CERTUTIL -verify

Issuer:
    CN=Microsoft Update Secure Server CA 1
    O=Microsoft Corporation
    L=Redmond
    S=Washington
    C=US
Subject:
    CN=update.microsoft.com
    OU=WUPDS
    O=Microsoft
    L=Redmond
    S=Washington
    C=US
Cert Serial Number: 330000000d85e00b56115de47600000000000d

dwFlags = CA_VERIFY_FLAGS_CONSOLE_TRACE (0x20000000)
dwFlags = CA_VERIFY_FLAGS_DUMP_CHAIN (0x40000000)
ChainFlags = CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT (0x40000000)
HCCE_LOCAL_MACHINE
CERT_CHAIN_POLICY_BASE
-------- CERT_CHAIN_CONTEXT --------
ChainContext.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
ChainContext.dwRevocationFreshnessTime: 58 Days, 23 Hours, 49 Minutes, 7 Seconds

SimpleChain.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
SimpleChain.dwRevocationFreshnessTime: 58 Days, 23 Hours, 49 Minutes, 7 Seconds

CertContext[0][0]: dwInfoStatus=102 dwErrorStatus=0
  Issuer: CN=Microsoft Update Secure Server CA 1, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  NotBefore: 9/4/2013 2:40 PM
  NotAfter: 12/4/2014 2:40 PM
  Subject: CN=update.microsoft.com, OU=WUPDS, O=Microsoft, L=Redmond, S=Washington, C=US
  Serial: 330000000d85e00b56115de47600000000000d
  d1 40 2e fd b4 7a bf b8 61 f0 08 b5 bf 77 bf a8 4a 42 03 04
  Element.dwInfoStatus = CERT_TRUST_HAS_KEY_MATCH_ISSUER (0x2)
  Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
    CRL 45:
    Issuer: CN=Microsoft Update Secure Server CA 1, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
    76 dc 9d 44 ed a4 d4 cc 5f 94 a4 d3 92 4a 60 47 20 f7 90 40
  Application[0] = 1.3.6.1.5.5.7.3.1 Server Authentication

CertContext[0][1]: dwInfoStatus=102 dwErrorStatus=0
  Issuer: CN=Microsoft Root Certificate Authority, DC=microsoft, DC=com
  NotBefore: 5/30/2012 9:49 PM
  NotAfter: 5/9/2021 5:28 PM
  Subject: CN=Microsoft Update Secure Server CA 1, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  Serial: 3300000034cd097697471c7563000000000034
  Template: SubCA
  91 32 91 6f af 3d e1 4c 36 19 cf e4 da 6e 94 bc a1 97 d9 e8
  Element.dwInfoStatus = CERT_TRUST_HAS_KEY_MATCH_ISSUER (0x2)
  Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
    CRL 27:
    Issuer: CN=Microsoft Root Certificate Authority, DC=microsoft, DC=com
    e0 f4 c3 ea d6 ec 4a 2e d3 10 d2 24 d3 23 e1 22 ba ce 40 92
  Application[0] = 1.3.6.1.5.5.7.3.1 Server Authentication

CertContext[0][2]: dwInfoStatus=10c dwErrorStatus=0
  Issuer: CN=Microsoft Root Certificate Authority, DC=microsoft, DC=com
  NotBefore: 5/9/2001 5:19 PM
  NotAfter: 5/9/2021 5:28 PM
  Subject: CN=Microsoft Root Certificate Authority, DC=microsoft, DC=com
  Serial: 79ad16a14aa0a5ad4c7358f407132e65
  cd d4 ee ae 60 00 ac 7f 40 c3 80 2c 17 1e 30 14 80 30 c0 72
  Element.dwInfoStatus = CERT_TRUST_HAS_NAME_MATCH_ISSUER (0x4)
  Element.dwInfoStatus = CERT_TRUST_IS_SELF_SIGNED (0x8)
  Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)

Exclude leaf cert:
  8e 34 e0 90 76 63 c5 8c a6 9b e2 5d 7b 2d 59 f1 92 d0 c4 18
Full chain:
  34 c6 63 07 d3 83 7f 8a b5 38 15 77 b8 8e 2c f6 7f e1 dd 87
------------------------------------
Verified Issuance Policies: None
Verified Application Policies:
    1.3.6.1.5.5.7.3.1 Server Authentication
Cert is an End Entity certificate

ERROR: Verifying leaf certificate revocation status returned The revocation function was unable to check revocation because the revocation server was offline. 0x80092013 (-2146885613)
CertUtil: The revocation function was unable to check revocation because the revocation server was offline.

CertUtil: -verify command completed successfully.