cdn.onenote.net
- Microsoft Corporation -
Issued by Microsoft IT TLS CA 2
About this certificate
This digital certificate with serial number 20:00:02:a0:e5:ee:40:91:69:99:e6:58:ec:00:00:00:02:a0:e5 was issued on by Microsoft Corporation.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Microsoft Corporation
Organization:
Microsoft Corporation
Organization unit: Microsoft Corporation
Organization unit: Microsoft Corporation
State / Province:
WA
Locality: Redmond
Country: US
Locality: Redmond
Country: US
Microsoft Corporation
Organization:
Microsoft Corporation
Organization unit: Microsoft IT
Organization unit: Microsoft IT
State / Province:
Washington
Locality: Redmond
Country: US
Locality: Redmond
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 20:00:02:a0:e5:ee:40:91:69:99:e6:58:ec:00:00:00:02:a0:e5Serial Number (int): 713624740788061417688145519880164575786737893
Serial Number lenght: 150 bits, 19 octets
SubjectKeyId: ae:4f:a3:68:23:83:84:20:c2:26:a7:8c:59:24:fd:d4:ed:03:1e:91
AuthorityKeyId: 91:9e:3b:44:6c:3d:57:9c:42:77:2a:34:d7:4f:d1:cc:4a:97:2c:da
Fingerprint (sha1): fe:71:52:fc:df:ce:8c:bf:f6:5e:5a:dd:b0:a5:35:72:80:00:f6:fd
Fingerprint (sha256): 29:65:fd:00:97:28:87:6c:be:25:28:73:45:28:ec:77:28:dd:96:69:b2:00:3f:de:e3:17:bc:21:e0:fc:ec:df
Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%202.crt
Revocation information
OCSP Server: http://ocsp.msocsp.comCRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl
Check the revocation status for certificate cdn.onenote.net
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cdn.onenote.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
onenote.com
*.onenote.com
*.edog.onenote.com
cdn.onenote.net
*.onenote.com
*.edog.onenote.com
cdn.onenote.net
Other certificates including the domain name onenote.net
(limited to 100 certificates)
site.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
site.edog.onenote.com
educdn.onenote.net
cdn.onenote.net
cdn.onenote.net
reverseproxy.edog.onenote.com
onenote.com
cdn.onenote.net
site.edog.onenote.com
cdn.onenote.net
cdn.onenote.net
reverseproxy.edog.onenote.com
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
site-cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
educdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
onenote.com
reverseproxy.edog.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
site.edog.onenote.com
site-cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
site.edog.onenote.com
Akamai-Rotation-Reminder-For-cdn.onenote.net
site.edog.onenote.com
site-cdn.onenote.net
sni2426egl.wpc.edgecastcdn.net
site-cdn.onenote.net
site.edog.onenote.com
reverseproxy.onenote.com
site-cdn.onenote.net
onenote.com
reverseproxy.onenote.com
onenote.com
site-cdn.onenote.net
reverseproxy.edog.onenote.com
site-cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
edu.cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
Akamai-Rotation-Reminder-For-cdn.onenote.net
site.edog.onenote.com
site-cdn.onenote.net
onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
site-cdn.onenote.net
reverseproxy.onenote.com
cdn.onenote.net
site.edog.onenote.com
educdn.onenote.net
cdn.onenote.net
cdn.onenote.net
reverseproxy.edog.onenote.com
onenote.com
cdn.onenote.net
site.edog.onenote.com
cdn.onenote.net
cdn.onenote.net
reverseproxy.edog.onenote.com
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
site-cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
educdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
onenote.com
reverseproxy.edog.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
site.edog.onenote.com
site-cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
reverseproxy.onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
site.edog.onenote.com
Akamai-Rotation-Reminder-For-cdn.onenote.net
site.edog.onenote.com
site-cdn.onenote.net
sni2426egl.wpc.edgecastcdn.net
site-cdn.onenote.net
site.edog.onenote.com
reverseproxy.onenote.com
site-cdn.onenote.net
onenote.com
reverseproxy.onenote.com
onenote.com
site-cdn.onenote.net
reverseproxy.edog.onenote.com
site-cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
edu.cdn.onenote.net
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
cdn.onenote.net
site-cdn.onenote.net
cdn.onenote.net
onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
Akamai-Rotation-Reminder-For-site-cdn.onenote.net
Akamai-Rotation-Reminder-For-cdn.onenote.net
site.edog.onenote.com
site-cdn.onenote.net
onenote.com
reverseproxy.onenote.com
site.edog.onenote.com
reverseproxy.onenote.com
reverseproxy.onenote.com
site-cdn.onenote.net
Certificate
