portal.office.com

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 07

About this certificate

This digital certificate with serial number 33:00:03:54:c0:cb:a5:ef:8e:b4:ed:53:3c:00:00:00:03:54:c0 was issued on by Microsoft Corporation.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:03:54:c0:cb:a5:ef:8e:b4:ed:53:3c:00:00:00:03:54:c0
Serial Number (int): 1137339138628365661741127610867980894715729088
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 41:22:94:10:57:5b:ba:f8:91:f8:06:0b:3f:70:99:72:1a:84:84:13
AuthorityKeyId: ce:15:16:3b:ea:02:a3:a6:6b:da:d9:2b:fd:e5:8c:52:be:7a:50:a8

Fingerprint (sha1): 97:db:5b:d9:53:b5:e0:73:c7:14:b9:13:6a:6b:e8:f7:3c:94:f0:3c
Fingerprint (sha256): 03:29:6c:d8:4f:57:76:39:3a:ea:ac:e1:b9:cb:fa:2b:61:8d:fc:7f:fd:fc:52:24:8c:1e:7b:41:fb:47:f3:57

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl

Check the revocation status for certificate portal.office.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.office.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.office.com
*.portal.office.com
portal.microsoftonline.com
portalprv.microsoftonline.com
ncuportal.office.com
scuportal.office.com
weuportal.office.com
seaportal.office.com
easportal.office.com
ncuportalprv.office.com
scuportalprv.office.com
wusportalprv.office.com
portal.microsoft.com
portal-sdf.office.com
prod.msocdn.com
ncuprodprv.msocdn.com
scuprodprv.msocdn.com
wusprodprv.msocdn.com
ejpportal.office.com
eusportal.office.com
wusportal.office.com
frcportal.office.com
eauportal.office.com
cusportal.office.com
wjpnportal.office.com
wjpportal.office.com
admin.microsoft.com
admin.microsoft365.com
ncuportalprv-staging.office.com
scuportalprv-staging.office.com
ejpportal-staging.office.com
admin-sdf.microsoft.com
admin-ignite.microsoft.com
wukportal.office.com
portal.office365.com
indportal.office.com
brzportal.office.com
staging.brzportal.office.com
staging.cusportal.office.com
staging.eauportal.office.com
staging.eusportal.office.com
staging.frcportal.office.com
staging.indportal.office.com
staging.scuportal.office.com
staging.seaportal.office.com
staging.weuportal.office.com
staging.wjpportal.office.com
staging.wukportal.office.com
staging.wusportal.office.com
staging.scuportalprv.office.com
staging.wusportalprv.office.com
staging.ncuportalprv.office.com
cusportal-csesstaging.office.com
weuportal-csesstaging.office.com
seaportal-csesstaging.office.com
cusportal-cses.office.com
wusportal-cses.office.com
weuportal-cses.office.com
eusportal-cses.office.com
scuportal-cses.office.com
brzportal-cses.office.com
wjpportal-cses.office.com
eauportal-cses.office.com
seaportal-cses.office.com
indportal-cses.office.com
wukportal-cses.office.com
frcportal-cses.office.com
ejpportal-cses.office.com

Other certificates including the domain name office.com

(limited to 100 certificates)
loki.delve.office.com
*.asm.skype.com
df.incubator.aesir.office.com
5702666986455040-fe2.pantheonsite.io
officeapps.live.com
*.footprintdns.com
*.wac.gbl.office.com
5702666986455040-fe2.pantheonsite.io
augloop.office.com
www.office.com
gls.itarl4.ingestion.office.com
nam1.gcs.office.com
outlook.com
graph.windows.net
o365auditrealtimeingestion.manage.office.com
forms.office.com
*.config.skype.com
app.ingestion.office.com
*.config.skype.com
augloop.office.com
www.office.com
ppe.sso.eduupgrade.office.com
bookings.outlookapps.com
www.office.com
www.office.com
tr-tmc-afd.office.com
augloop.office.com
cert00010-azurecdn.akamaized.net
SPOActivityPipeSigningCertKey.office.com
graph.windows.net
store.office.com
graph.windows.net
test.test.test.outlook.com
*.footprintdns.com
*.asm.skype.com
outlook.com
5702666986455040-fe2.pantheonsite.io
*.footprintdns.com
griffinb2-gru-client.office.com
outlook.com
cisurvey.office.com
support.office.com
mdsrunnermgmt.office.com
bookings.outlookapps.com
gcp.ingestion.office.com
*.domains.live.com
support.officeppe.com
portal.office.com
prod.invite.teams.internal.office.com
ifttt.edog.office.com
OfficeOMEXSigningCertKey.office.com
www.office.com
cortana.office.com
setup.office.com
manage.office.com
api.orginsights.viva.office.com
office365-waffle.forms.office.com
*.config.skype.com
portal.office.com
outlook.live.com
desdemona.osikevlartorus.office.com
support.office.com
*.gcscluster.office.com
sender.office.com
lifecycle.office.com
afd.loki.delve.office.com
support.outlook.com
portal.office.com
*.footprintdns.com
YPPServicesSigningCertKey.office.com
gcc.loki.delve.office.com
reverseproxy.onenote.com
graph.windows.net
kvaccess.delve.office.com
config.office.com
www.silicon.help
outlook.com
www.office.com
o365auditrealtimeingestion.manage.office.com
support.office.com
kvapp.df.aesir.office.com
df.invite.teams.internal.office.com
outlook.com
prod.idsapi.loki.delve.office.com
cdn.forms.office.net
uci.officeapps.live.com
hrd.office.com
*.footprintdns.com
settings.teams.internal.office.com
dreamspace.ie
chatsvcagg.teams.microsoft.com
delve-gcc.office.com
listings-dev.office.com
status.office.com
pdapi.substrate.office.com
bcws.office.com
AADSecureScoreProd012019.office.com
ciicluster-dev.eastus.portal.office.com
loki.delve.office.com
outlook.com

