endpoints.office.com

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 03

About this certificate

This digital certificate with serial number 33:00:5c:91:a8:17:01:88:50:6c:36:0c:d0:00:00:00:5c:91:a8 was issued on by Microsoft Corporation.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:5c:91:a8:17:01:88:50:6c:36:0c:d0:00:00:00:5c:91:a8
Serial Number (int): 1137369504713650384439845791597853169925525928
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 67:5a:8a:8c:9f:75:ba:f8:6d:09:da:02:6d:3a:d3:e6:3e:8f:a7:21
AuthorityKeyId: fe:09:71:40:55:05:10:44:d8:a4:81:75:b8:9e:1a:e9:4a:06:88:c8

Fingerprint (sha1): a1:ab:5b:ef:2a:57:f5:81:39:11:a2:28:48:52:85:8b:f5:ed:42:f7
Fingerprint (sha256): 04:67:1c:f8:b3:4e:7a:d7:4a:aa:64:e8:6b:50:de:7a:7a:25:cd:88:52:a1:b4:e8:19:ed:15:b4:39:89:f5:0b

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl

Check the revocation status for certificate endpoints.office.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for endpoints.office.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

endpoints.office.com
endpoints.office.net
endpoints.trafficmanager.net

Other certificates including the domain name office.com

(limited to 100 certificates)
odc.officeapps.live.com
loki.delve.office.com
*.asm.skype.com
df.incubator.aesir.office.com
5702666986455040-fe2.pantheonsite.io
officeapps.live.com
*.footprintdns.com
*.wac.gbl.office.com
5702666986455040-fe2.pantheonsite.io
augloop.office.com
cachewriter.teams.microsoft.com
www.office.com
gls.itarl4.ingestion.office.com
nam1.gcs.office.com
outlook.com
config.office.com
graph.windows.net
o365auditrealtimeingestion.manage.office.com
cachewriter.teams.microsoft.com
forms.office.com
authsvc.teams.microsoft.com
*.config.skype.com
*.fp.measure.office.com
app.ingestion.office.com
*.config.skype.com
augloop.office.com
www.office.com
ppe.sso.eduupgrade.office.com
*.config.skype.com
bookings.outlookapps.com
www.office.com
www.office.com
tr-tmc-afd.office.com
augloop.office.com
cert00010-azurecdn.akamaized.net
SPOActivityPipeSigningCertKey.office.com
chatsvcagg.teams.microsoft.com
graph.windows.net
store.office.com
delve.office.com
graph.windows.net
test.test.test.outlook.com
*.footprintdns.com
*.asm.skype.com
outlook.com
setup.office.com
*.fp.measure.office.com
pls-cacheinv.teams.microsoft.com
5702666986455040-fe2.pantheonsite.io
*.footprintdns.com
griffinb2-gru-client.office.com
prod-apac.dmevents.teams.internal.office.com
outlook.com
cisurvey.office.com
support.office.com
signalr.forms.office.com
*.staffhub.office.com
mdsrunnermgmt.office.com
bookings.outlookapps.com
gcp.ingestion.office.com
*.domains.live.com
support.officeppe.com
portal.office.com
*.footprintdns.com
prod.invite.teams.internal.office.com
ifttt.edog.office.com
OfficeOMEXSigningCertKey.office.com
www.office.com
cortana.office.com
setup.office.com
manage.office.com
api.orginsights.viva.office.com
office365-waffle.forms.office.com
*.config.skype.com
prod.ppsvc.teams.internal.office.com
portal.office.com
outlook.live.com
desdemona.osikevlartorus.office.com
a-jpea.prod.templates.tac.teams.microsoft.com
support.office.com
*.gcscluster.office.com
sender.office.com
lifecycle.office.com
afd.loki.delve.office.com
support.outlook.com
portal.office.com
are.unifiedfeedback.office.com
*.footprintdns.com
YPPServicesSigningCertKey.office.com
gcc.loki.delve.office.com
reverseproxy.onenote.com
graph.windows.net
kvaccess.delve.office.com
config.office.com
authsvc.teams.microsoft.com
www.silicon.help
outlook.com
endpoints.office.com
*.staffhub.office.com
www.office.com

