007dam1l40se01.007d.dedicated.lync.com

- Microsoft Corporation -

Issued by MSIT Machine Auth CA 2

About this certificate

This digital certificate with serial number 28:48:54:4a:00:01:00:00:58:35 was issued on byMSIT Machine Auth CA 2.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate, for public certificates this should not be an internal name (BRs: 7.1.2.10.3)

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: MSO
State / Province: WA
Locality: Redmond
Country: US

MSIT Machine Auth CA 2

This certificate has expire since

Certificate Details

Serial Number (hex): 28:48:54:4a:00:01:00:00:58:35
Serial Number (int): 190228898555144653789237
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: a7:bb:b7:76:a2:ca:e4:c6:83:21:fa:00:90:26:e9:bb:bf:d3:1b:d2
AuthorityKeyId: eb:db:11:5e:f8:09:9e:d8:d6:62:9c:fd:62:9d:e3:84:4a:28:e1:27

Fingerprint (sha1): 27:c3:03:2d:27:bd:a9:58:c5:2d:65:dd:a3:d3:3f:9e:58:c8:51:46
Fingerprint (sha256): 13:bf:ba:4c:30:a3:f9:7e:86:b0:54:f4:c4:68:0f:0a:7c:f7:64:9e:15:b8:cd:78:79:39:f5:d3:48:e9:b9:8c

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/MSIT%20Machine%20Auth%20CA%202(1).crt
Issuing Certificate URL: http://corppki/aia/MSIT%20Machine%20Auth%20CA%202(1).crt

Revocation information

CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/MSIT%20Machine%20Auth%20CA%202(1).crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/MSIT%20Machine%20Auth%20CA%202(1).crl
CRL Distribution Point: http://corppki/crl/MSIT%20Machine%20Auth%20CA%202(1).crl

Check the revocation status for certificate 007dam1l40se01.007d.dedicated.lync.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 007dam1l40se01.007d.dedicated.lync.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

007dam1l40se01.007d.dedicated.lync.com
pa1.007d.dedicated.lync.com
sipint1.007d.dedicated.lync.com
sipint2.007d.dedicated.lync.com
portal.007d.dedicated.lync.com

Other certificates including the domain name lync.com

(limited to 100 certificates)
am1011dl50pl1.011d.dedicated.lync.com
am3027dl50wa1a.027D.mgd.msft.net
db3011dl50wa1a.mgdphg.emi.philips.com
sipfed.007d.dedicated.lync.com
apinternal.messenger.msn.com
images.partner.windowsphone.com
ucwa.lync.com
br1021dl50se05.021d.dedicated.lync.com
was.062d.dedicated.lync.com
sn1027dl50se02.027d.dedicated.lync.com
tk5012dl50se01.012d.dedicated.lync.com
ap2.007d.dedicated.lync.com
sn2055dl50se02.055d.dedicated.lync.com
br1009dl50se03.009d.dedicated.lync.com
ch1062dl50se04.062d.dedicated.lync.com
br1012dl50se03.012D.dedicated.lync.com
tk5009dl50se01.009d.dedicated.lync.com
sn2059dl60se01.059d.dedicated.lync.com
sn1029dl50se01.029d.dedicated.lync.com
cy1003dscomgw01.003d.dedicated.lync.com
056dCH1L40SE01.056d.dedicated.lync.com
ch1059dl50se02.059d.dedicated.lync.com
db3054dl50se02.054d.dedicated.lync.com
ap2.059d.dedicated.lync.com
sn1021dl50se01.021d.dedicated.lync.com
*.cqd.lync.com
ap2.059d.dedicated.lync.com
ap2.059d.dedicated.lync.com
tk5003dl50se01.003d.dedicated.lync.com
db3023dl50pl1.023d.dedicated.lync.com
ap2.033d.dedicated.lync.com
ap2.033d.dedicated.lync.com
db3054dl50wa1a.054d.mgd.msft.net
am1011dl50pl1.011d.dedicated.lync.com
sipfed.008F.federal.lync.com
am1023dl50pl1.023d.dedicated.lync.com
SkypeDCWA.mt.certdojo.lync.com
db3011dl50pl1.011d.dedicated.lync.com
sn1034dl50se01.034d.dedicated.lync.com
sn1023dl50pl1.023d.dedicated.lync.com
sn1020dl50se01.020d.dedicated.lync.com
br1005dl50se01.005d.dedicated.lync.com
phiham.CertDojoTest.lync.com
sn1019dl50se01.019d.dedicated.lync.com
033dCH1L40SE01.033d.dedicated.lync.com
edge.skype.com
edge.skype.com
sn1021dl50se05.021d.dedicated.lync.com
ap1.993d.dedicated.lync.com
db5027dscomgw01.027d.dedicated.lync.com
am1011dl50pl1.011d.dedicated.lync.com
sn1019dl50se05.019d.dedicated.lync.com
sn2067dl50se01.067d.dedicated.lync.com
am1023dl50pl1.023d.dedicated.lync.com
DCWAGenevaMonitoring.prod.lync.com
033dCH1L40SE01.033d.dedicated.lync.com
co1027dl50se01.027d.dedicated.lync.com
ch1062dl50se02.062d.dedicated.lync.com
am3050dl50se02.050d.dedicated.lync.com
co1027dl50se01.027d.dedicated.lync.com
ch1059dl60ed1.059d.dedicated.lync.com
am1067dl50se01.067d.dedicated.lync.com
ch1053dl50se02.053d.dedicated.lync.com
ae2.063d.dedicated.lync.com
am1023dl50pl1.023d.dedicated.lync.com
sipfed.059d.dedicated.lync.com
am1011dl50pl1.011d.dedicated.lync.com
oauth.003d.dedicated.lync.com
056dSN2L40SE01.056d.dedicated.lync.com
db3023dl50pl1.023d.dedicated.lync.com
db5027dscomgw01.027d.dedicated.lync.com
sn2062dl50se02.062d.dedicated.lync.com
tk5009dl50se02.009d.dedicated.lync.com
tsgw.online.lync.com
am1011dl50pl1.011d.dedicated.lync.com
tk5009dl50se04.009d.dedicated.lync.com
am1023dl50pl1.023d.dedicated.lync.com
*.online.lync.com
dm3003dl60pl1.003d.dedicated.lync.com
057dCH1L40SE02.057d.dedicated.lync.com
007dam1l40se01.007d.dedicated.lync.com
db3054dl50se02.054d.dedicated.lync.com
ch1053dl50se01.053d.dedicated.lync.com
sn2056dl50se06.056d.dedicated.lync.com
*.online.lync.com
db3007dl50se03.007d.dedicated.lync.com
am1019dl50se07.019d.dedicated.lync.com
co1029dl50se01.029d.dedicated.lync.com
tsgw-tip.online.lync.com
sn2059dl50wa1a.059d.mgd.msft.net
am1050dl50se01.050d.dedicated.lync.com
ch1032dl50se01.032d.dedicated.lync.com
edge.skype.com
db5027dl60pl1.027d.dedicated.lync.com
sipfed.online.lync.com
br1009dl50se02.009d.dedicated.lync.com
062dch1l40se03.062d.dedicated.lync.com
userpoolbe.online.lync.com
db3011dl50pl1.011d.dedicated.lync.com
sn2059dl50se02.059d.dedicated.lync.com

