*.kobotest02.osdinfra.net
Issued by Microsoft IT TLS CA 4
About this certificate
This digital certificate with serial number 16:00:01:ba:53:3f:cb:23:d9:5a:f5:83:c3:00:00:00:01:ba:53 was issued on by Microsoft Corporation.
With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Certificate Subject
CN=*.kobotest02.osdinfra.net
Microsoft Corporation
Organization:
Microsoft Corporation
Organization unit: Microsoft IT
Organization unit: Microsoft IT
State / Province:
Washington
Locality: Redmond
Country: US
Locality: Redmond
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 16:00:01:ba:53:3f:cb:23:d9:5a:f5:83:c3:00:00:00:01:ba:53Serial Number (int): 490616982318702371521754558079896661237283411
Serial Number lenght: 149 bits, 19 octets
SubjectKeyId: 65:58:67:c0:be:29:99:65:f2:41:7b:dd:f2:3f:d3:b8:35:c5:ba:b4
AuthorityKeyId: 7a:7b:8c:c1:cf:e7:a0:ca:1c:d4:6b:fa:fb:e1:33:c3:0f:1a:a2:9d
Fingerprint (sha1): 6f:11:9a:91:ae:03:d6:8b:19:98:ec:c5:43:c9:0f:95:32:6a:16:71
Fingerprint (sha256): 7e:d7:82:32:31:9e:08:55:a4:20:4b:70:51:a7:25:f4:38:b6:29:58:dc:e7:e4:e4:88:b2:95:56:4c:75:c8:c5
Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%204.crt
Revocation information
OCSP Server: http://ocsp.msocsp.comCRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl
Check the revocation status for certificate *.kobotest02.osdinfra.net
21
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.kobotest02.osdinfra.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.kobotest02.osdinfra.net
*.projectkonacompute.net
*.caboaccountdogfood.net
*.konaaccountdogfood.net
*.projectcabostore.net
*.test.projectcabostore.net
*.test.projectkonacompute.net
*.test02.projectkonacompute.net
*.test02.projectcabostore.net
*.test04.projectcabostore.net
*.test04.projectkonacompute.net
*.taurus.projectkonacompute.net
*.taurus.projectcabostore.net
*.test-e2.projectcabostore.net
*.test-e2.projectkonacompute.net
*.pyxis.projectcabostore.net
*.pyxis.projectkonacompute.net
*.baja.konaaccountdogfood.net
*.livy.pools.northeurope.konaaccountdogfood.net
*.sparkhistory.pools.northeurope.konaaccountdogfood.net
*.sparkmaster.pools.northeurope.konaaccountdogfood.net
*.projectkonacompute.net
*.caboaccountdogfood.net
*.konaaccountdogfood.net
*.projectcabostore.net
*.test.projectcabostore.net
*.test.projectkonacompute.net
*.test02.projectkonacompute.net
*.test02.projectcabostore.net
*.test04.projectcabostore.net
*.test04.projectkonacompute.net
*.taurus.projectkonacompute.net
*.taurus.projectcabostore.net
*.test-e2.projectcabostore.net
*.test-e2.projectkonacompute.net
*.pyxis.projectcabostore.net
*.pyxis.projectkonacompute.net
*.baja.konaaccountdogfood.net
*.livy.pools.northeurope.konaaccountdogfood.net
*.sparkhistory.pools.northeurope.konaaccountdogfood.net
*.sparkmaster.pools.northeurope.konaaccountdogfood.net
Other certificates including the domain name osdinfra.net
(limited to 100 certificates)
netgraph.osdinfra.net
cosmos.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
ndastreamingclienttest.osdinfra.net
cosmos14.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
cosmos11.osdinfra.net
netgraph.osdinfra.net
wsproxy.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
rdm.osdinfra.net
www.kiwitest.osdinfra.net
netperf.osdinfra.net
