXN0LmRldi5kb2NzLmxpdmUtdHN0Lm5ldIIcKi50ZXN0LmRvY3MtZGV2
LmxpdmUtdHN0Lm5ldIIeKi50ZXN0LnNreWFwaS1kZXYubGl2ZS10c3QubmV0gicq
LnRlc3Quc2t5YXBpLnNreWRyaXZlLWRldi5saXZlLWludC5jb22CJyoudGVzdC5z
a3lhcGkub25lZHJpdmUtZGV2LmxpdmUtaW50LmNvbYIiKi50ZXN0LmRldi5wZW9w
bGUub25lZHJpdmUtdHN0LmNvbYIjKi50ZXN0LmRldi5zMnMtYXBpLm9uZWRyaXZl
LXRzdC5jb22CHyoudGVzdC5kZXYuc3RvcmFnZS5saXZlLWludC5jb22CHSoudGVz
dC5kZXYtZmlsZXMuMWRydi1pbnQuY29tgiMqLnRlc3QuZGV2LnMycy1zdG9yYWdl
LmxpdmUtaW50LmNvbYIkKi50ZXN0LmRldi5zMnMtcG9saWNpZXMubGl2ZS10c3Qu
bmV0gh8qLnRlc3QuZGV2LmFwaS5vbmVkcml2ZS10c3QuY29tgiAqLnRlc3QuZGV2
LnNldHRpbmdzLmxpdmUtaW50Lm5ldIIeKi50ZXN0LmRldi5zdG9yYWdlLm1zbi1p
bnQuY29tgiAqLnRlc3QuZGV2LnBvbGljaWVzLmxpdmUtaW50Lm5ldIIiKi50ZXN0
LnMycy1za3lhcGktZGV2LmxpdmUtdHN0Lm5ldIIgKi50ZXN0LmRldi5wb2xpY2ll
cy5saXZlLWludC5jb22CJCoudGVzdC5kZXYuczJzLXNldHRpbmdzLmxpdmUtdHN0
Lm5ldIIXZC5kZXYuZG9jcy5saXZlLXRzdC5uZXSCGSouZC5kZXYuZG9jcy5saXZl
LXRzdC5uZXSCH2Rldi5zMnMtc2t5YXBpLWRldi5saXZlLXRzdC5uZXSCISouZGV2
LnMycy1za3lhcGktZGV2LmxpdmUtdHN0Lm5ldIIlY2RuLW9yaWdpbi5kYzEuZGV2
LWZpbGVzLjFkcnYtaW50LmNvbYIlY2RuLW9yaWdpbi5kYzIuZGV2LWZpbGVzLjFk
cnYtaW50LmNvbYIUZGV2LnN0b3JhZ2UubGl2ZS5jb20wgbAGA1UdHwSBqDCBpTCB
oqCBn6CBnIZNaHR0cDovL21zY3JsLm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9j
cmwvTWljcm9zb2Z0JTIwUlNBJTIwVExTJTIwQ0ElMjAwMS5jcmyGS2h0dHA6Ly9j
cmwubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9NaWNyb3NvZnQlMjBSU0El
MjBUTFMlMjBDQSUyMDAxLmNybDBXBgNVHSAEUDBOMEIGCSsGAQQBgjcqATA1MDMG
CCsGAQUFBwIBFidodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9j
cHMwCAYGZ4EMAQIBMB8GA1UdIwQYMBaAFLV2DDARzseSQk1Mx1wsyKkM6AtkMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAgEA
ZSqK/4FDs8OIYjGbjgpGrHD7Yrn6wimTgSbHOuPuBCQhIOUnn9tW18cq0HYWEFrC
63ePUeBBNPDUij/j0rVHF87bOkfbWDq2bvcpLlcf+PniCdPSOE4SGJ0EC0qvyxOx
7ZOJhZloe/inT2GptZwBTZuajb/OKI/BdpvP6vHo+Xm0T3QR8Oztc4HH4zRmW5vi
xnBjup+/TDuM4FJ1tx3GtDD1rd3Hx9G3En2RMtbY0Zvr944GiAMZGmUPevVUpX9R
JnjMxmGcIxeKDK8UGNCCuj0yAjxbhOxpNZoKDulBO9SxhSFj5vbA/3OISGquzzQi
xGKz5lYSql73vd7yQUowQVF//o0r557H3CoCeRuds78JdRgLvC2civNJCmCA3337
VKDxVLBvO4Ikq/RSQZLtwHFRQUACpOxoOyal2x8nErdDkVO9NkBVw6oAHcJQ6ths
H8OCBAAQanLsg9t0eJHGA2qqLavC41OIL1gPrcHb4vqLWzfG2MYVd/Zs7cDC5Ym1
oTNWfpGPQEUNdhrcs5FESxYkw3U1XIejY6vZA6r0kHP1rI6ON7jzyMmK40MuoC2P
6N/Othx5sYVnnoSIsdvuhCkZ7MOj7NX+wC6So1fNZ3nKctgiJvhhXLRlmP5zETha
XgJu6Zbe3KQ1xmrY2O9c9IkDl0MHXLCiNDQQzRQB48g=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM7W/rblLqh2iFH9IYZ9
eZ4TLlFEat4u8Cv3i7YnWfxrCUTxl+UtVEiCTISCGvN4jxRUW7H6WCECAAPdqUzD
foqZmBJIc12rkVUc2/jxsrszVb4MSrX1FnQgs2zs79PgZKGZJZ/ktjamFNZOrLJH
WTC+uPJ/sWRefwy2co5UFsu8nnVoZ0qKx+UFFcmAISitJi5u/Qx0OiFbzqAAJzTY
cN0u1AePDK7lWyUX9JZ1lC/xQ04+zpaoq6BG5xXSRPjmAq2O6vYbNmFQL83JpoYd
Fcp42rqXrhqt3d8Kih9vq/H3XHsDZD0ez9gkApJ3FxEF9v7KrYzQ71uD6LvN1YbY
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2386180089416057867961780540488218215043893682
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft RSA TLS CA 01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-20 20:17:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-20 20:17:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dev.storage.live-int.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20300125313312083061872429919244171002642449106366568695078770773176901492232284125218697910873192785875160511720621549033830148061878105628594148786213993677551432761599748817413312096326967319517630932960232692791255712531692281629077476848055076975860211345296231297371008280330702310851940525455732714383910328479392545041577162014632501682420274229392107888653379507877846948897384529011688458479259821945406338877820213784531659877919902712870103017769265240434442805647073924685606350104069131826824463914252738381351764379482017629664876610641827964901869109886139708758258475148286596349887644607603966138561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.10585921.15764560
