sn2059dl50wa1a.059d.mgd.msft.net

- Microsoft Corporation -

Issued by Microsoft IT TLS CA 1

About this certificate

This digital certificate with serial number 7b:00:04:11:9e:40:52:bb:cc:12:9d:15:88:00:00:00:04:11:9e was issued on by Microsoft Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:00:04:11:9e:40:52:bb:cc:12:9d:15:88:00:00:00:04:11:9e
Serial Number (int): 2742993043967297791199185286369445432594272670
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 4c:b4:d3:37:a4:d4:9a:18:bb:95:7b:df:2c:98:5d:ed:6d:2f:5a:d0
AuthorityKeyId: 58:88:9f:d6:dc:9c:48:22:b7:14:3e:ff:84:88:e8:e6:85:ff:fa:7d

Fingerprint (sha1): af:bb:1c:59:9c:72:44:b6:97:6f:12:fa:ae:f8:a2:d5:57:02:e1:ea
Fingerprint (sha256): 15:6d:e5:ef:cd:16:35:21:a2:1a:53:16:1f:50:89:3b:dc:97:9c:b4:5c:2f:db:4f:84:26:87:dc:51:18:f0:51

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%201.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl

Check the revocation status for certificate sn2059dl50wa1a.059d.mgd.msft.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sn2059dl50wa1a.059d.mgd.msft.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sn2059dl50wa1a.059d.mgd.msft.net
was.059d.dedicated.lync.com

Other certificates including the domain name msft.net

(limited to 100 certificates)
liveid-idn.msoprd.msft.net
swe.prd.msft.net
015DAM1L40SE02.015d.mgd.msft.net
XlensClient.msoprd.msft.net
TestCert.msoppe.msft.net
19153.infrastructure.network10367.prod.msft.net
195126.ds.network12472.dprodmgd106.msft.net
am3027dl50wa1a.027D.mgd.msft.net
187079.infrastructure.network11301.dprodmgd104.msft.net
18513.ds.network880.prod.msft.net
provisioningandblocktest.msoppe.msft.net
FaultAgentClientForMsodsReplicasInProdAzure.msoprd.msft.net
12734.ds.network189.prod.msft.net
19905.federatedsearch.network10526.prod.msft.net
18629.ds.network890.prod.msft.net
rnz.swe.prd.msft.net
msodsdptclient.msoprd.msft.net
ProvisionAndSetCurrentTestCert.msoprd.msft.net
20034.ds.network10590.prod.msft.net
20178.ds.network10613.prod.msft.net
19665.sql.network10494.prod.msft.net
14297.sql.network302.prod.msft.net
jarvis.msftcloudes.com
191366.sql.network12015.dprodmgd105.msft.net
187737.infrastructure.network11454.dprodmgd104.msft.net
19830.ds.network10461.prod.msft.net
querylive.msoprd.msft.net
1787.network.network1906.edog.msft.net
NationalCloudSyncBlackforestToPPE.msoppe.msft.net
187521.federatedsearch.network11382.dprodmgd104.msft.net
mtf-azureemailorchestrator.msoppe.msft.net
137.pmachine.zone137.prod.msft.net
rocs-int-actions.dc.ad.msft.net
20439.admindebug.network10734.prod.msft.net
187838.content.network11471.dprodmgd104.msft.net
56251.infrastructure.network3629.dprod.msft.net
188929.content.network11731.dprodmgd104.msft.net
6893.pmachine.zone6893.dprodmgd104.msft.net
was.062d.dedicated.lync.com
13975.infracore.network326.prod.msft.net
18443.federatedsearch.network860.prod.msft.net
ams.prod.adu.msft.net
187657.ds.network11430.dprodmgd104.msft.net
187855.content.network11478.dprodmgd104.msft.net
20948.content.network379.prod.msft.net
msaliveid.msoppe.msft.net
21043.federatedsearch.network10724.prod.msft.net
192389.sql.network12267.dprodmgd105.msft.net
17367.ds.network484.prod.msft.net
CertificateConfigSigning.msoprd.msft.net
21197.ds.network13128.prod.msft.net
BuildTrackingClientForExpress.msoppe.msft.net
883.pmachine.zone883.dprod.msft.net
aadg.int.windows.net
187792.network.network11460.dprodmgd104.msft.net
*.dc.ad.msft.net
jarvis-int.msftcloudes.com
191195.infrastructure.network11881.dprodmgd105.msft.net
CertOnboartingTest.msoppe.msft.net
dals.int.adu.msft.net
187605.content.network11404.dprodmgd104.msft.net
187844.ds.network11477.dprodmgd104.msft.net
191330.federatedsearch.network11923.dprodmgd105.msft.net
CommandAgent-ADR-P25.msoprd.msft.net
16879.infracore.network360.prod.msft.net
OnboardingWorkflowProviderNameTestCert.msoppe.msft.net
17914.infracore.network752.prod.msft.net
18732.sql.network10267.prod.msft.net
FaultAgentClientForMSODS.msoppe.msft.net
18552.federatedsearch.network908.prod.msft.net
AzureThrottleClient.msoprd.msft.net
sfm.genevametrics.msoppe.msft.net
18205.content.network714.prod.msft.net
195022.infrastructure.network12462.dprodmgd106.msft.net
187498.content.network11374.dprodmgd104.msft.net
20407.ds.network10647.prod.msft.net
21073.ds.network10600.prod.msft.net
187825.content.network11474.dprodmgd104.msft.net
CertificateConfigSigning.msoppe.msft.net
846.pmachine.zone846.dprod.msft.net
DMSClientForConfigRolloutFunctionForBlackForest.msoprd.msft.net
19970.admindebug.network10587.prod.msft.net
DmsClientForStx.msoppe.msft.net
jarvis-int.msftcloudes.com
sobo.prod.adu.msft.net
MSODSAdMetricsClientForThrottleRunner.msoprd.msft.net
service.032d.mgd.msft.net
20383.content.network10653.prod.msft.net
GeoBackupReplicationKeyVaultClientCert.ar.msogov.us.msft.net
20726.sql.network10789.prod.msft.net
DmsClientForAzureScheduledJobs.msoppe.msft.net
SecurityMonitoringTestCertificate.msoppe.msft.net
313.pmachine.zone313.prod.msft.net
KeyVaultClientForD2CSas.msoppe.msft.net
187900.network.network11489.dprodmgd104.msft.net
KeyVaultClientForD2C.msoprd.msft.net
19376.ds.network10369.prod.msft.net
021dSN1L40SE02.021d.mgd.msft.net
LSM-CommandAgentManagementClient.msoprd.msft.net
18566.content.network884.prod.msft.net

