*.cloudinventory-prod.supply.cscp.ms

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 03

About this certificate

This digital certificate with serial number 33:00:48:ff:f9:83:ae:b5:b2:fe:6b:83:f7:00:00:00:48:ff:f9 was issued on by Microsoft Corporation.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:48:ff:f9:83:ae:b5:b2:fe:6b:83:f7:00:00:00:48:ff:f9
Serial Number (int): 1137362845704171768307943553624169195455971321
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 77:a6:30:db:08:39:b0:ef:53:45:a6:7c:29:cc:42:3f:78:8e:9e:85
AuthorityKeyId: fe:09:71:40:55:05:10:44:d8:a4:81:75:b8:9e:1a:e9:4a:06:88:c8

Fingerprint (sha1): c6:2a:2b:2a:fd:2b:7c:87:3e:d0:4c:a5:88:9b:2c:c5:2a:cc:60:da
Fingerprint (sha256): ff:3e:12:68:e8:a4:ac:f2:4e:45:3a:e3:cc:cd:25:8c:76:c9:a0:e1:9e:55:33:20:27:72:90:3e:f9:6f:1b:21

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl

Check the revocation status for certificate *.cloudinventory-prod.supply.cscp.ms

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cloudinventory-prod.supply.cscp.ms

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cloudinventory-prod.supply.cscp.ms
azd-avs-aks-prod.northcentralus.cloudapp.azure.com
azd-avs-aks-prod.southcentralus.cloudapp.azure.com
*.azd-avs.ms
cloudinventory-aks-prod.northcentralus.cloudapp.azure.com
cloudinventory-aks-prod.southcentralus.cloudapp.azure.com
cloudinventorycollaboration-aks-prod.northcentralus.cloudapp.azure.com
cloudinventorycollaboration-aks-prod.southcentralus.cloudapp.azure.com
prod.cloudinventorycollaboration.ms
prod.cloudinventory.ms

Other certificates including the domain name cscp.ms

(limited to 100 certificates)
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.ddex-prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.ppe.execution.cscp.ms
*.prod.execution.cscp.ms
*.ppe.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.ppe.supply.cscp.ms
*.prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.ppe.supply.cscp.ms
*.cloudinventory-prod.supply.cscp.ms
*.ppe.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.supply.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.supply.cscp.ms
*.ppe.supply.cscp.ms
*.prod.execution.cscp.ms
*.cloudinventory-prod.supply.cscp.ms
*.ppe.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.supply.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.cloudinventory-prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.ddex-ppe.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.supply.cscp.ms
*.prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.cloudinventory-prod.supply.cscp.ms
*.prod.supply.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.execution.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.ppe.execution.cscp.ms
*.cloudinventory-prod.supply.cscp.ms
*.ddex-ppe.supply.cscp.ms
*.ppe.execution.cscp.ms
*.prod.supply.cscp.ms
*.cloudinventory-ppe.supply.cscp.ms
*.ppe.execution.cscp.ms
*.ppe.execution.cscp.ms
*.prod.supply.cscp.ms
*.prod.execution.cscp.ms
*.prod.execution.cscp.ms
*.ppe.execution.cscp.ms
*.ddex-prod.supply.cscp.ms
*.cloudinventory-prod.supply.cscp.ms

