seops-userprovisioning-dev.microsoft-tst.com

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 04

About this certificate

This digital certificate with serial number 33:00:0e:40:1a:50:85:54:bf:ad:c6:81:60:00:00:00:0e:40:1a was issued on by Microsoft Corporation.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:0e:40:1a:50:85:54:bf:ad:c6:81:60:00:00:00:0e:40:1a
Serial Number (int): 1137342854285423278255704321844525182531551258
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 3f:75:d7:8f:b4:4b:f3:a1:8a:dd:9b:2b:8f:f9:a9:3d:e7:11:e0:86
AuthorityKeyId: 3b:70:d1:53:e9:76:25:9d:60:a8:ca:66:0f:c6:9b:ae:6f:54:16:6a

Fingerprint (sha1): 37:11:be:59:7e:e8:0c:e2:20:cb:1b:cc:46:3a:23:24:8f:4d:4a:27
Fingerprint (sha256): 32:5b:e0:80:5d:86:f8:c3:81:9e:b2:21:a1:52:dc:24:db:03:e4:87:5d:c4:66:f4:c8:fc:0a:cc:d7:5a:95:81

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl

Check the revocation status for certificate seops-userprovisioning-dev.microsoft-tst.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for seops-userprovisioning-dev.microsoft-tst.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

seops-userprovisioning-dev.microsoft-tst.com

Other certificates including the domain name microsoft-tst.com

(limited to 100 certificates)
merchandising.sellerdashboard.microsoft-tst.com
*.api.usage.cp.microsoft-tst.com
*.minting.token.cp.microsoft-tst.com
partner.microsoft-tst.com
partnerbusinessprofiles.microsoft-tst.com
client.usage.cp.microsoft-tst.com
*.comred5.microsoft-tst.com
*.usage.cp.microsoft-tst.com
*.usage.cp.microsoft-tst.com
seops.microsoft-tst.com
sellerdashboard.cpcmr.microsoft-tst.com
catalog.sellerdashboard.cpcmr.microsoft-tst.com
partnerbusinessprofiles.microsoft-tst.com
client.commercerestentitlement.microsoft-tst.com
*.comred12.microsoft-tst.com
subscription.cp.microsoft-tst.com
*.api.usage.cp.microsoft-tst.com
hitchdev.microsoft-tst.com
entitlement.cp.microsoft-tst.com
*.usage.cp.microsoft-tst.com
partner.microsoft-tst.com
*.api.usage.cp.microsoft-tst.com
*.comred6.microsoft-tst.com
*.api.usage.cp.microsoft-tst.com
token.cp.microsoft-tst.com
partnercenter.microsoft-ppe.com
sellerdashboard.cpcmr.microsoft-tst.com
*.usage.cp.microsoft-tst.com
token.cp.microsoft-int.com
seops.microsoft-tst.com
authorization-validation.cp.microsoft-tst.com
aad.internal.token.cp.microsoft-tst.com
*.comred1.microsoft-tst.com
*.comred4.microsoft-tst.com
authorization-unittest.cp.microsoft-tst.com
token.cp.microsoft-int.com
aad.internal.token.cp.microsoft-tst.com
deployr2.mrs.microsoft-tst.com
*.pagql.microsoft-tst.com
partnercenter.microsoft-tst.com
api.partnercenterreferrals.microsoft-tst.com
partnercenter.microsoft-ppe.com
registration.sellerdashboard.cpcmr.microsoft-tst.com
partner.microsoft-tst.com
*.usage.cp.microsoft-tst.com
client.commercerestentitlement.microsoft-tst.com
client.si.cp.microsoft-tst.com
catalog.sellerdashboard.sdtest1.microsoft-tst.com
token.cp.microsoft-int.com
partner.microsoft-tst.com
seops.microsoft-tst.com
seops-userprovisioning-dev.microsoft-tst.com
*.pagql.microsoft-tst.com
scops.microsoft-tst.com
seops.microsoft-tst.com
api.partnercenterreferrals.microsoft-tst.com
syndicationtestcallbackservice-prodtestcloud.microsoft-tst.com
*.comred5.microsoft-tst.com
aad.internal.token.cp.microsoft-tst.com
*.minting.token.cp.microsoft-tst.com
sellerdashboard.cpinfra.microsoft-tst.com
api.partnerbusinessprofiles.microsoft-tst.com
catalog.sellerdashboard.sdminibedbcp.microsoft-tst.com
*.cpshd1.microsoft-tst.com
token.cp.microsoft-int.com
partner2.microsoft-tst.com
*.usage.cp.microsoft-tst.com
tipclient.usage.cp.microsoft-tst.com
*.comred3.microsoft-tst.com
*.usage.cp.microsoft-tst.com
*.pagql.microsoft-tst.com
deployment.adminconsole.usage.cp.microsoft-tst.com
aad.internal.token.cp.microsoft-tst.com
*.usage.cp.microsoft-tst.com
avts1.sellerdashboard.microsoft-tst.com
partner.microsoft-tst.com
scops.microsoft-tst.com
*.api.usage.cp.microsoft-tst.com
seops.microsoft-tst.com
*.commerce.microsoft-tst.com
*.usage.cp.microsoft-tst.com
aad.internal.token.cp.microsoft-tst.com
*.usage.cp.microsoft-tst.com
sellerdashboard.cpnext.microsoft-tst.com
client.adminconsole.usage.cp.microsoft-tst.com
client.commercerestordering.microsoft-tst.com
vitiwari.info.token.cp.microsoft-tst.com
*.minting.token.cp.microsoft-tst.com
aad.internal.token.cp.microsoft-tst.com
*.minting.token.cp.microsoft-tst.com
alwest.info.token.cp.microsoft-tst.com
entitlement.devx.microsoft-tst.com
scops.microsoft-tst.com
lighthouse.cp.microsoft-tst.com
seops.microsoft-tst.com
alwest.info.token.cp.microsoft-tst.com
adminconsole.usage.cp.microsoft-tst.com
api.partnercenterreferrals.microsoft-tst.com
alwest.info.token.cp.microsoft-tst.com
monitoring.entitlement.cp.microsoft-tst.com

