cosmic.mmpapi.mover.io

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 03

About this certificate

This digital certificate with serial number 33:00:44:fe:74:0a:c2:c2:30:db:78:a1:e7:00:00:00:44:fe:74 was issued on by Microsoft Corporation.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:44:fe:74:0a:c2:c2:30:db:78:a1:e7:00:00:00:44:fe:74
Serial Number (int): 1137361482552448023451229916058411492652154484
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 81:43:a5:24:4a:e3:d2:29:b6:00:ad:b8:41:1b:5c:a6:6f:17:d5:af
AuthorityKeyId: fe:09:71:40:55:05:10:44:d8:a4:81:75:b8:9e:1a:e9:4a:06:88:c8

Fingerprint (sha1): b4:27:49:50:79:44:c3:74:80:2f:51:9c:60:e1:72:28:e9:b9:4d:ce
Fingerprint (sha256): 3e:5e:bf:79:d2:89:c4:d8:e0:aa:d7:52:2f:28:7c:85:d7:7b:75:00:f2:eb:72:df:59:15:d3:a4:87:1c:0f:14

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl

Check the revocation status for certificate cosmic.mmpapi.mover.io

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cosmic.mmpapi.mover.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cosmic.mmpapi.mover.io
spo01-001-eus.cosmic.mmpapi.mover.io
spo01-001-eus2.cosmic.mmpapi.mover.io
spo01-000-ncus.cosmic.mmpapi.mover.io
spo01-800-wus2.cosmic.mmpapi.mover.io
spo01-116-eus.cosmic.mmpapi.mover.io
spo01-067-eus2.cosmic.mmpapi.mover.io
spo01-009-ncus.cosmic.mmpapi.mover.io
spo01-003-wus2.cosmic.mmpapi.mover.io

Other certificates including the domain name mover.io

(limited to 100 certificates)
ppe-api.mover.io
devbox.mover.io
cosmic.mmpapi.eu.mover.io
codercatz.com
cobrandtest.wallit.app
ppe-api.mover.io
neu-production-new-api.eu.mover.io
reports.eu.mover.io
radiobook.app
mattermost.mover.io
api.mover.io
weu-production-new-api.eu.mover.io
reports.gccm.mover.io
www.mausoleumofthegiants.co.uk
testing-app.mover.io
mover.io
kibana-wus-ppe-1.ops.mover.io
migrate.mover.io
app.ftcgcc.mover.io
api.eu.mover.io
api.mover.io
kall.as
test.4happ.ca
jolt.eu.mover.io
api.devbox.development.mover.io
internal-status.mover.io
cosmic.mmpapi.mover.io
staging.mover.io
app.mover.io
kibana-wus2-prod-1.ops.mover.io
*.mover.io
api.ftcgcc.mover.io
*.mover.io
kiitos-tech.com
migrate.mover.io
bifrost-v2.mover.io
vianneyjchin.com
testing-api.mover.io
mover.io
*.odyssey.ops.mover.io
mover.io
api.mover.io
kuralaattam.com
cosmic.ecs.eu.mover.io
mover.io
ppe-app.mover.io
api-fdpool.mover.io
jolt-testing.ops.mover.io
app.mover.io
mover.io
mahe.io
weu.production.odyssey.ops.mover.io
*.mover.io
www.testzulul.ga
mongodb-gcc-mover-2.ops.ftcgcc.mover.io
fbf.mover.io
semac.app
production-eu.odyssey.ops.mover.io
influxdb.ops.mover.io
*.mover.io
houseofbarbers.ro
kibana-wus2-testing-1.ops.mover.io
mover.io
neu.production.odyssey.ops.mover.io
ppe-app.mover.io
mongodb-ppe-wus2-2.mover.io
www.richpeniche.mx
cosmic.mmpapi.eu.mover.io
devbox.mover.io
mylearning.ai
mongodb-ppe-wus2-3.mover.io
bifrost-testing-v2.mover.io
mongodb-ppe-wus2-1.mover.io
grafana.ops.mover.io
influxdb.ops.ftcgcc.mover.io
mattermost.mover.io
migrate.mover.io
api-fdpool.eu.mover.io
admin.ascc.me
www.gigged.co
getfoodecallapp.com
production-eu-internal.odyssey.ops.mover.io
app.mover.io
kibana-wus2-ops-1.ops.mover.io
app.mover.io
jolt-testing.ops.mover.io
ppe-app.mover.io
weu-production-new-api.eu.mover.io
api.mover.io
shanghaidreams.co.uk
bifrost-v2.mover.io
api.mover.io
mattermost.mover.io
mattermost.mover.io
internal-status.mover.io
app.mover.io
mattermost.mover.io
api.gccm.mover.io
emplution.ch
*.mover.io

Certificate

The complete raw certificate details for cosmic.mmpapi.mover.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHrOPf/qyBDYqfNljb9T
fWEgv7iyEOUBm2bVX/igA7p/g6jllzkttXy3e4ghd4vQWErW6XNOp0iR5Uhrb0u3
Bq/1M4evXoRIwn/sF73mG/7azGDCaYloXgcGaRHy1n7WWgJuKe3YQEke93PGl17i
e8EcRPXxK7rOsJYHIrboy6szph82tzrLmV+nm0iwLT5wGNg/f0bO94nO4XPVhEzc
a6UQ7CNtigrAX/2G2gnDvniHwz8eFEmgCQ8rr3YzQq8b0gWySea2IE3+4UhXLRf3
WCenQgZduBR1Uw/mu69s6uEHyCltW1MQS0CEnd4drBXY+D6P5hQE34X7ckLgDA94
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137361482552448023451229916058411492652154484
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 10:33:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-04 10:33:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cosmic.mmpapi.mover.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21268592949213357249779397623216596408376963428377473481601235309725224911853213787598236059027170962183486965439651272402802618421272491245445457069712327327961849899198815800176473251435196684128085021883686571022185291208608942224322117198839157069817743419669763248548744865305472592960170005292731443470637729456354147212319639706549710003978220706953718032475865162998692206400176262455257430017567679437367699366577443679585682027081878819726682054755008284565316053207234129434511370531216757453369981366405287490900516996056343192029708496059296735947997569592397205253091228669004963662800742112820863138021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8143a5244ae3d229b600adb8411b5ca66f17d5af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (338 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmic.mmpapi.mover.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spo01-001-eus.cosmic.mmpapi.mover.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spo01-001-eus2.cosmic.mmpapi.mover.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spo01-000-ncus.cosmic.mmpapi.mover.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spo01-800-wus2.cosmic.mmpapi.mover.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spo01-116-eus.cosmic.mmpapi.mover.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spo01-067-eus2.cosmic.mmpapi.mover.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spo01-009-ncus.cosmic.mmpapi.mover.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spo01-003-wus2.cosmic.mmpapi.mover.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe09714055051044d8a48175b89e1ae94a0688c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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