msggw.services.skypeforbusiness.com

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 02

About this certificate

This digital certificate with serial number 33:00:d4:8c:81:86:e1:8b:49:c9:34:7e:7c:00:00:00:d4:8c:81 was issued on by Microsoft Corporation.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:d4:8c:81:86:e1:8b:49:c9:34:7e:7c:00:00:00:d4:8c:81
Serial Number (int): 1137410331751310436142863985254772776432340097
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: c0:9e:b5:2f:2b:34:9d:aa:3d:72:c0:1e:00:dc:54:ea:da:ec:3c:bd
AuthorityKeyId: 00:ab:91:fc:21:62:26:97:9a:a8:79:1b:61:41:90:60:a9:62:67:fd

Fingerprint (sha1): 5f:92:81:0a:2b:f1:9a:e8:39:dd:65:90:cb:3a:75:cb:2d:1a:ba:76
Fingerprint (sha256): 19:70:50:69:ae:bf:d5:94:1c:04:a1:5e:99:68:7b:74:88:ee:26:ea:e1:bd:11:d8:6a:71:5f:9b:f4:3c:5b:cd

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl

Check the revocation status for certificate msggw.services.skypeforbusiness.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for msggw.services.skypeforbusiness.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

msggw.services.skypeforbusiness.com
apac.msggw.services.sfb.trafficmanager.net
apac.msggw.services.skypeforbusiness.com
dogfood.msggw.services.sfb.trafficmanager.net
dogfood.msggw.services.skypeforbusiness.com
emea.msggw.services.sfb.trafficmanager.net
emea.msggw.services.skypeforbusiness.com
msggw.services.sfb.trafficmanager.net
noam.msggw.services.sfb.trafficmanager.net
noam.msggw.services.skypeforbusiness.com
sfbmsggateway.eastasia.cloudapp.azure.com
sfbmsggateway.eastus.cloudapp.azure.com
sfbmsggateway.northeurope.cloudapp.azure.com
sfbmsggateway.southeastasia.cloudapp.azure.com
sfbmsggateway.westeurope.cloudapp.azure.com
sfbmsggateway.westus.cloudapp.azure.com
sfbmsggatewaydf.centralus.cloudapp.azure.com
sfbmsggatewaydf2.eastus2.cloudapp.azure.com

Other certificates including the domain name skypeforbusiness.com

(limited to 100 certificates)
emea.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
dpluck.skypeforbusiness.com
msggw.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
global.mediastorage.voiceapps.infra.teams.microsoft.com
*.mms.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
trap.skype.com
emea.bvd.services.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
tgs.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
global.mediastorage.voiceapps.infra.teams.microsoft.com
emeadf.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
adminportal.services.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
*.pinauth.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
*.oaa.services.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
trap.skype.com
noam.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
*.acms.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
apac.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
*.pinauth.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
noam.bvd.services.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
*.trouter.skypeforbusiness.com
emeadf.bvd.services.skypeforbusiness.com
*.pinauth.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com
noamdf.bvd.services.skypeforbusiness.com
msggw.services.skypeforbusiness.com
trap.skype.com
noamdf.bvd.services.skypeforbusiness.com
emea.bvd.services.skypeforbusiness.com

