*.projectkonacompute.net

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 03

About this certificate

This digital certificate with serial number 33:00:51:b1:56:be:ab:73:7a:c6:9f:e1:6f:00:00:00:51:b1:56 was issued on by Microsoft Corporation.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:51:b1:56:be:ab:73:7a:c6:9f:e1:6f:00:00:00:51:b1:56
Serial Number (int): 1137365803720542401577653659145805190912913750
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 1f:6b:ca:e1:c9:c1:8a:1a:90:0c:79:a1:13:80:ce:94:27:d1:64:11
AuthorityKeyId: fe:09:71:40:55:05:10:44:d8:a4:81:75:b8:9e:1a:e9:4a:06:88:c8

Fingerprint (sha1): 7e:59:1a:50:5c:34:11:7e:1a:0d:30:0c:2e:9e:6f:6b:de:65:19:a3
Fingerprint (sha256): f8:1b:67:c6:44:7d:ed:76:bb:62:70:c3:67:27:03:a5:79:42:68:21:a1:5e:c7:c2:65:46:b5:7e:82:d3:ac:03

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl

Check the revocation status for certificate *.projectkonacompute.net

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.projectkonacompute.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.projectkonacompute.net
*.azuredatalakeanalytics.net
*.adlus80.projectkonacompute.net
*.westcentralus.azuredatalakeanalytics.net
*.adlus80-c11.projectkonacompute.net
*.adlus80-c12.projectkonacompute.net
*.adlus80-c14.projectkonacompute.net
*.adlus80-c15.projectkonacompute.net
*.livy.pools.westcentralus.azuredatalakeanalytics.net
*.livy-ui.pools.westcentralus.azuredatalakeanalytics.net
*.sparkhistory.pools.westcentralus.azuredatalakeanalytics.net
*.sparkhistory-ui.pools.westcentralus.azuredatalakeanalytics.net
*.sparkmaster.pools.westcentralus.azuredatalakeanalytics.net
*.sparkmaster-ui.pools.westcentralus.azuredatalakeanalytics.net

Other certificates including the domain name projectkonacompute.net

(limited to 100 certificates)
adlus08.konaaccountdogfood.net
*.projectkonacompute.net
*.adlus12.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.cachetest01.projectkonacompute.net
projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
adlus12.projectkonacompute.net
adlsg17.projectcabostore.net
*.projectkonacompute.net
*.projectkonacompute.net
*.perf.projectkonacompute.net
*.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.kobotest03.osdinfra.net
*.kobotest02.osdinfra.net
*.adlie11.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
adlus08.konaaccountdogfood.net
*.adlus15.projectkonacompute.net
*.projectkonacompute.net
adlus04.projectkonacompute.net
*.adljp20.projectkonacompute.net
*.projectkonacompute.net
*.adlca23.projectkonacompute.net
*.projectkonacompute.net
*.adlnl10.projectkonacompute.net
*.adlus15.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.cachetest01.projectkonacompute.net
*.projectkonacompute.net
*.perf.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.adlau19.projectkonacompute.net
www.kiwitest.osdinfra.net
adljp20.projectcabostore.net
*.adlus15.projectkonacompute.net
*.azuredatalakeanalytics.net
*.kobotest02.osdinfra.net
*.projectkonacompute.net
*.adlus80.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.azuredatalake.net
*.projectkonacompute.net
*.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
www.kiwitest.osdinfra.net
*.projectkonacompute.net
*.projectkonacompute.net
*.cachetest01.projectkonacompute.net
*.kobotest03.osdinfra.net
*.projectkonacompute.net
adlus81.projectcabostore.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.adlus15.projectkonacompute.net
*.perf.projectkonacompute.net
*.azuredatalakeanalytics.net
*.kobotest03.osdinfra.net
*.projectkonacompute.net
kobotest02.osdinfra.net
*.kobotest02.osdinfra.net
adlau18.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.adlca22.projectkonacompute.net
*.kobotest03.osdinfra.net
*.kobotest04.osdinfra.net
*.adlhk16.projectkonacompute.net
*.adlnl10.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net
*.projectkonacompute.net

