api.gccm.mover.io

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 08

About this certificate

This digital certificate with serial number 33:00:2c:3a:ba:3c:05:79:40:96:33:16:9a:00:00:00:2c:3a:ba was issued on by Microsoft Corporation.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:2c:3a:ba:3c:05:79:40:96:33:16:9a:00:00:00:2c:3a:ba
Serial Number (int): 1137353055611414650966110997485482054997785274
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: ca:48:51:a5:c7:94:39:68:d3:9f:f6:b6:0b:c1:d3:e2:82:b7:cb:8b
AuthorityKeyId: f6:7e:2f:bd:80:a3:4a:b2:70:5b:eb:df:9a:1f:d8:ed:ca:61:80:07

Fingerprint (sha1): f3:ab:31:19:9d:cb:c3:40:2a:51:2f:a5:12:dc:ab:19:86:59:c0:ac
Fingerprint (sha256): e3:08:fd:f1:49:51:f7:10:27:4b:b1:d4:12:d1:de:58:c3:b7:c7:3e:bc:d9:1b:4a:52:76:f3:3b:df:f2:87:88

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl

Check the revocation status for certificate api.gccm.mover.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.gccm.mover.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.gccm.mover.io

Other certificates including the domain name mover.io

(limited to 100 certificates)
ppe-api.mover.io
devbox.mover.io
cosmic.mmpapi.eu.mover.io
codercatz.com
cobrandtest.wallit.app
ppe-api.mover.io
neu-production-new-api.eu.mover.io
reports.eu.mover.io
radiobook.app
mattermost.mover.io
api.mover.io
weu-production-new-api.eu.mover.io
reports.gccm.mover.io
www.mausoleumofthegiants.co.uk
testing-app.mover.io
mover.io
kibana-wus-ppe-1.ops.mover.io
migrate.mover.io
app.ftcgcc.mover.io
api.eu.mover.io
api.mover.io
kall.as
test.4happ.ca
jolt.eu.mover.io
api.devbox.development.mover.io
internal-status.mover.io
cosmic.mmpapi.mover.io
staging.mover.io
app.mover.io
kibana-wus2-prod-1.ops.mover.io
*.mover.io
api.ftcgcc.mover.io
*.mover.io
kiitos-tech.com
migrate.mover.io
bifrost-v2.mover.io
vianneyjchin.com
testing-api.mover.io
mover.io
*.odyssey.ops.mover.io
mover.io
api.mover.io
kuralaattam.com
cosmic.ecs.eu.mover.io
mover.io
ppe-app.mover.io
api-fdpool.mover.io
jolt-testing.ops.mover.io
app.mover.io
mover.io
mahe.io
weu.production.odyssey.ops.mover.io
*.mover.io
www.testzulul.ga
mongodb-gcc-mover-2.ops.ftcgcc.mover.io
fbf.mover.io
semac.app
production-eu.odyssey.ops.mover.io
influxdb.ops.mover.io
*.mover.io
houseofbarbers.ro
kibana-wus2-testing-1.ops.mover.io
mover.io
neu.production.odyssey.ops.mover.io
ppe-app.mover.io
mongodb-ppe-wus2-2.mover.io
www.richpeniche.mx
cosmic.mmpapi.eu.mover.io
devbox.mover.io
mylearning.ai
mongodb-ppe-wus2-3.mover.io
bifrost-testing-v2.mover.io
mongodb-ppe-wus2-1.mover.io
grafana.ops.mover.io
influxdb.ops.ftcgcc.mover.io
mattermost.mover.io
migrate.mover.io
api-fdpool.eu.mover.io
admin.ascc.me
www.gigged.co
getfoodecallapp.com
production-eu-internal.odyssey.ops.mover.io
app.mover.io
kibana-wus2-ops-1.ops.mover.io
app.mover.io
jolt-testing.ops.mover.io
ppe-app.mover.io
weu-production-new-api.eu.mover.io
api.mover.io
shanghaidreams.co.uk
bifrost-v2.mover.io
api.mover.io
mattermost.mover.io
mattermost.mover.io
internal-status.mover.io
app.mover.io
mattermost.mover.io
api.gccm.mover.io
emplution.ch
*.mover.io

