site-cdn.onenote.net

- Microsoft Corporation -

Issued by Microsoft IT SSL SHA2

About this certificate

This digital certificate with serial number 5a:00:06:a0:68:b0:1e:e8:3b:31:d9:a7:4c:00:01:00:06:a0:68 was issued on by Microsoft Corporation.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:00:06:a0:68:b0:1e:e8:3b:31:d9:a7:4c:00:01:00:06:a0:68
Serial Number (int): 2007069322782007960050359597552494891690795112
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 79:3a:a4:5a:21:45:13:d4:0a:a8:36:a0:f8:2d:57:36:f6:b9:62:c5
AuthorityKeyId: 51:af:24:26:9c:f4:68:22:57:80:26:2b:3b:46:62:15:7b:1e:cc:a5

Fingerprint (sha1): 6b:3b:2b:4d:6c:ed:a8:98:0f:57:c8:a6:04:c2:83:32:ee:80:f4:55
Fingerprint (sha256): 1f:fb:4b:ed:57:10:2a:41:8f:41:07:b3:52:e4:a4:a8:7d:90:ed:e9:65:de:31:30:3f:8b:61:58:9c:da:1d:3c

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/msitwww2.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/msitwww2.crl

Check the revocation status for certificate site-cdn.onenote.net

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for site-cdn.onenote.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

site-cdn.onenote.net
wbd.ms
*.onenote.com
onenote.com
*.edog.onenote.com

Other certificates including the domain name onenote.net

(limited to 100 certificates)
site.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
site.edog.onenote.com
educdn.onenote.net
cdn.onenote.net
cdn.onenote.net
reverseproxy.edog.onenote.com
onenote.com
cdn.onenote.net
site.edog.onenote.com
cdn.onenote.net
cdn.onenote.net
reverseproxy.edog.onenote.com
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
site-cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
educdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
onenote.com
reverseproxy.edog.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
site.edog.onenote.com
site-cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
site.edog.onenote.com
Akamai-Rotation-Reminder-For-cdn.onenote.net
site.edog.onenote.com
site-cdn.onenote.net
sni2426egl.wpc.edgecastcdn.net
site-cdn.onenote.net
site.edog.onenote.com
reverseproxy.onenote.com
site-cdn.onenote.net
onenote.com
reverseproxy.onenote.com
onenote.com
site-cdn.onenote.net
reverseproxy.edog.onenote.com
site-cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
edu.cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
Akamai-Rotation-Reminder-For-cdn.onenote.net
site.edog.onenote.com
site-cdn.onenote.net
onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
site-cdn.onenote.net

Certificate

The complete raw certificate details for site-cdn.onenote.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08ybUF/jacqERStrXfK9
zZEYuBPmuQSGd6pUFHzdBxwN765xB2AxwpWpPpNs+ixKa+4bmia64dIvOmr/DSPr
i6/fhaNzCSx8mKHh688wUM6eohGLq+ZxtwY1ubFfhEb5LJ/Wz5nRZVjkYPbgXgRL
QD18nQsb5IJDuE7+kk9P1XsajZasbdCavczkAW5w8GBGTs0DiprRtONPL/NvzRju
emtaMPP94QxXuGUJ4fCLHHMeEek0YZMZ9PMuW3GrxuVe6wppr2Fi8GM8ULqvTM30
FvPjpM7Jkav3Rz9n54EGBjjK6wiSjbv3gNhLmDA7F2/OCmQiXSArDxI+MV87sGAM
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2007069322782007960050359597552494891690795112
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT SSL SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-17 00:03:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-17 00:03:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'site-cdn.onenote.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26737177669646105209367603925514766894040866071954547865077121006778665569661792673296961737966099825302636770217431037863965827772401022414369559829259615898078673795320808481270948386820662146229408786249280554028663367562046810179276742424984211127892590557276207575568106294136376828736247590086994984427813112813737939010035408057773562510542588995163329946967665353072715957145709026485202930794838151599360820791027961107133948922249850413225935695682261253472369020561512843472443394231573569004707107806145650251552705337493009732854026451350793866986047880653853702234323977742553001086365291766194892704937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site-cdn.onenote.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onenote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onenote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edog.onenote.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							793aa45a214513d40aa836a0f82d5736f6b962c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 51af24269cf468225780262b3b4662157b1ecca5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/msitwww2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/msitwww2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.7587021.751874.11030412.6202749.3702260.207.15542268.3366194
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps�'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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