portal.office.com

- Microsoft Corporation -

Issued by Microsoft RSA TLS CA 02

About this certificate

This digital certificate with serial number 7f:00:22:c4:9f:4d:c9:fa:75:02:fb:9b:73:00:00:00:22:c4:9f was issued on by Microsoft Corporation.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7f:00:22:c4:9f:4d:c9:fa:75:02:fb:9b:73:00:00:00:22:c4:9f
Serial Number (int): 2832206471169704573146200065498231296581878943
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 77:74:20:a7:27:55:f1:32:96:bc:ed:59:f5:4b:02:99:d8:26:87:59
AuthorityKeyId: ff:2f:7f:e1:06:f4:38:f3:2d:ed:25:8d:98:c2:fe:0e:f6:6c:fc:fa

Fingerprint (sha1): 86:0b:00:6c:70:34:a5:03:95:a4:0d:9f:57:62:4b:06:f1:9f:4a:34
Fingerprint (sha256): 05:d1:ed:d5:88:82:df:66:97:3e:7d:1c:40:8f:19:6b:c2:19:57:6c:2f:0e:73:b8:ce:95:31:73:9a:4a:55:17

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2002.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl

Check the revocation status for certificate portal.office.com

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.office.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.office.com
*.portal.office.com
portal.microsoftonline.com
portalprv.microsoftonline.com
ncuportal.office.com
scuportal.office.com
weuportal.office.com
seaportal.office.com
easportal.office.com
ncuportalprv.office.com
scuportalprv.office.com
wusportalprv.office.com
portal.microsoft.com
portal-sdf.office.com
prod.msocdn.com
ncuprodprv.msocdn.com
scuprodprv.msocdn.com
wusprodprv.msocdn.com
ejpportal.office.com
eusportal.office.com
wusportal.office.com
frcportal.office.com
eauportal.office.com
cusportal.office.com
wjpnportal.office.com
wjpportal.office.com
admin.microsoft.com
admin.microsoft365.com
ncuportalprv-staging.office.com
scuportalprv-staging.office.com
ejpportal-staging.office.com
admin-sdf.microsoft.com
admin-ignite.microsoft.com
wukportal.office.com
portal.office365.com
indportal.office.com
brzportal.office.com
staging.brzportal.office.com
staging.cusportal.office.com
staging.eauportal.office.com
staging.eusportal.office.com
staging.frcportal.office.com
staging.indportal.office.com
staging.scuportal.office.com
staging.seaportal.office.com
staging.weuportal.office.com
staging.wjpportal.office.com
staging.wukportal.office.com
staging.wusportal.office.com
staging.scuportalprv.office.com
staging.wusportalprv.office.com
staging.ncuportalprv.office.com

Other certificates including the domain name office.com

(limited to 100 certificates)
loki.delve.office.com
*.asm.skype.com
df.incubator.aesir.office.com
5702666986455040-fe2.pantheonsite.io
officeapps.live.com
*.footprintdns.com
*.wac.gbl.office.com
5702666986455040-fe2.pantheonsite.io
augloop.office.com
www.office.com
gls.itarl4.ingestion.office.com
nam1.gcs.office.com
outlook.com
graph.windows.net
o365auditrealtimeingestion.manage.office.com
forms.office.com
*.config.skype.com
app.ingestion.office.com
*.config.skype.com
augloop.office.com
www.office.com
ppe.sso.eduupgrade.office.com
bookings.outlookapps.com
www.office.com
www.office.com
tr-tmc-afd.office.com
augloop.office.com
cert00010-azurecdn.akamaized.net
SPOActivityPipeSigningCertKey.office.com
graph.windows.net
store.office.com
graph.windows.net
test.test.test.outlook.com
*.footprintdns.com
*.asm.skype.com
outlook.com
5702666986455040-fe2.pantheonsite.io
*.footprintdns.com
griffinb2-gru-client.office.com
outlook.com
cisurvey.office.com
support.office.com
mdsrunnermgmt.office.com
bookings.outlookapps.com
gcp.ingestion.office.com
*.domains.live.com
support.officeppe.com
portal.office.com
prod.invite.teams.internal.office.com
ifttt.edog.office.com
OfficeOMEXSigningCertKey.office.com
www.office.com
cortana.office.com
setup.office.com
manage.office.com
api.orginsights.viva.office.com
office365-waffle.forms.office.com
*.config.skype.com
portal.office.com
outlook.live.com
desdemona.osikevlartorus.office.com
support.office.com
*.gcscluster.office.com
sender.office.com
lifecycle.office.com
afd.loki.delve.office.com
support.outlook.com
portal.office.com
*.footprintdns.com
YPPServicesSigningCertKey.office.com
gcc.loki.delve.office.com
reverseproxy.onenote.com
graph.windows.net
kvaccess.delve.office.com
config.office.com
www.silicon.help
outlook.com
www.office.com
o365auditrealtimeingestion.manage.office.com
support.office.com
kvapp.df.aesir.office.com
df.invite.teams.internal.office.com
outlook.com
prod.idsapi.loki.delve.office.com
cdn.forms.office.net
uci.officeapps.live.com
hrd.office.com
*.footprintdns.com
settings.teams.internal.office.com
dreamspace.ie
chatsvcagg.teams.microsoft.com
delve-gcc.office.com
listings-dev.office.com
status.office.com
pdapi.substrate.office.com
bcws.office.com
AADSecureScoreProd012019.office.com
ciicluster-dev.eastus.portal.office.com
loki.delve.office.com
outlook.com