Certificate

The complete raw certificate details for seops-userprovisioning-dev.microsoft-tst.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNEoNuyP4eWNqo5zpzYB
FoCLlepYjgIg5AJhtDkY3q3mgw1yBxcgUsPqdS6nNeCfAWjQMgKLrfvCc4VsNxME
2T5XORRXsT2QxMnQ6zpya7yJK7QimUfXoJCqIeXgukwglq/v9pnYZJOpqLLZexmW
gqBp40J2Cf794b78cbP5rrvuZbnsF66t0nSjCJ7UwjKCHKuzPXuzt+iUJfM/qbNm
LCLG6/+9iSBUUM1UZjA7+kUlnWTjIADRH69yAC1UgMbTlOXBrHWdZ76UbY0hcMMo
FacLHdaWGfHFQVMpfmsN5907w9iLqrvOGITDpYqUQfQM77KVZJSaUj6UB3C6X8cN
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137342854285423278255704321844525182531551258
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 04'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-03 06:49:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-28 06:49:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'seops-userprovisioning-dev.microsoft-tst.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20301267998749848760680082286041907416420299467383606256569864671449081122884891610647464813073538920691918800941209327326048075697308880140320254776353227622902430349161524798104516181031005435491333881668140736327739217347837346165267094626946115503452596008534205025121975383737361920693061896301419957879871621480938726828798570674949003417407053965093949189939845554029744672737377225006453261322572099194555379829521343269986316506449954344409805647288729888938544123709306410771583744890033138060776100772996402721126650669619082650643874155951899482790693083454528187820237909600224044799932500674304004263401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f75d78fb44bf3a18add9b2b8ff9a93de711e086
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seops-userprovisioning-dev.microsoft-tst.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3b70d153e976259d60a8ca660fc69bae6f54166a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		000ad48c1d4c491c2583b29be548eaee4078459322ecf41ef6917441214a4d3e9518549db94aecf9edf90fc92227e7c2288440481f01b1535780419b7aab15efa22b9d781b3b7e3e905dc18fec4e8eff9cd5fe4fd774fb3162da1d5dedc6e8a960746650eb5acd98876cce25858ea430e463a64a483985e039a7890d968abef44b2570c5567bb9b41b41bab7db754909152626567fd8e94787cbcaa4c9cfc8ca70f8933173ccd8c6b73d7c86c98d4c6fae614fe67cbb5605665f06b22ac99b964c5a77d46bc6ec858323ee52d9dbc5c98b15e5559a7cdbcb0c1f9ad051f2173bad19e4f1abe255b4260c3a9bf8964a3a01c8d6064cb65c103c4e7cdb54b0ba7f567abd690c01f76000f5a1b8dbc8341ee60cf85d93ef72707315e5530b0c343ed6cf0d74f22ac7e6910e28e0bb3528ef23650a8bacb93033c2d4439e0b0e0251113ec5593dc0aed2f263b7e2b74f2a5c185361cc18e5b63797ac0d65c30c9de7f856673148d171ea17b27f97e8fe082ae9e32a92bdd2df790162ce220e8321d0cf008c5d8c94e3d6373bdd52510a61c62ba3eace1ceb3f77a7890b78721b56f01a45d0948af3a3409829de2f1e7f26a22177733ac80aa875607a4fcd94180c90bd0141a3e2bf1fd131ddfe5a1f8416813444e2abf3038b751c3add99bc7f867bc0f97fafb0508f18b34041832cfaffb6dd206cd3714b969724d58adc461f3ca9d9