portal.office.com

- Microsoft Corporation -

Issued by Microsoft IT SSL SHA2

About this certificate

This digital certificate with serial number 5a:00:02:cc:e7:df:2d:1e:d5:ae:a0:44:e3:00:01:00:02:cc:e7 was issued on by Microsoft Corporation.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:00:02:cc:e7:df:2d:1e:d5:ae:a0:44:e3:00:01:00:02:cc:e7
Serial Number (int): 2007068020798948191211328432683634701168200935
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 5b:5d:b5:44:68:27:c3:be:e5:5a:44:70:81:a3:e5:7c:72:e9:f5:80
AuthorityKeyId: 51:af:24:26:9c:f4:68:22:57:80:26:2b:3b:46:62:15:7b:1e:cc:a5

Fingerprint (sha1): f5:c0:18:e0:ba:3f:23:d9:73:c5:89:9f:a4:01:dd:fd:00:e1:09:6e
Fingerprint (sha256): 06:9a:2f:ae:4c:b6:d8:f5:04:ce:44:ed:0e:7d:95:ab:e4:35:78:40:75:af:df:17:04:98:f8:7e:32:12:82:8a

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/msitwww2.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/msitwww2.crl

Check the revocation status for certificate portal.office.com

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.office.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.office.com
portal.microsoftonline.com
portalprv.microsoftonline.com
ncuportalprv.microsoftonline.com
scuportalprv.microsoftonline.com
wusportalprv.microsoftonline.com
ncuportal.microsoftonline.com
scuportal.microsoftonline.com
neuportal.microsoftonline.com
weuportal.microsoftonline.com
seaportal.microsoftonline.com
easportal.microsoftonline.com
auth.office.com
auth.microsoftonline.com
authprv.microsoftonline.com
ncuauthprv.microsoftonline.com
scuauthprv.microsoftonline.com
wusauthprv.microsoftonline.com
ncuauth.microsoftonline.com
scuauth.microsoftonline.com
neuauth.microsoftonline.com
weuauth.microsoftonline.com
seaauth.microsoftonline.com
easauth.microsoftonline.com
ncuportal.office.com
scuportal.office.com
neuportal.office.com
weuportal.office.com
seaportal.office.com
easportal.office.com
ncuportalprv.office.com
scuportalprv.office.com
wusportalprv.office.com
ncuauth.office.com
scuauth.office.com
neuauth.office.com
weuauth.office.com
seaauth.office.com
easauth.office.com
ncuauthprv.office.com
scuauthprv.office.com
wusauthprv.office.com
portal-sdf.office.com
auth-sdf.office.com
auth-sdf.microsoftonline.com
prod.msocdn.com
ncuprodprv.msocdn.com
scuprodprv.msocdn.com
ejpportal.microsoftonline.com
wjpportal.microsoftonline.com
eusportal.microsoftonline.com
wusportal.microsoftonline.com
ejpauth.microsoftonline.com
wjpauth.microsoftonline.com
eusauth.microsoftonline.com
wusauth.microsoftonline.com
ejpportal.office.com
wjpportal.office.com
eusportal.office.com
wusportal.office.com
ejpauth.office.com
wjpauth.office.com
eusauth.office.com
wusauth.office.com