www.kiwitest.osdinfra.net
cabometadatamanager.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
kobo-2-aad.ppe.credential.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
wsproxy.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
pfportal.osdinfra.net
netperf.osdinfra.net
www.kiwitest.osdinfra.net
netperf.osdinfra.net
netval.osdinfra.net
cosmos14.osdinfra.net
netperf.osdinfra.net
*.cosmosdatamap.osdinfra.net
*.netperf.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
cosmos11.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
cws.cosmoslumen.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
phynet.osdinfra.net
*.perf.projectkonacompute.net
netgraph.osdinfra.net
ndm.osdinfra.net
netperf.osdinfra.net
*.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
cosmos14.osdinfra.net
*.kobotest03.osdinfra.net
netperf.osdinfra.net
*.osdinfra.net
netperf.osdinfra.net
*.kobotest02.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
*.netperf.osdinfra.net
netperf.osdinfra.net
ndastreamingservertest.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
kobo-2-aad.prod.credential.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
phynetwebui-client.osdinfra.net
rdm.osdinfra.net
*.cosmos.osdinfra.net
*.osdinfra.net
cosmos.osdinfra.net
cosmos.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
ndastreamingclienttest.osdinfra.net
cosmos14.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
cosmos11.osdinfra.net
netgraph.osdinfra.net
wsproxy.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
rdm.osdinfra.net
www.kiwitest.osdinfra.net
netperf.osdinfra.net
www.kiwitest.osdinfra.net
cabometadatamanager.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
kobo-2-aad.ppe.credential.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
wsproxy.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
pfportal.osdinfra.net
netperf.osdinfra.net
www.kiwitest.osdinfra.net
netperf.osdinfra.net
netval.osdinfra.net
cosmos14.osdinfra.net
netperf.osdinfra.net
*.cosmosdatamap.osdinfra.net
*.netperf.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
cosmos11.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
cws.cosmoslumen.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
phynet.osdinfra.net
*.perf.projectkonacompute.net
netgraph.osdinfra.net
ndm.osdinfra.net
netperf.osdinfra.net
*.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
cosmos14.osdinfra.net
*.kobotest03.osdinfra.net
netperf.osdinfra.net
*.osdinfra.net
netperf.osdinfra.net
*.kobotest02.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
*.netperf.osdinfra.net
netperf.osdinfra.net
ndastreamingservertest.osdinfra.net
netgraph.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
kobo-2-aad.prod.credential.osdinfra.net
netperf.osdinfra.net
netperf.osdinfra.net
netgraph.osdinfra.net
phynetwebui-client.osdinfra.net
rdm.osdinfra.net
*.cosmos.osdinfra.net
*.osdinfra.net
cosmos.osdinfra.net
Certificate
