*.msedge.net
- Microsoft Corporation -
Issued by Microsoft Azure RSA TLS Issuing CA 03
About this certificate
This digital certificate with serial number 33:00:1b:1d:ff:9a:8b:25:e0:18:95:bd:ee:00:00:00:1b:1d:ff was issued on by Microsoft Corporation.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Microsoft Corporation
Organization:
Microsoft Corporation
State / Province:
WA
Locality: Redmond
Country: US
Locality: Redmond
Country: US
Microsoft Corporation
Organization:
Microsoft Corporation
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 33:00:1b:1d:ff:9a:8b:25:e0:18:95:bd:ee:00:00:00:1b:1d:ffSerial Number (int): 1137347232623750737761189188523138435721666047
Serial Number lenght: 150 bits, 19 octets
SubjectKeyId: d6:78:e1:c6:df:c3:56:d2:09:0d:99:9b:7a:f3:8d:8b:4c:9d:e1:f0
AuthorityKeyId: fe:09:71:40:55:05:10:44:d8:a4:81:75:b8:9e:1a:e9:4a:06:88:c8
Fingerprint (sha1): 7a:1a:ce:66:4e:00:fd:d4:ad:23:97:45:5e:78:14:80:5d:a3:38:91
Fingerprint (sha256): 21:6f:5e:9c:b1:82:c3:d3:61:15:d7:ba:83:4a:d1:aa:09:37:f4:5b:fb:a1:d7:33:fc:f1:1a:25:1a:f6:51:24
Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt
Revocation information
OCSP Server: http://oneocsp.microsoft.com/ocspCRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl
Check the revocation status for certificate *.msedge.net
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.msedge.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
12 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.a-msedge.net
a-msedge.net
b-msedge.net
*.b-msedge.net
c-msedge.net
*.c-msedge.net
dc-msedge.net
*.dc-msedge.net
*.lbas.msedge.net
*.test.msedge.net
*.azp.footprintdns.com
*.footprintdns.com
*.clo.footprintdns.com
*.any.footprintdns.com
*.nrb.footprintdns.com
*.perf.msedge.net
*.fp.measure.office.com
*.msedge.net
a-msedge.net
b-msedge.net
*.b-msedge.net
c-msedge.net
*.c-msedge.net
dc-msedge.net
*.dc-msedge.net
*.lbas.msedge.net
*.test.msedge.net
*.azp.footprintdns.com
*.footprintdns.com
*.clo.footprintdns.com
*.any.footprintdns.com
*.nrb.footprintdns.com
*.perf.msedge.net
*.fp.measure.office.com
*.msedge.net
Other certificates including the domain name msedge.net
(limited to 100 certificates)
compliantonnettesting.msedge.net
*.clo.footprintdns.com
*.msedge.net
*.msedge.net
*.msedge.net
complianttesting.msedge.net
onnettesting.msedge.net
compliantonnettesting.msedge.net
compliantonnettesting.msedge.net
cacti.msedge.net
*.msedge.net
*.msedge.net
compliantonnettesting.msedge.net
*.msedge.net
*.msedge.net
compliantonnettesting.msedge.net
*.msedge.net
complianttesting.msedge.net
*.clo.footprintdns.com
*.msedge.net
*.msedge.net
*.clo.footprintdns.com
onnettesting.msedge.net
*.msedge.net
complianttesting.msedge.net
onnettesting.msedge.net
*.msedge.net
*.clo.footprintdns.com
onnettesting.msedge.net
*.msedge.net
*.msedge.net
complianttesting.msedge.net
*.msedge.net
*.msedge.net
*.msedge.net
onnettesting.msedge.net
*.msedge.net
*.msedge.net
ztna1p-ring.msedge.net
*.msedge.net
*.clo.footprintdns.com
onnettesting.msedge.net
chinaringtesting.msedge.net
complianttesting.msedge.net
onnettesting.msedge.net
complianttesting.msedge.net
complianttesting.msedge.net
complianttesting.msedge.net
*.clo.footprintdns.com
*.msedge.net
onnettesting.msedge.net
onnettesting.msedge.net
*.msedge.net
compliantonnettesting.msedge.net
*.clo.footprintdns.com
*.msedge.net
*.msedge.net
*.msedge.net
complianttesting.msedge.net
onnettesting.msedge.net
compliantonnettesting.msedge.net
compliantonnettesting.msedge.net
