tk5009dl50se04.009d.dedicated.lync.com

- Microsoft Corporation -

Issued by Microsoft IT SSL SHA2

About this certificate

This digital certificate with serial number 5a:00:02:23:0f:36:22:68:95:fb:53:66:52:00:01:00:02:23:0f was issued on by Microsoft Corporation.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:00:02:23:0f:36:22:68:95:fb:53:66:52:00:01:00:02:23:0f
Serial Number (int): 2007067795034452206209100033521524123392680719
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 83:c8:06:11:93:fc:02:82:ba:4e:46:b3:3c:d9:47:a5:96:fb:f0:0e
AuthorityKeyId: 51:af:24:26:9c:f4:68:22:57:80:26:2b:3b:46:62:15:7b:1e:cc:a5

Fingerprint (sha1): cb:d4:2b:44:94:63:0f:20:a5:36:8d:78:07:17:8a:6e:d1:d9:52:c7
Fingerprint (sha256): 12:f4:c5:5b:aa:db:d2:9d:08:d0:13:2c:5a:35:79:40:6f:30:38:60:c7:67:39:3b:7a:5d:7c:83:37:0d:da:55

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/msitwww2.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/msitwww2.crl

Check the revocation status for certificate tk5009dl50se04.009d.dedicated.lync.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tk5009dl50se04.009d.dedicated.lync.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sipint1.009d.dedicated.lync.com
rp1.009d.dedicated.lync.com
rp2.009d.dedicated.lync.com
portal.009d.dedicated.lync.com
sipint2.009d.dedicated.lync.com
tk5009dl50se04.009d.dedicated.lync.com
we2se04.009d.dedicated.lync.com

Other certificates including the domain name lync.com

(limited to 100 certificates)
am1011dl50pl1.011d.dedicated.lync.com
am3027dl50wa1a.027D.mgd.msft.net
db3011dl50wa1a.mgdphg.emi.philips.com
sipfed.007d.dedicated.lync.com
apinternal.messenger.msn.com
images.partner.windowsphone.com
ucwa.lync.com
br1021dl50se05.021d.dedicated.lync.com
was.062d.dedicated.lync.com
sn1027dl50se02.027d.dedicated.lync.com
tk5012dl50se01.012d.dedicated.lync.com
ap2.007d.dedicated.lync.com
sn2055dl50se02.055d.dedicated.lync.com
br1009dl50se03.009d.dedicated.lync.com
ch1062dl50se04.062d.dedicated.lync.com
br1012dl50se03.012D.dedicated.lync.com
tk5009dl50se01.009d.dedicated.lync.com
sn2059dl60se01.059d.dedicated.lync.com
sn1029dl50se01.029d.dedicated.lync.com
cy1003dscomgw01.003d.dedicated.lync.com
056dCH1L40SE01.056d.dedicated.lync.com
ch1059dl50se02.059d.dedicated.lync.com
db3054dl50se02.054d.dedicated.lync.com
ap2.059d.dedicated.lync.com
sn1021dl50se01.021d.dedicated.lync.com
*.cqd.lync.com
ap2.059d.dedicated.lync.com
ap2.059d.dedicated.lync.com
tk5003dl50se01.003d.dedicated.lync.com
db3023dl50pl1.023d.dedicated.lync.com
ap2.033d.dedicated.lync.com
ap2.033d.dedicated.lync.com
db3054dl50wa1a.054d.mgd.msft.net
am1011dl50pl1.011d.dedicated.lync.com
sipfed.008F.federal.lync.com
am1023dl50pl1.023d.dedicated.lync.com
SkypeDCWA.mt.certdojo.lync.com
db3011dl50pl1.011d.dedicated.lync.com
sn1034dl50se01.034d.dedicated.lync.com
sn1023dl50pl1.023d.dedicated.lync.com
sn1020dl50se01.020d.dedicated.lync.com
br1005dl50se01.005d.dedicated.lync.com
phiham.CertDojoTest.lync.com
sn1019dl50se01.019d.dedicated.lync.com
033dCH1L40SE01.033d.dedicated.lync.com
edge.skype.com
edge.skype.com
sn1021dl50se05.021d.dedicated.lync.com
ap1.993d.dedicated.lync.com
db5027dscomgw01.027d.dedicated.lync.com
am1011dl50pl1.011d.dedicated.lync.com
sn1019dl50se05.019d.dedicated.lync.com
sn2067dl50se01.067d.dedicated.lync.com
am1023dl50pl1.023d.dedicated.lync.com
DCWAGenevaMonitoring.prod.lync.com
033dCH1L40SE01.033d.dedicated.lync.com
co1027dl50se01.027d.dedicated.lync.com
ch1062dl50se02.062d.dedicated.lync.com
am3050dl50se02.050d.dedicated.lync.com
co1027dl50se01.027d.dedicated.lync.com
ch1059dl60ed1.059d.dedicated.lync.com
am1067dl50se01.067d.dedicated.lync.com
ch1053dl50se02.053d.dedicated.lync.com
ae2.063d.dedicated.lync.com
am1023dl50pl1.023d.dedicated.lync.com
sipfed.059d.dedicated.lync.com
am1011dl50pl1.011d.dedicated.lync.com
oauth.003d.dedicated.lync.com
056dSN2L40SE01.056d.dedicated.lync.com
db3023dl50pl1.023d.dedicated.lync.com
db5027dscomgw01.027d.dedicated.lync.com
sn2062dl50se02.062d.dedicated.lync.com
tk5009dl50se02.009d.dedicated.lync.com
tsgw.online.lync.com
am1011dl50pl1.011d.dedicated.lync.com
tk5009dl50se04.009d.dedicated.lync.com
am1023dl50pl1.023d.dedicated.lync.com
*.online.lync.com
dm3003dl60pl1.003d.dedicated.lync.com
057dCH1L40SE02.057d.dedicated.lync.com
007dam1l40se01.007d.dedicated.lync.com
db3054dl50se02.054d.dedicated.lync.com
ch1053dl50se01.053d.dedicated.lync.com
sn2056dl50se06.056d.dedicated.lync.com
*.online.lync.com
db3007dl50se03.007d.dedicated.lync.com
am1019dl50se07.019d.dedicated.lync.com
co1029dl50se01.029d.dedicated.lync.com
tsgw-tip.online.lync.com
sn2059dl50wa1a.059d.mgd.msft.net
am1050dl50se01.050d.dedicated.lync.com
ch1032dl50se01.032d.dedicated.lync.com
edge.skype.com
db5027dl60pl1.027d.dedicated.lync.com
sipfed.online.lync.com
br1009dl50se02.009d.dedicated.lync.com
062dch1l40se03.062d.dedicated.lync.com
userpoolbe.online.lync.com
db3011dl50pl1.011d.dedicated.lync.com
sn2059dl50se02.059d.dedicated.lync.com

