csharp.net

Issued by Microsoft RSA TLS CA 01

About this certificate

This digital certificate with serial number 12:00:24:cd:78:07:37:9d:c7:70:15:cf:2c:00:00:00:24:cd:78 was issued on by Microsoft Corporation.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=csharp.net

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:00:24:cd:78:07:37:9d:c7:70:15:cf:2c:00:00:00:24:cd:78
Serial Number (int): 401425936853721512510676804739681051967016312
Serial Number lenght: 149 bits, 19 octets

SubjectKeyId: a7:28:77:40:24:57:51:25:cd:cf:33:17:37:6e:42:eb:f4:98:80:93
AuthorityKeyId: b5:76:0c:30:11:ce:c7:92:42:4d:4c:c7:5c:2c:c8:a9:0c:e8:0b:64

Fingerprint (sha1): 2d:cd:13:50:26:3f:c2:e5:14:96:27:ab:5f:de:ba:43:c6:4c:ac:29
Fingerprint (sha256): 3c:b6:32:24:57:32:1c:2a:dc:fc:5c:cd:c0:81:ad:5d:1e:7e:ce:53:6c:75:fe:6d:96:5c:16:3d:50:49:d7:a1

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl

Check the revocation status for certificate csharp.net

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for csharp.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

csharp.net
mnc.ms
ccf.dev
dccms.ms
skype.tv
igserr.es
ratify.sh
skype.com
skype.net
mhybrid.cz
www.mnc.ms
ambetion.be
codeplex.ru
d365iom.com
maquette.ms
www.ccf.dev
blog.dot.net
codeplex.com
codeplex.net
codeplex.org
cosmosdb.com
indexnow.org
www.dccms.ms
www.skype.tv
blogs.dot.net
csshybrid.com
fsinsider.com
play.gears.gg
docs.azure.com
eduinsights.ms
fsxinsider.com
www.csharp.net
open.vscode.dev
qiralliance.com
qiralliance.org
www.ambetion.be
www.codeplex.ru
www.maquette.ms
ambetion.digital
contextualiq.com
cssmigration.com
qir-alliance.com
qir-alliance.org
www.codeplex.com
www.codeplex.net
www.codeplex.org
azurecosmosdb.com
cupposunshine.com
make.dynamics.com
blog.azuremaps.com
businesscentral.dk
digitalambetion.be
digitalambition.be
docs.azuremaps.com
dotnetpodcasts.com
language.azure.com
typescriptlang.org
www.fsxinsider.com
digitalambetion.com
archive.codeplex.com
azurecontainerapp.cn
azurecontainerapp.io
cloudchampions11.com
vanguardoutrider.com
windowscontinuum.com
www.ambetion.digital
www.contextualiq.com
azurecontainerapp.com
azurecontainerapp.dev
azurecontainerapp.net
updates.azuremaps.com
vivaonboardingapp.dev
azurecontainerapps.dev
designedforsurface.com
make.powerplatform.com
windowsuglysweater.com
www.businesscentral.dk
www.digitalambetion.be
www.digitalambition.be
www.dotnetpodcasts.com
www.digitalambetion.com
answerdesk.microsoft.com
www.microsoftfederal.com
www.windowscontinuum.com
collegepuzzlechallenge.com
staging.language.azure.com
www.designedforsurface.com
www.windowsuglysweater.com
microsoftiotinsiderlabs.com
www.collegepuzzlechallenge.com
westus2.msxplatformservices-test.net

