*.sharepoint.com

- Microsoft Corporation -

Issued by Microsoft Secure Server Authority

About this certificate

This digital certificate with serial number 54:b5:10:c5:00:08:00:02:13:06 was issued on byMicrosoft Secure Server Authority.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft Online Services
Locality: Redmond
Country: US

Microsoft Secure Server Authority

This certificate has expire since

Certificate Details

Serial Number (hex): 54:b5:10:c5:00:08:00:02:13:06
Serial Number (int): 400018853610501005513478
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: 84:0c:9a:e5:ff:72:86:62:03:79:ed:ce:7f:f3:2e:76:3e:44:eb:72
AuthorityKeyId: 08:42:e3:db:4e:11:66:f3:b5:08:c5:40:db:55:7c:33:46:11:83:38

Fingerprint (sha1): 55:eb:9d:ba:ea:5e:9a:4f:cd:54:ce:1c:87:d8:0d:f6:24:c9:77:5d
Fingerprint (sha256): 46:5c:60:29:f0:a2:96:27:c0:a5:23:79:1f:46:e7:d7:6b:bd:06:b2:19:c0:58:8b:80:69:54:cf:ca:89:83:fb

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20Secure%20Server%20Authority(8).crt
Issuing Certificate URL: http://corppki/aia/Microsoft%20Secure%20Server%20Authority(8).crt

Revocation information

CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(8).crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(8).crl
CRL Distribution Point: http://corppki/crl/Microsoft%20Secure%20Server%20Authority(8).crl

Check the revocation status for certificate *.sharepoint.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sharepoint.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sharepoint.com
*.sharepoint.microsoftonline.com
*.sharepoint.EMEA.microsoftonline.com
*.sharepoint.APAC.microsoftonline.com

Other certificates including the domain name sharepoint.com

(limited to 100 certificates)
*.sharepoint.com
*.sharepoint.com
*.sharepoint.com
*.sharepoint.com
*.sharepoint.com
spoprod.cma.sharepoint.com
eopgov.sharepoint.com
csharp.net
csharp.net
svc.ms
*.sharepoint.com
csharp.net
csharp.net
csharp.net
*.sharepoint.com
eopgov.sharepoint.com
*.sharepoint.com
*.sharepoint.com
spoprod.cma.sharepoint.com
*.sharepoint.com
test.sharepoint.com
*.sharepoint.com
csharp.net
*.sharepoint.com
csharp.net
*.sharepointmktgv7.microsoft.com
*.sharepoint.com
csharp.net
hrwebdev.azurewebsites.net
csharp.net
spoauditingcc-prodbubble.yloppe.sharepoint.com
csharp.net
csharp.net
csharp.net
*.sharepoint.com
odsp.cbservice.edog.sharepoint.com
csharp.net
svc.ms
my.microsoft.com
gfedogfood.cma.sharepoint.com
csharp.net
*.sharepoint.com
spaces.aexp.com
hpenterprise-my.sharepoint.com
test.sharepoint.com
csharp.net
csharp.net
csharp.net
my.microsoft.com
*.sharepoint.com
sharepointmktgv5.microsoft.com
my.microsoft.com
csharp.net
csharp.net
csharp.net
csharp.net
*.sharepoint.com
csharp.net
csharp.net
*.sharepoint.com
csharp.net
csharp.net
*.sharepoint.com
*.sharepoint.com
microsoft.sharepoint.com
csctestportal-my.sharepoint.com
cscportal.sharepoint.com
*.sharepoint.com
csharp.net
*.sharepoint.com
*.sharepoint.com
csharp.net
csharp.net
*.sharepoint.com
csharp.net
csharp.net
spoprod.cma.sharepoint.com
csharp.net
*.sharepoint.com
csharp.net
csharp.net
csharp.net
csharp.net
*.sharepoint.com
*.sharepoint.com
csharp.net
csharp.net
csharp.net
csharp.net
*.sharepoint.com
csharp.net
*.spoppe.com
csharp.net
*.sharepoint.com
*.sharepoint.com
csharp.net
*.sharepoint.com
*.svc.ms
*.sharepoint.com
*.sharepoint.com

