*.projectkonacompute.net

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 04

About this certificate

This digital certificate with serial number 33:00:51:74:ae:89:16:84:2d:d3:95:b2:f4:00:00:00:51:74:ae was issued on by Microsoft Corporation.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:51:74:ae:89:16:84:2d:d3:95:b2:f4:00:00:00:51:74:ae
Serial Number (int): 1137365723093470014711861161205593090697557166
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: b6:6a:9c:bd:7c:a1:c1:07:f0:d9:7b:90:ba:72:a2:fc:f0:09:d1:4f
AuthorityKeyId: 3b:70:d1:53:e9:76:25:9d:60:a8:ca:66:0f:c6:9b:ae:6f:54:16:6a

Fingerprint (sha1): cb:a7:44:7c:95:5a:c5:76:74:e4:5f:d6:d2:9c:ee:c8:d5:9d:9b:9e
Fingerprint (sha256): d4:3f:99:ea:9d:0a:d8:85:f0:7b:0e:60:1a:f0:62:2b:b4:4f:2b:b1:e8:48:be:3e:3d:b0:2f:2b:61:41:a4:8f

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl

Check the revocation status for certificate *.projectkonacompute.net

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.projectkonacompute.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.konaaccountdogfood.net
*.test.projectkonacompute.net
*.test02.projectkonacompute.net
*.test04.projectkonacompute.net
*.taurus.projectkonacompute.net
*.test-e2.projectkonacompute.net
*.pyxis.projectkonacompute.net
*.baja.konaaccountdogfood.net
*.livy.pools.northeurope.konaaccountdogfood.net
*.sparkhistory.pools.northeurope.konaaccountdogfood.net
*.sparkmaster.pools.northeurope.konaaccountdogfood.net
*.projectkonacompute.net

Other certificates including the domain name projectkonacompute.net

(limited to 100 certificates)
adlus08.konaaccountdogfood.net
*.projectkonacompute.net
*.adlus12.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.cachetest01.projectkonacompute.net
projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
adlus12.projectkonacompute.net
adlsg17.projectcabostore.net
*.projectkonacompute.net
*.projectkonacompute.net
*.perf.projectkonacompute.net
*.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.kobotest03.osdinfra.net
*.kobotest02.osdinfra.net
*.adlie11.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
adlus08.konaaccountdogfood.net
*.adlus15.projectkonacompute.net
*.projectkonacompute.net
adlus04.projectkonacompute.net
*.adljp20.projectkonacompute.net
*.projectkonacompute.net
*.adlca23.projectkonacompute.net
*.projectkonacompute.net
*.adlnl10.projectkonacompute.net
*.adlus15.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.cachetest01.projectkonacompute.net
*.projectkonacompute.net
*.perf.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.adlau19.projectkonacompute.net
www.kiwitest.osdinfra.net
adljp20.projectcabostore.net
*.adlus15.projectkonacompute.net
*.azuredatalakeanalytics.net
*.kobotest02.osdinfra.net
*.projectkonacompute.net
*.adlus80.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.azuredatalake.net
*.projectkonacompute.net
*.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.projectkonacompute.net
*.cachetest01.projectkonacompute.net
*.kobotest03.osdinfra.net
*.projectkonacompute.net
adlus81.projectcabostore.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.perf.projectkonacompute.net
*.azuredatalakeanalytics.net
*.kobotest03.osdinfra.net
*.projectkonacompute.net
kobotest02.osdinfra.net
*.kobotest02.osdinfra.net
adlau18.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.adlca22.projectkonacompute.net
*.kobotest03.osdinfra.net
*.kobotest04.osdinfra.net
*.adlhk16.projectkonacompute.net
*.adlnl10.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net

Certificate

The complete raw certificate details for *.projectkonacompute.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91bofKPmP7cADfFvkxtk
xSeTtg36w1mF+GQDeJHgTc/fnBCE6bl9kXNj5nFeGQUNVkqt5hye6nPCjm2EwH27
ARMX5236dRs6vcalo0W4itXfIWNBArhUR/Cuz88xIgRlL5j6+TwcYFI7cZZMXGpO
U91R7TXch+DK7feWZmNOdUZuPm1ZHEZYQHlOhiYpFF/pEfTDwRPtUb1U5frpGqpb
3GPEdgg7sp4X2Umxzn6htvgs+WyUv+zrgaGVMEpk9NvMRalWZEqz+ivZsJXRnsIL
jz5Vg6zPA9C5dP61t5bAEXvBSXfNR2L9ws0ZQiQjSFC8sjVyIVrrobw3/eWwyCy2
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137365723093470014711861161205593090697557166
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 04'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-23 22:51:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-18 22:51:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.projectkonacompute.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31223717333563410244707020556557575015797625073771848034589427897929332334100121991841801964154046588450549225805300043331666887424844337311472522865502660119880831151460897637072544352151016557747250683917189428115099190110301748482777924050088315819032481363636093114212730930074896635279333984808826330176017284681538788908383771661761566735311454682106112284458589646232414132863295814344819029350834321330602127625977795321240138932251863029229157094126020108679112992161322297021476672480309831689334375661290416505247982265680651656712376464897168406005528392324776014180482504977322409165480509649195176343169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b66a9cbd7ca1c107f0d97b90ba72a2fcf009d14f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (445 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.konaaccountdogfood.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test02.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test04.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taurus.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test-e2.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pyxis.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baja.konaaccountdogfood.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livy.pools.northeurope.konaaccountdogfood.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparkhistory.pools.northeurope.konaaccountdogfood.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparkmaster.pools.northeurope.konaaccountdogfood.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projectkonacompute.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3b70d153e976259d60a8ca660fc69bae6f54166a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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