*.msedge.net

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 03

About this certificate

This digital certificate with serial number 33:00:2a:fd:b4:28:c9:d8:31:ce:de:83:ff:00:00:00:2a:fd:b4 was issued on by Microsoft Corporation.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:2a:fd:b4:28:c9:d8:31:ce:de:83:ff:00:00:00:2a:fd:b4
Serial Number (int): 1137352634214596115907559744141696476222520756
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 5d:50:36:de:71:f0:63:36:ac:f8:fd:3e:03:a4:8e:50:1e:43:c5:ae
AuthorityKeyId: fe:09:71:40:55:05:10:44:d8:a4:81:75:b8:9e:1a:e9:4a:06:88:c8

Fingerprint (sha1): d9:de:85:c0:8e:fd:41:7c:ab:91:f6:6e:fe:3e:94:5a:91:41:18:d0
Fingerprint (sha256): 49:d3:63:93:6c:10:c9:18:2c:1f:0d:52:b6:7b:d7:fa:3a:09:7e:da:bf:cd:88:ea:8f:1c:67:9a:2b:21:66:a1

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl

Check the revocation status for certificate *.msedge.net

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.msedge.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.a-msedge.net
a-msedge.net
b-msedge.net
*.b-msedge.net
c-msedge.net
*.c-msedge.net
dc-msedge.net
*.dc-msedge.net
*.lbas.msedge.net
*.test.msedge.net
*.azp.footprintdns.com
*.footprintdns.com
*.clo.footprintdns.com
*.any.footprintdns.com
*.nrb.footprintdns.com
*.perf.msedge.net
*.fp.measure.office.com
*.msedge.net

Other certificates including the domain name msedge.net

(limited to 100 certificates)
compliantonnettesting.msedge.net
*.clo.footprintdns.com
*.msedge.net
*.msedge.net
*.msedge.net
complianttesting.msedge.net
onnettesting.msedge.net
testcertforf.msedge.net
compliantonnettesting.msedge.net
testcertform1.msedge.net
compliantonnettesting.msedge.net
testcertforexo.msedge.net
cacti.msedge.net
*.msedge.net
*.msedge.net
testcertforteams.msedge.net
compliantonnettesting.msedge.net
*.msedge.net
*.msedge.net
compliantonnettesting.msedge.net
*.msedge.net
complianttesting.msedge.net
*.clo.footprintdns.com
*.msedge.net
*.msedge.net
*.clo.footprintdns.com
onnettesting.msedge.net
kring.rotationtest.msedge.net
*.msedge.net
*.keylesstesting.msedge.net
complianttesting.msedge.net
onnettesting.msedge.net
*.msedge.net
*.clo.footprintdns.com
testcertfory.msedge.net
testcertforo.msedge.net
onnettesting.msedge.net
*.msedge.net
*.msedge.net
complianttesting.msedge.net
*.msedge.net
*.msedge.net
*.msedge.net
onnettesting.msedge.net
*.msedge.net
testcertforz.msedge.net
*.msedge.net
ztna1p-ring.msedge.net
*.msedge.net
*.clo.footprintdns.com
onnettesting.msedge.net
chinaringtesting.msedge.net
complianttesting.msedge.net
onnettesting.msedge.net
compliantonnettesting.msedge.net
complianttesting.msedge.net
complianttesting.msedge.net
complianttesting.msedge.net
*.clo.footprintdns.com
*.msedge.net
onnettesting.msedge.net
onnettesting.msedge.net
*.msedge.net
compliantonnettesting.msedge.net