cacti.msedge.net
*.msedge.net
*.msedge.net
compliantonnettesting.msedge.net
*.msedge.net
*.msedge.net
compliantonnettesting.msedge.net
*.msedge.net
complianttesting.msedge.net
*.clo.footprintdns.com
*.msedge.net
*.msedge.net
*.clo.footprintdns.com
onnettesting.msedge.net
*.msedge.net
complianttesting.msedge.net
onnettesting.msedge.net
*.msedge.net
*.clo.footprintdns.com
onnettesting.msedge.net
*.msedge.net
*.msedge.net
complianttesting.msedge.net
*.msedge.net
*.msedge.net
*.msedge.net
onnettesting.msedge.net
*.msedge.net
*.msedge.net
ztna1p-ring.msedge.net
*.msedge.net
*.clo.footprintdns.com
onnettesting.msedge.net
chinaringtesting.msedge.net
complianttesting.msedge.net
onnettesting.msedge.net
complianttesting.msedge.net
complianttesting.msedge.net
complianttesting.msedge.net
*.clo.footprintdns.com
*.msedge.net
onnettesting.msedge.net
onnettesting.msedge.net
*.msedge.net
compliantonnettesting.msedge.net
Certificate
The complete raw certificate details for *.msedge.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJoTCCB4mgAwIBAgITMwAbHf+aiyXgGJW97gAAABsd/zANBgkqhkiG9w0BAQwF ADBdMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u MS4wLAYDVQQDEyVNaWNyb3NvZnQgQXp1cmUgUlNBIFRMUyBJc3N1aW5nIENBIDAz MB4XDTIzMTIyNzE3MjMwNFoXDTI0MTIyMTE3MjMwNFowYzELMAkGA1UEBhMCVVMx CzAJBgNVBAgTAldBMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv ZnQgQ29ycG9yYXRpb24xFTATBgNVBAMMDCoubXNlZGdlLm5ldDCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBANnbdwgOyJ40qLxutin45Xj+Wpx1vkyNG6FE EMfaoKVGMJpSukoGWF9JtVxCABKnU8T4+dKh9NiyGc25d4gM5jXAL9KBZ6Be1WJT rbCiv8aN9szTXReMCElgqnSricZi03p2OfvKKI2mPixTE2lPTR8fm2d844eldB/4 b4JHocQRKjaICj0TfGpgEAP1HA/tjfDSW3JkWD3RkQF2WP/sjJevoNUopiIveRUt tJk7QW0co2biP8xotnvRaxHBrKeV+692Zk6XG1Ks1yEUbRF9RVX/i5O8yO4e0qOw w0h8l9frfcdwNaJ5bDQR7/jOz1w3kzeDf4/zOVhgwjUFuspz5d0CAwEAAaOCBVIw ggVOMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdgB2/4g/Crb7lVHCYcz1h7o0 tKTNuyncaEIKn+ZnTFo6dAAAAYysVlH0AAAEAwBHMEUCIH34ugqiGY3tSzOtu0H3 SzCI1OoD7QhImNG37iggEXf/AiEAyZbz4V9bEQRB/gqjqpFYnBx0LT2y6+0gIp72 6f++UPUAdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYysVlGw AAAEAwBGMEQCIFwAEYLCJM7uyxEnaf3w5k2vqwgaWRA9xAAUmAiFnaG9AiBJJ/dj hG+/pnlmyNQzQlvEKlHk5YFCL7El+zmG07qq8AB1AFWB1MIWkDYBSuoLm1c8U/DA 5Dh4cCUIFy+jqh0HE9MMAAABjKxWUjUAAAQDAEYwRAIgSLvTL5XTYfwaa0Q0cUt7 afxNp6Q9+aplFfa0jNoLOYkCIAe3wYgEkwB0SjwFkq5X9QR47o8d2iVVdVAfb5oV loTPMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwIwCgYIKwYBBQUHAwEwPAYJ KwYBBAGCNxUHBC8wLQYlKwYBBAGCNxUIh73XG4Hn60aCgZ0ujtAMh/DaHV2ChOVp gvOnPgIBZAIBJjCBtAYIKwYBBQUHAQEEgacwgaQwcwYIKwYBBQUHMAKGZ2h0dHA6 Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQXp1 cmUlMjBSU0ElMjBUTFMlMjBJc3N1aW5nJTIwQ0ElMjAwMyUyMC0lMjB4c2lnbi5j cnQwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vbmVvY3NwLm1pY3Jvc29mdC5jb20vb2Nz cDAdBgNVHQ4EFgQU1njhxt/DVtIJDZmbevONi0yd4fAwDgYDVR0PAQH/BAQDAgWg MIIBWwYDVR0RBIIBUjCCAU6CDiouYS1tc2VkZ2UubmV0ggxhLW1zZWRnZS5uZXSC DGItbXNlZGdlLm5ldIIOKi5iLW1zZWRnZS5uZXSCDGMtbXNlZGdlLm5ldIIOKi5j LW1zZWRnZS5uZXSCDWRjLW1zZWRnZS5uZXSCDyouZGMtbXNlZGdlLm5ldIIRKi5s YmFzLm1zZWRnZS5uZXSCESoudGVzdC5tc2VkZ2UubmV0ghYqLmF6cC5mb290cHJp bnRkbnMuY29tghIqLmZvb3RwcmludGRucy5jb22CFiouY2xvLmZvb3RwcmludGRu cy5jb22CFiouYW55LmZvb3RwcmludGRucy5jb22CFioubnJiLmZvb3RwcmludGRu cy5jb22CESoucGVyZi5tc2VkZ2UubmV0ghcqLmZwLm1lYXN1cmUub2ZmaWNlLmNv bYIMKi5tc2VkZ2UubmV0MAwGA1UdEwEB/wQCMAAwagYDVR0fBGMwYTBfoF2gW4ZZ aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0JTIw QXp1cmUlMjBSU0ElMjBUTFMlMjBJc3N1aW5nJTIwQ0ElMjAwMy5jcmwwZgYDVR0g