*.comred4.microsoft-tst.com

- Microsoft -

Issued by Microsoft Secure Server Authority

About this certificate

This digital certificate with serial number 77:e2:26:41:00:08:00:02:7f:b8 was issued on byMicrosoft Secure Server Authority.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Microsoft

Organization: Microsoft
Organization unit: OCP
State / Province: WA
Locality: Redmond
Country: US

Microsoft Secure Server Authority

This certificate has expire since

Certificate Details

Serial Number (hex): 77:e2:26:41:00:08:00:02:7f:b8
Serial Number (int): 566133332106627426451384
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: eb:03:0a:5b:5b:8a:25:6d:b5:36:2e:d3:db:35:da:c1:ab:10:78:c8
AuthorityKeyId: 08:42:e3:db:4e:11:66:f3:b5:08:c5:40:db:55:7c:33:46:11:83:38

Fingerprint (sha1): e8:3e:2c:d6:b3:32:c0:6f:f4:2e:59:96:f2:01:b5:98:02:fc:1c:5a
Fingerprint (sha256): 1f:d6:19:76:7d:a4:b3:04:d1:8c:c7:e2:e6:dc:24:af:c9:05:c9:98:07:a5:b6:08:c8:32:75:e7:ba:a9:d8:74

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20Secure%20Server%20Authority(8).crt
Issuing Certificate URL: http://corppki/aia/Microsoft%20Secure%20Server%20Authority(8).crt

Revocation information

CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(8).crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(8).crl
CRL Distribution Point: http://corppki/crl/Microsoft%20Secure%20Server%20Authority(8).crl

Check the revocation status for certificate *.comred4.microsoft-tst.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.comred4.microsoft-tst.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name microsoft-tst.com

(limited to 100 certificates)
merchandising.sellerdashboard.microsoft-tst.com
*.api.usage.cp.microsoft-tst.com
*.minting.token.cp.microsoft-tst.com
partner.microsoft-tst.com
partnerbusinessprofiles.microsoft-tst.com
client.usage.cp.microsoft-tst.com
*.comred5.microsoft-tst.com
*.usage.cp.microsoft-tst.com
*.usage.cp.microsoft-tst.com
seops.microsoft-tst.com
sellerdashboard.cpcmr.microsoft-tst.com
catalog.sellerdashboard.cpcmr.microsoft-tst.com
partnerbusinessprofiles.microsoft-tst.com
client.commercerestentitlement.microsoft-tst.com
*.comred12.microsoft-tst.com
subscription.cp.microsoft-tst.com
*.api.usage.cp.microsoft-tst.com
hitchdev.microsoft-tst.com
entitlement.cp.microsoft-tst.com
*.usage.cp.microsoft-tst.com
partner.microsoft-tst.com
*.api.usage.cp.microsoft-tst.com
*.comred6.microsoft-tst.com
*.api.usage.cp.microsoft-tst.com
token.cp.microsoft-tst.com
partnercenter.microsoft-ppe.com
sellerdashboard.cpcmr.microsoft-tst.com
*.usage.cp.microsoft-tst.com
token.cp.microsoft-int.com
seops.microsoft-tst.com
authorization-validation.cp.microsoft-tst.com
aad.internal.token.cp.microsoft-tst.com
*.comred1.microsoft-tst.com
*.comred4.microsoft-tst.com
authorization-unittest.cp.microsoft-tst.com
token.cp.microsoft-int.com
aad.internal.token.cp.microsoft-tst.com
deployr2.mrs.microsoft-tst.com
*.pagql.microsoft-tst.com
partnercenter.microsoft-tst.com
api.partnercenterreferrals.microsoft-tst.com
partnercenter.microsoft-ppe.com
registration.sellerdashboard.cpcmr.microsoft-tst.com
partner.microsoft-tst.com
*.usage.cp.microsoft-tst.com
client.commercerestentitlement.microsoft-tst.com
client.si.cp.microsoft-tst.com
catalog.sellerdashboard.sdtest1.microsoft-tst.com
token.cp.microsoft-int.com
partner.microsoft-tst.com
seops.microsoft-tst.com
seops-userprovisioning-dev.microsoft-tst.com
*.pagql.microsoft-tst.com
scops.microsoft-tst.com
seops.microsoft-tst.com
api.partnercenterreferrals.microsoft-tst.com
syndicationtestcallbackservice-prodtestcloud.microsoft-tst.com
*.comred5.microsoft-tst.com
aad.internal.token.cp.microsoft-tst.com
*.minting.token.cp.microsoft-tst.com
sellerdashboard.cpinfra.microsoft-tst.com
api.partnerbusinessprofiles.microsoft-tst.com
catalog.sellerdashboard.sdminibedbcp.microsoft-tst.com
*.cpshd1.microsoft-tst.com
token.cp.microsoft-int.com
partner2.microsoft-tst.com
*.usage.cp.microsoft-tst.com
tipclient.usage.cp.microsoft-tst.com
*.comred3.microsoft-tst.com
*.usage.cp.microsoft-tst.com
*.pagql.microsoft-tst.com
deployment.adminconsole.usage.cp.microsoft-tst.com
aad.internal.token.cp.microsoft-tst.com
*.usage.cp.microsoft-tst.com
avts1.sellerdashboard.microsoft-tst.com
partner.microsoft-tst.com
scops.microsoft-tst.com
*.api.usage.cp.microsoft-tst.com
seops.microsoft-tst.com
*.commerce.microsoft-tst.com
*.usage.cp.microsoft-tst.com
aad.internal.token.cp.microsoft-tst.com
*.usage.cp.microsoft-tst.com
sellerdashboard.cpnext.microsoft-tst.com
client.adminconsole.usage.cp.microsoft-tst.com
client.commercerestordering.microsoft-tst.com
vitiwari.info.token.cp.microsoft-tst.com
*.minting.token.cp.microsoft-tst.com
aad.internal.token.cp.microsoft-tst.com
*.minting.token.cp.microsoft-tst.com
alwest.info.token.cp.microsoft-tst.com
entitlement.devx.microsoft-tst.com
scops.microsoft-tst.com
lighthouse.cp.microsoft-tst.com
seops.microsoft-tst.com
alwest.info.token.cp.microsoft-tst.com
adminconsole.usage.cp.microsoft-tst.com
api.partnercenterreferrals.microsoft-tst.com
alwest.info.token.cp.microsoft-tst.com
monitoring.entitlement.cp.microsoft-tst.com

