HTTP/1.1 401 Unauthorized
Content-Length: 0
Date: Thu, 30 Jan 2025 01:23:03 GMT
Server: Kestrel
WWW-Authenticate: Bearer error="invalid_token"

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:01:59:a6:ba:b8:7f:04:8c:2b:9a:25:4c:00:00:01:59:a6:ba
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, O=Microsoft Corporation, CN=Microsoft Azure RSA TLS Issuing CA 03
        Validity
            Not Before: Dec 31 14:33:31 2024 GMT
            Not After : Jun 29 14:33:31 2025 GMT
        Subject: C=US, ST=WA, L=Redmond, O=Microsoft Corporation, CN=*.ust.prod.reco.microsoft.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:0a:03:f1:68:7e:f5:9d:b1:e8:c4:9a:d5:
                    e7:fc:92:e5:0a:71:70:21:35:32:38:07:a6:8d:1b:
                    ce:9c:f9:43:ff:da:ba:c9:ec:06:d5:c4:ff:e3:fa:
                    1f:cd:bc:12:8e:75:6b:79:8b:9e:39:30:c8:5d:2b:
                    e4:f5:ec:82:95:c7:6c:cb:d6:fb:e0:ef:ba:1b:ee:
                    eb:bb:af:2f:b0:ca:fa:e2:dd:35:02:b6:f0:5d:a0:
                    c5:66:20:53:f6:43:ca:98:48:21:d6:2b:15:6c:42:
                    6e:5d:38:2d:fd:bf:45:ca:f0:72:51:ff:97:9e:e6:
                    19:ae:0c:6e:99:d4:12:dd:2d:da:09:bb:62:75:ca:
                    c7:fc:6b:73:d5:f7:d6:37:93:8f:e0:70:18:ab:43:
                    54:f3:8d:ba:d1:25:0b:8c:25:33:01:e5:ef:32:d7:
                    4c:ab:b6:79:16:0c:94:6c:a2:1b:4a:a9:4a:46:77:
                    c5:7e:db:5e:1f:5f:2a:0f:cf:2f:ee:00:a7:65:33:
                    95:83:bd:10:e1:e4:f1:0a:4a:bf:72:df:b3:85:90:
                    ac:79:a1:fe:f9:8b:b1:bc:68:37:9a:af:c6:05:c2:
                    ea:53:af:bf:d7:ed:3d:6c:b1:79:68:8d:79:f0:72:
                    cd:d2:ed:e9:01:30:dd:62:95:83:51:7a:bd:4a:6c:
                    55:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Dec 31 14:43:34.516 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:16:68:59:A4:98:9D:72:7C:3F:33:91:42:
                                AF:CB:EA:F4:12:B0:8C:26:88:AF:71:F2:3D:70:34:37:
                                58:39:55:7A:02:21:00:C2:1F:4E:7E:F0:AC:F0:B5:6F:
                                67:80:10:D8:E1:19:96:CC:3C:70:B2:28:81:1F:F9:11:
                                5A:72:79:FC:BD:E4:30
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Dec 31 14:43:34.531 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:20:65:D0:73:91:98:F3:67:88:13:B4:F9:
                                D8:47:25:33:12:8D:C8:B6:DD:E1:43:49:C6:1F:ED:FB:
                                63:3E:18:3A:02:21:00:C4:CD:C4:A4:14:7D:19:DF:A7:
                                7A:16:55:80:D2:BA:9E:8F:D6:3A:80:3B:21:1E:BB:08:
                                E4:9A:36:13:AA:5F:91
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D:
                                0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04
                    Timestamp : Dec 31 14:43:34.649 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:74:33:E1:BF:B8:D8:7D:46:6A:0A:5A:F1:
                                5E:59:77:CB:B9:5A:46:85:43:BE:3E:98:DB:F3:BA:3B:
                                A0:9E:E3:2C:02:20:23:CE:52:0C:47:5E:18:0E:B8:42:
                                56:6A:E5:72:76:1B:4F:A8:C9:EB:6A:44:70:AE:8B:C9:
                                64:38:AF:A7:62:B7
            Microsoft Application Policies Extension: 
                0.0
..+.......0
..+.......