Certificate

The complete raw certificate details for tk5009dl50se04.009d.dedicated.lync.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplZsXlywco7DZrC2JSCe
fi0EMrbE89qjTqaHuHUpl7RvO9DpWUU5d3psrmeksg3a+y6yTeihkWqcq4ClgoBb
J9e6Vn9/GuOzhjp8+foLrlYbgR6IhT4YX5csbShft+Gfj74tC9FVYwnVgZOPpb3V
AC40nzHf2ZJK/g63yaKTNQOUlPCh83FGS1Jo7bpoEqa0iTHIhhFUu3m7kj0txBQj
WXLbEYkLone3w56Bz9sOuW4r8neukacHkhPau+r0FQH7AFLL9JYNBoMsxZMpLkRR
hiOS378ScHvjS+jGmi8bbEBUYk3X/G/xoZl9LHQ/vyQi37F6kfPqwHaaWGXnF+0+
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2007067795034452206209100033521524123392680719
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT SSL SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-29 18:59:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-28 18:59:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tk5009dl50se04.009d.dedicated.lync.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20998175549273244154716727414959739694637983975150459975727186245876361573517508249097755415604789821254583645808040196521681965399616442617014679922428427806844571245720017429759470904087839176937982578103202572572914015035342857617256608400672993802238277780567440688858732691308967049900333538248477031387579561209235126174327818229697403724757887294862384119036331140208502744016543405478274414504005118538776876259736333246326991109135713775925678276170507583652223313021753600634659770892259871914847391668499575111361192840306979050515165393609531680364129230298121985829402540170611110260999548317787436695241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83c8061193fc0282ba4e46b33cd947a596fbf00e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (232 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipint1.009d.dedicated.lync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp1.009d.dedicated.lync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp2.009d.dedicated.lync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.009d.dedicated.lync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipint2.009d.dedicated.lync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk5009dl50se04.009d.dedicated.lync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'we2se04.009d.dedicated.lync.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 51af24269cf468225780262b3b4662157b1ecca5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/msitwww2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/msitwww2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps�'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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