indexcanary.cortanaintelligence.com

Issued by Microsoft IT TLS CA 4

About this certificate

This digital certificate with serial number 16:00:03:38:f7:22:cd:50:d2:ac:85:ad:89:00:00:00:03:38:f7 was issued on by Microsoft Corporation.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=indexcanary.cortanaintelligence.com

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 16:00:03:38:f7:22:cd:50:d2:ac:85:ad:89:00:00:00:03:38:f7
Serial Number (int): 490617490934745428655897000749153947895412983
Serial Number lenght: 149 bits, 19 octets

SubjectKeyId: 6f:4f:af:77:26:4d:7e:29:0a:4e:b2:05:38:e7:9a:d4:65:74:c2:20
AuthorityKeyId: 7a:7b:8c:c1:cf:e7:a0:ca:1c:d4:6b:fa:fb:e1:33:c3:0f:1a:a2:9d

Fingerprint (sha1): 3e:20:65:90:58:20:43:52:aa:74:bf:bf:1c:2f:d6:53:ca:82:4c:95
Fingerprint (sha256): 9a:21:3a:5f:1f:55:31:38:27:d2:c8:c9:bb:a1:48:4a:d6:cd:72:8c:82:46:2c:de:73:41:87:d8:cb:2d:ec:06

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%204.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl

Check the revocation status for certificate indexcanary.cortanaintelligence.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for indexcanary.cortanaintelligence.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

indexcanary.cortanaintelligence.com
index-ca-centraluseuap-1.cloudapp.net
indexcanary.cortanaintelligence.net

Other certificates including the domain name cortanaintelligence.com

(limited to 100 certificates)
catalog-encryption-prod.cortanaintelligence.com
useractivitycanary.cortanaintelligence.com
gallerycanary.azure.ai
useractivity.cortanaanalytics.com
community-logging-encryption-cert.cortanaintelligence.com
clientlogging.cortanaanalytics.com
quickstart.azure.ai
gallery.cortanaintelligence.com
catalog-to-packing.cortanaintelligence.com
useractivity.cortanaanalytics.com
auth-catalogcanary-to-indexcanary.cortanaintelligence.com
auth-useractivitycanary-to-catalogcanary.cortanaintelligence.com
cigalleryindex-test.cortanaintelligence.com
clientloggingcanary.cortanaintelligence.com
gallerycanary.azure.ai
catalog.cortanaanalytics.com
index.cortanaanalytics.com
index.cortanaanalytics.com
useractivity.cortanaanalytics.com
gallery.cortanaintelligence.com
catalogcanary.cortanaintelligence.com
gallery.cortanaintelligence.com
gallerycanary.azure.ai
index.cortanaanalytics.com
useractivity.cortanaanalytics.com
index.cortanaanalytics.com
cigallerycatalog-test.cortanaintelligence.com
cigallerylogging-test.cortanaintelligence.com
gallerycanary.cortanaintelligence.com
useractivitycanary.cortanaintelligence.com
gallery.azure.ai
catalog.cortanaanalytics.com
cigalleryua-test.cortanaintelligence.com
indexcanary.cortanaintelligence.com
auth-useractivitycanary-to-catalogcanary.cortanaintelligence.com
clientlogging.cortanaanalytics.com
catalog.cortanaanalytics.com
clientlogging.cortanaanalytics.com
useractivity.cortanaanalytics.com
gallery.azure.ai
gallery.azure.ai
gallery.azure.ai
gallerycanary.cortanaintelligence.com
catalog.cortanaanalytics.com
catalogcanary.cortanaintelligence.com
useractivity.cortanaanalytics.com
index.cortanaanalytics.com
start.cortanaintelligence.com
useractivity.cortanaanalytics.com

Certificate

The complete raw certificate details for indexcanary.cortanaintelligence.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IIlzuMeTHz0/MOX33BK
2ynDBOP9FVhnvjUCE2bHJ5E2czOSyCyzel9QqrEpztJeKEYCf4Iwzv9QHvNFIejT
GMuVzYfQnRgL6m3wD/T2B7gHsvPKLhNch2SVjd0n8cTpajE3ialciPfCLCKYY8ub
n0Ted/gewTKfYQ3OyRP51bx0jiLapZh3Jm+mmWUcjo37NJnuFb9QW0wlTNyy6tmc
jQ3MZO/MCbRJDZXoTBFQR1Lf+vZ/7Q028gRU6YscRR6Ig9iY9WdBjdXS9DjhedFf
AhjihlBdOSLv1P+xuJNNEcqgEHn/yz13Y0rHQN53BvyMmZt3OVP8d9ZDsfFKKyPj
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 490617490934745428655897000749153947895412983
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-23 17:58:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-23 17:58:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'indexcanary.cortanaintelligence.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28846511749217321302479009008100659306308689487937655630238006799254942901629290929847029222877771451481606103329739551826221784863157317388803269862852252837985059236214846530066847010045713951785306255815070130674478497944608464626913922980534142149159169976363936674763027598454797049689759094849375387400156084588836697283148575356549406084006107023234904353364218756616596180291295704483557975640464453198808758430434536469594199225219951849089502670901527900908956042230129398009708599453460119127907362026265646325900994295577144610428907162377824219202228147656033843140344189792683657339430279829626451911667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%204.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f4faf77264d7e290a4eb20538e79ad46574c220
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indexcanary.cortanaintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'index-ca-centraluseuap-1.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indexcanary.cortanaintelligence.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7a7b8cc1cfe7a0ca1cd46bfafbe133c30f1aa29d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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