Other certificates including the domain name csharp.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for csharp.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Cb9wDDi0ymP6VKg4EHt
XFJWceeHXsbRqnnj5dLbHF3e/fCxMTdDgipz+Z0lex3YKWDySmjqFbKIkTKaLt2F
m2T5wkXLqp0xwYdZ+fsBjy+ChqFRXGaCcezvTj26AcqRrHnIZ1hARVuzSyz3wvMv
PnctozifBzotImkO+xwUtkMpCGoPqk3oZn4gYpr+Bnno+ODd356YjkylUTvIyW0+
aqa+yrLK3WwaadneQ+6GFrEEYHi6+uoMPhdEty/N5yAItvLYj2qYhH0hTympw4Em
6eQTy2AZBIMdp/aKy2wgGEWo3nrNvmfM7zU/XqrodBOABeiqyRV3VMyqFwKSxQm4
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401425936853721512510676804739681051967016312
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft RSA TLS CA 01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-02 15:47:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-02 15:47:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'csharp.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30821373695879091342265846596255265043762380659166177245844149561629072638759735624882858661348738823524257350858394751477274061649857269550104345557437296341540792369800513310273953799134526989862174825082663052499435579505004970409280912658495772820929874938124170919231975978708008265942325156831528319948586807477207752083776022116908396155460397813583268741991353161837170975706235310723945126591569699189943066937476209471755694415979329288378626854940279694248013276601689616853178898532252498800592512761925373043176156330973132489406913793735405931973648349945203416800852805638370954417990794636239074605277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.15 (sMIMECapabilities)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.2 (rc2CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.4 (rc4)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.42 (aes256-CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.45 (aes256-wrap)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.2 (aes128-CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.5 (aes128-wrap)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.7 (desCBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.7 (des-EDE3-CBC)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.10585921.15764560
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a728774024575125cdcf3317376e42ebf4988093
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1723 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csharp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccf.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dccms.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skype.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igserr.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratify.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skype.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhybrid.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mnc.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambetion.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codeplex.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd365iom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maquette.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccf.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.dot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codeplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codeplex.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codeplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmosdb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indexnow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dccms.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skype.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.dot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csshybrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.gears.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduinsights.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsxinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csharp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.vscode.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiralliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiralliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ambetion.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codeplex.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maquette.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambetion.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contextualiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cssmigration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qir-alliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qir-alliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codeplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codeplex.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codeplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azurecosmosdb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cupposunshine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'make.dynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.azuremaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesscentral.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalambetion.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalambition.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.azuremaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotnetpodcasts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'language.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'typescriptlang.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsxinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalambetion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.codeplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azurecontainerapp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azurecontainerapp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudchampions11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanguardoutrider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windowscontinuum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ambetion.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contextualiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azurecontainerapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azurecontainerapp.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azurecontainerapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.azuremaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivaonboardingapp.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azurecontainerapps.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designedforsurface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'make.powerplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windowsuglysweater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesscentral.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalambetion.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalambition.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotnetpodcasts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalambetion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answerdesk.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microsoftfederal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windowscontinuum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegepuzzlechallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.language.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.designedforsurface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windowsuglysweater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoftiotinsiderlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegepuzzlechallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westus2.msxplatformservices-test.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b5760c3011cec792424d4cc75c2cc8a90ce80b64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		005afae852ce2af5d25959845ea4d128c13a6aaae81e5045d7ad87d68bd87198478b60e3428df9c2d3d18eef06bd714d3448b515a27d33e24980b29c30e724141d550295210afd3e63f4ce7aeb15e73a022e92d4d9d61f5abe14a7584e53fb9e0c7c9ecaedc9a8014f3ce72187c8491f14e7ae29762ed1f735a8e307099ed82af7daaed00177fb41228e543468923c48221bbbab0b45724706d97d27712272064c77bdbe406d876f99cc3b4311b5e50a9cbb96b2b2216d9a3179b03685444435d3116bb21c0add7d5b6fc6f3b20d65257ee5c5808a104d2665fdd17ecd642aed0353501b0499020180994e3bc39389fb48c65113d1ed3de034c1e61891e7b701baa86b5c13b8771166b415466d13a2c62807df80f42f4ec3d560bb0f495d87e3afcc47eaf42f62c96c3bf44180116caa2cd058af9522b4385ab7fd4718d6a5e477602b683e1af65b931c28a04c0649890069a4ea65f663620e4defabaa114e2ca619d2c80e7b3659ddf9f045b4384f3f990988fac12f2122dd4cdfef1a349735d826baedd26f2d478163bba45f67355fc738cadd763a4be4db6810faa5257f736a343b88c1d51bea52ff0f1eeb5f691653df45fc9dd00e42103f12109ab8f3121c107f0b28a1d1cfbcf46289767a32c7bab2108a15062c614c28181a61fde0f89cdc23af603d86544377843fc73d6fcc54c15d2bc3fb0ed06639a39130c7a1240f