useractivity.cortanaanalytics.com

Issued by Microsoft IT SSL SHA2

About this certificate

This digital certificate with serial number 5a:00:09:ce:09:1d:14:0d:7a:37:db:83:08:00:00:00:09:ce:09 was issued on by Microsoft Corporation.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=useractivity.cortanaanalytics.com

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:00:09:ce:09:1d:14:0d:7a:37:db:83:08:00:00:00:09:ce:09
Serial Number (int): 2007070404277345953216683122585671891730157065
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 65:d0:f1:b0:40:94:ac:34:06:1e:ff:f1:43:b0:d6:e3:94:f0:97:1e
AuthorityKeyId: 51:af:24:26:9c:f4:68:22:57:80:26:2b:3b:46:62:15:7b:1e:cc:a5

Fingerprint (sha1): 47:fb:fe:23:31:ac:9d:7f:79:0a:8b:24:50:3c:a2:b3:49:36:b7:ea
Fingerprint (sha256): bd:64:f7:aa:f1:03:16:d8:c8:f7:2c:60:2d:06:05:78:65:ff:ae:59:99:5b:32:38:71:be:38:11:91:f0:e9:74

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/msitwww2.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/msitwww2.crl

Check the revocation status for certificate useractivity.cortanaanalytics.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for useractivity.cortanaanalytics.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

useractivity.cortanaanalytics.com
useractivity.cortanaanalytics.net
useractivity.cortanaintelligence.com
useractivity.cortanaintelligence.net
useractivity.azureml.net
useractivity-ca-eastasia-1.cloudapp.net
useractivity-ca-southeastasia-1.cloudapp.net
useractivity-ca-northeurope-1.cloudapp.net
useractivity-ca-westeurope-1.cloudapp.net
useractivity-ca-eastus-1.cloudapp.net
useractivity-ca-westus-1.cloudapp.net
useractivity-ca-westcentralus-1.cloudapp.net

Other certificates including the domain name cortanaanalytics.com

(limited to 100 certificates)
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
useractivity.cortanaanalytics.com
*.vo.msecnd.net
*.vo.msecnd.net
index.cortanaanalytics.com
clientlogging.cortanaanalytics.com
*.vo.msecnd.net
gallery.cortanaintelligence.com
useractivity.cortanaanalytics.com
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
catalog.cortanaanalytics.com
*.vo.msecnd.net
index.cortanaanalytics.com
clientlogging.cortanaanalytics.com
index.cortanaanalytics.com
*.vo.msecnd.net
useractivity.cortanaanalytics.com
*.vo.msecnd.net
gallery.cortanaintelligence.com
*.vo.msecnd.net
*.vo.msecnd.net
gallery.cortanaintelligence.com
*.vo.msecnd.net
*.vo.msecnd.net
index.cortanaanalytics.com
*.vo.msecnd.net
useractivity.cortanaanalytics.com
index.cortanaanalytics.com
*.vo.msecnd.net
*.vo.msecnd.net
gallery.azure.ai
catalog.cortanaanalytics.com
*.vo.msecnd.net
*.vo.msecnd.net
useractivity.cortanaanalytics.com
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
management.marketplace.cortanaanalytics.com
*.vo.msecnd.net
*.vo.msecnd.net
start.cortanaanalytics.com
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
catalog.cortanaanalytics.com
clientlogging.cortanaanalytics.com
catalog.cortanaanalytics.com
clientlogging.cortanaanalytics.com
start.cortanaanalytics.com
useractivity.cortanaanalytics.com
*.vo.msecnd.net
studioservice.cortanaanalytics.com
*.vo.msecnd.net
*.vo.msecnd.net
*.vo.msecnd.net
gallery.azure.ai
*.vo.msecnd.net
gallery.azure.ai
gallery.azure.ai
*.vo.msecnd.net
*.vo.msecnd.net
catalog.cortanaanalytics.com
start.cortanaanalytics.com
*.vo.msecnd.net
api.marketplace.cortanaanalytics.com
*.vo.msecnd.net
useractivity.cortanaanalytics.com
index.cortanaanalytics.com
*.vo.msecnd.net
*.vo.msecnd.net
gallery.cortanaanalytics.com
start.cortanaanalytics.com
useractivity.cortanaanalytics.com

