Kestrel

HTTP/1.1 400 Bad Request
Date: Wed, 26 Mar 2025 23:23:11 GMT
Server: Kestrel
Transfer-Encoding: chunked
X-Server-Version: 1.0.2717.22
Server-Timing: total;dur=0.031

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:01:77:bf:50:3e:5b:da:30:c1:66:0e:9e:00:00:01:77:bf:50
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, O=Microsoft Corporation, CN=Microsoft Azure RSA TLS Issuing CA 07
        Validity
            Not Before: Mar  2 19:06:11 2025 GMT
            Not After : Aug 29 19:06:11 2025 GMT
        Subject: C=US, ST=WA, L=Redmond, O=Microsoft Corporation, CN=can.complianceposturemanagement.office.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d7:eb:3e:e7:a4:8a:5d:f5:a9:87:f6:87:20:c6:
                    23:ea:50:47:8c:25:24:71:ab:8e:33:c0:f0:6a:6d:
                    3b:7f:60:d7:b6:e9:7d:b4:78:10:c0:85:f8:d8:3f:
                    fb:26:8f:eb:f1:cd:9e:08:62:94:59:49:90:96:35:
                    9a:7f:03:6b:66:5e:3a:51:14:92:0e:d1:df:95:cd:
                    49:60:5f:d5:bb:22:0e:db:91:bb:f0:a6:37:3d:b2:
                    9a:f4:de:e2:8b:21:14:11:42:8a:f1:30:d2:c1:16:
                    f4:cc:20:e6:1b:68:83:97:23:5b:d5:29:f2:f2:a4:
                    76:9f:d3:a8:d7:c3:d2:bb:e4:23:ec:e4:b0:5b:c5:
                    bb:0a:38:cb:60:aa:c7:11:a6:07:14:91:cc:39:43:
                    f1:de:16:bc:9a:93:76:ea:16:22:6b:bd:e5:18:11:
                    ce:36:ad:04:e0:37:8b:32:a9:e8:7b:a9:da:38:98:
                    fb:8b:cc:1d:46:47:64:ed:31:54:b4:c3:42:a8:72:
                    d7:db:00:84:25:b6:d2:2a:c3:c4:38:21:ba:c3:ca:
                    42:1b:88:3a:d8:9c:d5:c7:27:f8:48:de:9e:a6:73:
                    0a:3b:f4:67:f2:aa:e1:1e:00:6f:9a:0e:09:d9:47:
                    c1:4e:95:22:01:98:1b:5b:52:84:ca:a3:ad:5d:cb:
                    00:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Mar  2 19:16:13.911 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:42:EA:DD:E8:AF:CC:43:41:73:02:EF:05:
                                DD:05:28:C9:66:E5:DB:10:00:83:94:C0:8C:8E:F8:C1:
                                70:71:A0:BE:02:21:00:DD:9A:50:7F:6B:28:F2:E1:9D:
                                83:96:74:C4:2C:01:39:2F:0C:EE:68:2C:A2:47:B7:1F:
                                4D:3C:50:3D:1B:A1:27
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Mar  2 19:16:14.081 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:74:52:DB:81:22:75:22:2A:E0:08:D7:40:
                                2D:2C:86:E6:85:87:3F:A1:8C:7D:0A:3C:B1:C9:F1:06:
                                EF:D4:98:37:02:21:00:91:29:95:73:58:A4:F9:2A:32:
                                61:D4:C4:60:F2:3B:42:59:CD:05:FC:D4:3D:77:BB:8A:
                                86:39:D5:7A:C5:54:D2
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 1A:04:FF:49:D0:54:1D:40:AF:F6:A0:C3:BF:F1:D8:C4:
                                67:2F:4E:EC:EE:23:40:68:98:6B:17:40:2E:DC:89:7D
                    Timestamp : Mar  2 19:16:14.136 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C7:00:A8:A3:75:F2:82:DD:54:8A:1E:
                                74:64:53:63:43:28:E3:33:6A:07:02:87:B5:0C:57:CD:
                                9E:8A:D4:5B:F5:02:21:00:E5:EB:66:F9:05:D0:21:7F:
                                B9:14:F5:92:23:CA:7C:0E:2E:B2:C7:91:C7:D5:FB:5C:
                                01:11:47:CD:AF:48:B1:E0
            Microsoft Application Policies Extension: 
                0.0
..+.......0
..+.......