Certificate

The complete raw certificate details for portal.office.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYKdLF6kJkf9+FoqvO+2
GuJOcv1TRWC/DXEC7OMZ5Nz9qyFs7ZX4iuAVw8nKOejzqq2U8SeARRdIjX7iDZzl
sUB8sNrqBgx5bP6khnpTPNuOfzr8o0DUq3/ktFx51On6L62IfqPydRB9vs8kYM6k
vnv1okXHvhf/y1UZbQT0ldYrHCBSQZxi3Fnq1/RzHjw8Glxa6bdBt2P2yluQcr6Y
Pq3dgPJdDYvXyoCeCdxh6mDaUk+LF9JvMKKx1EOnvEHH+7in/sVbqHvuOHUw6CMt
ZcqO5mXPF4W6de8X41FpJdXNYlwXcRvVTSr3XNpM5zXrxt+sNXEnBJ4++IpFYl3y
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2832206471169704573146200065498231296581878943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft RSA TLS CA 02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-03 21:16:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-03 21:16:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.office.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24428401001800461526949892553591958431886844437481753867357247548587418077611632503930191177909808546155403842680414715478706977051850807888882551144931523541068526155431973713906236426515311749466175551503120274740478502829796867863185358977049849399612090610399737019110916738143552512049115002192259723609952814398167836449720208296713591707413150312070529603591048943705265819718734636603654087664172806609756421635391804309551896842354147291226750551185854326584862491130427201528426777184781311811650557159090999573728818080216391085752911610067992312864994590771661923087485120645101387769645590198367230489109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.949264.12871800
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2002.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							777420a72755f13296bced59f54b0299d8268759
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1337 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprv.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-sdf.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.msocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuprodprv.msocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuprodprv.msocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusprodprv.msocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejpportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frcportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eauportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wjpnportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wjpportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.microsoft365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuportalprv-staging.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuportalprv-staging.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejpportal-staging.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-sdf.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-ignite.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wukportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.office365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brzportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.brzportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.eauportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.eusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.frcportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.indportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.scuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.seaportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.weuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wjpportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wukportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.scuportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wusportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ncuportalprv.office.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ff2f7fe106f438f32ded258d98c2fe0ef66cfcfa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00475e4f75a9e9782b6d254ce23a52ba57268e0e1bf5b256161ed80a272a6f55038e6f36b98417c1209d0718e55e39c365929cbe0dfb6ca77c211a11b1039460f954445d6a7906b83ebeb718fc373f02290006639c869e2999708cce78a69ee48d0ac4b6a93a3cad48b3feb2d83594285d58ee3702647c25cf50ae413b9655cde3b9e6812aef56d3709798ca834fa68f2cff804ae8b523a317dc8834f6c8f8e4ce2002162c8aeb6670b35e02ee751c45bf01387df01b97d6579efd7897f0e2938aaf7f28564f1b4f350805fa397866d94251f88612e2f2b8c202b49187b42cfd952345629ddcdfe68154b14894c7012357931f1ce34e8bbbacf70b803ce817e6ef6fa85e6a39ef2e61e746d9696531f9a7f41abe1732b3e9a52787572f69fb3bc1fd05d34f0118508b84f287de02954651cd278eb8c8fd6067250b12cb1a39935c9b6579156721e76272212f795b021a3b82afeda7a3a12246e9ae8758bfefa1f3ada8979c1546d31f39d5581fc18d27b0f64779a6e9505558673c5e1be56825e39895de278f7793449fdbd9027892abbd175063fa900b6c08d66d0ad6562bc4cec87157dce763790129073a50e6f3b258eed9762e3453d51825463e90da883f0c506196f8d62939bc901dc0df19f3df446adc1bf8759cd5d555f637f3f4f837ffe67d569fdf89e27316dcfa48fcdda4607a5cce36686ea64ecd626a86bedcea3f