bifrost-v2.mover.io

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 05

About this certificate

This digital certificate with serial number 33:00:02:db:3a:f1:22:7c:2b:54:89:9a:fe:00:00:00:02:db:3a was issued on by Microsoft Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DigitalSignature KeyEncipherment DataEncipherment] (00001101) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:00:02:db:3a:f1:22:7c:2b:54:89:9a:fe:00:00:00:02:db:3a
Serial Number (int): 1137338977096770709687374509849526607603227450
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 84:49:8e:6b:75:d5:84:e8:a2:88:0f:0c:bf:72:bf:8b:6b:71:e8:3b
AuthorityKeyId: c7:b2:9c:7f:1c:e3:b8:5a:ef:e9:68:1a:a8:5d:94:c1:26:52:6a:68

Fingerprint (sha1): 62:66:c4:d8:63:ff:08:bb:3e:5d:3f:13:39:ab:3f:ef:9e:d0:75:82
Fingerprint (sha256): dd:37:34:8a:08:76:64:8c:5e:96:4d:94:07:fc:c1:8f:b3:2d:27:46:8c:96:a9:0a:1a:ae:5c:d9:cc:6c:14:ea

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2005%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2005.crl

Check the revocation status for certificate bifrost-v2.mover.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bifrost-v2.mover.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bifrost-v2.mover.io

Other certificates including the domain name mover.io

(limited to 100 certificates)
ppe-api.mover.io
devbox.mover.io
cosmic.mmpapi.eu.mover.io
codercatz.com
cobrandtest.wallit.app
ppe-api.mover.io
neu-production-new-api.eu.mover.io
reports.eu.mover.io
radiobook.app
mattermost.mover.io
api.mover.io
weu-production-new-api.eu.mover.io
reports.gccm.mover.io
www.mausoleumofthegiants.co.uk
testing-app.mover.io
mover.io
kibana-wus-ppe-1.ops.mover.io
migrate.mover.io
app.ftcgcc.mover.io
api.eu.mover.io
api.mover.io
kall.as
test.4happ.ca
jolt.eu.mover.io
api.devbox.development.mover.io
internal-status.mover.io
cosmic.mmpapi.mover.io
staging.mover.io
app.mover.io
kibana-wus2-prod-1.ops.mover.io
*.mover.io
api.ftcgcc.mover.io
*.mover.io
kiitos-tech.com
migrate.mover.io
bifrost-v2.mover.io
vianneyjchin.com
testing-api.mover.io
mover.io
*.odyssey.ops.mover.io
mover.io
api.mover.io
kuralaattam.com
cosmic.ecs.eu.mover.io
mover.io
ppe-app.mover.io
api-fdpool.mover.io
jolt-testing.ops.mover.io
app.mover.io
mover.io
mahe.io
weu.production.odyssey.ops.mover.io
*.mover.io
www.testzulul.ga
mongodb-gcc-mover-2.ops.ftcgcc.mover.io
fbf.mover.io
semac.app
production-eu.odyssey.ops.mover.io
influxdb.ops.mover.io
*.mover.io
houseofbarbers.ro
kibana-wus2-testing-1.ops.mover.io
mover.io
neu.production.odyssey.ops.mover.io
ppe-app.mover.io
mongodb-ppe-wus2-2.mover.io
www.richpeniche.mx
cosmic.mmpapi.eu.mover.io
devbox.mover.io
mylearning.ai
mongodb-ppe-wus2-3.mover.io
bifrost-testing-v2.mover.io
mongodb-ppe-wus2-1.mover.io
grafana.ops.mover.io
influxdb.ops.ftcgcc.mover.io
mattermost.mover.io
migrate.mover.io
api-fdpool.eu.mover.io
admin.ascc.me
www.gigged.co
getfoodecallapp.com
production-eu-internal.odyssey.ops.mover.io
app.mover.io
kibana-wus2-ops-1.ops.mover.io
app.mover.io
jolt-testing.ops.mover.io
ppe-app.mover.io
weu-production-new-api.eu.mover.io
api.mover.io
shanghaidreams.co.uk
bifrost-v2.mover.io
api.mover.io
mattermost.mover.io
mattermost.mover.io
internal-status.mover.io
app.mover.io
mattermost.mover.io
api.gccm.mover.io
emplution.ch
*.mover.io

Certificate

The complete raw certificate details for bifrost-v2.mover.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlvpZq4zaGRQ/3WfsrTF
X8YGOT36EAgT+lBTB/bMvazNTuSyqy+cdZFXL+W33PkRbKuxhw0T5pB4wrF7UlmH
MSAgvya25KBm0l7BVjNvLqCgSdCtYEPaOQ422Wq8LqvY0WsxnpKdJNILxXLFjqlr
AiSp1KywB75nQF15AwO8S/Bmq/sSwc7wFemKeIZTg3pjVfSaf+K7htIno0OAo5pV
aXxQWeFtwnSgReTdGf6YtOhkiISLYrWckneW8kxFpkEi9GY1tqhV4iBRbobXgqIB
sleCju9BLJh+4iC8wfi8a9H/7nMiaFINKRegmgvZSYm0u7V10+NqL+MFUY+vgMqb
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137338977096770709687374509849526607603227450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 05'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-21 20:43:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-16 20:43:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bifrost-v2.mover.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23020694863673350381795022250946634155378476906877101646886091256127950502323091031939812311472613779973328815670396581680558021059370994912187903342939502581319923293867273479837427655502222273471852807016198491491135979544775881651282965342534667477445791736443910796758639531732808469779972996882649177139303288412444793297311653382031850804478702905222687529423279387539691929438823748913939643184177896909979849676455795406600300285372575171529677798480625505793823268181432436746125084105973762580011081246846436100334845694470322289946023850943446369766982139185442976701050034162074668509806149167199927573409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.2977488.11009781
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2005%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84498e6b75d584e8a2880f0cbf72bf8b6b71e83b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bifrost-v2.mover.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2005.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c7b29c7f1ce3b85aefe9681aa85d94c126526a68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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