Certificate

The complete raw certificate details for endpoints.office.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIoDCCBoigAwIBAgITMwBckagXAYhQbDYM0AAAAFyRqDANBgkqhkiG9w0BAQwF
ADBdMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
MS4wLAYDVQQDEyVNaWNyb3NvZnQgQXp1cmUgUlNBIFRMUyBJc3N1aW5nIENBIDAz
MB4XDTI0MDYwOTEwMTA0NFoXDTI1MDYwNDEwMTA0NFowazELMAkGA1UEBhMCVVMx
CzAJBgNVBAgTAldBMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv
ZnQgQ29ycG9yYXRpb24xHTAbBgNVBAMTFGVuZHBvaW50cy5vZmZpY2UuY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1dIn9lbpfuFzFRwSuDLZkSa
Z9222VRdLhgpFUHBlYA1aI7fWbHLvNJt++YuKs5wYdmeOmSlp+D3IkpUMKB4vgqy
XjBQ9u27dr/AiBH+UM7ZsiOFG4t7fsr8YFVaLlk+slsyysf+riROQ8bGXNOUPd3d
v2FObOn+ESRhuAiB1atdwS9bkDuLukTq05LNLHS8xwPrz0QCzuLIJyjHz/WeRP1G
7vtrMGTQqkYxTh30h6H78HQzzvi0mDhVYQmKqPfK/FCRUzumz+IbcT7Wj8Y53I3K
Z+z4E7rhbcTIQJdunANVyjYIyRSKxkxj39o2hNjSwsGtSd1d9geRW10deJpZfQID
AQABo4IESTCCBEUwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AM8RVu7VLnyv
84db2Wkum+kacWdKsBfsrAHSW3fOzDsIAAABj/yD0GgAAAQDAEYwRAIgbJPcO3hc
lPwZQB2dgMUFXxIlq6KGFKBah7woQ5gduDkCIAs352Dn7IuVbfP2p+LUwlurZy0/
hOPFeKNoCsNQim8vAHYAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowuebgA
AAGP/IPQJQAABAMARzBFAiEAjcEUoJF62zAh0SDjaFO8Ao9sK3hfF3hQ+YwYgten
tLYCIH9fOKmVPR6ttJ1xaHCfS3phwAqoiVrdzbGEABYX2+8iAHYA4JKz/AwdyOdo
Nh/eYbmWTQpSeBmKctZyxLBNpW1vVAQAAAGP/IPQmwAABAMARzBFAiEApGK67Wcm
d9OcrZ3z5dEkweqcw73NNRf4GM4qk+N+p8MCIHD3NL4TPR38WG6j3hdehJkJ92TR
Dbi41ZFoMajVr8dJMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwIwCgYIKwYB
BQUHAwEwPAYJKwYBBAGCNxUHBC8wLQYlKwYBBAGCNxUIh73XG4Hn60aCgZ0ujtAM
h/DaHV2ChOVpgvOnPgIBZAIBJjCBtAYIKwYBBQUHAQEEgacwgaQwcwYIKwYBBQUH
MAKGZ2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9z
b2Z0JTIwQXp1cmUlMjBSU0ElMjBUTFMlMjBJc3N1aW5nJTIwQ0ElMjAwMyUyMC0l
MjB4c2lnbi5jcnQwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vbmVvY3NwLm1pY3Jvc29m
dC5jb20vb2NzcDAdBgNVHQ4EFgQUZ1qKjJ91uvhtCdoCbTrT5j6PpyEwDgYDVR0P
AQH/BAQDAgWgMFMGA1UdEQRMMEqCFGVuZHBvaW50cy5vZmZpY2UuY29tghRlbmRw
b2ludHMub2ZmaWNlLm5ldIIcZW5kcG9pbnRzLnRyYWZmaWNtYW5hZ2VyLm5ldDAM
BgNVHRMBAf8EAjAAMGoGA1UdHwRjMGEwX6BdoFuGWWh0dHA6Ly93d3cubWljcm9z
b2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMEF6dXJlJTIwUlNBJTIwVExT
JTIwSXNzdWluZyUyMENBJTIwMDMuY3JsMGYGA1UdIARfMF0wUQYMKwYBBAGCN0yD
fQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lv
cHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTAIBgZngQwBAgIwHwYDVR0jBBgwFoAU/glx
QFUFEETYpIF1uJ4a6UoGiMgwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMB
