mail.exchange.microsoft.com

Issued by Microsoft IT SSL SHA2

About this certificate


This digital certificate with serial number 5a:00:00:cc:45:fa:c8:56:23:31:e1:f8:b9:00:01:00:00:cc:45 was issued on by Microsoft Corporation .

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present
  • ERROR: stateOrProvinceName is required if organizationName is set

Microsoft Corporation

Organization: Microsoft Corporation
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
Locality: Redmond
Country: US

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 5a:00:00:cc:45:fa:c8:56:23:31:e1:f8:b9:00:01:00:00:cc:45
Serial Number (int): 2007067339393622180791630406476723926159379525
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: b5:76:ff:df:2d:cc:21:62:49:e7:aa:be:15:ff:7c:60:75:e6:2c:5f
AuthorityKeyId: 51:af:24:26:9c:f4:68:22:57:80:26:2b:3b:46:62:15:7b:1e:cc:a5

Fingerprint (sha1): 46:7c:81:b9:37:b9:8a:af:c1:8c:ae:27:73:d5:58:ce:20:f6:2a:63
Fingerprint (sha256): 93:0b:2c:b4:52:cc:b7:b4:bc:b7:61:41:41:62:01:46:c3:74:37:ad:2c:74:2b:b3:8a:31:09:39:f2:84:98:58

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/msitwww2.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl

Check the revocation status for the current certificate on mail.exchange.microsoft.com
14
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.exchange.microsoft.com
outlookbeta.exchange.corp.microsoft.com
owa.exchange.microsoft.com
Autodiscover.exchange.microsoft.com
Pop.exchange.microsoft.com
Imap.exchange.microsoft.com
Exchange.microsoft.com
filtering.exchange.microsoft.com
Legacy.pop.exchange.microsoft.com
Legacy.imap.exchange.microsoft.com
DF-C14-01.exchange.corp.microsoft.com
DF-C14-02.exchange.corp.microsoft.com
DF-C14-03.exchange.corp.microsoft.com
DF-C14-04.exchange.corp.microsoft.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIISDCCBjCgAwIBAgITWgAAzEX6yFYjMeH4uQABAADMRTANBgkqhkiG9w0BAQsF ADCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UE CxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgU1NMIFNIQTIw HhcNMTUwMzE4MDgyMDQ4WhcNMTcwMzE3MDgyMDQ4WjBlMQswCQYDVQQGEwJVUzEQ MA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u MSQwIgYDVQQDExttYWlsLmV4Y2hhbmdlLm1pY3Jvc29mdC5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpDCqktT2WjkV2iCFyIV9jMiBxEf1/+/iJ ocshA5erKWqgWKYKgjwW25Pi7QwbegyvhX/1R8bMMUzUT5peG9YTnkoM4MedN+Dv ymbnomi7p1jqfR/So932hyKnSE+Di0iiYgAbYPAqAlcKevqd96RyobVkSPTL7ahF Km28Qmnudv7mumDjprm0qvTIlQTjAtJl8wxjzg6hAVaEnTYFUZlf4rVQjOPgroqL 9SS1ERGXiqgGy6MRkQ47jeK/FtdyJ/PSSjInugfDmahpoxzedsTOqFvYoMM9xjOV Cn67TQShrt4+JIa6XAgnZepHNNOti5mI73XjUVvJKQB2V4uY8yADAgMBAAGjggPI MIIDxDALBgNVHQ8EBAMCBLAwHQYDVR0OBBYEFLV2/98tzCFiSeeqvhX/fGB15ixf MIIB6gYDVR0RBIIB4TCCAd2CG21haWwuZXhjaGFuZ2UubWljcm9zb2Z0LmNvbYIn b3V0bG9va2JldGEuZXhjaGFuZ2UuY29ycC5taWNyb3NvZnQuY29tghpvd2EuZXhj aGFuZ2UubWljcm9zb2Z0LmNvbYIjQXV0b2Rpc2NvdmVyLmV4Y2hhbmdlLm1pY3Jv c29mdC5jb22CGlBvcC5leGNoYW5nZS5taWNyb3NvZnQuY29tghtJbWFwLmV4Y2hh bmdlLm1pY3Jvc29mdC5jb22CFkV4Y2hhbmdlLm1pY3Jvc29mdC5jb22CIGZpbHRl cmluZy5leGNoYW5nZS5taWNyb3NvZnQuY29tgiFMZWdhY3kucG9wLmV4Y2hhbmdl Lm1pY3Jvc29mdC5jb22CIkxlZ2FjeS5pbWFwLmV4Y2hhbmdlLm1pY3Jvc29mdC5j b22CJURGLUMxNC0wMS5leGNoYW5nZS5jb3JwLm1pY3Jvc29mdC5jb22CJURGLUMx NC0wMi5leGNoYW5nZS5jb3JwLm1pY3Jvc29mdC5jb22CJURGLUMxNC0wMy5leGNo YW5nZS5jb3JwLm1pY3Jvc29mdC5jb22CJURGLUMxNC0wNC5leGNoYW5nZS5jb3Jw Lm1pY3Jvc29mdC5jb20wHwYDVR0jBBgwFoAUUa8kJpz0aCJXgCYrO0ZiFXsezKUw fQYDVR0fBHYwdDByoHCgboY2aHR0cDovL21zY3JsLm1pY3Jvc29mdC5jb20vcGtp L21zY29ycC9jcmwvbXNpdHd3dzIuY3JshjRodHRwOi8vY3JsLm1pY3Jvc29mdC5j b20vcGtpL21zY29ycC9jcmwvbXNpdHd3dzIuY3JsMHAGCCsGAQUFBwEBBGQwYjA8 BggrBgEFBQcwAoYwaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAv bXNpdHd3dzIuY3J0MCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5tc29jc3AuY29t MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBOBgNVHSAERzBFMEMGCSsG AQQBgjcqATA2MDQGCCsGAQUFBwIBFihodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v cGtpL21zY29ycC9jcHMAMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYI KwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggIBABBvN0TobvkthUfs386QzmVNDITu 0I5/un6a2kNcvjYzahsHoPdEvvtFCCj8rHHpVtoya07KSb6iosKEbIcTYQQNYI5n PR0F3mUYvITz6E1gthd9KtyY3Cic+W+TjK3F2C0pfNzL1/JaB01ZbLG5QXkqxun4 Iy4KqRR6enSvRco84P6fHxIPRgd/k6L/KkM3+tUfzsMqEiI7zBOFObb3yECdooor 5bCAI0UkMrcDSvL+m0reQVvZQQDnDk/IPJ//RKnT7NXku9CrR9E00P1AzwBuoG78 0FC5DSL99r7ia/NfiOwLhqXE1/ckv7qbjwRmF73ahylpP+Yfkn/Jtl/noXcGfGGO B0ytZF5dj28R++rOfcSW3VQ1xzSyExXGJT3pGL3Xzql7zZaM6nGCYYTrkVI2JwdQ fR87q54u0wuZGLKVBi4J1U/I0F0xTe+Xd257HoT3Kf+WU75bQdxKHz6c/LXbG1XQ vzh3f5768w3p2FgJs+SF7wdfZ0LPwEV+NENIvQv+Uefyy/cVgd7OmJVr41HuQS7S wB0Rq0Q1+t7aF8seaP7uFlvdbk71yu0Xl7BsrT4ZsdYjv+EHI3vl2y1jQDDGAezU FD/V66baHRaHO/swGggmvOT2/VpuTY5ATdstAb5glc2s3Xoh0yAfUTnwwK/CRq/w wcqA8GkVmmF9aX/E -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQwqpLU9lo5FdoghciFf YzIgcRH9f/v4iaHLIQOXqylqoFimCoI8FtuT4u0MG3oMr4V/9UfGzDFM1E+aXhvW E55KDODHnTfg78pm56Jou6dY6n0f0qPd9ocip0hPg4tIomIAG2DwKgJXCnr6nfek cqG1ZEj0y+2oRSptvEJp7nb+5rpg46a5tKr0yJUE4wLSZfMMY84OoQFWhJ02BVGZ X+K1UIzj4K6Ki/UktRERl4qoBsujEZEOO43ivxbXcifz0koyJ7oHw5moaaMc3nbE zqhb2KDDPcYzlQp+u00Eoa7ePiSGulwIJ2XqRzTTrYuZiO9141FbySkAdleLmPMg AwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2007067339393622180791630406476723926159379525 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT SSL SHA2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-18 08:20:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-17 08:20:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.exchange.microsoft.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21340273101370107451427805468766839334580406593467816724512551904549180116585294789561194848012765697112218456585488937168465296545867816633249097326330521387162559333143948248738172495826866859840189480011738641655200928657686366416718330139860320525896675978163801366815601093879770620829323039278072002648371165753545535923361204274775265860430495715840930003357869674540364991134327329427303565502814379406237349496494529420388260218100034293401329531099672653770375637415837814290506764883334844881962394855068317065245592941540838109736112118545746049522117770501962272933600801688350680515792177345040936542211 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b576ffdf2dcc216249e7aabe15ff7c6075e62c5f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.exchange.microsoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlookbeta.exchange.corp.microsoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.exchange.microsoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.exchange.microsoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Pop.exchange.microsoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Imap.exchange.microsoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Exchange.microsoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filtering.exchange.microsoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Legacy.pop.exchange.microsoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Legacy.imap.exchange.microsoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DF-C14-01.exchange.corp.microsoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DF-C14-02.exchange.corp.microsoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DF-C14-03.exchange.corp.microsoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DF-C14-04.exchange.corp.microsoft.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 51af24269cf468225780262b3b4662157b1ecca5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/msitwww2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/msitwww2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps�' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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