Certificate

The complete raw certificate details for msggw.services.skypeforbusiness.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJ/DCCB+SgAwIBAgITMwDUjIGG4YtJyTR+fAAAANSMgTANBgkqhkiG9w0BAQwF
ADBZMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
MSowKAYDVQQDEyFNaWNyb3NvZnQgQXp1cmUgVExTIElzc3VpbmcgQ0EgMDIwHhcN
MjMxMDIxMDUxMzU5WhcNMjQwNjI3MjM1OTU5WjB6MQswCQYDVQQGEwJVUzELMAkG
A1UECBMCV0ExEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD
b3Jwb3JhdGlvbjEsMCoGA1UEAxMjbXNnZ3cuc2VydmljZXMuc2t5cGVmb3JidXNp
bmVzcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkHAKi1rU
7q0chG5FVQcOXe9OB57VeMuNfHnPR2m83gHtfwvCWXZgBute78jz5AKCTlP23g7W
jva4GyZT9sGWZuHZxoVR7WnwPdBjazzg00qu6vlUWhz3Qb0idn7iMjYZjfvRviIZ
hVxl9pS1693Y7DWndr5PoYf/9/UZac98Rs13ao0x7EDSd04UUC6aOCPvMjfo3B//
yjmB/NIBq2Vn5OieRxWu8T2t4YPQbx3xf019JRvFyMttVU/+q9lf3IdmK/dOC+pN
q57k3tTvra9aIx/Bq6fJUfFU5s9ltnpc1pvvuRaMqnnDL30H1C4qVxizBX+dvWuP
u4xQX7U0k+3JAgMBAAGjggWaMIIFljATBgorBgEEAdZ5AgQDAQH/BAIFADAnBgkr
BgEEAYI3FQoEGjAYMAoGCCsGAQUFBwMCMAoGCCsGAQUFBwMBMDwGCSsGAQQBgjcV
BwQvMC0GJSsGAQQBgjcVCIe91xuB5+tGgoGdLo7QDIfw2h1dgoTlaYLzpz4CAWQC
ASYwga4GCCsGAQUFBwEBBIGhMIGeMG0GCCsGAQUFBzAChmFodHRwOi8vd3d3Lm1p
Y3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMEF6dXJlJTIwVExT
JTIwSXNzdWluZyUyMENBJTIwMDIlMjAtJTIweHNpZ24uY3J0MC0GCCsGAQUFBzAB
hiFodHRwOi8vb25lb2NzcC5taWNyb3NvZnQuY29tL29jc3AwHQYDVR0OBBYEFMCe
tS8rNJ2qPXLAHgDcVOra7Dy9MA4GA1UdDwEB/wQEAwIFoDCCAxoGA1UdEQSCAxEw
ggMNgiNtc2dndy5zZXJ2aWNlcy5za3lwZWZvcmJ1c2luZXNzLmNvbYIqYXBhYy5t
c2dndy5zZXJ2aWNlcy5zZmIudHJhZmZpY21hbmFnZXIubmV0gihhcGFjLm1zZ2d3
LnNlcnZpY2VzLnNreXBlZm9yYnVzaW5lc3MuY29tgi1kb2dmb29kLm1zZ2d3LnNl
cnZpY2VzLnNmYi50cmFmZmljbWFuYWdlci5uZXSCK2RvZ2Zvb2QubXNnZ3cuc2Vy
dmljZXMuc2t5cGVmb3JidXNpbmVzcy5jb22CKmVtZWEubXNnZ3cuc2VydmljZXMu
c2ZiLnRyYWZmaWNtYW5hZ2VyLm5ldIIoZW1lYS5tc2dndy5zZXJ2aWNlcy5za3lw
ZWZvcmJ1c2luZXNzLmNvbYIlbXNnZ3cuc2VydmljZXMuc2ZiLnRyYWZmaWNtYW5h
Z2VyLm5ldIIqbm9hbS5tc2dndy5zZXJ2aWNlcy5zZmIudHJhZmZpY21hbmFnZXIu
bmV0gihub2FtLm1zZ2d3LnNlcnZpY2VzLnNreXBlZm9yYnVzaW5lc3MuY29tgilz
ZmJtc2dnYXRld2F5LmVhc3Rhc2lhLmNsb3VkYXBwLmF6dXJlLmNvbYInc2ZibXNn
Z2F0ZXdheS5lYXN0dXMuY2xvdWRhcHAuYXp1cmUuY29tgixzZmJtc2dnYXRld2F5
Lm5vcnRoZXVyb3BlLmNsb3VkYXBwLmF6dXJlLmNvbYIuc2ZibXNnZ2F0ZXdheS5z
b3V0aGVhc3Rhc2lhLmNsb3VkYXBwLmF6dXJlLmNvbYIrc2ZibXNnZ2F0ZXdheS53
ZXN0ZXVyb3BlLmNsb3VkYXBwLmF6dXJlLmNvbYInc2ZibXNnZ2F0ZXdheS53ZXN0
dXMuY2xvdWRhcHAuYXp1cmUuY29tgixzZmJtc2dnYXRld2F5ZGYuY2VudHJhbHVz
LmNsb3VkYXBwLmF6dXJlLmNvbYIrc2ZibXNnZ2F0ZXdheWRmMi5lYXN0dXMyLmNs
b3VkYXBwLmF6dXJlLmNvbTAMBgNVHRMBAf8EAjAAMGQGA1UdHwRdMFswWaBXoFWG
U2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUy
MEF6dXJlJTIwVExTJTIwSXNzdWluZyUyMENBJTIwMDIuY3JsMGYGA1UdIARfMF0w
UQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9z
b2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTAIBgZngQwBAgIwHwYD
VR0jBBgwFoAUAKuR/CFiJpeaqHkbYUGQYKliZ/0wHQYDVR0lBBYwFAYIKwYBBQUH
AwIGCCsGAQUFBwMBMA0GCSqGSIb3DQEBDAUAA4ICAQCSWx8v1E1sdxTWd+m4dVZp
msW+Ly4KnyhsTP2/FvErAsUcSHZrxFfBwM53Bvw1yr7GMDb7YRnY+GPG4pgurSgk
k4QjtgStJfIe8z5/4pEIqg0rnDEk6FVrxyMxG5wFhVXd604LyJQCtrVOctkvhBBB
+mhRSzx1fpTrdgFVJNaDBj3Dj8iWsNa9J+pfcxvrp68dlDjUwwBLOYrtTSwdO/zW
cmiSiJDvf9/S5gqTbTwHq1Y22Bj1zLcBsCHgcAbFxkGt1AHZOiI7wk1ue46U43Jk
aLGPR5nb9TLv+Be34tYdFrv5LhmdsBNoqGUDCezymASOlIw9QFcKi81DVenYwIy7
FihaCgHGZcQZwGxzRH8OAZ6E0IROJmx4GLDMchZlk8fI7Gn/D3M7PYfDX2POY+kj
