OV SSL/TLS Certificate for mhsm-nore-synthetics.managedhsm.azure.net Issued to Microsoft Corporation

Certificate is witin its validity period

Issued by Microsoft Corporation (Microsoft Azure RSA TLS Issuing CA 04)

About the mhsm-nore-synthetics.managedhsm.azure.net OV SSL/TLS Certificate

This certificate with serial number 33:02:66:b5:0b:22:ea:0e:ec:07:88:31:c2:00:00:02:66:b5:0b for mhsm-nore-synthetics.managedhsm.azure.net was issued on by Microsoft Corporation.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for mhsm-nore-synthetics.managedhsm.azure.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 33:02:66:b5:0b:22:ea:0e:ec:07:88:31:c2:00:00:02:66:b5:0b
Serial Number (int): 1137547179146441884883228937902239821452457227
Serial Number Length: 150 bits, 19 octets

Subject Key Identifier: 4a:f5:a4:44:1f:17:84:a0:c7:7a:e6:99:d8:e6:ff:88:b6:23:86:aa
Authority Key Identifier: 3b:70:d1:53:e9:76:25:9d:60:a8:ca:66:0f:c6:9b:ae:6f:54:16:6a

Fingerprint (SHA-1): fa:e5:b5:a4:ba:d6:d2:d9:0f:b1:11:4a:80:32:6e:3d:03:51:24:b4
Fingerprint (SHA-256): 74:1f:10:8a:b2:92:39:84:75:3e:13:d9:d8:26:14:4d:09:0b:70:d2:14:f0:d3:da:cf:58:b2:9e:f8:b7:42:26

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt

Revocation Information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl

Check the revocation status for certificate mhsm-nore-synthetics.managedhsm.azure.net
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for mhsm-nore-synthetics.managedhsm.azure.net

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
12
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for mhsm-nore-synthetics.managedhsm.azure.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFlOZtlIi+A6yVCC2o9P
UfBpTiGFxFoWDn9OO4+bEmUVX/q0xYaDl+xW5tbAHJgHYuzVg8dw9VYaeccD4SWa
zesl+b9M4skV6OO3urXAJnDZW74Dzkp1V1SsdgjR9P+x8cgEfbRtLTjpL+U6E1L9
Kp2amb6poLefKfFK3fXMSxnmtEtZXzN7GTSfelXqwhf2cHrmnwxpAFkH6S20qcIP
Xcq5EJpC2BMTfcQblJ7QzdMPyTLb0uSbg48y58sDZ+8Dq0p7ExJgG7IRj4uhOBht
URh8d7U3nqaJtoLQ+GAnQBwSE9YeHClK24j+w6l0LDh6L+TgzznSHbcDI8uqDd8K
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137547179146441884883228937902239821452457227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 04'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-05 14:00:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-06-30 14:00:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mhsm-nore-synthetics.managedhsm.azure.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21252073790888873476668094450237451487392474726061613641472485250503903388596195659071677151323126384081442706141340234004104272073208828474591353110775093616860267305654472253236838487314505566862551059040455477839041748676039532245853005649099315196079582862267598846870868608316427172436343876812317198906694537444377552081847540072351671933113229417338123156410481402703571212923468552346958486879436944952493921135366951681063264922311234721070380087426593660410195516984971450499401976481984498510691276258483581023283357768475461346285681297008886500204811815955512838777541515625838474044809559663770953779943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4af5a4441f1784a0c77ae699d8e6ff88b62386aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhsm-nore-synthetics.managedhsm.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mhsm-nore-synthetics.managedhsm.azure.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3b70d153e976259d60a8ca660fc69bae6f54166a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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