OV SSL/TLS Certificate for mhsm-nore-synthetics.managedhsm.azure.net Issued to Microsoft Corporation

Certificate is witin its validity period

Issued by Microsoft Corporation (Microsoft Azure RSA TLS Issuing CA 08)

About the mhsm-nore-synthetics.managedhsm.azure.net OV SSL/TLS Certificate

This certificate with serial number 33:02:1c:c4:d2:d4:52:83:b4:ad:ca:5d:e4:00:00:02:1c:c4:d2 for mhsm-nore-synthetics.managedhsm.azure.net was issued on by Microsoft Corporation.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for mhsm-nore-synthetics.managedhsm.azure.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 33:02:1c:c4:d2:d4:52:83:b4:ad:ca:5d:e4:00:00:02:1c:c4:d2
Serial Number (int): 1137522019226575009430680705672436256197100754
Serial Number Length: 150 bits, 19 octets

Subject Key Identifier: 8e:c4:80:6a:97:52:aa:18:33:ce:fd:41:6f:97:2f:c4:b1:71:d2:8f
Authority Key Identifier: f6:7e:2f:bd:80:a3:4a:b2:70:5b:eb:df:9a:1f:d8:ed:ca:61:80:07

Fingerprint (SHA-1): 5d:6b:f3:5f:6a:f0:45:11:46:d4:af:aa:6b:98:17:8f:6b:bb:53:0e
Fingerprint (SHA-256): 85:ce:33:fb:84:70:ce:b8:ff:db:88:0b:fb:bf:e4:58:bc:4f:ff:8b:a0:7e:56:87:e4:59:ce:84:ef:a9:bb:57

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt

Revocation Information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl

Check the revocation status for certificate mhsm-nore-synthetics.managedhsm.azure.net
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for mhsm-nore-synthetics.managedhsm.azure.net

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
12
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for mhsm-nore-synthetics.managedhsm.azure.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+kE3W2F6ntDC0hKVV6b
9POrXHkKUA0jKDLhx+tZCywS11B8j1jeiZR3vlbN5qFhOtmos2umDEwYAeLm0mzv
EBcfy2rO2Raf0WbOxumTFXKdotEmfd7j1/3WWy6L9/V41DwLh9NcD85HQQiiAr6b
ucdo3gYjizVYQujuxdXS+MhK4TT4gP1RGKQMDyx0nXwkpqTVbX/BMJIZpcdscrPY
xnJsxFOVaIUkaCYKYLo117XJi5Gwr8y4wtfOJXqu1Mp0a7KKIJ0I0IXCu+lQJQ7p
2az2fWv8X9/trS7bTAVISnH9RWPy030o787VgKvniICl0TP25oaRwjcAIry8l/Ke
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137522019226575009430680705672436256197100754
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 08'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-31 00:04:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-07-26 00:04:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mhsm-nore-synthetics.managedhsm.azure.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24731375421719523891817025171217833695252702332703991675641661476342443300319894607882148593240574945313584717279773574190989815550332394858377405894760495298679807955418110237687452247343019638131676998934709698273144637025339117254990958253742026752132429710155505093323846778078831355244368596836754664961603066402154638192022515753410941932816585751720233619027750173942338427018063752324863828871782440368894300357876129574489111740269537360644728885282550566888993555305015098416901223004484569730958903458519308081201632861609487412523662509947250447216884956216233880709367142462258172514303294375593872891603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ec4806a9752aa1833cefd416f972fc4b171d28f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhsm-nore-synthetics.managedhsm.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mhsm-nore-synthetics.managedhsm.azure.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f67e2fbd80a34ab2705bebdf9a1fd8edca618007
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00206341d9dce42360bfcc7a4d15befe25bfe40698362c4250c1e16b2ae0feec3c3869f2d78efee560f85d4798e95a3ec3080171a3e6d3ab2ad6357856a74edcff47cfff853fb8181c7d4227c8ea531830d37ce6da171ac2a229e6964c231c67d45539b7c0a94381651f65eba619bb6da69c679937ba2bd4af2946f4bf427f50e9593ede564715a0e5185f343ba0ba39fad8c77c874d5541dfba50d99c9a3d42cc9db497ac95ddad8bea1c55cf4c42100c8d54f10fed26e6783d27d2020002667655377b590f12d8e03488c07444f01382cf872b98043a112ff9788fccd013b13e6d54d354e314de0b1ed3b734418079bd0c7a901eb7c01d5f0f68bdad2e38c4cd42a1e7645879a0ae86ce943fa2045725980dbea07a542a1e4ab793aa2c8a270fbdb5f43bd98b6ded7af0ebc8daccbbb81775740aa5a06407e3d5206f37670b7b76133255a4c82a6e6c73225997ab2932aeb6634a94d0b536be9cc7443885bba1e14028c78be81d8baba58c10ba10f1c4f44c668331bf61d6b5bcfa7c8c6bf9aa167c663ee03cb0e24c857255eabc16364ff643d46d42907b6f3af3e1ef7b5a66ce3990b0cace647b35dc6a5dd69aec63da10c73b7ee0ffa625c25724f166dbaa344871f01b2144125a9629f7c336da2cb0f6e505d86a8b9b8fa3f36d66a6fda851c1fc4020432044a90ccf521c21e737767ce32544371faa555e1189e313d3a1