useractivitycanary.cortanaintelligence.com

Issued by Microsoft IT TLS CA 1

About this certificate

This digital certificate with serial number 7b:00:04:15:c1:63:ea:bd:64:cb:1b:e4:1c:00:00:00:04:15:c1 was issued on by Microsoft Corporation.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=useractivitycanary.cortanaintelligence.com

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:00:04:15:c1:63:ea:bd:64:cb:1b:e4:1c:00:00:00:04:15:c1
Serial Number (int): 2742993049466662091898510710638286091483092417
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 22:79:f5:e1:0d:c2:61:46:82:b6:04:c7:01:d8:67:51:c3:d6:d2:8f
AuthorityKeyId: 58:88:9f:d6:dc:9c:48:22:b7:14:3e:ff:84:88:e8:e6:85:ff:fa:7d

Fingerprint (sha1): 18:10:d9:db:c1:b7:1e:29:8b:b5:8e:a1:e2:e2:16:dc:49:da:b5:21
Fingerprint (sha256): 7d:d2:71:5b:dd:1f:0b:b3:51:e4:2a:4a:83:2c:79:fc:43:f3:47:42:6a:24:5d:64:8d:c8:7a:76:6b:6e:db:ac

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%201.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl

Check the revocation status for certificate useractivitycanary.cortanaintelligence.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for useractivitycanary.cortanaintelligence.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

useractivitycanary.cortanaintelligence.com
useractivity-ca-centraluseuap-1.cloudapp.net
useractivitycanary.cortanaintelligence.net

Other certificates including the domain name cortanaintelligence.com

(limited to 100 certificates)
catalog-encryption-prod.cortanaintelligence.com
useractivitycanary.cortanaintelligence.com
gallerycanary.azure.ai
useractivity.cortanaanalytics.com
community-logging-encryption-cert.cortanaintelligence.com
clientlogging.cortanaanalytics.com
quickstart.azure.ai
gallery.cortanaintelligence.com
catalog-to-packing.cortanaintelligence.com
useractivity.cortanaanalytics.com
auth-catalogcanary-to-indexcanary.cortanaintelligence.com
auth-useractivitycanary-to-catalogcanary.cortanaintelligence.com
cigalleryindex-test.cortanaintelligence.com
clientloggingcanary.cortanaintelligence.com
gallerycanary.azure.ai
catalog.cortanaanalytics.com
index.cortanaanalytics.com
index.cortanaanalytics.com
useractivity.cortanaanalytics.com
gallery.cortanaintelligence.com
catalogcanary.cortanaintelligence.com
gallery.cortanaintelligence.com
gallerycanary.azure.ai
index.cortanaanalytics.com
useractivity.cortanaanalytics.com
index.cortanaanalytics.com
cigallerycatalog-test.cortanaintelligence.com
cigallerylogging-test.cortanaintelligence.com
gallerycanary.cortanaintelligence.com
useractivitycanary.cortanaintelligence.com
gallery.azure.ai
catalog.cortanaanalytics.com
cigalleryua-test.cortanaintelligence.com
indexcanary.cortanaintelligence.com
auth-useractivitycanary-to-catalogcanary.cortanaintelligence.com
clientlogging.cortanaanalytics.com
catalog.cortanaanalytics.com
clientlogging.cortanaanalytics.com
useractivity.cortanaanalytics.com
gallery.azure.ai
gallery.azure.ai
gallery.azure.ai
gallerycanary.cortanaintelligence.com
catalog.cortanaanalytics.com
catalogcanary.cortanaintelligence.com
useractivity.cortanaanalytics.com
index.cortanaanalytics.com
start.cortanaintelligence.com
useractivity.cortanaanalytics.com

Certificate

The complete raw certificate details for useractivitycanary.cortanaintelligence.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1HV67YrsiZ9+qLajeYC
5b0W7CJJ4Ucs63bnOqVgWcJdQv2ME8WLNXMg4gXck7matoX9LrHxOfpuXHQMsny/
n9LhpnEnQasUFLvoTSE1KtoCl8fgE8LBVuOQrMmD7sivelC/CB9S0Bte5y2Yq7sD
f6Ia9ychqDYYoT3pRZwpw5cgHmayo395LDIE7po4vP9bSRVvCy4oDD2hHhuUTvr4
KG7teCIfmK+C6cDc0qOZXq3ES1qNcE85HNs8s8A2byxk20MvGdf62XR/LyMoyCs1
LNmNjhycptyXvLeBrjZre45JmIIRrvgIbOuKJXoaSS0p9TeXu1Bb0E+M9/LpfdfZ
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2742993049466662091898510710638286091483092417
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 18:07:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-05 18:07:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'useractivitycanary.cortanaintelligence.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21627104801363659085957788139985978038756381536793820089790228118865843528986801956808283131010138083244218883782192488813509074631955809047984368325410103349800558116925040686210498045908695032098320216567672496622922172521881468755777597349341607174095433627099388132122335957449037154296085326053919314569633235196549002521029425741330648500310664844031225194516978332317918110142223613821461566807456277198504905482633794713046368511313961052199516140636662072809080744271130301573133619481481489407345364015347319310256716583598116915845889146015675928074723477464914193406457180478928781412559234965033627146609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%201.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2279f5e10dc2614682b604c701d86751c3d6d28f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivitycanary.cortanaintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity-ca-centraluseuap-1.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivitycanary.cortanaintelligence.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 58889fd6dc9c4822b7143eff8488e8e685fffa7d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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