checkout.office-int.com

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 03

About this certificate

This digital certificate with serial number 33:00:00:e8:2e:ba:59:7a:08:48:7c:ff:b8:00:00:00:00:e8:2e was issued on by Microsoft Corporation.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:00:e8:2e:ba:59:7a:08:48:7c:ff:b8:00:00:00:00:e8:2e
Serial Number (int): 1137338313748582075071334117696132314787014702
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: d3:b1:52:1a:05:67:6c:89:0b:2f:a9:34:08:86:8a:f9:ba:cc:1f:98
AuthorityKeyId: fe:09:71:40:55:05:10:44:d8:a4:81:75:b8:9e:1a:e9:4a:06:88:c8

Fingerprint (sha1): 45:a7:80:be:be:70:e0:12:92:24:dc:9d:de:05:0c:83:30:81:9c:59
Fingerprint (sha256): 23:ca:f4:71:c6:06:b2:09:e6:30:e3:43:31:a3:39:49:77:97:be:c4:fb:7b:34:be:67:8e:a1:f2:a9:f9:0d:00

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl

Check the revocation status for certificate checkout.office-int.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for checkout.office-int.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

checkout.microsoft365-int.com
officepurchaseexperience.omex.office-int.net
*.officepurchaseexperience.omex.office-int.net
external.omex.office-int.net
*.external.omex.office-int.net
checkout.office-int.com
stores.office-int.com

Other certificates including the domain name office-int.com

(limited to 100 certificates)
lifecycle.office-int.com
neur.fis.office-int.com
*.osi.office-int.net
*.osi.office-int.net
c.msn-int.com
cert00046-azurecdn.akamaized.net
cert00046-azurecdn.akamaized.net
redwood.osikevlartorus.office-int.com
api.businesscentral.dynamics-tie.com
lynx.osikevlartorus.office-int.com
cdn.forms.office.net
tasks.osi.office-int.com
helene.osikevlartorus.office-int.com
sway.office-int.com
inclient.store.office-int.com
store.office-int.com
cert00046-azurecdn.akamaized.net
osikevlartorus.office-int.com
c.msn-int.com
*.r11s-wu2-ppe.prague.office-int.com
insertmedia.osi.office-int.net
Pineapple.osikevlartorus.office-int.com
*.financials.dynamics-tie.com
geneva-mds.rose.office-int.com
Eridanus-INT-Mds.office-int.com
ssu.office-int.com
tasks.office-int.com
Mahogany.osikevlartorus.office-int.com
*.osi.office-int.net
*.wu2-ppe.prague.office-int.com
jade.osikevlartorus.office-int.com
geneva-mds.Deimos.office-int.com
support.office-int.com
wheat.osikevlartorus.office-int.com
*.osi.office-int.net
*.osi.office-int.net
firstpartymarketplace.store.office-int.com
cek.rps.lifecycle.office-int.com
geneva-mds.Galatea.office-int.com
*.osi.office-int.net
eucalyptus.osikevlartorus.office-int.com
row.fis.office-int.com
cert00046-azurecdn.akamaized.net
messaging.engagement.office-int.com
*.eu2.prague.office-int.com
forms.office-int.com
*.osi.office-int.net
geneva-mds.patriarch.office-int.com
*.osi.office-int.net
Buff.osikevlartorus.office-int.com
geneva-mds.Enceladus.office-int.com
sagittarius.osikevlartorus.office-int.com
Galatea.osikevlartorus.office-int.com
cluster.project.office-int.com
servicetrust.office-int.com
random12.fis.office-int.com
monitoring.servicetrust.office-int.com
cert00046-azurecdn.akamaized.net
eus.fis.office-int.com
servicetrust.office-int.com
Ginger.osikevlartorus.office-int.com
aqua.osikevlartorus.office-int.com
geneva-mds.Coffee.office-int.com
malachite.osikevlartorus.office-int.com
firstpartyapp-encrypt.marketplace.store.office-int.com
cert00046-azurecdn.akamaized.net
deployment.servicetrust.office-int.com
messaging.growth.office-int.com
cert00046-azurecdn.akamaized.net
persimmon.osikevlartorus.office-int.com
proteus.osikevlartorus.office-int.com
melon.osikevlartorus.office-int.com
addinslicensing.store.office-int.com
cert00046-azurecdn.akamaized.net
sway.office-int.com
cert00046-azurecdn.akamaized.net
burlywood.osikevlartorus.office-int.com
setup.office-int.com
prod.fis.office-int.com
*.r11s-wu2.prague.office-int.com
geneva-mds.auburn.office-int.com
cert00046-azurecdn.akamaized.net
*.osi.office-int.net
firstpartymarketplace.store.office-int.com
*.osi.office-int.net
api.servicetrust.office-int.com
sway.office-int.com
mint.osikevlartorus.office-int.com
forms.office-int.com
checkout.office-int.com
lifecycle.office-int.com
lumber.osikevlartorus.office-int.com
margaret.osikevlartorus.office-int.com
testIcmCert1.office-int.com
teal.officeapps.live-int.com
Eridanus-INT-Mds.office-int.com
ginger.osikevlartorus.office-int.com
store.office-int.com
messaging.engagement.office-int.com
scc-nexus.office-int.com

Certificate

The complete raw certificate details for checkout.office-int.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZN35f1vIPa9KfD5oSsR
kLItLJtZA2EXnvGYmisEKn0Rqf5oTimTTm0sAgpDrQ0cz6eQBrwmXj1RSbpu0ysS
pUW51t5QLlb6CQIhPPMRt7nM43A6jCbcybWEgFy9qZSVapcjnzhZLucKnf8ucm6P
xHnF4x0zrDejJIUvZSGPUGc3ZpC2aHS7/VOWkbXHFHmtM7VDDOU/cuykMju8YJpt
you8haNwytEArspLoNOB10YTDCQaFWKsdmJ7wAl/GAoKl+ZIz5sDbZ5gzEZ7BiwH
QH20QSoo/B1IPusw5tjWo1qvf+OapnvIe+Sg+riXD2/z6XnFkiJM9o0j6TDp8rzb
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137338313748582075071334117696132314787014702
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 10:33:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-24 10:33:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'checkout.office-int.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27466431532844960321855939682096880371577570630209679963142199760279964989267866368029263135901251266491664474420310173986344833026864613192340730096305497465553833576495799110266077161129351196759942180843784914625408871608250717041345221810989274314177113703484240723287329791496327894565221651008924717452341849159497428629458123867137469047765348530395869945580763162017867889347609622249524909889112605685419329252387572193716759379708793239359857942244659622365187763583922426707737846013905393701570035144937141886122855808186010848598610748455406474779967499330263860339771544611725487541037586124610083806021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3b1521a05676c890b2fa93408868af9bacc1f98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (238 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.microsoft365-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officepurchaseexperience.omex.office-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officepurchaseexperience.omex.office-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'external.omex.office-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external.omex.office-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.office-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.office-int.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe09714055051044d8a48175b89e1ae94a0688c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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