csharp.net

Issued by Microsoft RSA TLS CA 02

About this certificate

This digital certificate with serial number 2d:00:30:7f:44:e9:cc:d3:20:c5:89:07:47:00:00:00:30:7f:44 was issued on by Microsoft Corporation.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=csharp.net

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:00:30:7f:44:e9:cc:d3:20:c5:89:07:47:00:00:00:30:7f:44
Serial Number (int): 1003550036657263926803796983364481125599706948
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 02:02:4e:62:7d:4a:64:db:56:13:7e:53:e1:ba:2a:60:79:7b:b2:f0
AuthorityKeyId: ff:2f:7f:e1:06:f4:38:f3:2d:ed:25:8d:98:c2:fe:0e:f6:6c:fc:fa

Fingerprint (sha1): 71:3a:92:e4:9e:42:e8:2a:71:ea:fe:1b:ef:80:bd:c2:5e:17:ae:74
Fingerprint (sha256): 3e:ad:6e:92:38:86:10:db:73:79:59:e3:b4:a1:6c:1b:fc:5c:30:d3:63:02:cd:cb:9e:46:29:d1:cb:67:ca:e2

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2002.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl

Check the revocation status for certificate csharp.net

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for csharp.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

csharp.net
lobe.ai
luis.ai
*.edge.ms
charon.az
au.luis.ai
eu.luis.ai
pbiwiki.com
staffhub.ms
microsoft.de
moneyball.ms
msturing.org
azuremaps.com
telcobyte.org
www.charon.az
dynamics365.de
eduinsights.ms
pandoralabs.pt
print.azure.us
www.csharp.net
customsearch.ai
dev.windows.com
preview.luis.ai
www.staffhub.ms
azureplayfab.com
previous.luis.ai
visualstudio.dev
www.codeplex.com
www.codeplex.net
www.codeplex.org
www.microsoft.de
www.msturing.org
powerautomate.com
www.azuremaps.com
language.azure.com
www.dynamics365.de
microsoft-berlin.de
previous.eu.luis.ai
*.flow.microsoft.com
azurecontainerapp.cn
blog.ax.dynamics.com
developer.windows.com
www.powerautomate.com
blog.powerautomate.com
www.dotnetpodcasts.com
www.surfacepreskoly.sk
artofsciencepodcast.com
cloudappsecuritygov.com
diagnostics.outlook.com
msftgamedevelopment.com
www.digitalambetion.com
www.microsoft-berlin.de
www.msgamedeveloper.com
answerdesk.microsoft.com
microsoftaccelerator.com
microsoftservicegraph.io
www.microsoftfederal.com
www.microsoftgamedev.com
www.windowscontinuum.com
uncoveringhiddenrisks.com
www.msftgamedeveloper.com
www.msgamedevelopment.com
azurecontainerapps-test.io
iotdeployment.dynamics.com
microsoftgamedeveloper.com
staging.language.azure.com
www.azurecontainerapps.dev
www.windowsuglysweater.com
community.powerautomate.com
microsoftiotinsiderlabs.com
www.artofsciencepodcast.com
www.msftgamedevelopment.com
microsoftgamedevelopment.com
usergroups.powerautomate.com
www.uncoveringhiddenrisks.com
cfsdeployment.crm.dynamics.com
www.microsoftgamedeveloper.com
www.sicherheit-macht-schule.de
www.microsoftgamedevelopment.com
docs.microsoftcommunitytraining.com
westus2.msxplatformservices-test.net
nominate.microsoftadvertisingawards.com
www.docs.microsoftcommunitytraining.com
partnercelebration.microsoftadvertising.com

Other certificates including the domain name csharp.net

(limited to 100 certificates)
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net
csharp.net

Certificate

The complete raw certificate details for csharp.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0zJYhrnq9N1NgBbFDrh
HZxcE14PHDqEJiiNkv/krX+prlVspvrf52DMhBqJ5PkCBM+zLl4x5g5aGOs/PcBN
T3PQbA2FMh8Iv+/lKSLZQ7UAg4YSM9w2Y6CB7rkuZdKdIsjz0O+iq5Av8WBQtZrj
Jj9Mw6+6XYcHZc8t1A9fV3BltoDkVfy7BIL66Yc+D1/pK2dFYq4+PxUbBRSOHU1C
Rdc+5u7TU/CrTRnYdp23kB+VZYjyraLtpQCMz2YXnXKEs7e0FlPPA9rYDEc3FNTP
INRPFUFPed/Uahi9Diye5SkGUegpkvzjSlBklx+f/ZHPeFJJ5deG8qFjk+RWYEVe
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1003550036657263926803796983364481125599706948
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft RSA TLS CA 02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-20 16:12:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 16:12:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'csharp.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26169194037918965952300382053981208688818181080817408141707635726721721026635381259458394553458933573785665097616545319434808899268144198416748879575013894358914634525443582657697323598274775681689572836177540345386860286459128529883095219287932652056586726331859528297113711665684760218684203104284453557703164004803000827765546360635238107558265603639960630396925040918560876802422256287803157312268286311583599726379364638559586533238283865726021951552515286872643389680536735752568018451983262190346406365368037442378969288553852757788759931551776906418132741862996979516346649535849085772334170280463125216321249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.15 (sMIMECapabilities)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.2 (rc2CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.4 (rc4)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.42 (aes256-CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.45 (aes256-wrap)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.2 (aes128-CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.5 (aes128-wrap)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.7 (desCBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.7 (des-EDE3-CBC)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.10585921.15764560
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2002.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02024e627d4a64db56137e53e1ba2a60797bb2f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1908 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csharp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lobe.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luis.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edge.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charon.az'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.luis.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.luis.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbiwiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staffhub.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneyball.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msturing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azuremaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telcobyte.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charon.az'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamics365.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduinsights.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandoralabs.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'print.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csharp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customsearch.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.luis.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staffhub.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azureplayfab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previous.luis.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visualstudio.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codeplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codeplex.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codeplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microsoft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msturing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerautomate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azuremaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'language.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dynamics365.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previous.eu.luis.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flow.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azurecontainerapp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.ax.dynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.powerautomate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.powerautomate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotnetpodcasts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surfacepreskoly.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artofsciencepodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudappsecuritygov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnostics.outlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msftgamedevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalambetion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microsoft-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msgamedeveloper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answerdesk.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoftaccelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoftservicegraph.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microsoftfederal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microsoftgamedev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windowscontinuum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uncoveringhiddenrisks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msftgamedeveloper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msgamedevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azurecontainerapps-test.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iotdeployment.dynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoftgamedeveloper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.language.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azurecontainerapps.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windowsuglysweater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.powerautomate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoftiotinsiderlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artofsciencepodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msftgamedevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoftgamedevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usergroups.powerautomate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uncoveringhiddenrisks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfsdeployment.crm.dynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microsoftgamedeveloper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sicherheit-macht-schule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microsoftgamedevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.microsoftcommunitytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westus2.msxplatformservices-test.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nominate.microsoftadvertisingawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docs.microsoftcommunitytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnercelebration.microsoftadvertising.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ff2f7fe106f438f32ded258d98c2fe0ef66cfcfa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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