Certificate

The complete raw certificate details for 007dam1l40se01.007d.dedicated.lync.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu935mvcJdXCgkd+ruGf8
EJP91V0RMBs3uSGgc8Mj90C03WyqLnT92gtQTBC3SxPkzcNPOQN0nwTok7CxUpm0
/EgaZAu/b0H/F/i/R+sx3WwSwfOV0ssaNwcwPyjZLk5OLosaQjOIGq8jTEox872o
8YY6RNWZZxoGlrOHrSm/Jows3f4LNwwnatz1APyQcBmLJdB7/cNR7mOfeF34W1kR
oIYali1iAGdvIWO3OtDrxtPjr3K2LVb/V039d5uNjtYrqI47tJWJetsBMDugF7gx
DMiuZ+5dzZ/dxMuXUsW5+xlK48XRJksSxRAg4EMZFeDjIfFcZ5JH4ZTC4crZQlcW
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 190228898555144653789237
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'microsoft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'corp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MSIT Machine Auth CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-04 15:16:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-04 15:16:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MSO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '007dam1l40se01.007d.dedicated.lync.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23716022991051948714307053863835527392708575788853691418173070372619139673636375566130937049857706895476835110925829103351777083796241506170673580785347801241657982928600538368047288817002687625251010451734225709208340259442204132607789791786292938450016275937251078732542211871709163540400473706485028767752393713232998223725244000379553050936085044713101550168833384519322609185385568212176616707997777203482684352669136442908440066288969019731806949795642047525520398244265992992284393682588802752473017207626651147592716055142763506454605814040947401541276415163764922531075089188609677975165647699683573413385813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER asn1: structure error: base 128 integer too large
1.3.6.1.4.1.311.21.8.7587021.751874.11030412.6202749.3702260.207.945504904.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a7bbb776a2cae4c68321fa009026e9bbbfd31bd2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (170 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '007dam1l40se01.007d.dedicated.lync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pa1.007d.dedicated.lync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipint1.007d.dedicated.lync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipint2.007d.dedicated.lync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.007d.dedicated.lync.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebdb115ef8099ed8d6629cfd629de3844a28e127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (230 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/MSIT%20Machine%20Auth%20CA%202(1).crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/MSIT%20Machine%20Auth%20CA%202(1).crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://corppki/crl/MSIT%20Machine%20Auth%20CA%202(1).crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/MSIT%20Machine%20Auth%20CA%202(1).crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://corppki/aia/MSIT%20Machine%20Auth%20CA%202(1).crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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