Kestrel

HTTP/1.1 400 Bad Request
Date: Thu, 23 Jan 2025 11:14:52 GMT
Server: Kestrel
Transfer-Encoding: chunked
X-Server-Version: 1.0.2359.23
Server-Timing: total;dur=0.034

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:01:25:59:fc:ab:af:2d:1e:e4:a3:ad:2d:00:00:01:25:59:fc
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, O=Microsoft Corporation, CN=Microsoft Azure RSA TLS Issuing CA 08
        Validity
            Not Before: Jan 19 03:00:37 2025 GMT
            Not After : Jul 18 03:00:37 2025 GMT
        Subject: C=US, ST=WA, L=Redmond, O=Microsoft Corporation, CN=apc.complianceposturemanagement.office.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e7:ff:02:b5:63:e2:9d:87:be:51:0b:bd:35:91:
                    6b:c4:aa:1c:1d:64:34:f5:4a:6b:e8:10:91:6d:aa:
                    eb:d1:81:1c:7a:ac:f6:6a:bd:da:06:d5:c7:20:33:
                    0d:9c:e1:78:c0:d9:15:6c:7b:a2:72:e7:aa:2e:fe:
                    65:2e:9c:45:97:7d:76:08:1a:8b:35:c7:a4:df:64:
                    c2:bf:26:a5:92:d6:02:1e:24:e7:5d:68:73:6c:87:
                    1c:e3:34:a1:a6:d1:51:a8:4d:b4:6e:d3:26:c6:e3:
                    5c:47:aa:13:76:a0:0c:a9:79:37:5c:2e:cf:89:f4:
                    77:ab:fc:26:53:54:ce:4a:27:c9:17:2c:ee:e6:d1:
                    70:c9:c4:42:ef:13:02:fb:f6:8f:8a:df:c1:47:47:
                    60:80:72:ed:93:23:49:05:bd:1b:1d:a9:61:69:13:
                    b9:ad:f3:9d:ef:aa:ec:e2:81:19:d6:43:f3:11:67:
                    cd:15:82:cc:3b:aa:0d:ce:b3:ba:41:e4:73:7e:35:
                    ea:20:43:06:15:a0:69:cf:7c:c0:1a:30:b7:28:42:
                    96:20:56:0e:8e:34:e3:7d:26:90:cd:0f:e0:b8:bf:
                    4d:1a:80:a0:90:86:39:a8:a3:44:16:10:ed:c2:0a:
                    0b:e0:7e:dd:69:5a:b8:9e:af:f3:59:74:65:ae:02:
                    0a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:
                                3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A
                    Timestamp : Jan 19 03:10:40.779 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:7D:C1:4F:27:67:6C:CD:9F:32:02:F6:EA:
                                44:F4:64:67:71:7A:32:F3:66:11:5A:45:03:2F:5D:EB:
                                D0:4C:72:54:02:20:3F:58:BA:89:4C:77:47:FF:4E:18:
                                E1:7D:02:56:C3:53:75:B4:E9:38:51:3C:C7:F4:FF:E4:
                                CB:F8:1D:4A:97:FA
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Jan 19 03:10:40.840 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:F2:48:F2:60:53:A4:D4:45:D3:D4:79:
                                BA:ED:FA:0E:EC:9E:D9:13:A0:1A:84:4A:31:8A:AF:93:
                                7D:F2:9B:19:59:02:21:00:BE:0D:21:14:8E:6C:35:C1:
                                42:D1:72:C4:A9:70:47:92:C8:A8:40:B7:0B:36:B8:C3:
                                05:8A:11:CC:A8:59:2C:FD
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 1A:04:FF:49:D0:54:1D:40:AF:F6:A0:C3:BF:F1:D8:C4:
                                67:2F:4E:EC:EE:23:40:68:98:6B:17:40:2E:DC:89:7D
                    Timestamp : Jan 19 03:10:40.889 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:57:47:2B:0C:85:49:A9:E2:F5:35:87:AF:
                                A4:9F:2C:27:F5:76:6F:59:EF:58:4A:48:87:26:2E:ED:
                                30:6E:24:DF:02:21:00:A0:83:8D:98:73:70:97:42:1C:
                                DD:E6:97:C3:93:13:FE:A4:1D:FB:E4:63:41:5D:45:32:
                                5F:26:9F:7B:F7:8A:B5
            Microsoft Application Policies Extension: 
                0.0
..+.......0
..+.......