Certificate

The complete raw certificate details for sn2059dl50wa1a.059d.mgd.msft.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hxJ562GOX+LPQ5WMPBV
4Oh0mT12ognMTg3NDGZr/smxA/TnB7f/ezjmqfc3G5EIdqvKtMB21Pu4qS0qEg4V
IP1aVJ5ZgHAzqEdUCMYfH0RZg9Iogiwc4kt/RVtJQl1woLJ6gkDKls4gcBAIZpaJ
+Viqj2PpYRGo5Q55j7ou8Lc9araT3ax6FsfTRvtEPIZrWRJfUAV24q/MEOwieVve
Pv8ZxwTRpD277rIgtk2l0o366Nif3li/M0gjdA9pCg2p6ZW51IYf0n2Ke8WDSYnJ
2mix6niwRiibgC2IvMea8V+b8IMIf5QSqIuvW+BfNshv78RmAnZp4Jkwqreim56C
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2742993043967297791199185286369445432594272670
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-01 21:59:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-01 21:59:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sn2059dl50wa1a.059d.mgd.msft.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26523993716499856449255157321888152285166212306660016386330187602600462517326308856659742740313678175929046611867278712107222212427475054999808504099337114700236940800100486770289359071328119540588719353864657461754099262920362859999171105648274688883713673139451658931208731135152051177501645605025527512328761514040983236482385128836113351142303830610697435262585543325167327573556325652648786689237658702013572644406678543645650720199850732594593050515156338756477644676168812122462945815820245613628350501936814203417320146586764184168988054754489542651077676095399008344349444905907729720580638500240728658969153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%201.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cb4d337a4d49a18bb957bdf2c985ded6d2f5ad0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sn2059dl50wa1a.059d.mgd.msft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'was.059d.dedicated.lync.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 58889fd6dc9c4822b7143eff8488e8e685fffa7d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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