Certificate

The complete raw certificate details for *.cloudinventory-prod.supply.cscp.ms in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIII3zCCBsegAwIBAgITMwBI//mDrrWy/muD9wAAAEj/+TANBgkqhkiG9w0BAQwF
ADBdMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
MS4wLAYDVQQDEyVNaWNyb3NvZnQgQXp1cmUgUlNBIFRMUyBJc3N1aW5nIENBIDAz
MB4XDTI0MDUxNjE5MDk1OVoXDTI1MDUxMTE5MDk1OVowezELMAkGA1UEBhMCVVMx
CzAJBgNVBAgTAldBMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv
ZnQgQ29ycG9yYXRpb24xLTArBgNVBAMMJCouY2xvdWRpbnZlbnRvcnktcHJvZC5z
dXBwbHkuY3NjcC5tczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALo/
3Xq7sLsAz2oExN2yz4ktoC6GmJhQ6PnrJCORrxTmnhN7MvHi1Fo47Gk+WK55hSF9
LIZUrOUXZL1MsIch4bT6kEps7qF61hpBNkKk7ajEteJBOwTeetyl1TOS6/ZoNHUW
MRFIAhQnogW27HgK3X8afi0ed0jxXVQcXY1ch/QAPgr7XSMwFOSykvjZPG8dknSp
5itLYlRswjQhPeS5d9E4oS5+Q+gpGYcZqNL9npJMs8bqUhP4TTDNWGbjxe+lnLPc
BLCgtV3KlRJj/RalVUjcfFd5pIz43AYvCHlxdxzFqKbVMVR52ENvlWSCzOcJocgk
FDsgUrXYwjdH6mjuMQ0CAwEAAaOCBHgwggR0MBMGCisGAQQB1nkCBAMBAf8EAgUA
MCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwIwCgYIKwYBBQUHAwEwPAYJKwYB
BAGCNxUHBC8wLQYlKwYBBAGCNxUIh73XG4Hn60aCgZ0ujtAMh/DaHV2ChOVpgvOn
PgIBZAIBJjCBtAYIKwYBBQUHAQEEgacwgaQwcwYIKwYBBQUHMAKGZ2h0dHA6Ly93
d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQXp1cmUl
MjBSU0ElMjBUTFMlMjBJc3N1aW5nJTIwQ0ElMjAwMyUyMC0lMjB4c2lnbi5jcnQw
LQYIKwYBBQUHMAGGIWh0dHA6Ly9vbmVvY3NwLm1pY3Jvc29mdC5jb20vb2NzcDAd
BgNVHQ4EFgQUd6Yw2wg5sO9TRaZ8KcxCP3iOnoUwDgYDVR0PAQH/BAQDAgWgMIIB
7AYDVR0RBIIB4zCCAd+CJCouY2xvdWRpbnZlbnRvcnktcHJvZC5zdXBwbHkuY3Nj
cC5tc4IyYXpkLWF2cy1ha3MtcHJvZC5ub3J0aGNlbnRyYWx1cy5jbG91ZGFwcC5h
enVyZS5jb22CMmF6ZC1hdnMtYWtzLXByb2Quc291dGhjZW50cmFsdXMuY2xvdWRh
cHAuYXp1cmUuY29tggwqLmF6ZC1hdnMubXOCOWNsb3VkaW52ZW50b3J5LWFrcy1w
cm9kLm5vcnRoY2VudHJhbHVzLmNsb3VkYXBwLmF6dXJlLmNvbYI5Y2xvdWRpbnZl
bnRvcnktYWtzLXByb2Quc291dGhjZW50cmFsdXMuY2xvdWRhcHAuYXp1cmUuY29t
gkZjbG91ZGludmVudG9yeWNvbGxhYm9yYXRpb24tYWtzLXByb2Qubm9ydGhjZW50
cmFsdXMuY2xvdWRhcHAuYXp1cmUuY29tgkZjbG91ZGludmVudG9yeWNvbGxhYm9y
YXRpb24tYWtzLXByb2Quc291dGhjZW50cmFsdXMuY2xvdWRhcHAuYXp1cmUuY29t
giNwcm9kLmNsb3VkaW52ZW50b3J5Y29sbGFib3JhdGlvbi5tc4IWcHJvZC5jbG91
ZGludmVudG9yeS5tczAMBgNVHRMBAf8EAjAAMGoGA1UdHwRjMGEwX6BdoFuGWWh0
dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMEF6
dXJlJTIwUlNBJTIwVExTJTIwSXNzdWluZyUyMENBJTIwMDMuY3JsMGYGA1UdIARf
MF0wUQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWlj
cm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTAIBgZngQwBAgIw
HwYDVR0jBBgwFoAU/glxQFUFEETYpIF1uJ4a6UoGiMgwHQYDVR0lBBYwFAYIKwYB
BQUHAwIGCCsGAQUFBwMBMA0GCSqGSIb3DQEBDAUAA4ICAQAiVS94r3iX+jiH080Y
tey3NS0SA/0QUGB9OY6qYvF3Ax3AjVv9MtWbVxkPUnkHX0QE4/XbZkMxbrypmBWu
Z7uknY2619tYaejfriA8SzEbFo35WmrbSGHCnZTr6RmhkLgSs272HCHK2gXIRCj4
xkvfL4mqSwJyEDiAd+b0YW5zoR8IaRdLPWQhdFrgn4RhIX/889giOnzD6zJGsz01
cPECIOmMaXh+yj1CWf5t/xAKNLbWxfdN5tEJX3e0uRh43pr/zQfZa6rib4T2h36o
7PQSyK2AEx+bRR3sU31Mo1wVNtGacxa0F7bOQdHo51bSwxb5rp9ZA6/ghb+8oMPn
