*.prod.execution.cscp.ms

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 08

About this certificate

This digital certificate with serial number 33:00:2b:cb:36:d0:ff:66:5b:9f:a3:6f:e2:00:00:00:2b:cb:36 was issued on by Microsoft Corporation.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:2b:cb:36:d0:ff:66:5b:9f:a3:6f:e2:00:00:00:2b:cb:36
Serial Number (int): 1137352907384745531328291255795128259522054966
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 9f:5b:85:08:34:80:c0:92:bc:9a:89:e4:75:31:1c:56:ed:97:97:ab
AuthorityKeyId: f6:7e:2f:bd:80:a3:4a:b2:70:5b:eb:df:9a:1f:d8:ed:ca:61:80:07

Fingerprint (sha1): 7f:f1:70:d6:4c:41:89:45:c4:3a:75:cf:94:a7:50:d4:81:6b:bf:54
Fingerprint (sha256): d1:6d:35:a1:53:33:77:a9:b0:6c:54:c5:6e:f7:c8:3f:3b:51:3e:66:f6:f2:94:38:9f:9b:6d:bd:77:ab:39:40

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl

Check the revocation status for certificate *.prod.execution.cscp.ms

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.prod.execution.cscp.ms

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mcio-deployment.trafficmanager.net
mcio-deploymentdiagnostic.trafficmanager.net
mcio-deploymentautomation.trafficmanager.net
mcio-deploymentchange.trafficmanager.net
mcio-deploymentrelay.trafficmanager.net
mcio-deploymentseed.trafficmanager.net
mcio-hardwarevalidation.trafficmanager.net
mcio-tileassignment.trafficmanager.net
mcio-taskprioritization.trafficmanager.net
mcio-eventbroker.trafficmanager.net
fulfillmentpolicy.cscp-deploy.trafficmanager.net
rowmanagement.cscp-deploy.trafficmanager.net
changejournal.cscp-shared.trafficmanager.net
exceptionmanagement.cscp-shared.trafficmanager.net
planninggateway.cscp-shared.trafficmanager.net
userdecision.cscp-shared.trafficmanager.net
userexperience.cscp-shared.trafficmanager.net
*.prod.execution.cscp.ms

Other certificates including the domain name cscp.ms

(limited to 100 certificates)
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.ddex-prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.ppe.execution.cscp.ms
*.prod.execution.cscp.ms
*.ppe.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.ppe.supply.cscp.ms
*.prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.ppe.supply.cscp.ms
*.cloudinventory-prod.supply.cscp.ms
*.ppe.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.supply.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.supply.cscp.ms
*.ppe.supply.cscp.ms
*.prod.execution.cscp.ms
*.cloudinventory-prod.supply.cscp.ms
*.ppe.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.supply.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.cloudinventory-prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.ddex-ppe.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.supply.cscp.ms
*.prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.cloudinventory-prod.supply.cscp.ms
*.prod.supply.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.ppe.execution.cscp.ms
*.cloudinventory-prod.supply.cscp.ms
*.ddex-ppe.supply.cscp.ms
*.ppe.execution.cscp.ms
*.prod.supply.cscp.ms
*.cloudinventory-ppe.supply.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.ppe.execution.cscp.ms
*.ddex-prod.supply.cscp.ms
*.cloudinventory-prod.supply.cscp.ms

Certificate

The complete raw certificate details for *.prod.execution.cscp.ms in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76OpuM1T+GioMTDoycZs
qKZSq9yV6d9FWakEZsN1s9BUuSPuBxjm1DPB4IDUwRUBc8M4eNq4nZ0fpus3icHi
nPt33APhleoYJIo487Pb749YLRObRYvcSs6Lf7ghm01on0HPcssrJKjUsElRJFSm
L8bK2wyWzNZkewbNYIXVqgCZLr9qU3HogmTAoJJSKAJqsqwR3IJSC08leVg7syP8
nCjP9McWByA9kj3IcWXcja/ooTSAL9qR1grzVFNLDiYivzHJKjJO/ELGYVKBRoTX
GgRN0Jln/ybtsnsWyQExGoJhWshbXVSrTcxaVEIb4q2gvoK8KRJ84FqPlROlKFJM
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137352907384745531328291255795128259522054966
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 08'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-11 18:13:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-06 18:13:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.prod.execution.cscp.ms'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30251660108330522162982040699626864216913232743408269504300786275867747422928590852366969196484069357112188519578494742873843928605145643792904462998010336192438392363866059952488159319778895528340268564508719753770053340415354893265850187193784776834620007930699532111096314620136600545218172456379552844507053866248860891545839003829460035079907154922163212092772685176419411473489791662096540382430001913351851012047874131748140741457335915779556806701004336669186183217791156154750022435688217984147198758384525939167640931155456321360984425948709761856321681311921602966794834404637458460168881285664985276632133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f5b85083480c092bc9a89e475311c56ed9797ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (780 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcio-deployment.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcio-deploymentdiagnostic.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcio-deploymentautomation.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcio-deploymentchange.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcio-deploymentrelay.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcio-deploymentseed.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcio-hardwarevalidation.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcio-tileassignment.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcio-taskprioritization.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcio-eventbroker.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fulfillmentpolicy.cscp-deploy.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rowmanagement.cscp-deploy.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changejournal.cscp-shared.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exceptionmanagement.cscp-shared.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planninggateway.cscp-shared.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userdecision.cscp-shared.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userexperience.cscp-shared.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.execution.cscp.ms'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f67e2fbd80a34ab2705bebdf9a1fd8edca618007
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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