MA0GCSqGSIb3DQEBDAUAA4ICAQCRwU0e0Ezg4f6h8BWk/Mt7usMri5CraBKXNFKu
Wps44PY/GuXtGF8GnGlZfnop4g8nDv50ja51gFr4ZZbjevhzMhl210Qv3xwkjDsi
mY5wxBKGAjAUqIsNDWM+o345QC9TssM975uIJd054vtx7bYQOlD3vKrxpq0QOHKS
LfFZYwsZaCKVRA3w/ImQgHHSjy1adS9TlwcU54oeOAWnvr9FKM7evYv1rIKkFIn2
BaqVPevfTZkvN4GeqiUSWBJ3R7WBgzqASYlvMoS7QY7tSS8+du6zvwjCIMuIxF2X
QJOtwIqkpAG8V0D+QpaXZm9uAfsVFVRWiLIJvJ0qXxHVbd54L/sWLdaC29y4NDXV
dLdVG+5pmncJElsIyFr8Q2GlwWbYPAtVHeSG65dqUtCOfXh4JFa8dtzQb62pI5/7
xiTSFCXsAzsTJUVYEsgl4SsCrf54VB67F/HGKJW4ndpLaz3MWgRjYnBRwtVr8HCA
mM4X158tq6dXs+XbxmYMJ4rhK3xcon8loFBqwalFccvJrU0NVEsBjPGMr9+vuOc8
+DerZQ1hQ56vPMazCUMFlnudNAAIumBy1PUUw9VERd4cTlHsbkiWvCti0YSX0r1a
U8P/kql7vGBDyss2s+Rq3rDiopU6+M9ncLI7HAN1Sr5NmSk6vxo8MSbF6RsC8tfL
SZ3AVg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1dIn9lbpfuFzFRwSuDL
ZkSaZ9222VRdLhgpFUHBlYA1aI7fWbHLvNJt++YuKs5wYdmeOmSlp+D3IkpUMKB4
vgqyXjBQ9u27dr/AiBH+UM7ZsiOFG4t7fsr8YFVaLlk+slsyysf+riROQ8bGXNOU
Pd3dv2FObOn+ESRhuAiB1atdwS9bkDuLukTq05LNLHS8xwPrz0QCzuLIJyjHz/We
RP1G7vtrMGTQqkYxTh30h6H78HQzzvi0mDhVYQmKqPfK/FCRUzumz+IbcT7Wj8Y5
3I3KZ+z4E7rhbcTIQJdunANVyjYIyRSKxkxj39o2hNjSwsGtSd1d9geRW10deJpZ
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137369504713650384439845791597853169925525928
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 10:10:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-04 10:10:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'endpoints.office.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20619884900731415180682560478330614340089996995966571536364994334731193145051792179194000825994254562510555778867033862072847038372443318139771374307889950063031183955903202350822538061519806401602380883324256261450850025926021187855634842619300715533234812187198326933415592305069978795064621223563289603069810200257367410661190004242113230761246336790280682515293617445373928001676346809445543961002469108758277732952884324862348809540722468422199331526855018771638638807635684119329172454469142616873769435504065895362255464373045776172633694901715490519166974976263710226981566394673486725616881833984015285770621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							675a8a8c9f75baf86d09da026d3ad3e63e8fa721
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endpoints.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endpoints.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endpoints.trafficmanager.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe09714055051044d8a48175b89e1ae94a0688c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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