The complete raw certificate details for *.kobotest02.osdinfra.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJgjCCB2qgAwIBAgITFgABulM/yyPZWvWDwwAAAAG6UzANBgkqhkiG9w0BAQsF ADCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UE CxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDQw HhcNMTgwNTE2MjIzNTIwWhcNMjAwNTE2MjIzNTIwWjAkMSIwIAYDVQQDDBkqLmtv Ym90ZXN0MDIub3NkaW5mcmEubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAyaiHcJYt2gHoKf9NwRhibbsKB9QstDXH+pC+c4mAtHcv4udX65ZLLbZ6 ssQkVbWjnbIb/Z4gLfL2qKn3JRDAF+sL0tUv3zjDRh9v+Q7kXOU+lSuSV+0vTiao A8xzGM0KQBjzWIWXVuWeTrxqaYfNsItMUcc6FXMRbOo17QbZDntjj8ZuHoJeFtrn JTHDLHkI36Kt9Z63Ix2oFm/vn5Fp4ZpePs+XJOsogDNMHkW7Vy1M5xuIGgBdetDN eThG02inF2vQymj6/IGn+NxIa626iXiXt1HNJnU4dyzZlmR57qkZHS7iEzaWNBht Trhv6C+ao3ZOqoAc2UpTpzgD2TnDIwIDAQABo4IFQzCCBT8wEwYKKwYBBAHWeQIE AwEB/wQCBQAwJwYJKwYBBAGCNxUKBBowGDAKBggrBgEFBQcDAjAKBggrBgEFBQcD ATA+BgkrBgEEAYI3FQcEMTAvBicrBgEEAYI3FQiH2oZ1g+7ZAYLJhRuBtZ5hhfTr YIFdhNLfQoLnk3oCAWQCAR0wgYUGCCsGAQUFBwEBBHkwdzBRBggrBgEFBQcwAoZF aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvTWljcm9zb2Z0JTIw SVQlMjBUTFMlMjBDQSUyMDQuY3J0MCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5t c29jc3AuY29tMB0GA1UdDgQWBBRlWGfAvimZZfJBe93yP9O4NcW6tDALBgNVHQ8E BAMCBLAwggLLBgNVHREEggLCMIICvoIZKi5rb2JvdGVzdDAyLm9zZGluZnJhLm5l dIIYKi5wcm9qZWN0a29uYWNvbXB1dGUubmV0ghgqLmNhYm9hY2NvdW50ZG9nZm9v ZC5uZXSCGCoua29uYWFjY291bnRkb2dmb29kLm5ldIIWKi5wcm9qZWN0Y2Fib3N0 b3JlLm5ldIIbKi50ZXN0LnByb2plY3RjYWJvc3RvcmUubmV0gh0qLnRlc3QucHJv amVjdGtvbmFjb21wdXRlLm5ldIIfKi50ZXN0MDIucHJvamVjdGtvbmFjb21wdXRl Lm5ldIIdKi50ZXN0MDIucHJvamVjdGNhYm9zdG9yZS5uZXSCHSoudGVzdDA0LnBy b2plY3RjYWJvc3RvcmUubmV0gh8qLnRlc3QwNC5wcm9qZWN0a29uYWNvbXB1dGUu bmV0gh8qLnRhdXJ1cy5wcm9qZWN0a29uYWNvbXB1dGUubmV0gh0qLnRhdXJ1cy5w cm9qZWN0Y2Fib3N0b3JlLm5ldIIeKi50ZXN0LWUyLnByb2plY3RjYWJvc3RvcmUu bmV0giAqLnRlc3QtZTIucHJvamVjdGtvbmFjb21wdXRlLm5ldIIcKi5weXhpcy5w cm9qZWN0Y2Fib3N0b3JlLm5ldIIeKi5weXhpcy5wcm9qZWN0a29uYWNvbXB1dGUu bmV0gh0qLmJhamEua29uYWFjY291bnRkb2dmb29kLm5ldIIvKi5saXZ5LnBvb2xz Lm5vcnRoZXVyb3BlLmtvbmFhY2NvdW50ZG9nZm9vZC5uZXSCNyouc3BhcmtoaXN0 b3J5LnBvb2xzLm5vcnRoZXVyb3BlLmtvbmFhY2NvdW50ZG9nZm9vZC5uZXSCNiou c3BhcmttYXN0ZXIucG9vbHMubm9ydGhldXJvcGUua29uYWFjY291bnRkb2dmb29k Lm5ldDCBrAYDVR0fBIGkMIGhMIGeoIGboIGYhktodHRwOi8vbXNjcmwubWljcm9z b2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUyMENB JTIwNC5jcmyGSWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2Ny bC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUyMENBJTIwNC5jcmwwTQYDVR0gBEYwRDBC BgkrBgEEAYI3KgEwNTAzBggrBgEFBQcCARYnaHR0cDovL3d3dy5taWNyb3NvZnQu Y29tL3BraS9tc2NvcnAvY3BzMB8GA1UdIwQYMBaAFHp7jMHP56DKHNRr+vvhM8MP GqKdMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATANBgkqhkiG9w0BAQsF AAOCAgEAS6uIT8M4XaLAigwF47cODffYHzGP8vVvLJf18AwPXHoab90RXnuVYmj5 SlPclAJQzNteiSyq8HGRHaX7aO4mbxJEMTNQDNsdhKrKUFBua/ar4mAPcDqUDShy IuqUpt5O+NXUpPtbs+VCdKviCyZkaEMoQkvw1zCBAPIxHV1E26llnGnOYW47dLB2 u+yjnDaxgw737GYI/DaFSovUM5TeJ/njEzIfZR1Qz1KOWKgZVNFx0TstjOhjOLIV 1G/6VK2W+FK5SYqD/lui4YASAirbQrgD9E7W1onp0k97Rf9+VmYV+GOHluu9tOlf zK73i9xe13vOKJgoUOzFcS2g17v1JcPEOXgVq9+GYSl5JdJ0ZUbeb+atFpqUIBoW aC+wd4I5NcAcxSctG1iyYstCCESvoT/wM2O/m0XOfoqTDWFZ4ivoqqwZOei06UsG DuQJCjUtjHs+uN00RprBHuFlf4MCYZxwhBYOiomRkWhCt2Gl7Bz/bVlujYzvDHvc hayqdFWDCCJalcMiC+j+u4kFL9Tb+ERRUT3MN4tDT3+kTmC9Orkwug9fBrnP1iKa FYzV4IRtANM4ujcg1qnk2NiI4CK6sRc2G/prQvch4zpQLkZQrGYgdfG1XOu4rHwU cSBICb85Gjp/DCRxgGEoD+Newe5uqrHIxSF5YD66KL1cSaYG8pY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaiHcJYt2gHoKf9NwRhi bbsKB9QstDXH+pC+c4mAtHcv4udX65ZLLbZ6ssQkVbWjnbIb/Z4gLfL2qKn3JRDA F+sL0tUv3zjDRh9v+Q7kXOU+lSuSV+0vTiaoA8xzGM0KQBjzWIWXVuWeTrxqaYfN