*.ppe.execution.cscp.ms

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 02

About this certificate

This digital certificate with serial number 33:00:02:d1:8e:05:4c:5e:8f:61:af:98:c3:00:00:00:02:d1:8e was issued on by Microsoft Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:00:02:d1:8e:05:4c:5e:8f:61:af:98:c3:00:00:00:02:d1:8e
Serial Number (int): 1137338964235860357707909485391085824372822414
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: d1:42:6b:20:fa:fd:9a:5c:67:a8:02:96:09:1c:e1:3e:c7:4a:51:ec
AuthorityKeyId: 00:ab:91:fc:21:62:26:97:9a:a8:79:1b:61:41:90:60:a9:62:67:fd

Fingerprint (sha1): ef:1d:88:be:19:ec:f3:51:26:f5:5c:fa:42:e9:f8:b6:6e:10:13:ad
Fingerprint (sha256): 40:71:81:53:0d:a7:44:59:ca:33:f7:4f:89:65:46:b2:5d:47:e5:fa:6c:b6:f4:85:be:40:e9:2f:c9:70:5a:87

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl

Check the revocation status for certificate *.ppe.execution.cscp.ms

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ppe.execution.cscp.ms

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ppe.execution.cscp.ms
transferservice-ppe.trafficmanager.net

Other certificates including the domain name cscp.ms

(limited to 100 certificates)
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.ppe.execution.cscp.ms
*.prod.execution.cscp.ms
*.ppe.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.ppe.supply.cscp.ms
*.prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.ppe.supply.cscp.ms
*.ppe.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.supply.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.supply.cscp.ms
*.ppe.supply.cscp.ms
*.prod.execution.cscp.ms
*.ppe.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.supply.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.supply.cscp.ms
*.prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.execution.cscp.ms
*.prod.execution.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.ppe.execution.cscp.ms