Certificate

The complete raw certificate details for *.msedge.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGqtlwbWDbmdcpd6Zl/U
U50O7JRU5cN9jIyVW2xWG6RzwoSx/oJcDSdP/qh0yZaAGP/jud0KShqfCQNJxuWd
C4iq9QPfqGTK+POfat2TaPLv7N6z2E2uSCgJNrxwtKq7zYra/38+M0Y2X+0nvxPW
svtt2+AQ9SQyRuOXyjozLIeLlxpdlRymMVl8g/vKe5oSKwL7Zde+SM8fNAkIeUj0
1oNP9nW7KEs1OKxRNUURvgexdPsefHoAX+FIo9TyTRndlXFvpW+LH3wwYJJDqykN
DzgYM3lGYxxz0qGE0w0H65PRCiBGL/sD76O1YUgwQr4ELj7osgK5VlEBiE5qxHYK
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137352634214596115907559744141696476222520756
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 16:14:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-19 16:14:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.msedge.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24290359478171386799786291319348198919203817492318688533585114251497176838976458242256718932918688129152967819470044371969266903853047994398377731732503840072235593008875862131597749734132443567252339171269861936905337691150081941134195066810333618355574430613191750187616794630373628465485259592792332939361118547072761934031428820444005141668934489865250460439286337210721121484252424166459640240138816191073799165954612113104457007815207840314767984909868318131537743810517290118428990802303465699600446400553161824307427338284180596114540616254420690808853623891096099970901792108527800394907123482508089510726333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018e71471bed00000403004730450221008c7b1427f013b741f0d0c21ff3fbf0f6bf6ef3d559a3d14f40408a7cf707c53b0220041a75a15c7324ba69515f096a9fb11a7e4441f3742d18d5fc1fd8afde905d010077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018e71471d6b0000040300483046022100e4518eff40f9a1564b1e240b8cdcd15fae785df12a56e0dde540be93ae63afff0221009ccda64bd7efe4e9eee6fc0b94833351adac1500ffdb8b5b5df27cbf3936d0500075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018e71471f16000004030046304402200c5338e48648dc899dab14cbd98b21d8eb82091aa7817084581f4aa938682bef022022bdf05ce2cb739f9ed13e92852b610ce0ebade8efd4533995a427443d10c33a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d5036de71f06336acf8fd3e03a48e501e43c5ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (338 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-msedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-msedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-msedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b-msedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-msedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c-msedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc-msedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dc-msedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lbas.msedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.msedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azp.footprintdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footprintdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clo.footprintdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.any.footprintdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrb.footprintdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perf.msedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp.measure.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.msedge.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe09714055051044d8a48175b89e1ae94a0688c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00424a9fba095ff8cf78dbc9418e8af5faa2624820c1dc5b6f76209c836edb26e407758e8a80d9a814389f0e2df8e56b3b91a7e0085bfb122c65850b26160f111be5c429caf68ced499cd9cd2c26bc4099a136818b6d0fa1f7108c1577c9214ddf9ece58bf96be83108f699f12dea7970045d3c790efb38ca838fac8439a1bbc7b76f5d3d7d3a571511dbb696fb263114b5939ece4232cff01bf3a477308cb9eac982463b6046e2e1bbdd638eb56fedc6446b71287e046c9986760a2e8371b01b64f66289bcd230d5fb2d1bc4ea61a98f479c3b732932c71f900c0fda3a44d70cab189d2e95ea8c33c4c93ab2d282e5615c87e653de0672ea8cabba969c260316de7754a7dfe1057197d87d4c433ae1522c73d32edcc188ff550f717b0c3f0e39726f6c4ccf78b34a299731edcd97cb218465e33de9e81f1eeae5c9e1d28eaabc25899a5f9b2ac8e7ecbefd26014f7b95837e9652dd218c27f1e2c135c7fb3c8261f8b9addfc04b8dabaed166e023fc9b988ebee3874092a87c5e2716bc7559b6014535b8b6ed01989fc882d37b943e54f85587b19f836f9c43d8a28c926d48d8bddf5311cf5d746287508782f133a41322e6f6349cbea2321ddb340da3ffbefa1f50fd4f5c3ef83d78503d25a846c2dd6ff3326f876b25b946b784e2b577313c6192a90c4ba7ae7713b07726934520f852f50eb15ef80a59e1a540aa7e0b547cd