            Microsoft certificate template: 
                0-.%+.....7.........F...........]...0......d..-
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt
                OCSP - URI:http://oneocsp.microsoft.com/ocsp
            X509v3 Subject Key Identifier: 
                1B:9C:14:36:18:B1:FB:33:07:83:D5:4F:7B:40:3F:47:FD:71:71:E6
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Subject Alternative Name: 
                DNS:can.complianceposturemanagement.office.net, DNS:can.complianceposturemanagement.office.com
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.311.76.509.1.1
                  CPS: http://www.microsoft.com/pkiops/Docs/Repository.htm
                Policy: 2.23.140.1.2.2
            X509v3 Authority Key Identifier: 
                CE:15:16:3B:EA:02:A3:A6:6B:DA:D9:2B:FD:E5:8C:52:BE:7A:50:A8
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        92:8a:cd:8b:af:29:c9:39:b5:1e:8f:5c:2f:bf:fb:1d:86:b5:
        2f:e5:8e:8b:e3:4b:f9:da:78:e8:4e:cd:69:26:02:0c:26:e9:
        05:30:66:c2:5c:f1:43:79:5a:10:45:18:a8:d2:8b:09:d9:27:
        dc:b9:b3:5a:b3:09:65:28:06:f3:db:ad:f9:74:e5:aa:be:d4:
        9e:d8:a1:e7:05:f6:93:69:57:f6:73:bf:ef:9f:08:dc:fd:f8:
        4e:6a:a8:46:48:7a:e8:df:cd:5d:53:5d:4f:db:02:5e:24:8d:
        de:7f:37:e2:12:08:22:78:6b:4e:66:5e:af:47:23:c4:58:02:
        6d:ba:88:88:85:b1:0b:97:26:85:3d:f3:62:18:15:ea:16:95:
        18:73:35:b8:b8:1c:be:70:34:4f:65:03:36:e2:a6:c5:dc:86:
        57:52:a4:b6:5e:44:db:fe:e7:a7:18:f5:3c:47:c8:85:16:e1:
        73:7a:62:1d:b8:32:d0:f4:d8:12:a8:18:55:a7:6f:98:59:35:
        27:8e:61:75:7d:6d:92:b2:d8:de:8d:d7:c9:ee:3f:8d:c5:b9:
        b6:e1:e2:30:7b:87:99:62:b0:a3:37:45:a0:d3:42:e6:4e:f6:
        0c:cd:3c:73:55:62:1a:b9:92:0c:ec:fc:0b:5c:97:97:ca:d6:
        35:bd:e8:9d:0e:0d:69:e7:c3:91:d2:75:34:37:e5:9d:97:f4:
        44:4f:70:28:b8:18:16:02:09:73:fe:87:24:c0:d1:a3:57:3b:
        26:46:d3:39:74:5b:7a:bd:3f:af:aa:8a:ce:0b:7b:22:5b:ca:
        b1:ce:b8:93:25:88:52:b5:3c:94:75:a0:4c:d6:de:c0:40:6a:
        b8:cb:7d:85:fe:43:b0:96:41:bb:fe:81:6e:1c:38:9a:ca:67:
        b3:12:63:3c:f1:b0:b3:cf:ab:50:1d:bc:95:1e:57:b5:25:bf:
        79:c6:41:8b:60:63:41:2a:81:79:65:50:33:ef:10:7c:16:73:
        22:71:52:18:ee:3b:6a:5d:d9:27:78:d5:3a:ee:a0:af:4e:45:
        64:20:0b:81:a7:8a:d3:d1:93:0a:5c:e4:25:9a:29:9a:53:70:
        e7:8f:a7:20:ec:f9:0f:36:c4:10:1c:31:ca:f6:22:d3:cd:71:
        13:17:e2:fa:3e:24:b5:a5:3f:47:03:43:0a:a5:f3:bd:32:ac:
        17:54:f9:f8:84:91:b7:f8:e3:95:c4:0a:fa:21:d7:2a:22:ee:
        3d:25:cb:63:ac:f9:e5:00:2b:7f:3f:be:05:a5:cd:cb:4e:c8:
        37:73:60:96:1d:54:e5:8d:32:1a:44:8b:ae:76:98:26:03:48:
        0e:0f:21:08:a4:de:f0:1b