Certificate

The complete raw certificate details for *.ppe.execution.cscp.ms in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHHjCCBQagAwIBAgITMwAC0Y4FTF6PYa+YwwAAAALRjjANBgkqhkiG9w0BAQwF
ADBZMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
MSowKAYDVQQDEyFNaWNyb3NvZnQgQXp1cmUgVExTIElzc3VpbmcgQ0EgMDIwHhcN
MjAxMTE3MDY1MTM4WhcNMjEwNTE2MDY1MTM4WjBuMQswCQYDVQQGEwJVUzELMAkG
A1UECBMCV0ExEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD
b3Jwb3JhdGlvbjEgMB4GA1UEAwwXKi5wcGUuZXhlY3V0aW9uLmNzY3AubXMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC923FMdGdy1hzJUX4XYUJG6k36
2zcKW7OCOf75eDBmdDUr3x+JEyxzd7FFOE+WN0mpn1MKUxe3xqy0lTlDJS+kqh0g
SHEZLlslI9JGx5Z0DQUktovQXHuUP/AhZpkWn1V/Sn/uChfOG+aEoClQ3D0Q/j9D
xt5VyU5K4rU6hOOB3YW10aJrjR/MSgipEnUhWehD+VyJKhRFTsfu6wwpr82JSoXC
h7ImI/Q2pq7fHlgrwGwn92h41Rt6vVPrkPsxhdxdDydYCM9Yho2VjfyvGnhzOhV1
L1guG7frVjxVqHyQLdZWDMof0xhEVTidE9cAMcd+BwxdH9SrE3Q4j4zJyM7JAgMB
AAGjggLIMIICxDATBgorBgEEAdZ5AgQDAQH/BAIFADAnBgkrBgEEAYI3FQoEGjAY
MAoGCCsGAQUFBwMCMAoGCCsGAQUFBwMBMDwGCSsGAQQBgjcVBwQvMC0GJSsGAQQB
gjcVCIe91xuB5+tGgoGdLo7QDIfw2h1dgqvnMIft8R8CAWQCASkwga4GCCsGAQUF
BwEBBIGhMIGeMG0GCCsGAQUFBzAChmFodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v
cGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMEF6dXJlJTIwVExTJTIwSXNzdWluZyUy
MENBJTIwMDIlMjAtJTIweHNpZ24uY3J0MC0GCCsGAQUFBzABhiFodHRwOi8vb25l
b2NzcC5taWNyb3NvZnQuY29tL29jc3AwHQYDVR0OBBYEFNFCayD6/ZpcZ6gClgkc
4T7HSlHsMA4GA1UdDwEB/wQEAwIEsDBKBgNVHREEQzBBghcqLnBwZS5leGVjdXRp
b24uY3NjcC5tc4ImdHJhbnNmZXJzZXJ2aWNlLXBwZS50cmFmZmljbWFuYWdlci5u
ZXQwDAYDVR0TAQH/BAIwADBkBgNVHR8EXTBbMFmgV6BVhlNodHRwOi8vd3d3Lm1p
Y3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBBenVyZSUyMFRMUyUy
MElzc3VpbmclMjBDQSUyMDAyLmNybDBmBgNVHSAEXzBdMFEGDCsGAQQBgjdMg30B
ATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3Bz
L0RvY3MvUmVwb3NpdG9yeS5odG0wCAYGZ4EMAQICMB8GA1UdIwQYMBaAFACrkfwh
YiaXmqh5G2FBkGCpYmf9MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAN
BgkqhkiG9w0BAQwFAAOCAgEAYXfQ19qLrysDINtx5lpSV0I+tSgnYtLgRqw+mZZ6
T/2QBTB/2AzqywGwZUKAotKhN+T96TZQ2MU6OkAcV2DWQxJCaElHGFMOAq0Trp9g
g/mXrVn7Zv4ZTbjUnDMv/szgzkE6degnBDcBuEpIPOcIKoGuux1SzhSYrC0QXZQh
T/NtkKiHOYnLvm9RQpLoxb7Jgj4xpi0SmnhPziAWRLdMFya++dMFqIwVNSd29l5h
u7NFCPjRrAhp0zowPDExfgC/iT/oZ+en2aYBwB/SwFPqzVbG8pxnxrlV+zW1tQhj
Iv75EU2G7DDYe6J59imunuJZm5l7hLxu0lIbcvFYUcoVybtT1H5Ryh8XBwZkjT/U
jkGyVdM1JlrTOHSw6oLi6cg2Dwfe1WGNEA9jGVFgqpF3duPK8xkxkSqkZE/B+2C9
j3s5ece4j+xv9BnVeRTloIidV0+ZEh+vccNmmw1uyJqltn25vSgh9ee4hL2lvDVK
eV2ei68XmIC8Ce7s4Ps2o+5J9ZIztsnWadMj6ycC0XeT5WCkdYto3IMX8T/UZ2xo
wYyfVgdE830GjnUZV+z0NOC6JepFWk9eIc5oWZjJJ6e87UbKhEIM8AwaMh9a6/cw
4Ai7dZ0bbE+am8FKx4CpWtQWsUkMTVGkU4eolDhV368fh6QUXOXeW5Y5Fv/iChhz
tH0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdtxTHRnctYcyVF+F2FC
RupN+ts3Cluzgjn++XgwZnQ1K98fiRMsc3exRThPljdJqZ9TClMXt8astJU5QyUv
pKodIEhxGS5bJSPSRseWdA0FJLaL0Fx7lD/wIWaZFp9Vf0p/7goXzhvmhKApUNw9
EP4/Q8beVclOSuK1OoTjgd2FtdGia40fzEoIqRJ1IVnoQ/lciSoURU7H7usMKa/N
iUqFwoeyJiP0Nqau3x5YK8BsJ/doeNUber1T65D7MYXcXQ8nWAjPWIaNlY38rxp4
czoVdS9YLhu361Y8Vah8kC3WVgzKH9MYRFU4nRPXADHHfgcMXR/UqxN0OI+MycjO
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137338964235860357707909485391085824372822414
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-17 06:51:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-16 06:51:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ppe.execution.cscp.ms'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23967250804345847961874229737496872818268914233302181408383313487888735050212484739977119038618287454139208448610700730284441893157057445130859560941654046903401572756049667807228790056598427005178541636843602849308163390586527498749955015242444231628654955072762236542259794247664444299565669015862482144277219184579364004409334349308776033453683403977066701080831242656059839384701001620422173025612973890475508363349942924698825495244486946888403816577365703657440818317123030725067057851181643660774955506019437982909393613274435056010441217058440234293330499490201039900258716416350208933577562749157061247422153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4912048.16480415
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1426b20fafd9a5c67a80296091ce13ec74a51ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ppe.execution.cscp.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transferservice-ppe.trafficmanager.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 00ab91fc216226979aa8791b61419060a96267fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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