Kestrel

HTTP/1.1 400 Bad Request
Date: Wed, 09 Apr 2025 10:26:23 GMT
Server: Kestrel
Transfer-Encoding: chunked
X-Server-Version: 1.0.2717.36
Server-Timing: total;dur=0.045

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:01:7b:47:e7:7f:24:3e:d2:51:8d:ac:de:00:00:01:7b:47:e7
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, O=Microsoft Corporation, CN=Microsoft Azure RSA TLS Issuing CA 07
        Validity
            Not Before: Mar  3 16:36:07 2025 GMT
            Not After : Aug 30 16:36:07 2025 GMT
        Subject: C=US, ST=WA, L=Redmond, O=Microsoft Corporation, CN=ppe.complianceposturemanagement.office.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b9:be:75:da:96:81:17:44:c2:2e:90:4b:84:5d:
                    ac:7d:0f:95:10:81:f1:42:1a:36:05:ae:e5:e7:cb:
                    ec:bf:21:0d:15:11:82:ca:fd:c5:e8:49:a6:5f:a6:
                    91:6a:6e:49:30:7a:08:be:82:36:31:da:32:44:ef:
                    e6:43:f1:f2:81:b8:47:86:3b:5a:be:bf:a1:05:c8:
                    8b:b2:1c:3f:79:6b:35:40:61:e2:09:47:3b:89:52:
                    ac:cb:d7:5d:e4:82:ce:f2:0e:00:8f:1d:12:43:41:
                    69:fb:70:c9:1c:0e:9b:08:8b:12:64:d8:40:87:8a:
                    67:e8:4a:0f:34:c1:be:49:90:58:54:5f:a8:84:54:
                    78:1a:23:5a:2d:39:6c:70:f4:85:bc:80:33:61:de:
                    2a:45:a8:3e:b1:de:80:18:a4:80:a9:54:32:e9:52:
                    a2:d7:0b:85:57:3b:e8:53:43:10:04:dc:96:94:fa:
                    5c:3e:b4:b6:7c:ca:de:ce:e3:c7:dc:4e:c8:99:64:
                    48:3b:52:fb:a2:10:36:a6:20:cd:6c:33:45:fc:5b:
                    22:fb:87:3c:e7:dd:07:a0:a3:7e:70:d9:64:32:bf:
                    c3:5d:01:9f:0c:21:99:04:78:15:3a:be:25:fc:fb:
                    bc:62:08:88:db:0d:37:c0:e0:3b:f6:62:a6:82:75:
                    34:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Mar  3 16:46:10.361 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B3:96:C2:25:39:90:C7:04:C7:7B:6A:
                                7A:0B:0D:73:E4:69:80:F9:E2:A2:13:F9:2C:8B:B5:5B:
                                0E:A8:6A:87:2E:02:21:00:F2:24:DE:33:0C:A1:AC:8A:
                                8A:CF:0C:FB:8C:4F:38:22:8C:81:56:85:C5:F7:3D:2E:
                                6D:1E:71:E7:7A:86:30:5E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Mar  3 16:46:10.548 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B7:F1:B8:6A:51:EA:23:52:E0:CD:3E:
                                EA:86:2F:F2:98:FE:85:7D:7D:C0:B2:C5:B7:7A:D8:B5:
                                83:6F:0B:8E:B2:02:21:00:E6:C1:3C:00:E5:33:DE:E5:
                                A6:7B:01:61:C1:A6:CF:CF:7C:F1:E5:21:E5:C7:C0:A4:
                                B1:2B:B4:DE:A2:96:E5:7D
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 1A:04:FF:49:D0:54:1D:40:AF:F6:A0:C3:BF:F1:D8:C4:
                                67:2F:4E:EC:EE:23:40:68:98:6B:17:40:2E:DC:89:7D
                    Timestamp : Mar  3 16:46:10.673 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:BD:C2:59:46:41:A6:98:62:A6:F4:75:
                                9A:51:5E:95:27:F1:42:EC:A5:88:3E:E3:00:26:2E:3E:
                                D9:B2:0D:8D:07:02:21:00:C8:E3:B0:30:B7:C0:DC:CF:
                                F5:02:1B:60:5A:C5:8B:44:38:F8:F2:2D:57:4A:1C:56:
                                BD:4A:F1:7A:BA:27:3B:65
            Microsoft Application Policies Extension: 
                0.0
..+.......0
..+.......