Certificate

The complete raw certificate details for portal.office.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS0uvGHND9XJhPtSuxAa
L9b0WtdWyXNtjecHIhfIf3OH1ZQjmbxFHEYnntEhKrsd6/KcOz6fQfmhlU1Teldn
VIjOdhbQEWSMuGgPqIxO9/aAscYSYaUuZRleOhewgx8403EjsdPVyKidzeEmIbBA
Q0+e1VMAqI52A9dDO5VRSfpJE1hiC/JGbaKoRMycyaRuRC0gqE/tlqr67mDAwd2v
8Z0TV9Wcv57Hp1zanGWNBdEYlAloxcX9ht/msrHkfw9K5oVJkfPGdbnsar40Cqjt
k3gW17ZBV1vRiGjE+NSmiNCCLfVRXPWIKeidukkHQ9rejSyZsMUpC/YYfq70Z+wq
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137339138628365661741127610867980894715729088
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 07'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 19:14:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-06 19:14:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.office.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24891226430026824411172516771576144845190245837915030853435277421701901486823559037592623845940082405848305952545120199053959082208589328525960107243816544696374775888760092184489498295805004329217578487961030290851119333555228675939186212747752083504912830532739964496190780836972427006090234454494757917751901914210460946660279575552838705449808407158446386934535541941892996311159558601860233207106240158503647556448909878632018965387255663965080408826797680447692449106298488996723346078634281818561099643426291336423794536288386005714530049030100578767104323898858810080863285895717394518510561762314660145277477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							41229410575bbaf891f8060b3f7099721a848413
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1790 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprv.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-sdf.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.msocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuprodprv.msocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuprodprv.msocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusprodprv.msocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejpportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frcportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eauportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wjpnportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wjpportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.microsoft365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuportalprv-staging.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuportalprv-staging.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejpportal-staging.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-sdf.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-ignite.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wukportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.office365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brzportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.brzportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.eauportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.eusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.frcportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.indportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.scuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.seaportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.weuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wjpportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wukportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.scuportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wusportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ncuportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cusportal-csesstaging.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weuportal-csesstaging.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaportal-csesstaging.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cusportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weuportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eusportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brzportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wjpportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eauportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wukportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frcportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejpportal-cses.office.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ce15163bea02a3a66bdad92bfde58c52be7a50a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0021194ddabe20237762963ad2a9cc006f64ec9cfe7647e9bb50d27436a9fd64f5dc4ce2e599394dae9f25d97322c8213a0f3015ecbdad0756fe96d9b95ea60f246037aba38dc07691f4710adc1ec94d12e9c0e42ad5aace1da1c255fd5fdcbaa74aa1197818cb5202c184f6c6ef65d1392c4e30fd845b5081327421b6cdf93ad1ab43dcf2a533669238cfc8a7e2a4d1a55601832a1006f91fab6d2c2221c077b595a37a344ed358238828fa43bc5102dfb7dd79c4d31b844b178fff330797f61c47cbe467c619c5583b7e5a36bdcfbb9e9e4af06019669ecf8986c441366995b2994d5c141dd0481a85ff2fccfa4987a7b7196e5339ab130229d49ce966e4f029aa93c740d050e885764f322302011716d6b787f1a9fba2e039595383a652d4c0b0158756653cb5acbd876816722d698e5d9c409f68a1ddf9fd74950734eb4c5e23e227bd63484b5577335de7f550abb9ffdadb1146b47a5cfd2530137ea73f1779d1481e41b966c416ecace197d68866dc9100d38e8e2fb2563d1ab97b9e9bab5e4705f6ca1c046480838ac5f5fee5e76ea5aa7af65297d555eaa5f9e196b19d42a7d1a247775aa506889bbc65c74daaa2f04be5dde51ac8509c74227f89c8fb726618868d987733a769f4366144ad3baa043fbec86a27938fdf88b0ba4b170c85b5dadde694182af22930c0c2a63f7c0a5878973c47fd44347f39052d744fd1