BF8wXTBRBgwrBgEEAYI3TIN9AQEwQTA/BggrBgEFBQcCARYzaHR0cDovL3d3dy5t aWNyb3NvZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnkuaHRtMAgGBmeBDAEC AjAfBgNVHSMEGDAWgBT+CXFAVQUQRNikgXW4nhrpSgaIyDAdBgNVHSUEFjAUBggr BgEFBQcDAgYIKwYBBQUHAwEwDQYJKoZIhvcNAQEMBQADggIBADUzSYRVf9aHBDgZ QI/TNXiIPFMZSTQEyb7uNugh4fvDQKP6K4kmubcAaYt89Ti7Ze0+JRXKW9StxLTC 11+HZ2o3blutSl7QZaMSUQn2OsjLa2FZomBOfr/TC6GEk9u45hiEk0XJ9OUcazNV gfGcbjFQi+VUpddg5faOXkMX/Wo0oBHYV3TtD0PmUzbmBOkEDE99GLLo61Mie8Ev 6qNXx99Fq4SU6y1w8Y6u40vvaPchPMXsiUycMq/CFGaH+LQZmpNi7eQ7RkKuSFQn pqdk9H3J265ACbKqBMt2NekRvJOHb8XNSMdXIwWX+qyUn//kn6RBA80jJGyI6Q3g pGoRtBoToZjGLXZV8GVFo3QH9cb4NqrtB+G5ibMwmhv4O4FRvfVunm0n6dOgl+7P FvktzZapgcOGuKEtrCj1PNKFrPaL7U4nv5eOP/np8IM95ohOpdpF1ZuYGj9bQnKH ZwSwNgn4umdXRkQhvo4vJsITZ7Yr9Qi0XG8E+rEYDIpkRkY7/VNeJyNrYXpPbqcH xwpBGdVlo/kuoTv8J3VqKZMsDwKsMU6KHkaZ9HKSoutfUxVejyG6CA97GH/KAHTQ 5FhT3xzx6Szp0hdKm1vNeZuCEClfiYT+UBu3ICf1vMx9j0RTT0y6XFjKJ8jLLqDM MztKcn8Vdb1B/3BoJUOvCLBnfoEG -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dt3CA7InjSovG62Kfjl eP5anHW+TI0boUQQx9qgpUYwmlK6SgZYX0m1XEIAEqdTxPj50qH02LIZzbl3iAzm NcAv0oFnoF7VYlOtsKK/xo32zNNdF4wISWCqdKuJxmLTenY5+8oojaY+LFMTaU9N Hx+bZ3zjh6V0H/hvgkehxBEqNogKPRN8amAQA/UcD+2N8NJbcmRYPdGRAXZY/+yM l6+g1SimIi95FS20mTtBbRyjZuI/zGi2e9FrEcGsp5X7r3ZmTpcbUqzXIRRtEX1F Vf+Lk7zI7h7So7DDSHyX1+t9x3A1onlsNBHv+M7PXDeTN4N/j/M5WGDCNQW6ynPl 3QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1137347232623750737761189188523138435721666047 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 17:23:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-21 17:23:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.msedge.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27501934386212175270731171976373388950627420677363944657764664988621145639858883148447562396595881393536505184294388110135389170032053419182539729216922761728020710502401177446699901342633862516458569434180597671962799152797024607466817885560436342509379093439450171318030270830587684435386328179935962023802080838934905837449734570615388179598380883952835449985459627543033717271096533546276757333421734554812364898684540581052859180080696677028435964329404422470765033993661863144893009032843292478354050428503110491003855466827939877606324338389612392357977537483087884056582189748709210532561026023705791905916381 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d678e1c6dfc356d2090d999b7af38d8b4c9de1f0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (338 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b-msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c-msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc-msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dc-msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lbas.msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azp.footprintdns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footprintdns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clo.footprintdns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.any.footprintdns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrb.footprintdns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perf.msedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp.measure.office.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.msedge.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe09714055051044d8a48175b89e1ae94a0688c8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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