Certificate

The complete raw certificate details for *.comred4.microsoft-tst.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn4tjuwFgXDPRb37Vq68
1TbDRTHOnDBvwy4qeFQH1/k6TWdIO8UvDFgFpKi1b8YAvxR1DTjaXRxTr9ln7KPB
uJgblc4wPUrlS1vZ+L7QfemVYxsj13M+O7gZkVe2Hoh8S+4o/3HaNrj21aVvUtvJ
aBX5ipzQVgj8QhqZtRmOb+iHH6cPwfWjk/Vw8wDVoA6u0Y8AE7gSXAfpQacjF4d0
tTzkiXjsG9dkFN0A/IY5oXzaNn6bNZcWrT0F1F26XHrI7B8pFKTKsLjKjaxQFjO3
UBvyKAgbkKX/ag2bKIw62VEdb90IL7b7k6Sc2wlLKo1ZSzxbhxcVjWtkm84nuRb5
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 566133332106627426451384
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'microsoft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'corp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Secure Server Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-04-26 00:19:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-26 00:19:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OCP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.comred4.microsoft-tst.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18493013197135522250480364106912105280426351788341389282173371675670487742246844589894191707072452593299014226102712218220935949114296715495592196012437750375455683714948221846560317583214319164641446590500739396931847199078778291833738149348489455986242270388889626478080434718951262610315899256489599404540432821345230501261992204691025579105104868421352325627445175640400077798556436511406909857792513093198324153025180096744552108082291960662986524484600175228993864812073489055475568812726499045494643017063797064509714466199360079200732026718110800494288638172055951887398498143604855688356946731981917709072759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.15 (sMIMECapabilities)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.2 (rc2CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.4 (rc4)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.42 (aes256-CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.45 (aes256-wrap)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.2 (aes128-CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.5 (aes128-wrap)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.7 (desCBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.7 (des-EDE3-CBC)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb030a5b5b8a256db5362ed3db35dac1ab1078c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0842e3db4e1166f3b508c540db557c3346118338
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (257 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(8).crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(8).crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://corppki/crl/Microsoft%20Secure%20Server%20Authority(8).crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20Secure%20Server%20Authority(8).crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://corppki/aia/Microsoft%20Secure%20Server%20Authority(8).crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER asn1: structure error: base 128 integer too large
1.3.6.1.4.1.311.21.8.7587021.751874.11030412.6202749.3702260.207.945504904.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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