Certificate

The complete raw certificate details for useractivity.cortanaanalytics.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIRzCCBi+gAwIBAgITWgAJzgkdFA16N9uDCAAAAAnOCTANBgkqhkiG9w0BAQsF
ADCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT
B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UE
CxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgU1NMIFNIQTIw
HhcNMTcwNzE5MjA1MzAzWhcNMTgwNDE5MjA1MzAzWjAsMSowKAYDVQQDEyF1c2Vy
YWN0aXZpdHkuY29ydGFuYWFuYWx5dGljcy5jb20wggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMtG7DWhYL6ohRYa36gz00RjiUW0gRp8ZWo4NW3ZunkuCE
VnUqFmj9bP1J73zqkbLu9Shpf72Yh4prxJCfotLXPOf53M+e2Lf1k9ge7Uo9AIJ+
JwISMy3L8MpnfuHoRDdOczpFGMLqhlFN+0VMXaoHiwlVwjjbSl6i2fAgsCIHcdk7
qReI7T4cPCaQiUl92Cb+oRLAeueF8V3pRhCwgrB3WNqdNP0+Iyw9flkW1k8hruj4
Oy/epF9HkpdtqYjyDtzLfjb1nuBt9ildTCCXm9slOW/MdinBT3XsKfaWrzcMpRnZ
HBu1ijvkcrSZhSDMcjTmWblKVYHVpDvIK3mrM59nAgMBAAGjggQAMIID/DALBgNV
HQ8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIIB4wYDVR0R
BIIB2jCCAdaCIXVzZXJhY3Rpdml0eS5jb3J0YW5hYW5hbHl0aWNzLmNvbYIhdXNl
cmFjdGl2aXR5LmNvcnRhbmFhbmFseXRpY3MubmV0giR1c2VyYWN0aXZpdHkuY29y
dGFuYWludGVsbGlnZW5jZS5jb22CJHVzZXJhY3Rpdml0eS5jb3J0YW5haW50ZWxs
aWdlbmNlLm5ldIIYdXNlcmFjdGl2aXR5LmF6dXJlbWwubmV0gid1c2VyYWN0aXZp
dHktY2EtZWFzdGFzaWEtMS5jbG91ZGFwcC5uZXSCLHVzZXJhY3Rpdml0eS1jYS1z
b3V0aGVhc3Rhc2lhLTEuY2xvdWRhcHAubmV0gip1c2VyYWN0aXZpdHktY2Etbm9y
dGhldXJvcGUtMS5jbG91ZGFwcC5uZXSCKXVzZXJhY3Rpdml0eS1jYS13ZXN0ZXVy
b3BlLTEuY2xvdWRhcHAubmV0giV1c2VyYWN0aXZpdHktY2EtZWFzdHVzLTEuY2xv
dWRhcHAubmV0giV1c2VyYWN0aXZpdHktY2Etd2VzdHVzLTEuY2xvdWRhcHAubmV0
gix1c2VyYWN0aXZpdHktY2Etd2VzdGNlbnRyYWx1cy0xLmNsb3VkYXBwLm5ldDAd
BgNVHQ4EFgQUZdDxsECUrDQGHv/xQ7DW45Twlx4wHwYDVR0jBBgwFoAUUa8kJpz0
aCJXgCYrO0ZiFXsezKUwfQYDVR0fBHYwdDByoHCgboY2aHR0cDovL21zY3JsLm1p
Y3Jvc29mdC5jb20vcGtpL21zY29ycC9jcmwvbXNpdHd3dzIuY3JshjRodHRwOi8v
Y3JsLm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9jcmwvbXNpdHd3dzIuY3JsMHAG
CCsGAQUFBwEBBGQwYjA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5taWNyb3NvZnQu
Y29tL3BraS9tc2NvcnAvbXNpdHd3dzIuY3J0MCIGCCsGAQUFBzABhhZodHRwOi8v
b2NzcC5tc29jc3AuY29tMD0GCSsGAQQBgjcVBwQwMC4GJisGAQQBgjcVCIPPiU2t
8gKFoZ8MgvrKfYHh+3SBT4e0z3yBzboyAgFkAgEcME4GA1UdIARHMEUwQwYJKwYB
BAGCNyoBMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9w
a2kvbXNjb3JwL2NwcwAwJwYJKwYBBAGCNxUKBBowGDAKBggrBgEFBQcDATAKBggr
BgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAgEAG4jDTpYfOH8SDvgR4QWYigPnzOoL
yj8NCJXw3BLkiHLlIFiICKF0KhGfWtaz6xFBo7KhaQWNMn8eiyRZOzIDqPb80AsD
cPtKDw7KlE2XQWBRCxZ5LbTC3HtnJjHYpq0PYCrpW7vNr0iraMRtaO7DlRi+PN0m
kx9YG8kFcxE8m0fEa740+ArMdJ6F+6q/lEkVEqOwfSZKFaHpGH4zjAeViASLkjGs
uWph4C13q3vsPVh84dNbJyKJEFhY3xNX7XPesKFhx0qK2qnOAS/B6VwGy554NYdT
lmls2bC+Ir8mGGjYUx+pY7nKEhYyBvUyy7zfKAzi2Rn0f+YAS8NdEnjMhvvZOxcf
97wSNp+x1ZVwBIUtEhe1UaiRPtl+LiN3/xCm1TXjUCSOdr5lzTBaVPV4JKmOxlkH
4TSjcDD3q268CP/NbtfWj5eIYM6Y/38LOIK7KvTwW4jA82Hora2PjVh3pKr9xD6u
4nRio9H8RYtVF3ALSMD7dXnLZMHAGeKFOowM15AynGt7uZGg89KOM1ZK8+ahWTtt
tI6xACgX2YRUSkXo1aPb7untidwJiAxkkHvn+9r+n2MdXjV1gAHNkdzXob5BSGKS
u39Dj2M7ITLIOgI0QPGFcR4+iACYi3xSUXbc00HA1qcAhA3BZmvlnvJeshiEyNv5
NTuuP0r2uWL7x8s=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLRuw1oWC+qIUWGt+oM9
NEY4lFtIEafGVqODVt2bp5LghFZ1KhZo/Wz9Se986pGy7vUoaX+9mIeKa8SQn6LS
1zzn+dzPnti39ZPYHu1KPQCCficCEjMty/DKZ37h6EQ3TnM6RRjC6oZRTftFTF2q
B4sJVcI420peotnwILAiB3HZO6kXiO0+HDwmkIlJfdgm/qESwHrnhfFd6UYQsIKw
d1janTT9PiMsPX5ZFtZPIa7o+Dsv3qRfR5KXbamI8g7cy3429Z7gbfYpXUwgl5vb
JTlvzHYpwU917Cn2lq83DKUZ2RwbtYo75HK0mYUgzHI05lm5SlWB1aQ7yCt5qzOf
