*.perf.projectkonacompute.net

Issued by Microsoft IT TLS CA 5

About this certificate

This digital certificate with serial number 2d:00:03:a1:14:2a:95:5f:ce:b6:36:fe:28:00:00:00:03:a1:14 was issued on by Microsoft Corporation.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=*.perf.projectkonacompute.net

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:00:03:a1:14:2a:95:5f:ce:b6:36:fe:28:00:00:00:03:a1:14
Serial Number (int): 1003534768891395758577192935026997696686956820
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: df:f0:dc:b1:c0:5a:7c:55:aa:2a:a0:a3:b1:6a:01:05:7a:bb:c1:1d
AuthorityKeyId: 08:fe:25:9f:74:ea:87:04:c2:bc:bb:8e:a8:38:5f:33:c6:d1:6c:65

Fingerprint (sha1): dc:f1:02:f8:d5:15:45:1d:f8:78:fd:cb:b9:db:41:6b:26:c7:11:e5
Fingerprint (sha256): b9:d8:b3:9b:a1:5d:d5:48:ca:f2:6d:44:8f:0e:05:0a:94:cb:ea:e1:f9:ee:83:5d:f8:5d:ed:23:cf:af:40:24

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%205.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl

Check the revocation status for certificate *.perf.projectkonacompute.net

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.perf.projectkonacompute.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.perf.projectkonacompute.net
*.perf.projectcabostore.net
perf.projectkonacompute.net
perf.projectcabostore.net
*.koboperf.osdinfra.net
*.caboaccountdogfood.net
*.konaaccountdogfood.net
*.eastus.caboaccountdogfood.net
*.eastus.konaaccountdogfood.net

Other certificates including the domain name projectkonacompute.net

(limited to 100 certificates)
adlus08.konaaccountdogfood.net
*.projectkonacompute.net
*.adlus12.projectkonacompute.net
www.kiwitest.osdinfra.net
www.kiwitest.osdinfra.net
*.cachetest01.projectkonacompute.net
projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
adlus12.projectkonacompute.net
adlsg17.projectcabostore.net
*.projectkonacompute.net
*.perf.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.kobotest03.osdinfra.net
*.kobotest02.osdinfra.net
*.adlie11.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
adlus08.konaaccountdogfood.net
*.adlus15.projectkonacompute.net
adlus04.projectkonacompute.net
*.adljp20.projectkonacompute.net
*.adlca23.projectkonacompute.net
*.projectkonacompute.net
*.adlnl10.projectkonacompute.net
*.adlus15.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.cachetest01.projectkonacompute.net
*.perf.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.projectkonacompute.net
*.adlau19.projectkonacompute.net
www.kiwitest.osdinfra.net
adljp20.projectcabostore.net
*.adlus15.projectkonacompute.net
*.azuredatalakeanalytics.net
*.kobotest02.osdinfra.net
*.adlus80.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.azuredatalake.net
*.projectkonacompute.net
*.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.cachetest01.projectkonacompute.net
*.kobotest03.osdinfra.net
adlus81.projectcabostore.net
*.projectkonacompute.net
*.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.perf.projectkonacompute.net
*.azuredatalakeanalytics.net
*.kobotest03.osdinfra.net
kobotest02.osdinfra.net
*.kobotest02.osdinfra.net
adlau18.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.adlca22.projectkonacompute.net
*.kobotest03.osdinfra.net
*.kobotest04.osdinfra.net
*.adlhk16.projectkonacompute.net
*.adlnl10.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.kobotest03.osdinfra.net
*.adlie11.projectkonacompute.net
*.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
adlus12.projectkonacompute.net
*.adlie11.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.projectkonacompute.net
*.kobotest02.osdinfra.net
*.projectkonacompute.net
*.adlnl10.projectkonacompute.net
*.adljp20.projectkonacompute.net
www.kiwitest.osdinfra.net
*.cabohdi01.projectcabostore.net
www.kiwitest.osdinfra.net
*.adlus15.projectkonacompute.net
*.tadlus01.projectkonacompute.net
*.projectkonacompute.net
*.adlie01.projectkonacompute.net
*.test05.projectkonacompute.net
*.projectkonacompute.net

Certificate

The complete raw certificate details for *.perf.projectkonacompute.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq08blVSi7RGOWPh0LVN
fgt6PiSlEOY/htYTiWqc0bYd78JmL7+udhSa9KLJYkHikbcjdTO0S+sloL/WXjyA
b7zyVB/ZT2uAcOG2ITiy1vXJa7cdSXCXY549CTNx6fMGPbngdkERVL485cfPrZX8
GsKzQyj+1xHLdO1gPEr3e8ucbyqWQeczQykgLeYXWDZVJeLRJkEDpA8ytZq6/Zgo
HhocxcKan7ntiMsA2YeJCQDF/TxzvyAZTA4/rfjGNvLXhraM5k7J0dGjXoERhHOJ
I7KL8mU3w9NSL66L9MV6XWWiUWExzshR/qpcaeA7zGeX+KUacQSYzXZnGbobapTq
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1003534768891395758577192935026997696686956820
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-25 20:38:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-25 20:38:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.perf.projectkonacompute.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22555844168296939565972440420195577191024702587704737360756246103067098694767690737883201900614563998663675151141040561890486728172784815116369193146819283373712800822599448578436783175722214143582602570135688419826283548002693862188291417801756520620788300720511694291512820241869991280221264196409633997007163684815517707037408286453724758013159830462677059650669169063354038106202930771639919599359053595336675011016105515715690741771318464938013530855042389615949969091491423961790191669451293139004075384835963798854317624560243200400875193903061280552960011554617978133956041511589223377025785337969434399402581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%205.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dff0dcb1c05a7c55aa2aa0a3b16a01057abbc11d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (263 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perf.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perf.projectcabostore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.projectcabostore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koboperf.osdinfra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caboaccountdogfood.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.konaaccountdogfood.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eastus.caboaccountdogfood.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eastus.konaaccountdogfood.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 08fe259f74ea8704c2bcbb8ea8385f33c6d16c65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		007abd5fbc21c53de8a823d4af13bb7805ccc986b5755a231280abe53dca2f9174194a4cc67004399937952d97347f1f48f0f9b56830fd022943e65f563b4829356a002b2f83ecf650d19f84359e31e981967e4f251769304cb730c4db64911e02671acc096ae353ac4c5d47a818c847b94dc2054367af87cd847b1da391a8bac2e5499f4141477971658e935fe0a4a81cee1943bb12c8697c4ef68a20899106c277646ec098c358ace2073c6595e7d89fe44cbb02552ed8dc42b98b7a62ac6c8ee93e5b8f3a37f355ebfe1eb2642ba8e450a216c8729075d2cea02c2927692b894392b958f44f365e6e0b9b216c4327266a693e652e63b5ac83ed864330a9029303906bbf003447008ed002e89a8f75699a1080f1490e3905a09811971eef6e44dfdd2542e9ed829bd831074f05a56450a288223b64c19c8f46151f8067750a2d61a9424fb962bd00149f876bb1bdd758878f0bb194a8860709d300aa0d280b5cd8e7474d8a757e23a0e1829430d781b6d91ade56c2653582cc50c5ae519af55efea4bfa0f83fde9638c5b8d1a6d53e06042062b60985d4bed91079e637dee98e7ff73385c0545d3b14f8b9f39603ac9d950909de7dcefb1166b7b24daccafa2745c39c76ebcdfe3a4d7c53600aef62be3db1eab3a986b3146cb5f8dd8fd9e9e37a3ef4069751cf921138777e0838d6a4c9935b16ce823d6b5d9f5cad4616f754