sessions.int.mesh.cloud-dev.microsoft

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 07

About this certificate

This digital certificate with serial number 33:00:13:49:75:4d:4f:03:41:d2:e5:97:9d:00:00:00:13:49:75 was issued on by Microsoft Corporation.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:13:49:75:4d:4f:03:41:d2:e5:97:9d:00:00:00:13:49:75
Serial Number (int): 1137344568132743708368911935973574818290420085
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 58:32:c5:3c:e4:a6:e1:05:fb:9d:51:c5:be:0b:81:20:cc:b4:8e:69
AuthorityKeyId: ce:15:16:3b:ea:02:a3:a6:6b:da:d9:2b:fd:e5:8c:52:be:7a:50:a8

Fingerprint (sha1): ed:e0:98:9d:39:ac:e3:42:75:8a:2d:c7:25:8e:5d:74:c5:10:47:b3
Fingerprint (sha256): 26:87:1d:06:32:b7:74:6c:7b:91:ce:32:5d:46:be:7a:1d:2f:8f:91:fc:33:ff:4b:c6:d2:8d:bd:15:a4:fc:7e

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl

Check the revocation status for certificate sessions.int.mesh.cloud-dev.microsoft

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sessions.int.mesh.cloud-dev.microsoft

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sessions.westus3.int.mesh.cloud-dev.microsoft
sessions.int.mesh.cloud-dev.microsoft
sessions.eastus.int.mesh.cloud-dev.microsoft
*.sessions.int.mesh.cloud-dev.microsoft
*.nam.sessions.int.mesh.cloud-dev.microsoft

Other certificates including the domain name cloud-dev.microsoft

(limited to 100 certificates)
status.officeppe.com
sway.officeppe.com
*.vgdev.glint.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
*.goals.cloud-dev.microsoft
sessions.int.mesh.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
sway.officeppe.com
*.vgqa.glint.cloud-dev.microsoft
test.pulse.cloud-dev.microsoft
officeapps.live.com
learning.cloud-dev.microsoft
sessions.rol.mesh.cloud-dev.microsoft
esign.svc.cloud-dev.microsoft
copilot.cloud-dev.microsoft
augloop-test.officeppe.com
dev.skills.cloud-dev.microsoft
sway.officeppe.com
teamsapp.learning.cloud-dev.microsoft
*.yammer.com
augloop-int.officeppe.com
augloop-int.officeppe.com
status.officeppe.com
test.augloop.svc.cloud-dev.microsoft
learning.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
forms.cloud-dev.microsoft
setup.cloud-dev.microsoft
sessions.ppe.mesh.cloud-dev.microsoft
sessions.int.mesh.cloud-dev.microsoft
dev.skills.cloud-dev.microsoft
*.goals.cloud-dev.microsoft
loop.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
session.rol.mesh.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
*.vgdev.glint.cloud-dev.microsoft
dev.skills.cloud-dev.microsoft
dev.skills.cloud-dev.microsoft
sessions.rol.mesh.cloud-dev.microsoft
*.yammer.com
stage.skills.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
viva.cloud-dev.microsoft
forms.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
esign.svc.cloud-dev.microsoft
esign.svc.cloud-dev.microsoft
kevlar-ssl.augloop-int.officeppe.com
officeapps.live.com
test.augloop.svc.cloud-dev.microsoft
*.vgqa.glint.cloud-dev.microsoft
sway.officeppe.com
int.augloop.svc.cloud-dev.microsoft
reports.mmp.svc.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
officeapps.live.com
*.yammer.com
officeapps.live.com
kevlar-ssl.augloop-test.officeppe.com
*.ppe.goals.cloud-dev.microsoft
learning.cloud-dev.microsoft
test.pulse.cloud-dev.microsoft
profile.ppe.mesh.microsoft.com
sway.officeppe.com
forms.cloud-dev.microsoft
sway.officeppe.com
stage.pulse.cloud-dev.microsoft
stage.pulse.cloud-dev.microsoft
dev.pulse.cloud-dev.microsoft
viva.cloud-dev.microsoft
insights.cloud-dev.microsoft
*.goals.cloud-dev.microsoft
sway.officeppe.com
reports.mmp.svc.cloud-dev.microsoft
app.int.whiteboard.microsoft.com
*.yammer.com
test.augloop.svc.cloud-dev.microsoft
stage.pulse.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
*.yammer.com
forms.cloud-dev.microsoft
aiinfrastructure.cloud-dev.microsoft
aiinfrastructure.cloud-dev.microsoft
status.officeppe.com
*.vgdev.glint.cloud-dev.microsoft
officeapps.live.com
teamsapp.learning.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
insights.cloud-dev.microsoft
aiinfrastructure.cloud-dev.microsoft
status.officeppe.com
augloop-test.officeppe.com
cdn.aiinfrastructure.cloud-dev.microsoft
status.officeppe.com

Certificate

The complete raw certificate details for sessions.int.mesh.cloud-dev.microsoft in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hVYlOGpnVaa/RW0IAuD
SHi7eFYvlwkdOaJzfufUP9aE0PJkkKBIPh9/1ZM5OaY0qTwZXNd14QTVviedbSZq
oJpB7aT799agaaoMKyQm6sABZB8IrR2nGnKEz1jUFCOrv/ZNE7QTjFPsV11Oc7rm
CnBHmSPVCigK5Jny5BgWZR0HuLgoHPzXVoQw0aKL9xivTN1mARokVMNM5bHwRF/X
kMueahwOPmmID0Yb7F9L5UjzoseANdWemQRUvvPEk9/+R4miAul2NywmAQ5uvuWX
E1BSfQUCwdiUkBO0oi4abd7U4h75Ju1DD5x/U1rnBjdblWAZE14SQjnFwRMbQ4Ro
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137344568132743708368911935973574818290420085
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 07'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 16:45:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-24 16:45:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sessions.int.mesh.cloud-dev.microsoft'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27025523378375822420918214995528549384432041373563164248625970993580417231613180743997047252998621958144481635059745249471550162428913845020237198233947307510493380093344511179281554968926318056355940155594389818838758050334309563669396641461498785281026565326787743415977512669279922440919780234476755270329427145044548062416883572400009286111851311228631694710027918373310564667280401856421295564791703095546166935516004910584990266452908203502960062590309178819357137433482435322326740647139452114840053701523798766833173349869188528408847944491571641364177827358970462602749601858931617953056161381242411413694617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5832c53ce4a6e105fb9d51c5be0b8120ccb48e69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (221 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sessions.westus3.int.mesh.cloud-dev.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sessions.int.mesh.cloud-dev.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sessions.eastus.int.mesh.cloud-dev.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sessions.int.mesh.cloud-dev.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nam.sessions.int.mesh.cloud-dev.microsoft'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ce15163bea02a3a66bdad92bfde58c52be7a50a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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