*.azuredatalakeanalytics.net

Issued by Microsoft IT TLS CA 2

About this certificate

This digital certificate with serial number 20:00:03:7a:02:c2:88:aa:7f:9b:3c:0f:3a:00:00:00:03:7a:02 was issued on by Microsoft Corporation.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=*.azuredatalakeanalytics.net

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 20:00:03:7a:02:c2:88:aa:7f:9b:3c:0f:3a:00:00:00:03:7a:02
Serial Number (int): 713625029380226398081268211808648964283267586
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 62:b0:02:36:c8:45:dc:b9:18:9d:43:7a:ff:dd:b6:10:8c:d0:d4:d1
AuthorityKeyId: 91:9e:3b:44:6c:3d:57:9c:42:77:2a:34:d7:4f:d1:cc:4a:97:2c:da

Fingerprint (sha1): 12:26:c4:e1:76:4b:df:32:5f:a3:0a:bd:69:38:c2:d8:58:1c:43:bb
Fingerprint (sha256): bb:3b:45:b4:5f:f1:3d:53:f2:f7:a9:2a:6f:1a:a6:bc:f5:26:fb:85:7f:7e:bc:47:a0:db:2b:6e:91:35:3f:68

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%202.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl

Check the revocation status for certificate *.azuredatalakeanalytics.net

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.azuredatalakeanalytics.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.azuredatalakeanalytics.net
*.adlus81.projectkonacompute.net
*.adlus81.projectcabostore.net
*.westus2.azuredatalakestore.net
*.westus2.azuredatalakeanalytics.net
*.adlus81-c08.projectcabostore.net
*.adlus81-c08.projectkonacompute.net
*.adlus81-c09.projectcabostore.net
*.adlus81-c09.projectkonacompute.net
*.adlus81-c17.projectcabostore.net
*.adlus81-c17.projectkonacompute.net
*.adlus81-cbcp.projectcabostore.net
*.adlus81-cbcp.projectkonacompute.net
*.azuredatalakestore.net
*.livy.pools.westus2.azuredatalakeanalytics.net
*.livy-ui.pools.westus2.azuredatalakeanalytics.net
*.sparkhistory.pools.westus2.azuredatalakeanalytics.net
*.sparkhistory-ui.pools.westus2.azuredatalakeanalytics.net
*.sparkmaster.pools.westus2.azuredatalakeanalytics.net
*.sparkmaster-ui.pools.westus2.azuredatalakeanalytics.net

Other certificates including the domain name azuredatalakeanalytics.net

(limited to 100 certificates)
adlus08.konaaccountdogfood.net
*.adlus12.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
adlus12.projectkonacompute.net
adlsg17.projectcabostore.net
*.adlus15.projectkonacompute.net
*.adlie11.projectkonacompute.net
*.projectkonacompute.net
adlus08.konaaccountdogfood.net
*.adlus15.projectkonacompute.net
*.adljp20.projectkonacompute.net
*.adlca23.projectkonacompute.net
*.projectkonacompute.net
*.adlnl10.projectkonacompute.net
*.livyui.pools.westus2.azuredatalakeanalytics.net
*.adlus15.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.projectkonacompute.net
*.adlau19.projectkonacompute.net
adljp20.projectcabostore.net
*.adlus15.projectkonacompute.net
*.azuredatalakeanalytics.net
*.adlus80.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.livyui.pools.westus2.azuredatalakeanalytics.net
adlus81.projectcabostore.net
*.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.azuredatalakeanalytics.net
*.livyui.pools.westcentralus.azuredatalakeanalytics.net
adlau18.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.adlca22.projectkonacompute.net
*.livyui.pools.westcentralus.azuredatalakeanalytics.net
*.livyui.pools.westcentralus.azuredatalakeanalytics.net
*.adlhk16.projectkonacompute.net
*.adlnl10.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.adlie11.projectkonacompute.net
*.livyui.pools.westus2.azuredatalakeanalytics.net
*.projectkonacompute.net
adlus12.projectkonacompute.net
*.adlie11.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.projectkonacompute.net
*.adlnl10.projectkonacompute.net
*.adljp20.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.livyui.pools.westus2.azuredatalakeanalytics.net
*.projectkonacompute.net
*.adlie01.projectkonacompute.net

Certificate

The complete raw certificate details for *.azuredatalakeanalytics.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j76lBTAZp96E5xfaRmm
rMIAlcmf66AYGzomohlHE/1wJfyE8aLBfTHYY6B95DCvRdW8wIjcUvYD7aDeTHYH
oYutF6LSNjzLyqg0VeaS+3Ym5ithZugBjvC0N7uulHiWToPBV8RiaqgmRj/wQrsA
t40Hx8LyGJW8pBCHOXGv4HK+BSizvML7aYqnAHOkqlKG46cJjKTyGKIG29QZwpVj
rra+7Y0YyZcVmfeYoucnmynW4mbiY7B2UHwZzd91qrSw4aY1L22GHiBu3C6LJVdB
d2XKjnBmaMiq6rjfXegiL0pFQmp8uOHYXd1SpHK+vXyjSOFClwvBJ4qq0EC94UPz
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 713625029380226398081268211808648964283267586
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-06 18:23:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-06 18:23:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.azuredatalakeanalytics.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27046053277356836730562163022248701533105932204857515642565753002572366204771860831836713077591377486422552646900587873499637409983757855354437563695883734222674851565384697274716786263233172192278242976570121951765193903107735964006615540351934410115226638606385189251325495948527333315078918474811120415937786704933405459410453654981896074066698251372939375559140268472548345763107709031917679441606979198930471785756961630992803404423595772898282473106651954285348503189036017965393726919524864505759334683977768294812078241205053210803682606483778157754001045218091509176123900938403486953961064521060380540400587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%202.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62b00236c845dcb9189d437affddb6108cd0d4d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (829 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus81.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus81.projectcabostore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westus2.azuredatalakestore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westus2.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus81-c08.projectcabostore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus81-c08.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus81-c09.projectcabostore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus81-c09.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus81-c17.projectcabostore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus81-c17.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus81-cbcp.projectcabostore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus81-cbcp.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azuredatalakestore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livy.pools.westus2.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livy-ui.pools.westus2.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparkhistory.pools.westus2.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparkhistory-ui.pools.westus2.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparkmaster.pools.westus2.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparkmaster-ui.pools.westus2.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%202.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 919e3b446c3d579c42772a34d74fd1cc4a972cda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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