bfmigration.protection.outlook.de

- Microsoft Deutschland MCIO GmbH -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 40:c0:47:97:2f:c9:bf:d2:0c:89:aa:23:58:09:cd:fd was issued on by D-Trust GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Deutschland MCIO GmbH

Company registration number: CSM026563749
Organization: Microsoft Deutschland MCIO GmbH
Organization unit: Office
State / Province: Bayern
Locality: Muenchen
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 40:c0:47:97:2f:c9:bf:d2:0c:89:aa:23:58:09:cd:fd
Serial Number (int): 86068964756397397091100266577594535421
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 10:ae:3d:c8:fe:1e:6e:f5:79:96:81:f1:fb:f7:76:71:12:1c:fb:d7
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 2d:be:22:87:57:42:5e:3a:00:1b:b6:c8:93:37:b7:a5:f0:64:d5:57
Fingerprint (sha256): 01:11:1c:e6:61:72:da:41:c7:a7:07:70:d6:e2:72:55:ab:af:68:3e:d2:9e:d5:7e:ea:75:33:cc:08:e9:f7:d9

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate bfmigration.protection.outlook.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bfmigration.protection.outlook.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bfmigration.protection.outlook.de

Other certificates including the domain name outlook.de

(limited to 100 certificates)
outlook-fd-0009.live.com
bfmigration.protection.outlook.de
networkmachinefirewall.protection.outlook.de
Interim-BF-Tafe.deutrs02.protection.outlook.de
mdoreputationobjectstore.outlook.de
outlook-fd-0009.live.com
*.eop-ger01.prod.protection.outlook.de
outlook-fd-0009.live.com
MicrosoftSubstrateManagement.outlook.de
lowprivclientBF.torus.protection.outlook.de
*.eop-ger01.prod.protection.outlook.de
NrtDataRelay.protection.outlook.de
*.safelinks.protection.outlook.de
tafe.deutrs02.outlook.de
am.protection.outlook.de
transport.outlook.de
exoglsauth.outlook.de
IPReputationObjectStore.protection.outlook.de
usersettings.outlook.de
uminternal.um.prod.outlook.de
o365auditsvc.gble1.protection.outlook.de
outlook.de
ger-ads.audit.protection.outlook.de
IPReputationObjectStore.outlook.de
authgls.protection.outlook.de
am.protection.outlook.de
*.atp.protection.outlook.de
oauthaad.protection.outlook.de
torus-parameter-override-prod.pub.ngcmtls.outlook.de
outlook-fd-0009.live.com
auth.russervice.protection.outlook.de
test.certdojo.outlook.de
ecsclient.changemanagement.outlook.de
outlook-fd-0008.live.com
*.safelinks.protection.outlook.de
exap.um.outlook.de
griffincapacityservicegcp.outlook.de
transport.outlook.de
ExoDelivery.protection.outlook.de
cyrenfetcher.protection.partner.outlook.de
informationprotectionkeyvault.protection.outlook.de
tafe.deutrseop.outlook.de
msexchangetransport.outlook.de
auth.protection.outlook.de
outlook.de
exoauth.russervice.protection.outlook.de
o365auditsvc.gble1.protection.outlook.de
exoauth.protection.outlook.de
mail.protection.outlook.com
cosmosclient.o365adtsvc.protection.outlook.de
eop-gls06.prod.protection.outlook.de
Ediscovery.protection.outlook.de
docparsingassistant.outlook.de
*.smartlinks.protection.outlook.de
*.safelinks.protection.outlook.com
exoauth.protection.outlook.de
uminternal.um.prod.outlook.de
o365auditsvc.gble1.protection.outlook.de
mrsclientauth.outlook.de
cosmos.protection.outlook.de
outlook.de
lowprivclientBF.torus.protection.outlook.de
*.o365ediscoverysvc.gble1.protection.outlook.de
test.test.uminternal.um.prod.outlook.de
pswsproxy.outlook.de
nrtxsendclient.auditing.protection.outlook.de
o365adtdispsvc.protection.outlook.de
outlook-fd-0009.live.com
tafe.deutrs02.outlook.de
uminternal.um.prod.outlook.de
Test.production.outlook.de
outlook-fd-0008.live.com
gls.auditing.protection.outlook.de
*.controlleddelivery.protection.outlook.de
IPReputationObjectStore.protection.outlook.de
GriffinCapacityServiceGCP.outlook.de
aadgwclient.coreauth.outlook.de
exoauth.protection.outlook.de
outlook-fd-0009.live.com
test.production.outlook.de
o365auditrealtimeingestion.gble1.protection.outlook.de
*.safelinks.protection.outlook.com
BF-Office365.outlook.de
Transport.SecretSafeBF.torus.protection.outlook.de
sti.coreauth.outlook.de
O365ediscoveryexport.protection.outlook.de
*.protection.outlook.de
GriffinAzureManagementServicePrincipal.outlook.de
GriffinOsiEv2Extension.outlook.de
GriffinAzureManagementServicePrincipal.outlook.de
*.informationProtectionKeyVault.protection.outlook.de
o365auditsvc.gble1.protection.outlook.de
*.exap-int.um.prod.outlook.de
exap-int.um.prod.outlook.de
*.atp.protection.outlook.de
dauth.server.capacitydms.exo.outlook.de
mail.protection.outlook.com
bitlocker.protection.outlook.de
uminternal.um.prod.outlook.de
BlackForest-lockbox.deutrs02.outlook.de

Certificate

The complete raw certificate details for bfmigration.protection.outlook.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEnX3MlPCpcd17VzaOGM
26+1kJS3gQBmviUL4voWZDoF27FH20UCGCpEdUOqhY0LZP5P6616zQesnszv/TGM
QYbQ8sra4390K5tRTf7SNiq8WwEhm3GkErk/2wfvSvZiwbFY3dGHhI6mfdsE2ESn
bn5GpbHc5dGkc3KfMl3FWo3e+yrzBpEaq51wvxIWg4mDQ7LGU5sMIK9xjdEdHNuQ
G8va5qoQTUnhH3VVU0EEG05fJ0IWMwqh2B1FSXQpBH8Exnj4nWciUQ8gnLF3pWbc
sGuCaGIzr12J6cZ8l7cwIliLjoxav+3NWvwmZeJmOpdojztNFKrl7ukr3gPZB+Gf
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 86068964756397397091100266577594535421
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-23 20:27:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-23 20:27:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM026563749'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Deutschland MCIO GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bfmigration.protection.outlook.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23264261559076235036445747371425525715202335978896479113365655319775977959512233758407594312495274763227766203730399245324025892245987138373311088407665036567559181755028182311973481487822418330127982103921930597808513487518353310262236536912595782773971697637177636047968381190800304086144269899398828563830236535411829902051946631646227699525472613904188856128621453931814351490680472176101148837832128290946360062853479479248549928724905867279595016756751463808899390990623425879496528353106368720642668102370731010480299546699138008558510285470396484484238138238277723254364312606491687430434217566448672214982527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfmigration.protection.outlook.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10ae3dc8fe1e6ef5799681f1fbf77671121cfbd7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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