            Microsoft certificate template: 
                0-.%+.....7.........F...........]...0......d..-
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt
                OCSP - URI:http://oneocsp.microsoft.com/ocsp
            X509v3 Subject Key Identifier: 
                B4:C4:69:1D:C4:E9:C1:56:07:53:1F:7F:87:6E:DB:A7:14:33:C4:07
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Subject Alternative Name: 
                DNS:apc.complianceposturemanagement.office.net, DNS:apc.complianceposturemanagement.office.com
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.311.76.509.1.1
                  CPS: http://www.microsoft.com/pkiops/Docs/Repository.htm
                Policy: 2.23.140.1.2.2
            X509v3 Authority Key Identifier: 
                F6:7E:2F:BD:80:A3:4A:B2:70:5B:EB:DF:9A:1F:D8:ED:CA:61:80:07
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        6a:9e:1c:71:b1:31:b9:e3:15:2c:9f:69:1e:9d:31:2a:8e:f4:
        c2:57:ce:46:d5:c2:54:7f:5d:78:e5:41:b0:3e:34:41:e2:ef:
        e0:f6:8a:b9:07:f9:fa:d1:9c:7c:9a:3d:07:df:44:63:db:e0:
        f9:5c:5a:95:c9:30:80:0e:30:70:ad:5e:23:c0:a3:d7:9e:24:
        a2:02:fd:60:12:ec:66:0b:3e:5e:ed:66:76:59:0e:d0:c9:36:
        68:ce:76:8d:5c:50:de:8b:07:ea:1f:80:b4:07:0e:fa:f9:a3:
        0b:e8:f7:b5:ce:0d:17:58:c5:8d:81:4c:0f:2b:00:bb:e3:f1:
        05:98:8e:52:d8:a0:32:f2:72:d4:cc:42:fd:ee:fd:82:0f:28:
        04:ce:b2:55:50:2d:40:1e:06:b0:11:77:76:9c:54:dc:6a:bf:
        b7:e7:38:1b:cd:75:fd:77:91:3c:25:a2:f5:a4:20:92:8a:91:
        59:d0:61:7c:96:9d:16:70:51:70:37:19:9e:53:b6:bb:66:fc:
        22:39:ba:a0:05:7f:79:2c:e3:65:68:cc:6d:31:23:c9:96:2f:
        d5:ae:4f:27:13:56:40:a7:f7:12:e4:c4:a3:7c:03:07:31:49:
        ec:69:e3:74:e0:ed:63:78:99:bf:41:6a:56:54:0e:6f:b4:93:
        92:f0:22:82:a8:10:55:8f:8e:07:07:64:41:21:da:01:cc:12:
        fa:89:42:34:54:0c:b6:f2:af:c0:d1:64:2f:3f:6c:5a:a7:8c:
        3b:f0:d4:a8:55:15:34:4c:6f:ef:b1:25:ae:16:03:9e:92:99:
        f1:80:1a:e6:d5:6f:6c:d2:89:ce:6f:21:c3:07:b6:e6:ea:7c:
        98:86:2f:4e:63:85:2b:d8:ff:b0:9e:b9:95:0e:1c:fe:cd:5e:
        db:8e:17:e8:f1:64:95:7e:d4:17:d7:12:10:fd:ce:c5:60:1d:
        cf:87:0c:12:27:3a:70:d7:03:2b:a6:f9:ae:8b:74:5d:56:36:
        2c:da:1e:e6:7f:2b:fc:35:20:a1:99:3d:50:d4:8f:0e:84:7f:
        b9:28:89:7e:97:71:cb:b3:78:a8:33:bb:c3:ac:a8:6f:8f:6c:
        31:28:2d:1d:c6:f6:38:be:be:da:a7:cc:93:4e:f4:a4:91:31:
        fc:cb:e0:3d:40:8a:3a:06:b8:e1:89:14:23:b2:38:93:57:fb:
        8f:f7:9c:04:cf:2d:5e:69:51:66:3f:88:2c:06:39:74:4f:7c:
        b3:b4:79:68:74:87:ed:ce:d6:a7:e2:7d:d0:0a:d4:e9:47:e1:
        49:57:f0:d3:4b:ca:54:9b:d8:d1:74:87:cf:52:8e:0a:15:6a:
        9c:1e:33:6e:a4:88:3c:86