sItMUcc6FXMRbOo17QbZDntjj8ZuHoJeFtrnJTHDLHkI36Kt9Z63Ix2oFm/vn5Fp 4ZpePs+XJOsogDNMHkW7Vy1M5xuIGgBdetDNeThG02inF2vQymj6/IGn+NxIa626 iXiXt1HNJnU4dyzZlmR57qkZHS7iEzaWNBhtTrhv6C+ao3ZOqoAc2UpTpzgD2TnD IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 490616982318702371521754558079896661237283411 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-16 22:35:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 22:35:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kobotest02.osdinfra.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25457004075852506053860143745951294972007284929814806750128078864881830260392039905180111358311028627920513385219936594252746968203757898899140165415024247225710879988320283964216878611572836133895229016749987877829063591124492373237167930498810554955322850624807809573836170881601734850726191640027874379295138214655172386103229683441703896556151188921645171937957575239225148884730374908444737647465029678569232403423906389067208724819657844664303389785106748094849895140101988397667409756381368582319883650020948001538990806757672542340297869680543434035456555982058182853428075461964892069181841394509018788643619 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%204.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 655867c0be299965f2417bddf23fd3b835c5bab4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (706 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kobotest02.osdinfra.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projectkonacompute.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caboaccountdogfood.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.konaaccountdogfood.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projectcabostore.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.projectcabostore.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.projectkonacompute.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test02.projectkonacompute.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test02.projectcabostore.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test04.projectcabostore.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test04.projectkonacompute.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taurus.projectkonacompute.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taurus.projectcabostore.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test-e2.projectcabostore.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test-e2.projectkonacompute.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pyxis.projectcabostore.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pyxis.projectkonacompute.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baja.konaaccountdogfood.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livy.pools.northeurope.konaaccountdogfood.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparkhistory.pools.northeurope.konaaccountdogfood.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparkmaster.pools.northeurope.konaaccountdogfood.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7a7b8cc1cfe7a0ca1cd46bfafbe133c30f1aa29d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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