u1z89WteErl2NwDBqs76S2EJrGGqmWbXEPT/RrLytkkoakG/Lyj9Yvt7xRkNDrr2
PNVXeF5BmGQlOFs7iHWtPrau3ylJAMPNO2NDAL8DqL9J8BK+Yn+rC9bAqgwpxU2i
y+RdZjvk4jqj+lreZcQZvPFWyK77+kcSAHKdyDXrZvAgsyG/9p1Bj+ZZpjOzceNJ
tJnKffzOsQBhCLZtCmWfbJKfRQK/LYRvaerliF6ngyaugZnGjDxn7hcr0PYf9nsv
a2bMWPnz5lAfzvcfsBjFsyYFKZeHC203vUarr7vNpNtQS+S1BkpyerH8Zkeb2z65
RGkl9d9WXpGtgqXPjBkrLl/dJQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj/deruwuwDPagTE3bLP
iS2gLoaYmFDo+eskI5GvFOaeE3sy8eLUWjjsaT5YrnmFIX0shlSs5RdkvUywhyHh
tPqQSmzuoXrWGkE2QqTtqMS14kE7BN563KXVM5Lr9mg0dRYxEUgCFCeiBbbseArd
fxp+LR53SPFdVBxdjVyH9AA+CvtdIzAU5LKS+Nk8bx2SdKnmK0tiVGzCNCE95Ll3
0TihLn5D6CkZhxmo0v2ekkyzxupSE/hNMM1YZuPF76Wcs9wEsKC1XcqVEmP9FqVV
SNx8V3mkjPjcBi8IeXF3HMWoptUxVHnYQ2+VZILM5wmhyCQUOyBStdjCN0fqaO4x
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137362845704171768307943553624169195455971321
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 19:09:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-11 19:09:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cloudinventory-prod.supply.cscp.ms'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23511817804892190263730663537409786263943147874014925657772499169172745461716462559493832615952325614841347915419567375513037013015045954566814053816262217176432751582872436114454822914413687094284114268174409825693081743239421767577420248387540704679034190423836268662451435031219846863351631601146541117005643757403999631055650103475381665646918357471984469864956764806786401664039310220107997050405190250493282392371394338100184222538848488905157646849718209098598592711011773438060866390623960453629871314135162739213824789495256495313501383367846353104609496383969318826187817646509163444873789469084624788271373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77a630db0839b0ef5345a67c29cc423f788e9e85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudinventory-prod.supply.cscp.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azd-avs-aks-prod.northcentralus.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azd-avs-aks-prod.southcentralus.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azd-avs.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudinventory-aks-prod.northcentralus.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudinventory-aks-prod.southcentralus.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudinventorycollaboration-aks-prod.northcentralus.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudinventorycollaboration-aks-prod.southcentralus.cloudapp.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cloudinventorycollaboration.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cloudinventory.ms'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe09714055051044d8a48175b89e1ae94a0688c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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