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0155937ecfe25fc9718d135e3d7d0bc355867271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1896 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.storage.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.docs-dev.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skyapi-dev.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.docs.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.settings.live-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.storage.msn-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.docs.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.policies.live-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.settings.live-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.storage.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.storage.msn-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs-dev.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyapi-dev.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.policies.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.settings.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skyapi.skydrive-dev.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.policies.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.settings.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyapi.skydrive-dev.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyapi.onedrive-dev.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skyapi.onedrive-dev.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.s2s-policies.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.s2s-storage.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2s-skyapi-dev.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.policies.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.s2s-policies.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.s2s-settings.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.s2s-storage.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-files.1drv-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.api.onedrive-tst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.api.onedrive-tst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.people.onedrive-tst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.s2s-api.onedrive-tst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.s2s-api.onedrive-tst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.dev.settings.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.dev.policies.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.dev.docs.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.docs-dev.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.skyapi-dev.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.skyapi.skydrive-dev.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.skyapi.onedrive-dev.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.dev.people.onedrive-tst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.dev.s2s-api.onedrive-tst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.dev.storage.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.dev-files.1drv-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.dev.s2s-storage.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.dev.s2s-policies.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.dev.api.onedrive-tst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.dev.settings.live-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.dev.storage.msn-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.dev.policies.live-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.s2s-skyapi-dev.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.dev.policies.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.dev.s2s-settings.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd.dev.docs.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d.dev.docs.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.s2s-skyapi-dev.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.s2s-skyapi-dev.live-tst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-origin.dc1.dev-files.1drv-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-origin.dc2.dev-files.1drv-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.storage.live.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b5760c3011cec792424d4cc75c2cc8a90ce80b64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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