*.yammer.com

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 07

About this certificate

This digital certificate with serial number 33:00:13:df:f0:4f:6f:00:ad:81:85:96:6b:00:00:00:13:df:f0 was issued on by Microsoft Corporation.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:13:df:f0:4f:6f:00:ad:81:85:96:6b:00:00:00:13:df:f0
Serial Number (int): 1137344768155638689028209106049205681186398192
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 20:af:e3:27:38:91:92:44:3e:b9:02:c6:7b:19:3f:39:4b:08:31:93
AuthorityKeyId: ce:15:16:3b:ea:02:a3:a6:6b:da:d9:2b:fd:e5:8c:52:be:7a:50:a8

Fingerprint (sha1): 9f:1a:a3:7b:01:ff:c1:22:22:8f:82:5e:ac:1d:6a:aa:07:b3:7c:ec
Fingerprint (sha256): 18:90:d9:29:05:f3:2f:6b:09:3d:9d:f8:1f:4e:d1:e8:2a:45:73:4e:cf:58:c9:85:2d:29:8e:26:d4:66:40:4c

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl

Check the revocation status for certificate *.yammer.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.yammer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.yammer.com
*.staging.yammer.com
*.rt.staging.yammer.com
*.staging.assets-yammer.com
*.yammerusercontent.com
*.rt.yammer.com
*.docs.yammer.com
*.assets-yammer.com
*.yammer.com
*.integration.staging.yammer.com
*.integration.assets-yammer.com
*.yamalytics.yammer.com
yammer.com
*.eu-1.yammer.com
*.engage.cloud-dev.microsoft
engage.cloud-dev.microsoft
df.engage.cloud.microsoft
engage.cloud.microsoft
*.test.cosmic.yammer.com
*.gov.yammer.com
*.rt.gov.yammer.com
*.rt.test.cosmic.yammer.com

Other certificates including the domain name yammer.com

(limited to 100 certificates)
ps1kafkazk.client.eu.yammer.com
*.yammer.com
eng.yammer.com
tenant-eop.staging.yammer.com
www.eng.yammer.com
*.about.staging.yammer.com
yammer.com
*.vo.msecnd.net
test2.staging.yammer.com
topics2.staging.yammer.com
*.a.ssl.fastly.net
developer.yammer.com
stagepgbouncer.bl2.yammer.com
zeus.dm2.yammer.com
officeauditor.s2s.yammer.com
*.a.ssl.fastly.net
www.eng.yammer.com
sites.yammer.com
*.a.ssl.fastly.net
tls.automattic.com
metrics.geneva.keyvault.staging.yammer.com
Outlook.office.com
identitie.eu.yammer.com
zeus.bl2.yammer.com
eng.yammer.com
*.prod-east-1.mesos.yammer.com
eng.yammer.com
tlsubstrateingestion.s2s.yammer.com
outlook.office.com
test2.staging.yammer.com
*.a.ssl.fastly.net
yamgems.int.yammer.com
Outlook.office.com
ss0kafkazk.us.yammer.com
*.a.ssl.fastly.net
hacklab.integration.yammer.com
*.a.ssl.fastly.net
github.int.yammer.com
*.a.ssl.fastly.net
metrics.geneva.keyvault.us-1.yammer.com
*.vo.msecnd.net
a.ssl.fastly.net
*.prodeu-west-1.mesos.yammer.com
*.a.ssl.fastly.net
any.yamalytics.yammer.com
*.a.ssl.fastly.net
filemigration.s2s.yammer.com
*.a.ssl.fastly.net
*.yammer.com
*.a.ssl.fastly.net
master.prodeu-west-1.mesos.yammer.com
clients.int.yammer.com
bounciezk.us.yammer.com
*.prod-east-1.mesos.yammer.com
mfa.int.yammer.com
topics1.staging.yammer.com
*.centralus-s4.storage.yammer.com
*.int.yammer.com
*.yammer.com
*.centralus-p1.storage.yammer.com
developer.yammer.com
any.centralus-s4.storage.yammer.com
about.yammer.com
*.a.ssl.fastly.net
developer.yammer.com
*.vo.msecnd.net
*.a.ssl.fastly.net
ps0bounciezk-quorum.us.yammer.com
www.eng.yammer.com
sublistenereu.s2s.yammer.com
*.prodeu-north-1.mesos.yammer.com
*.yammer.com
*.a.ssl.fastly.net
www.eng.yammer.com
yammertorusapp.s2s.yammer.com
www.eng.yammer.com
*.a.ssl.fastly.net
www.eng.yammer.com
foo.staging.yammer.com
tenant-eop.yammer.com
*.a.ssl.fastly.net
*.a.ssl.fastly.net
*.prod-east-1.mesos.yammer.com
any.az.bl2.yammer.com
ps1kafkazk.eu.yammer.com
developer.yammer.com
master.stage-east-1.mesos.yammer.com
ldap.yammer.com
metrics.geneva.keyvault.cosmic.prod.yammer.com
any.prodeu-north-1.mesos.yammer.com
www.eng.yammer.com
polaris.int.yammer.com
*.stage-central-1.mesos.yammer.com
houstoncore.yammer.com
*.yammer.com
*.prodeu-north-1.mesos.yammer.com
eng.yammer.com
www.yammer.com
*.a.ssl.fastly.net
*.tools.yammer.com

Certificate

The complete raw certificate details for *.yammer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05YYQAENs6rj8nL6hUly
HWGHUX3pZ/N+csio7wGUB3gCb99taqP/ltFxxMo2Po0E9Sbb2da+MP1/eHZxO22Z
fk/hECHFYuLhtg0ecOLL8IgcNO+cPEsVEtRE5k/PvOTTQRSWmA/fzzxiESthcI/J
3rzMO6oudIfOZfG6K6AuVoZZBrzu1CxOpqOsWSkIRiGRDOYIdDfp3ojE1FT2m2yu
41iRwZRRjYZhfHdQsvYVXNUTuNIpHR3A3pn6JpWFkuPNi0Nd6n8kU8dKH069wKTP
6F6N9VpWtq5Wi6G8YO1CAzfKH7fsDCIXLVYOsrT8Jae9YyTB/nNQqFfEjgGBOFGY
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137344768155638689028209106049205681186398192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 07'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 09:34:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-28 09:34:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.yammer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26710296816094311369552113201440913306046859192121057937186546654818509717599518856651323598316101765940823492939135395544513132942319520334445555149526204114747663606902380547983169301981317440357607895649673545771213041794995577209793984837495849502962042116188179769847103575321833160886328847739875633524980628373058183159394464993677098507141211129713285483035880403627960281100514621506304211737812750976636974695544420085237558677751346526050136943804512298155390055829921723170746943853422136196798862214186339149737687627238140944240926360810418618370832502682925399125761894852845510060544654767230899296413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20afe327389192443eb902c67b193f394b083193
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (518 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rt.staging.yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.assets-yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yammerusercontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rt.yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.docs.yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assets-yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.staging.yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.assets-yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yamalytics.yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-1.yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engage.cloud-dev.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.cloud-dev.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'df.engage.cloud.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.cloud.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.cosmic.yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gov.yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rt.gov.yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rt.test.cosmic.yammer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ce15163bea02a3a66bdad92bfde58c52be7a50a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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