The complete raw certificate details for cdn.onenote.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHYjCCBUqgAwIBAgITIAACoOXuQJFpmeZY7AAAAAKg5TANBgkqhkiG9w0BAQsF ADCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UE CxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDIw HhcNMTgwNDI0MTgwNzEwWhcNMjAwNDI0MTgwNzEwWjCBhjELMAkGA1UEBhMCVVMx CzAJBgNVBAgTAldBMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv ZnQgQ29ycG9yYXRpb24xHjAcBgNVBAsTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEY MBYGA1UEAxMPY2RuLm9uZW5vdGUubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAor1y5CdsYzqa0ftnoh7kbXodiUvtemfvs0vgEnReV15gxuGRFdfx 2tWHkSuIBXCYPu5t3/pMMvTGb2a0aYNM+57+wt9+zsA4uRnWlebvvQnLfdHD5hqy /W48SkrQQrfQqrZnLv1pngkVkHyXx7E02Evf+JX65OYBxF1Ve2LaJQfVgPtFdfBi i8aDjDm1s/zb8Q5M7q/awkSQm4Y/hpMAnIuq3dbVJp7n1VbFZD8/UvMolZQSpXru j6V8ex/8zZ7jyvssQI3zvV4KyTcloaEy7hFkk0xeWskmOV98t5ZFvPmooMH2Gi4O DiDuXD/DRwb57YK8Vb7ZCzyH4gixohFFYQIDAQABo4ICwDCCArwwEwYKKwYBBAHW eQIEAwEB/wQCBQAwJwYJKwYBBAGCNxUKBBowGDAKBggrBgEFBQcDAjAKBggrBgEF BQcDATA+BgkrBgEEAYI3FQcEMTAvBicrBgEEAYI3FQiH2oZ1g+7ZAYLJhRuBtZ5h hfTrYIFdhNLfQoLnk3oCAWQCAR0wgYUGCCsGAQUFBwEBBHkwdzBRBggrBgEFBQcw AoZFaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvTWljcm9zb2Z0 JTIwSVQlMjBUTFMlMjBDQSUyMDIuY3J0MCIGCCsGAQUFBzABhhZodHRwOi8vb2Nz cC5tc29jc3AuY29tMB0GA1UdDgQWBBSuT6NoI4OEIMImp4xZJP3U7QMekTALBgNV HQ8EBAMCBLAwSgYDVR0RBEMwQYILb25lbm90ZS5jb22CDSoub25lbm90ZS5jb22C EiouZWRvZy5vbmVub3RlLmNvbYIPY2RuLm9uZW5vdGUubmV0MIGsBgNVHR8EgaQw gaEwgZ6ggZuggZiGS2h0dHA6Ly9tc2NybC5taWNyb3NvZnQuY29tL3BraS9tc2Nv cnAvY3JsL01pY3Jvc29mdCUyMElUJTIwVExTJTIwQ0ElMjAyLmNybIZJaHR0cDov L2NybC5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL01pY3Jvc29mdCUyMElU JTIwVExTJTIwQ0ElMjAyLmNybDBNBgNVHSAERjBEMEIGCSsGAQQBgjcqATA1MDMG CCsGAQUFBwIBFidodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9j cHMwHwYDVR0jBBgwFoAUkZ47RGw9V5xCdyo010/RzEqXLNowHQYDVR0lBBYwFAYI KwYBBQUHAwIGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4ICAQAXQN0qIB04lYNf kiVRhLOYFjlZjWZZSXsEpghJo1clb0yHbvd+g2S01x/8UAH7+5bLAUluVb81I8Bi LmWVJwyk+wGVZYMGNf8/7k1/r8F8X2xcCZ9ouepYyCWOzFvBjo+P13fftzVT0ZRt TALi2srgbis7d2tBA6042mK3ksmM6t8Dl4vBOlLKeC+1fJ3pMUNOQBzbvXzXx3rx C5edTPAGCcF2Rc2JNkGVyqblAVZa5igTGS4amMFXd4KG/smgCSQwVPzTBodxQ3Sk gfWIeKrXVja1NuRPPGjnoH0ErydpvCfUz56rS7KVPA3B+pxqbFza3tvOj/CKI7Sw L+dGZ9/0aTr0Y1hHD6ngT6VfEEVJk999r7Xsi1ZwEeyD6o02xYS0DrBI50KPFMig Geqpfasw8UNeemR5STZg575uIFPOJ6FANsibIVibrJYOnGqy7sjd7rgSuc02W5yK pG81VbG9SgYVxtXLpQuFcvO7AA0pFGrdvgCRhB+Vu3z5BpzTLl/rhf/5TiZ4CD0U dRehcEsCCs7VEWTdEYbJOKFl3LbZoRBUD4WVQzAbbLBOgM0PAwRLIry1yyEa5QFU znw9nLEz5dJreZcagyx2VgQogmgtZ8iVS+kXjvmybELrVQRVvPrsbiulv0sDMDVy ey7kmHhk+oSWjCF3+V0AlGAApyevtw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor1y5CdsYzqa0ftnoh7k bXodiUvtemfvs0vgEnReV15gxuGRFdfx2tWHkSuIBXCYPu5t3/pMMvTGb2a0aYNM +57+wt9+zsA4uRnWlebvvQnLfdHD5hqy/W48SkrQQrfQqrZnLv1pngkVkHyXx7E0 2Evf+JX65OYBxF1Ve2LaJQfVgPtFdfBii8aDjDm1s/zb8Q5M7q/awkSQm4Y/hpMA nIuq3dbVJp7n1VbFZD8/UvMolZQSpXruj6V8ex/8zZ7jyvssQI3zvV4KyTcloaEy 7hFkk0xeWskmOV98t5ZFvPmooMH2Gi4ODiDuXD/DRwb57YK8Vb7ZCzyH4gixohFF YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 713624740788061417688145519880164575786737893 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-24 18:07:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-24 18:07:10 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.onenote.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20544026086587271421026014135091458689287339662239851986357733222833502986855556661609738319286348304869210020338601955304053036465966149736969380712316690472363657186225562721611542651249221246579575674701021975038063493690710590895950374175521335935074141179815532086273397461098056638535282285410504728268041534893178162808984506331797575493559688802708141342971380983376341963462873894788466051741058409751326617151323776387592560417003576699297646605396212520252346903904551456546697499066680683172243325568382274449128683917693804856829957622939026373859673180629233200798827600555188909360002534242329558074721 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%202.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ae4fa36823838420c226a78c5924fdd4ed031e91 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onenote.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onenote.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edog.onenote.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.onenote.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 919e3b446c3d579c42772a34d74fd1cc4a972cda . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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