Certificate

The complete raw certificate details for *.projectkonacompute.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2unE19k0tp0tN+A9DJSK
mgGz88y8lDz1tR5ahBWx9Ser7U1j3bz7tqUsXPq0mvtYitnD07NDALjWK/GahmX1
39sqxMk1/ukhZN8YyHpvuSYB3/9MfIGrLnJx33HMI2AAO3hmMe58QjyP9ZI5jJF7
BuNgZJ+EYO3Y+mpML1Ig8nKtP7O+aQoRnZ5ErFfo2IZkBuVAYISd0hcXM9t7c839
iQVVj9GgaO7ljjufHhvFNoFvbjhf23JedHJpdoAImW/bfDZD2yiYNfqrGnOfXdcb
GXIMr3X2T6T36mcqWOiL6IVyfATM6mouVvQo6xdTq2Dr2CVTgCLJDlxmGcE+7hSt
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137365803720542401577653659145805190912913750
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-24 09:57:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-19 09:57:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.projectkonacompute.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27635226232741645132237740736719388058676984654534240457899631780072374216227985500283492046041975256945460140221443556702878298049272956766142572670126246611720103036484647302598682097424711997058429803575161204381885353224116464103604102227490422900345819834114154729375382059932915071937679685499987218215459704823926684678108814418934399590677955302591758818668445735403608831250101540534504100898931749972849631277026894089731429833985874373899371238863314325597886154071642576664659133685381114202388497340033243009611517892768599578965444489761777219365876706069121322761455716473229445494035573942418859666741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f6bcae1c9c18a1a900c79a11380ce9427d16411
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (659 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus80.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westcentralus.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus80-c11.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus80-c12.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus80-c14.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adlus80-c15.projectkonacompute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livy.pools.westcentralus.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livy-ui.pools.westcentralus.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparkhistory.pools.westcentralus.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparkhistory-ui.pools.westcentralus.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparkmaster.pools.westcentralus.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparkmaster-ui.pools.westcentralus.azuredatalakeanalytics.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe09714055051044d8a48175b89e1ae94a0688c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00038a87e9b0409de7d1cf2e88cb18bd07266965207595f44527eec596703170be43c90b4a461063e5a94a673bf627e1bdfcdb98e29e404a06ad48a1135a39aaeab07e91d5881c3afecaeb834e4d74f76b96ae05b1a724e6b3846f0d7397d80ce1d388efad91af051d3881068c91f0b7c7dcd40177efd752a7d3f3dd49c0139f53ac8da0b0a1b93f51d9f2a40ceebe52c10c6ba05a8f721ad4bbd647cef576733913b57c832c9c5db99428d218ea539496d6247fee7337a2dd0e4e6a0c2f800b9edb7189d982706af10bb23ce461486e4ef498eb1d78b301278a0f7a7b0b1bfb7761ad519b61990833e4bb9777b714253a3459e4a8ee30afdf0d3fa5882c45061b8b76ca0feb51f3f0e3dbd67f05fa240a7eb7e33d1c9ecf0471a67c8a51952baf52b45997ceece591ce75d2aceeaa86605573b650dee8bd3c8980af0e262a6466ef0f900aa408051b92ddde8a8a00821fc0a7d996ab550999bd095e78821a0b359d1f5683ae1475a3ffa06e04adc5cc185392f14a3ce798fa8cbb65296a5b0bf309a26bed3d0a9f87717236e96f0741e6dc2fbd0ec95c4ba386704e562efdd1f9f56530e34a048c8774c06d6c8a27c1e281eed48d3b6bb77816eca840cff9fd6bf2b0db8aee2a2f95609488939cb1f80762f0d88afd5a14f9263eb55b3c233e1d56a6d0dd8bd44416ff141299a8ddc56398aab6e13183d9795c044c327983c058