Certificate

The complete raw certificate details for api.gccm.mover.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG+jCCBOKgAwIBAgITMwAsOro8BXlAljMWmgAAACw6ujANBgkqhkiG9w0BAQwF
ADBdMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
MS4wLAYDVQQDEyVNaWNyb3NvZnQgQXp1cmUgUlNBIFRMUyBJc3N1aW5nIENBIDA4
MB4XDTI0MDUxMzAwMTg0OFoXDTI1MDUwODAwMTg0OFowaDELMAkGA1UEBhMCVVMx
CzAJBgNVBAgTAldBMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv
ZnQgQ29ycG9yYXRpb24xGjAYBgNVBAMTEWFwaS5nY2NtLm1vdmVyLmlvMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfiW5IdgM02z5nm4aeFffCPB8LZx
BDWz83TZhHwWCGDXxMzOBmwPCJYAWGUXSEKZNJJ1u25ZMqhU5i5kWEVGQY8QCYst
xLrgmcPHEIIxDAFefLtYi1lPOvJzFsYnnop3v0FBc+GLwvIjm7QOaTIACUHvTlzz
b4dvxApwU8M1ESg+yFNKTU/AXW2aHnvFRjrq2hT6N587okjFiZZ1xOnsHooJx+XX
rim2JaVvRndFTm5JPQhW8tjnj/ju3JyjYktWx50OE+Gd5jaYQ+sgE74+IzkX/VcA
7dEzdh6tTaNSQq5AHo/YlpmMU5oHJ3zeCAfW1Ioxy9teeUFXfzThYZc+7QIDAQAB
o4ICpjCCAqIwEwYKKwYBBAHWeQIEAwEB/wQCBQAwJwYJKwYBBAGCNxUKBBowGDAK
BggrBgEFBQcDAjAKBggrBgEFBQcDATA8BgkrBgEEAYI3FQcELzAtBiUrBgEEAYI3
FQiHvdcbgefrRoKBnS6O0AyH8NodXYKE5WmC86c+AgFkAgEmMIG0BggrBgEFBQcB
AQSBpzCBpDBzBggrBgEFBQcwAoZnaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3Br
aW9wcy9jZXJ0cy9NaWNyb3NvZnQlMjBBenVyZSUyMFJTQSUyMFRMUyUyMElzc3Vp
bmclMjBDQSUyMDA4JTIwLSUyMHhzaWduLmNydDAtBggrBgEFBQcwAYYhaHR0cDov
L29uZW9jc3AubWljcm9zb2Z0LmNvbS9vY3NwMB0GA1UdDgQWBBTKSFGlx5Q5aNOf
9rYLwdPigrfLizAOBgNVHQ8BAf8EBAMCBaAwHAYDVR0RBBUwE4IRYXBpLmdjY20u
bW92ZXIuaW8wDAYDVR0TAQH/BAIwADBqBgNVHR8EYzBhMF+gXaBbhllodHRwOi8v
d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBBenVyZSUy
MFJTQSUyMFRMUyUyMElzc3VpbmclMjBDQSUyMDA4LmNybDBmBgNVHSAEXzBdMFEG
DCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29m
dC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wCAYGZ4EMAQICMB8GA1Ud
IwQYMBaAFPZ+L72Ao0qycFvr35of2O3KYYAHMB0GA1UdJQQWMBQGCCsGAQUFBwMC
BggrBgEFBQcDATANBgkqhkiG9w0BAQwFAAOCAgEAZwbc68DCDLPMxhW44JZbH5Pn
bWUuKmwyb90GcoWo3MbZ5i8hZ3RnhbMkHGo6MBADDvN3tQcgXDTs1vEpld9DYrp+
VZibWAendou2glZAPoZigT4ioTspBcW1p4zfQNN3E2bDJwJOgkA9bv9Z5+WTEHFp
bETfCEHB/cXhsaJ5V0bMkYjVU8oY+LlJtUIaA7OnTIlZlUKzuHL6dudbX536qlSM
H+QDTNlBQq5KBzqNmOkTSXaiQltIQPUUzlYcSU4ouiRE17gV3ykZhKUimMkWWMxQ
iqlbkRKPvRbJG/2kq1b8lcWEQbQEXaYs/fuY6X4jLvtXdu7tCbTBGq4IDkr6dNrr
fokBItBd0FwFcGHC4FqYYDDCRQKi455CCUUinO/4jv72+b7eaTPSsXlYIAIbu6hT
hF87/cCennRLFYobMquFyXFhhzkDBcfFNH6mdA5fZpJ9TqkDp1r8P4pvy17C0PwE
m+I/a+dMhq7poNRgFFfIZDfzQfudo34u5fU5uG+2dpGXBaNcxTP1gL8A24OHPpNs
09vU9NWxeZ9uKI4vEAe9j7IgcFqX9Yf29HV/+O/cOuGCisxbFwxQZuvpAEwlg9vB
IuGsuoWSPbnIBWAIhLwFA+EeMOZGyQc7f9emAciZF0k76TU9qs/z8MeV9/T51jhs
ykeiN2ep73lYVve25aQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfiW5IdgM02z5nm4aeFf
fCPB8LZxBDWz83TZhHwWCGDXxMzOBmwPCJYAWGUXSEKZNJJ1u25ZMqhU5i5kWEVG
QY8QCYstxLrgmcPHEIIxDAFefLtYi1lPOvJzFsYnnop3v0FBc+GLwvIjm7QOaTIA
CUHvTlzzb4dvxApwU8M1ESg+yFNKTU/AXW2aHnvFRjrq2hT6N587okjFiZZ1xOns
HooJx+XXrim2JaVvRndFTm5JPQhW8tjnj/ju3JyjYktWx50OE+Gd5jaYQ+sgE74+
IzkX/VcA7dEzdh6tTaNSQq5AHo/YlpmMU5oHJ3zeCAfW1Ioxy9teeUFXfzThYZc+
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137353055611414650966110997485482054997785274
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 08'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 00:18:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-08 00:18:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.gccm.mover.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24486576872474996827177526728150920900744638693302034209020725541615272813308490721889600997457811291627527118966165830107292247435950114806076620476209994569348781785075035541488958862817845150352650394661088257636811704688516773857301553590162415824314778326681637865098669377520944823744433525176739145610861343724310409235307224063224493301577079203600809338852623289234667670268511321505781651033536730677193393799802317440610654186585510094727832603745735490353113546527967610430606255882252141703489747875005952744476566275333410309583813301186641868195776781639362303747608082199890429683053682331651723968237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca4851a5c7943968d39ff6b60bc1d3e282b7cb8b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.gccm.mover.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f67e2fbd80a34ab2705bebdf9a1fd8edca618007
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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