*.projectcabostore.net

Issued by Microsoft RSA TLS CA 01

About this certificate

This digital certificate with serial number 6b:00:0d:44:92:7b:76:fd:9f:50:52:16:2d:00:00:00:0d:44:92 was issued on by Microsoft Corporation.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.projectcabostore.net

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:00:0d:44:92:7b:76:fd:9f:50:52:16:2d:00:00:00:0d:44:92
Serial Number (int): 2386184251061629866861442902590190892086019218
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: f3:24:ca:90:df:c1:15:bd:f7:0d:4c:ae:42:ea:34:ce:50:68:48:45
AuthorityKeyId: b5:76:0c:30:11:ce:c7:92:42:4d:4c:c7:5c:2c:c8:a9:0c:e8:0b:64

Fingerprint (sha1): 5a:53:0f:96:62:d2:50:3d:7f:d3:fb:f7:8b:21:a8:2a:0e:82:03:19
Fingerprint (sha256): c2:69:56:70:54:bc:15:e2:55:08:89:6a:25:99:c1:08:cc:39:f6:5e:af:06:f7:92:37:7c:a6:ad:9b:0b:6f:b1

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl

Check the revocation status for certificate *.projectcabostore.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.projectcabostore.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.azuredatalakestore.net
*.adlie11.projectcabostore.net
*.projectcabostore.net

Other certificates including the domain name projectcabostore.net

(limited to 100 certificates)
*.projectcabostore.net
*.projectcabostore.net
adlus08.konaaccountdogfood.net
*.adlus12.projectkonacompute.net
*.projectcabostore.net
www.kiwitest.osdinfra.net
www.kiwitest.osdinfra.net
*.cachetest01.projectkonacompute.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
projectkonacompute.net
*.projectcabostore.net
*.projectcabostore.net
test2.projectcabostore.net
*.projectcabostore.net
adlus12.projectkonacompute.net
adlsg17.projectcabostore.net
*.perf.projectkonacompute.net
*.projectcabostore.net
*.projectcabostore.net
*.adlus15.projectkonacompute.net
*.kobotest03.osdinfra.net
*.kobotest02.osdinfra.net
*.adlie11.projectkonacompute.net
*.projectcabostore.net
*.projectcabostore.net
adlus08.konaaccountdogfood.net
*.adlus15.projectkonacompute.net
*.projectcabostore.net
adlus04.projectkonacompute.net
*.adljp20.projectkonacompute.net
test.projectcabostore.net
*.adlca23.projectkonacompute.net
*.adlnl10.projectkonacompute.net
*.adlus15.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.cachetest01.projectkonacompute.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.perf.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.projectcabostore.net
*.adlau19.projectkonacompute.net
*.projectcabostore.net
*.projectcabostore.net
www.kiwitest.osdinfra.net
*.projectcabostore.net
adljp20.projectcabostore.net
*.adlus15.projectkonacompute.net
*.azuredatalakeanalytics.net
*.kobotest02.osdinfra.net
*.projectcabostore.net
*.adlus80.projectkonacompute.net
www.kiwitest.osdinfra.net
*.azuredatalake.net
*.projectcabostore.net
www.kiwitest.osdinfra.net
*.projectcabostore.net
*.projectcabostore.net
www.kiwitest.osdinfra.net
*.projectcabostore.net
*.cachetest01.projectkonacompute.net
*.kobotest03.osdinfra.net
*.projectcabostore.net
adlus81.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.adlus15.projectkonacompute.net
*.perf.projectkonacompute.net
*.projectcabostore.net
*.azuredatalakeanalytics.net
*.kobotest03.osdinfra.net
kobotest02.osdinfra.net
*.kobotest02.osdinfra.net
*.projectcabostore.net
adlau18.projectkonacompute.net
*.projectcabostore.net
*.adlca22.projectkonacompute.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
*.projectcabostore.net
test.projectcabostore.net
*.kobotest03.osdinfra.net
*.projectcabostore.net
*.kobotest04.osdinfra.net
*.adlhk16.projectkonacompute.net
*.adlnl10.projectkonacompute.net
*.projectkonacompute.net
*.projectcabostore.net

Certificate

The complete raw certificate details for *.projectcabostore.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld8+vxDMB4E/8LMjKJ/5
s0GsOdfS4XEN4fhHykmp+flHn8X/M1XG67y22VzLzKI+6ioVjUCTfACyvViJPuAf
Ye0FNllzT2r+h7liMWe+Y/Xq01fqUXBHSFK7MLqgKwspsnF3Io11HRENZVbhsTbh
XjBYkjpAVhznZKnkE6KotBs88PiEQSLuQNX35elfE+YjF1UcOkdSWbLtvTr/Z6uw
/V7SS8dGQiwUqmMPG377iPqElMwuy47pa1fF/DUSIAYS4qA2tyNoTMDNKRVVo4ld
JMkLde6NTC0SIbOhfIqp80mpWlH1lYHHza13qmnSuGsJAZa94GwdgyOQlh9J5XYw
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2386184251061629866861442902590190892086019218
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft RSA TLS CA 01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-20 07:34:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-20 07:34:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.projectcabostore.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18919593703168682147087917678058299410253353810167082630014574988926504097539193252957866400298979838098729499250792348638256731358485000472252157900325247755289056808513496380651293191208644023054242500957657656217087769557138105980569392519929438260206130158492328552816264587739607231428564692720436283758924232654537243279964161143205728459050827573308247449250608003532269036394476827209029025167831366672528987142492805521187001373405062575437912849969480260105442693322780581195071442084594853492627838041671886043030582945685764307960391071579166667883735866396052774952746374931974639284933903756791849037953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.10585921.15764560
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f324ca90dfc115bdf70d4cae42ea34ce50684845
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azuredatalakestore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlie11.projectcabostore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projectcabostore.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b5760c3011cec792424d4cc75c2cc8a90ce80b64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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