            Microsoft certificate template: 
                0-.%+.....7.........F...........]...0......d..-
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt
                OCSP - URI:http://oneocsp.microsoft.com/ocsp
            X509v3 Subject Key Identifier: 
                1A:E2:1A:A4:F3:CE:B1:C7:DF:7D:BD:BC:4C:BD:96:19:A6:52:92:C7
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Subject Alternative Name: 
                DNS:ppe.complianceposturemanagement.office.net, DNS:ppe.complianceposturemanagement.office.com
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.311.76.509.1.1
                  CPS: http://www.microsoft.com/pkiops/Docs/Repository.htm
                Policy: 2.23.140.1.2.2
            X509v3 Authority Key Identifier: 
                CE:15:16:3B:EA:02:A3:A6:6B:DA:D9:2B:FD:E5:8C:52:BE:7A:50:A8
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        b5:05:32:7a:b8:00:1c:e9:80:80:4d:b5:91:1a:e4:a9:13:4f:
        05:02:3d:f1:5d:ff:93:73:7b:55:4b:ad:c0:60:26:6c:69:70:
        f4:7e:dd:a0:35:73:16:85:73:4e:7e:85:66:24:01:16:68:5a:
        d3:f2:62:6b:27:f3:3f:ce:59:5b:6f:be:90:ae:51:7e:91:89:
        21:13:a7:67:b4:6e:35:75:b8:1c:65:72:5f:55:01:96:51:62:
        23:f1:6d:cf:2d:68:2d:d7:3b:b3:33:f9:35:18:69:12:c9:74:
        33:6c:ed:b2:e3:ae:1a:9d:32:c8:dc:97:bb:f6:f4:40:12:8b:
        f9:d7:2a:da:a9:5a:11:ab:50:0c:26:23:55:a0:33:86:84:2f:
        04:cc:4f:55:15:3e:b9:50:1a:b8:bd:ca:49:86:20:5a:0b:e8:
        08:57:8d:4c:a0:92:78:aa:ff:8a:fc:c7:b9:29:dc:92:2d:66:
        78:47:a4:74:e5:23:14:fa:a1:49:93:49:d6:3d:1f:9c:ef:22:
        77:f4:1a:cc:d9:d1:14:a4:c9:5b:cd:6a:94:b7:0d:d8:c1:55:
        6a:3e:6f:89:f4:17:9b:a9:98:72:8a:45:ff:8f:a0:df:8f:e7:
        fa:c4:8f:9a:09:13:3b:42:49:b3:33:f2:d7:f8:81:f7:be:51:
        78:1b:55:47:5a:21:a3:c5:23:30:0f:5d:15:ef:cb:94:2b:d8:
        c4:2e:0b:f7:15:ba:8f:57:b3:8f:cc:7c:8a:5e:d3:d8:5c:93:
        07:3d:79:e7:c9:fb:6c:a8:4e:e9:9e:9c:a9:91:81:70:1e:52:
        ba:c4:93:ae:46:ac:07:77:32:08:dd:19:e7:3e:99:61:df:dd:
        f1:47:68:64:56:b4:cc:cb:4e:01:1d:ed:e1:be:e4:ac:9d:ea:
        3a:15:ba:a9:eb:58:c2:fb:d2:59:60:b2:ec:16:a3:d1:e5:cf:
        cb:a0:ef:04:ab:dd:0a:a9:71:08:5e:b5:64:fd:ce:77:25:44:
        e8:64:5f:cf:c8:d3:0e:20:fd:6a:93:5e:03:bd:78:9f:b9:97:
        95:ea:36:63:67:2c:f0:70:08:74:cd:47:14:9c:5b:7a:f1:7d:
        7b:90:ce:77:ea:b7:6f:fe:28:75:3b:17:dc:aa:48:ad:f9:2b:
        ef:42:99:c0:69:87:7a:03:b2:7d:29:3e:3d:af:b8:8c:c8:05:
        59:0c:a1:13:91:12:e6:53:1f:be:47:80:87:4c:c5:d3:48:4e:
        19:62:80:90:79:f6:c7:44:59:6b:a5:59:d0:fa:46:0c:a7:6c:
        f9:04:81:ff:9e:de:bf:88:a3:a9:60:8e:5b:a0:8f:8b:b5:5d:
        27:49:f6:1a:d9:e1:cc:2d