aLdFH8zayP5M2MKJM0aoLsHIQWQWOZMWVamVs+pbfoA4uAOCxFKhIjIqv0zMw2uw
HaMqT5CuhG4YSgcnQeh7IGcLDw4SF5EsNeGFbcXEwFCiTP9mldaBXLRnt5DBG7gI
zgkp5XtTJ2EzENT2EhsA/DR+j//OzRpylp2TcGv9AzK4NrXqk4W8QoHzHvw2BdEF
E5P/uZOK9iblZww6cV9yulHKMOp8N8NlULX5oIVjuUkbV1evyJWxmyddvbzNOkEs
dyj5I4rrv4PnJGY/2/rAcw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZBwCota1O6tHIRuRVUH
Dl3vTgee1XjLjXx5z0dpvN4B7X8Lwll2YAbrXu/I8+QCgk5T9t4O1o72uBsmU/bB
lmbh2caFUe1p8D3QY2s84NNKrur5VFoc90G9InZ+4jI2GY370b4iGYVcZfaUtevd
2Ow1p3a+T6GH//f1GWnPfEbNd2qNMexA0ndOFFAumjgj7zI36Nwf/8o5gfzSAatl
Z+TonkcVrvE9reGD0G8d8X9NfSUbxcjLbVVP/qvZX9yHZiv3TgvqTaue5N7U762v
WiMfwaunyVHxVObPZbZ6XNab77kWjKp5wy99B9QuKlcYswV/nb1rj7uMUF+1NJPt
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137410331751310436142863985254772776432340097
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-21 05:13:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'msggw.services.skypeforbusiness.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26455030603080203693743023524110508281070940853568354250101220892705162351236701002432560832932163538456572928556458887388313402820150512075471673076286481544126851951643791537423401441825869920279933652170548447912514457370594753675419329367251394318297839794840814273972335106609025043019888641065773612801225039412269210278570918059013819043462176230624331497657738007394432376183789555908181109903240782270599456847662753157402816967825666232871409734351322603856882171329020678439188836305478922842503240662307718260040110469486985296514612124850864262258594296570709587279741460893594339552086985802107376102857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c09eb52f2b349daa3d72c01e00dc54eadaec3cbd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (785 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msggw.services.skypeforbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.msggw.services.sfb.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.msggw.services.skypeforbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogfood.msggw.services.sfb.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogfood.msggw.services.skypeforbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emea.msggw.services.sfb.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emea.msggw.services.skypeforbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msggw.services.sfb.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noam.msggw.services.sfb.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noam.msggw.services.skypeforbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbmsggateway.eastasia.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbmsggateway.eastus.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbmsggateway.northeurope.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbmsggateway.southeastasia.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbmsggateway.westeurope.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbmsggateway.westus.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbmsggatewaydf.centralus.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbmsggatewaydf2.eastus2.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 00ab91fc216226979aa8791b61419060a96267fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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