Certificate

The complete raw certificate details for *.sharepoint.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG2DCCBcCgAwIBAgIKVLUQxQAIAAITBjANBgkqhkiG9w0BAQUFADCBizETMBEG
CgmSJomT8ixkARkWA2NvbTEZMBcGCgmSJomT8ixkARkWCW1pY3Jvc29mdDEUMBIG
CgmSJomT8ixkARkWBGNvcnAxFzAVBgoJkiaJk/IsZAEZFgdyZWRtb25kMSowKAYD
VQQDEyFNaWNyb3NvZnQgU2VjdXJlIFNlcnZlciBBdXRob3JpdHkwHhcNMTEwNTA5
MTc0NzQyWhcNMTMwNTA4MTc0NzQyWjB+MQswCQYDVQQGEwJVUzEQMA4GA1UEBxMH
UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSIwIAYDVQQL
ExlNaWNyb3NvZnQgT25saW5lIFNlcnZpY2VzMRkwFwYDVQQDDBAqLnNoYXJlcG9p
bnQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/atLWTv4Yv9
DRSAgwBGnkDP7WB9RVw69ROE890SI1sVnVSeMUnBT5jWMxBLloBPYh0dHNvJFIob
/GgBXPOcSiMTKwrVzSb95J9HyYQ6oU8vZvDdiyM6yvqGnQWMkZGYQdAqIvHpk6aY
54aGKAPNmbuwB2Tt66C4LVmmBsejEs5Kw2njJ6XXOjWa+wg1f6Z03NUxXDR2er0n
dnkjPlI6XdqD26g4cpuqorxlO5U260oqZOhLJHQl/YbwssfSRd6fD16ODn9FK5t3
bYV/uYAs4EmjtvL/AIOHAdjmAnLDNIC4ZvMA8/knlHhuDz6XRAiUpHA9Pymz6bKn
JVgOZoo1XwIDAQABo4IDSDCCA0QwDAYDVR0TAQH/BAIwADALBgNVHQ8EBAMCBLAw
gY0GA1UdEQSBhTCBgoIQKi5zaGFyZXBvaW50LmNvbYIgKi5zaGFyZXBvaW50Lm1p
Y3Jvc29mdG9ubGluZS5jb22CJSouc2hhcmVwb2ludC5FTUVBLm1pY3Jvc29mdG9u
bGluZS5jb22CJSouc2hhcmVwb2ludC5BUEFDLm1pY3Jvc29mdG9ubGluZS5jb20w
HQYDVR0OBBYEFIQMmuX/coZiA3ntzn/zLnY+ROtyMB8GA1UdIwQYMBaAFAhC49tO
EWbztQjFQNtVfDNGEYM4MIIBCgYDVR0fBIIBATCB/jCB+6CB+KCB9YZYaHR0cDov
L21zY3JsLm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9jcmwvTWljcm9zb2Z0JTIw
U2VjdXJlJTIwU2VydmVyJTIwQXV0aG9yaXR5KDgpLmNybIZWaHR0cDovL2NybC5t
aWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL01pY3Jvc29mdCUyMFNlY3VyZSUy
MFNlcnZlciUyMEF1dGhvcml0eSg4KS5jcmyGQWh0dHA6Ly9jb3JwcGtpL2NybC9N
aWNyb3NvZnQlMjBTZWN1cmUlMjBTZXJ2ZXIlMjBBdXRob3JpdHkoOCkuY3JsMIG/
BggrBgEFBQcBAQSBsjCBrzBeBggrBgEFBQcwAoZSaHR0cDovL3d3dy5taWNyb3Nv
ZnQuY29tL3BraS9tc2NvcnAvTWljcm9zb2Z0JTIwU2VjdXJlJTIwU2VydmVyJTIw
QXV0aG9yaXR5KDgpLmNydDBNBggrBgEFBQcwAoZBaHR0cDovL2NvcnBwa2kvYWlh
L01pY3Jvc29mdCUyMFNlY3VyZSUyMFNlcnZlciUyMEF1dGhvcml0eSg4KS5jcnQw
PwYJKwYBBAGCNxUHBDIwMAYoKwYBBAGCNxUIg8+JTa3yAoWhnwyC+sp9geH7dIFP
g8LthQiOqdKFYwIBZAIBCjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEw
JwYJKwYBBAGCNxUKBBowGDAKBggrBgEFBQcDAjAKBggrBgEFBQcDATANBgkqhkiG
9w0BAQUFAAOCAQEAYbsWYvgXuj1byFFq31mM6hLJR+w/3i4msgNI150Mt71Qqz8P
AprLvrmWr6pt++SdoEVniMxZMz5yV0hHeamjIH2Tf3bh8ZJT+kZW68AcZvfw8r4E
VRnQiiNuzLc8AIEZsw7DlSDRVjXD+H/xf4m9P7Zt14kFtbErlSJ5HPqaZYzGVngi
Afd3eaMnkdwWP8YZ/ApUEgxp9qfUPgdzhhO72/qoBt+WkoWPXGvia1Tgs/GJNYH3
vSRC29GQXH03PThYVb+3Bxc+xEpB0u+4CxYg34Yl2mSBVMwbgabwWDvTBLrRqZpt
6yPDSlktIOsNcFqIv2bDXoV2p/hb8p5ormMFDw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/atLWTv4Yv9DRSAgwBG
nkDP7WB9RVw69ROE890SI1sVnVSeMUnBT5jWMxBLloBPYh0dHNvJFIob/GgBXPOc
SiMTKwrVzSb95J9HyYQ6oU8vZvDdiyM6yvqGnQWMkZGYQdAqIvHpk6aY54aGKAPN
mbuwB2Tt66C4LVmmBsejEs5Kw2njJ6XXOjWa+wg1f6Z03NUxXDR2er0ndnkjPlI6
XdqD26g4cpuqorxlO5U260oqZOhLJHQl/YbwssfSRd6fD16ODn9FK5t3bYV/uYAs
4EmjtvL/AIOHAdjmAnLDNIC4ZvMA8/knlHhuDz6XRAiUpHA9Pymz6bKnJVgOZoo1
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400018853610501005513478
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'microsoft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'corp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Secure Server Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-05-09 17:47:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-08 17:47:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Online Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sharepoint.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23223250511685731137677822376331427931285652325933610774711870433237668578615198627125503405959231955657232751546656939144589925210363244401437343812782523158807370098364221383996797746780905017437225227262626357709670457488803094693997462186123344751140772179497708804049427539186190019502658563097732274488725286110732178758046024820645710192893779681105795707388217903253081190304330424973185903339627296211167048297238445980188678721837607258426322917544825340741989098890699371806068365936060724218751005313660562764680963646444383831075177433635697918651263043591370603629469194544125437030045187358691663951199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharepoint.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharepoint.EMEA.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharepoint.APAC.microsoftonline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							840c9ae5ff7286620379edce7ff32e763e44eb72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0842e3db4e1166f3b508c540db557c3346118338
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (257 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(8).crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(8).crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://corppki/crl/Microsoft%20Secure%20Server%20Authority(8).crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20Secure%20Server%20Authority(8).crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://corppki/aia/Microsoft%20Secure%20Server%20Authority(8).crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER asn1: structure error: base 128 integer too large
1.3.6.1.4.1.311.21.8.7587021.751874.11030412.6202749.3702260.207.945504904.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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