useractivity.cortanaanalytics.com

Issued by Microsoft IT TLS CA 4

About this certificate

This digital certificate with serial number 16:00:04:1b:e5:6e:a2:ac:2e:56:45:62:27:00:00:00:04:1b:e5 was issued on by Microsoft Corporation.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=useractivity.cortanaanalytics.com

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 16:00:04:1b:e5:6e:a2:ac:2e:56:45:62:27:00:00:00:04:1b:e5
Serial Number (int): 490617792577577212971012425791406696881724389
Serial Number lenght: 149 bits, 19 octets

SubjectKeyId: 54:25:6f:ab:9f:4b:89:46:80:86:06:41:9b:72:2e:1a:58:6a:4e:d9
AuthorityKeyId: 7a:7b:8c:c1:cf:e7:a0:ca:1c:d4:6b:fa:fb:e1:33:c3:0f:1a:a2:9d

Fingerprint (sha1): 22:7f:2d:c0:fc:cf:27:f2:5a:a4:ec:a5:39:62:8d:05:4a:ed:49:3f
Fingerprint (sha256): 5a:e5:24:9a:1e:25:0f:f9:d8:2b:74:73:43:dc:ad:66:e8:9a:c8:3e:1b:6d:51:27:78:59:04:da:13:ff:f0:56

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%204.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl

Check the revocation status for certificate useractivity.cortanaanalytics.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for useractivity.cortanaanalytics.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

useractivity.cortanaanalytics.com
useractivity.cortanaanalytics.net
useractivity.cortanaintelligence.com
useractivity.cortanaintelligence.net
useractivity.azureml.net
useractivity-ca-eastasia-1.cloudapp.net
useractivity-ca-southeastasia-1.cloudapp.net
useractivity-ca-northeurope-1.cloudapp.net
useractivity-ca-westeurope-1.cloudapp.net
useractivity-ca-eastus-1.cloudapp.net
useractivity-ca-westus-1.cloudapp.net
useractivity-ca-westcentralus-1.cloudapp.net

Other certificates including the domain name cortanaanalytics.com

(limited to 100 certificates)
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
useractivity.cortanaanalytics.com
*.vo.msecnd.net
*.vo.msecnd.net
index.cortanaanalytics.com
clientlogging.cortanaanalytics.com
*.vo.msecnd.net
gallery.cortanaintelligence.com
useractivity.cortanaanalytics.com
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
catalog.cortanaanalytics.com
*.vo.msecnd.net
index.cortanaanalytics.com
clientlogging.cortanaanalytics.com
index.cortanaanalytics.com
*.vo.msecnd.net
useractivity.cortanaanalytics.com
*.vo.msecnd.net
gallery.cortanaintelligence.com
*.vo.msecnd.net
*.vo.msecnd.net
gallery.cortanaintelligence.com
*.vo.msecnd.net
*.vo.msecnd.net
index.cortanaanalytics.com
*.vo.msecnd.net
useractivity.cortanaanalytics.com
index.cortanaanalytics.com
*.vo.msecnd.net
*.vo.msecnd.net
gallery.azure.ai
catalog.cortanaanalytics.com
*.vo.msecnd.net
*.vo.msecnd.net
useractivity.cortanaanalytics.com
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
management.marketplace.cortanaanalytics.com
*.vo.msecnd.net
*.vo.msecnd.net
start.cortanaanalytics.com
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
catalog.cortanaanalytics.com
clientlogging.cortanaanalytics.com
catalog.cortanaanalytics.com
clientlogging.cortanaanalytics.com
start.cortanaanalytics.com
useractivity.cortanaanalytics.com
*.vo.msecnd.net
studioservice.cortanaanalytics.com
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
gallery.azure.ai
*.vo.msecnd.net
gallery.azure.ai
gallery.azure.ai
*.vo.msecnd.net
*.vo.msecnd.net
catalog.cortanaanalytics.com
start.cortanaanalytics.com
*.vo.msecnd.net
api.marketplace.cortanaanalytics.com
*.vo.msecnd.net
useractivity.cortanaanalytics.com
index.cortanaanalytics.com
*.vo.msecnd.net
*.vo.msecnd.net
gallery.cortanaanalytics.com
start.cortanaanalytics.com
useractivity.cortanaanalytics.com