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2007070404277345953216683122585671891730157065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT SSL SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-19 20:53:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-19 20:53:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'useractivity.cortanaanalytics.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25841588877962340862180090212082546059530263030598015395610368573355105765250784886162647379533226573275869489455449378432998406206960597898071176515502763528327351608019470242853939093454817955072963150420415445371095851117091579906623565826049263840500766565734295082172727759722472949197732655909357558783326892039222779711422721278131054392001254558649125337402844867556451648283622739115432017131539218480017084585965197102039311094245886374543537697701391565520027370081570993941012938913685833607199342886425975589601798321230860552173957449607109118174613361291832423375731329907873830885941076720566404357991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (474 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity.cortanaanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity.cortanaanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity.cortanaintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity.cortanaintelligence.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity.azureml.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity-ca-eastasia-1.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity-ca-southeastasia-1.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity-ca-northeurope-1.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity-ca-westeurope-1.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity-ca-eastus-1.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity-ca-westus-1.cloudapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useractivity-ca-westcentralus-1.cloudapp.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65d0f1b04094ac34061efff143b0d6e394f0971e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 51af24269cf468225780262b3b4662157b1ecca5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/msitwww2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/msitwww2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.7587021.751874.11030412.6202749.3702260.207.15542268.3366194
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps�'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		001b88c34e961f387f120ef811e105988a03e7ccea0bca3f0d0895f0dc12e48872e520588808a1742a119f5ad6b3eb1141a3b2a169058d327f1e8b24593b3203a8f6fcd00b0370fb4a0f0eca944d974160510b16792db4c2dc7b672631d8a6ad0f602ae95bbbcdaf48ab68c46d68eec39518be3cdd26931f581bc90573113c9b47c46bbe34f80acc749e85fbaabf94491512a3b07d264a15a1e9187e338c079588048b9231acb96a61e02d77ab7bec3d587ce1d35b272289105858df1357ed73deb0a161c74a8adaa9ce012fc1e95c06cb9e7835875396696cd9b0be22bf261868d8531fa963b9ca12163206f532cbbcdf280ce2d919f47fe6004bc35d1278cc86fbd93b171ff7bc12369fb1d5957004852d1217b551a8913ed97e2e2377ff10a6d535e350248e76be65cd305a54f57824a98ec65907e134a37030f7ab6ebc08ffcd6ed7d68f978860ce98ff7f0b3882bb2af4f05b88c0f361e8adad8f8d5877a4aafdc43eaee27462a3d1fc458b5517700b48c0fb7579cb64c1c019e2853a8c0cd790329c6b7bb991a0f3d28e33564af3e6a1593b6db48eb1002817d984544a45e8d5a3dbeee9ed89dc09880c64907be7fbdafe9f631d5e35758001cd91dcd7a1be41486292bb7f438f633b2132c83a023440f185711e3e8800988b7c525176dcd341c0d6a700840dc1666be59ef25eb21884c8dbf9353bae3f4af6b962fbc7cb