            Microsoft certificate template: 
                0-.%+.....7.........F...........]...0......d..-
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt
                OCSP - URI:http://oneocsp.microsoft.com/ocsp
            X509v3 Subject Key Identifier: 
                B6:08:66:0F:3B:F1:AB:B8:C0:8A:B3:E3:FA:63:A3:B9:AF:43:73:62
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Subject Alternative Name: 
                DNS:*.ust.prod.reco.microsoft.com, DNS:*.rec.mp.microsoft.com
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.311.76.509.1.1
                  CPS: http://www.microsoft.com/pkiops/Docs/Repository.htm
                Policy: 2.23.140.1.2.2
            X509v3 Authority Key Identifier: 
                FE:09:71:40:55:05:10:44:D8:A4:81:75:B8:9E:1A:E9:4A:06:88:C8
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        8e:43:47:0a:23:99:bf:83:53:72:9c:81:41:d3:b6:41:19:04:
        b9:05:2e:bc:27:b5:e7:b5:77:bf:a1:fb:7b:71:4d:0d:df:5e:
        ac:a5:dc:2b:1b:c9:e2:b5:e9:f6:c0:ff:c1:6d:2f:ad:58:62:
        9c:aa:3b:5f:a8:3a:9f:d5:cb:9c:f5:91:e9:57:3f:8d:49:4c:
        5f:bf:eb:d3:fa:1e:a7:44:cd:d7:95:db:5b:b5:ee:8a:ec:87:
        43:28:37:e0:06:bd:e3:dc:66:eb:ca:f1:2c:0a:75:f5:ce:f5:
        1c:ef:0d:dd:09:7f:ec:e4:4c:79:54:ea:87:df:43:5f:be:d0:
        69:69:f9:ed:f1:7d:5e:f4:08:86:66:62:c9:7c:00:a4:3f:c8:
        92:43:9f:89:9a:1a:57:a4:d9:6b:f5:0f:a3:55:a7:21:79:48:
        2c:dd:11:44:1e:d8:e3:35:c7:c9:20:e3:81:bf:cb:16:90:25:
        74:a9:af:fb:cb:56:5e:ed:8b:f0:25:df:8c:5f:28:a3:c5:0a:
        f7:3c:71:2e:e3:a7:43:cc:0a:43:6a:fc:48:20:f9:76:4f:ad:
        b9:20:4b:a7:06:2c:40:31:a1:e6:ce:02:d8:68:04:fd:65:4e:
        f1:05:74:01:2e:07:32:26:70:e6:2b:1c:ee:60:94:82:1a:2e:
        20:f8:4a:4e:73:b8:1a:24:8a:7a:33:96:6c:91:04:20:3e:cf:
        ff:81:22:07:97:46:d7:dc:b7:c0:38:0b:bc:4c:62:42:fb:dc:
        80:21:3d:f8:65:98:39:8d:9e:6b:8f:fa:1e:1d:0e:4d:88:b9:
        fb:d4:2a:7e:4d:01:05:2e:86:2e:b1:a7:ad:a0:47:5d:1c:52:
        8f:7f:d6:ec:2c:cf:b2:4d:e1:21:1f:a0:d1:f6:c7:54:01:d6:
        72:57:0d:bb:71:29:db:e3:09:e9:db:b8:c8:52:39:ad:8c:77:
        58:c9:19:d3:6e:cd:36:92:48:2c:09:03:aa:b4:61:fe:02:57:
        b9:19:ce:4f:53:69:74:44:f6:44:57:09:22:fd:b2:28:58:f2:
        32:90:12:25:36:96:e6:b2:f8:d1:a7:6e:95:e7:2a:93:be:d6:
        11:62:c8:e9:fc:07:16:cc:62:54:85:c2:75:0f:97:d7:d3:0a:
        83:f4:62:9e:00:c7:0d:12:c7:08:3c:a0:18:58:2b:b8:fc:14:
        d2:be:64:01:d3:bd:4f:df:67:6e:50:18:f1:f1:2f:79:78:b3:
        67:48:46:20:7b:87:e1:52:52:8d:81:b0:52:45:fd:26:73:a6:
        05:62:35:4f:cb:df:2e:57:fa:56:5a:de:52:47:ac:98:45:10:
        f3:21:c2:d0:62:87:4b:0c

HTTP/1.1 401 Unauthorized
Content-Length: 0
Date: Fri, 31 Jan 2025 23:35:45 GMT
Server: Kestrel
WWW-Authenticate: Bearer error="invalid_token"