Certificate

The complete raw certificate details for useractivity.cortanaanalytics.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MhVk6dbWAz13tpBaArJ
6IfJfSmQQngVYxEb2LfAqCnT5gSsGWc96d/dWiUcoJSpAdJ7UeIL7QCyTZzB1dV2
3yPfd00jQ87aqZScXLHTty9Sn+eRu19MkbKQGTs+h2GQXx4lC7o9/nrtHsFDFF28
7x6xp3QNGNLNBqSucHZqKbP5e4+2hpb0DZKwZfW6Nck3omxqD9mlGnsnZLagtHZ+
orWGsMOkch4LBO3kDvGDH/SU4yJKMjdbxhuW13MpEkqbR7vQisDHgV9cqFk4LBRz
FHPqG4HBthmRhQQF0NTuJUY2D3eLj8jgjzJebv9/M8j1+Ici3CvHrlMSTexJphAd
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 490617792577577212971012425791406696881724389
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 18:12:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-05 18:12:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'useractivity.cortanaanalytics.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27366262390139304438794942802220031074295400722207885040108229459789360372309731550232086172183140672342200710131715612440292322127094773064593496780776758488325622009246040746128134535859580519835748219072062143203829852224500363548801545710277291400287007811635671810662357292744690066353939855572589509446315749643987514263672848504299031598485732253293712449789870309417074154992212812407461042264887270602867200726744363215155559426705814988170107068383061648078717230426188017221471934023323737442465440934718879413639201473040455130483349675980709046809244466357996089269550900711100658024981822037886132821503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%204.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54256fab9f4b8946808606419b722e1a586a4ed9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (474 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity.cortanaanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity.cortanaanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity.cortanaintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity.cortanaintelligence.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity.azureml.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity-ca-eastasia-1.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity-ca-southeastasia-1.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity-ca-northeurope-1.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity-ca-westeurope-1.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity-ca-eastus-1.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity-ca-westus-1.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity-ca-westcentralus-1.cloudapp.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7a7b8cc1cfe7a0ca1cd46bfafbe133c30f1aa29d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		004fbd6d4e60ace081ccc709c230afc705ccaa0079574d8a07da7f771602c7301d5ed024fce0605e32c7131a35ef3143f5d6a992aadf319e624757a93aa49cb2dbadc5a82af14fb36ae0434eb04da29952e96175a20265e216fc5af43bf443cbd39c8110213688624441eec83e5c956c0b9a1f75fbf9e9ca2871545a4cc09a787f2f0b4d61f9f11fded0d25a122269ca24c4464a69ed77dcf65db815428c56a77c42e3c3513de8be1d77a4861dcb09bfc2e118bbb1c85292676eeba3539a4869c620cec50124d7758559206c64464b5a9de5c5183b79ad72a72d791547ea87c75d96988ca2c2129e59a96917bbc53d6a12eb74c35a01feb5c30d6a17801cd6be69633179979d87509e0d313014f86aa07aa731f5c9ecd1c57fbc4afd39379adf0fc81c1f234d6e45cc9aa453ea62ec2295297b53fdd0593ba9f7082edc22fe72d5af2c42b746dc35dbe71f84c72e018601192b6e722ca95babd48e39d8f5f42fe1327e2135a4bd6a2c09d8a884373afe708198322098c1dfd7b902ddba7109cae510ce6878aa8a6b0497e88256bc5557cae51abb3ff4497edef4f0f4fc9f291781579e584185638fd347c36b7bf6bf1a9979696f67a0af13d2c9a879b243c4099400d64b7338f895403b84451767ee04ebc4f5f88666fcb388a4cf1798c399ccea5cf8c4670038dc1e9231d51d45ebb14ced92ba0f43c62e5dd9502c99ee29ed51