forms.cloud-dev.microsoft

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 04

About this certificate

This digital certificate with serial number 33:00:3c:92:8b:e6:dd:bd:f0:19:55:30:88:00:00:00:3c:92:8b was issued on by Microsoft Corporation.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:3c:92:8b:e6:dd:bd:f0:19:55:30:88:00:00:00:3c:92:8b
Serial Number (int): 1137358616860776206875872138893290282610889355
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 9a:1d:e6:5e:9d:39:0b:f4:90:d7:d3:a6:50:9b:b2:a0:47:10:3f:0c
AuthorityKeyId: 3b:70:d1:53:e9:76:25:9d:60:a8:ca:66:0f:c6:9b:ae:6f:54:16:6a

Fingerprint (sha1): e2:c2:e8:e7:c8:75:ea:e7:ca:82:96:64:d1:7f:33:8f:cb:34:22:d7
Fingerprint (sha256): 32:e7:32:17:6d:44:22:e4:7a:d9:af:ff:99:b8:7a:84:ef:ea:e1:0c:60:bf:54:e9:85:e6:af:48:d7:17:a1:27

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl

Check the revocation status for certificate forms.cloud-dev.microsoft

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for forms.cloud-dev.microsoft

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forms.office-int.com
forms.microsoft-int.com
forms-int.office.net
afd.forms-int.office.net
akamai.forms-int.office.net
eu.forms.office-int.com
forms.cloud-dev.microsoft

Other certificates including the domain name cloud-dev.microsoft

(limited to 100 certificates)
status.officeppe.com
sway.officeppe.com
*.vgdev.glint.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
*.goals.cloud-dev.microsoft
sessions.int.mesh.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
sway.officeppe.com
*.vgqa.glint.cloud-dev.microsoft
test.pulse.cloud-dev.microsoft
officeapps.live.com
learning.cloud-dev.microsoft
sessions.rol.mesh.cloud-dev.microsoft
esign.svc.cloud-dev.microsoft
copilot.cloud-dev.microsoft
augloop-test.officeppe.com
dev.skills.cloud-dev.microsoft
sway.officeppe.com
teamsapp.learning.cloud-dev.microsoft
*.yammer.com
augloop-int.officeppe.com
augloop-int.officeppe.com
status.officeppe.com
test.augloop.svc.cloud-dev.microsoft
learning.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
forms.cloud-dev.microsoft
setup.cloud-dev.microsoft
sessions.ppe.mesh.cloud-dev.microsoft
sessions.int.mesh.cloud-dev.microsoft
dev.skills.cloud-dev.microsoft
*.goals.cloud-dev.microsoft
loop.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
session.rol.mesh.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
*.vgdev.glint.cloud-dev.microsoft
dev.skills.cloud-dev.microsoft
dev.skills.cloud-dev.microsoft
sessions.rol.mesh.cloud-dev.microsoft
*.yammer.com
stage.skills.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
viva.cloud-dev.microsoft
forms.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
esign.svc.cloud-dev.microsoft
esign.svc.cloud-dev.microsoft
kevlar-ssl.augloop-int.officeppe.com
officeapps.live.com
test.augloop.svc.cloud-dev.microsoft
*.vgqa.glint.cloud-dev.microsoft
sway.officeppe.com
int.augloop.svc.cloud-dev.microsoft
reports.mmp.svc.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
officeapps.live.com
*.yammer.com
officeapps.live.com
kevlar-ssl.augloop-test.officeppe.com
*.ppe.goals.cloud-dev.microsoft
learning.cloud-dev.microsoft
test.pulse.cloud-dev.microsoft
profile.ppe.mesh.microsoft.com
sway.officeppe.com
forms.cloud-dev.microsoft
sway.officeppe.com
stage.pulse.cloud-dev.microsoft
stage.pulse.cloud-dev.microsoft
dev.pulse.cloud-dev.microsoft
viva.cloud-dev.microsoft
insights.cloud-dev.microsoft
*.goals.cloud-dev.microsoft
sway.officeppe.com
reports.mmp.svc.cloud-dev.microsoft
app.int.whiteboard.microsoft.com
*.yammer.com
test.augloop.svc.cloud-dev.microsoft
stage.pulse.cloud-dev.microsoft
int.augloop.svc.cloud-dev.microsoft
*.yammer.com
forms.cloud-dev.microsoft
aiinfrastructure.cloud-dev.microsoft
aiinfrastructure.cloud-dev.microsoft
status.officeppe.com
*.vgdev.glint.cloud-dev.microsoft
officeapps.live.com
teamsapp.learning.cloud-dev.microsoft
test.augloop.svc.cloud-dev.microsoft
insights.cloud-dev.microsoft
aiinfrastructure.cloud-dev.microsoft
status.officeppe.com
augloop-test.officeppe.com
cdn.aiinfrastructure.cloud-dev.microsoft
status.officeppe.com

Certificate

The complete raw certificate details for forms.cloud-dev.microsoft in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu8HpwvMCdn7Bovp7G1Q
dkpS1HYzkrLpgAQhLx4c6vAxNCFlWMmQCwfZu/ttEeZtViXh1/1gfiwAFVH62veo
x+k8+/Tgajh3l23iLR9+FqWeYWxjs1brvDrIrcRhhcGJGjY23cpLcTqB0C79WLGH
TOfanguIVGgk5S/MmGbvw3VnvaBY+fMv7lIqRis/ETiW6FEukk6PmHn5sb9syrnL
AkHpT5CSP/RdpSRx8EpOb6xUfc+I570DjFSAMqnCa8wtk0ZLoMJlxulnf3NQkcDz
D/OpnS2WdI/+PrXT2alHYwP4IPii6FFnRy914C4oGX0SSntz99pRgINw/illN70K
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137358616860776206875872138893290282610889355
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 04'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 00:31:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-20 00:31:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'forms.cloud-dev.microsoft'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24608101196567705692393557212938195538494870080984419015502496556819906168530906399279684126081326725774169655970248765259702574632479434746973084287197346520693022887580177338737271857445209959716548807546925694867657824704224842759017532107123472908402259938408701599225660101240115498133238060782909429998312773943486101087365666591016404295652041084586521039616759695529101748986658232801994380463272866344178984513411935983360887540497560071077858035884176537737046230714248490374607898017485989380625058772831463685102647466310665726188281436649181330622651315689482724301593168995330979397082315388480200182321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a1de65e9d390bf490d7d3a6509bb2a047103f0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.office-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.microsoft-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms-int.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afd.forms-int.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamai.forms-int.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.forms.office-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.cloud-dev.microsoft'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3b70d153e976259d60a8ca660fc69bae6f54166a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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