Other certificates including the domain name office.com

(limited to 100 certificates)
loki.delve.office.com
*.asm.skype.com
df.incubator.aesir.office.com
5702666986455040-fe2.pantheonsite.io
officeapps.live.com
*.footprintdns.com
*.wac.gbl.office.com
5702666986455040-fe2.pantheonsite.io
augloop.office.com
www.office.com
gls.itarl4.ingestion.office.com
nam1.gcs.office.com
outlook.com
graph.windows.net
o365auditrealtimeingestion.manage.office.com
forms.office.com
*.config.skype.com
app.ingestion.office.com
*.config.skype.com
augloop.office.com
www.office.com
ppe.sso.eduupgrade.office.com
bookings.outlookapps.com
www.office.com
www.office.com
tr-tmc-afd.office.com
augloop.office.com
cert00010-azurecdn.akamaized.net
SPOActivityPipeSigningCertKey.office.com
graph.windows.net
store.office.com
graph.windows.net
test.test.test.outlook.com
*.footprintdns.com
*.asm.skype.com
outlook.com
5702666986455040-fe2.pantheonsite.io
*.footprintdns.com
griffinb2-gru-client.office.com
outlook.com
cisurvey.office.com
support.office.com
mdsrunnermgmt.office.com
bookings.outlookapps.com
gcp.ingestion.office.com
*.domains.live.com
support.officeppe.com
portal.office.com
prod.invite.teams.internal.office.com
ifttt.edog.office.com
OfficeOMEXSigningCertKey.office.com
www.office.com
cortana.office.com
setup.office.com
manage.office.com
api.orginsights.viva.office.com
office365-waffle.forms.office.com
*.config.skype.com
portal.office.com
outlook.live.com
desdemona.osikevlartorus.office.com
support.office.com
*.gcscluster.office.com
sender.office.com
lifecycle.office.com
afd.loki.delve.office.com
support.outlook.com
portal.office.com
*.footprintdns.com
YPPServicesSigningCertKey.office.com
gcc.loki.delve.office.com
reverseproxy.onenote.com
graph.windows.net
kvaccess.delve.office.com
config.office.com
www.silicon.help
outlook.com
www.office.com
o365auditrealtimeingestion.manage.office.com
support.office.com
kvapp.df.aesir.office.com
df.invite.teams.internal.office.com
outlook.com
prod.idsapi.loki.delve.office.com
cdn.forms.office.net
uci.officeapps.live.com
hrd.office.com
*.footprintdns.com
settings.teams.internal.office.com
dreamspace.ie
chatsvcagg.teams.microsoft.com
delve-gcc.office.com
listings-dev.office.com
status.office.com
pdapi.substrate.office.com
bcws.office.com
AADSecureScoreProd012019.office.com
ciicluster-dev.eastus.portal.office.com
loki.delve.office.com
outlook.com

Certificate

The complete raw certificate details for portal.office.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9PEQ1oPdkdihqExo68o
K/dCWaOrQFIELw783BEEW9oyeg7dv7VWyANi4QpU9J/BfE+3O1iOslYqMWnZFYPc
5yOgKCfmMTl/BGvpfDooeJCCNH8gqTSTl4iUcBiD5txO3LPHIjlqZh42zTvR3zAn
wtLcz8deEdp720u0JRTCjAkOWF0ULAfZeddEbJhrBnnmEBCZSdr+0+z7RJ26G8M8
TdJ19l4Ps2zX7h+ys7cu4a/ZWdu0Hbs9KWTD3Mwm4EXZ/5eNFdxZNU2xWwtRQpDc
KBqpsg8SEfYmDocrmKOVCR4zcWGn0ZwjF6xgb/tEKBeyuwHaN06FuCJ4/bpn8V/l
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2007068020798948191211328432683634701168200935
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT SSL SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-23 20:36:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-22 20:36:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.office.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21691176177657169735851597020311592198050065692494070850108472084570130501022574500889610096682097025300110594279783095765984937737470024865496431677590884558257725391140563013279508587259233456260575884310642987224839395150171528948861399954437568136834688903066862379132317402597511521334789006456517288236638540813586516766137622733120673402226047828550519006919121806196233403525378003566001546310835407338795415973344082680595260915765453098186018455824732028427775139310182499304393503678302484777070484645107371137662512047795119105863169242150435105229006580030124472069191575495802789475837082255400363877669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b5db5446827c3bee55a447081a3e57c72e9f580
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 51af24269cf468225780262b3b4662157b1ecca5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/msitwww2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/msitwww2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps�'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1653 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprv.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuportalprv.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuportalprv.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusportalprv.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuportal.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuportal.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuportal.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weuportal.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaportal.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easportal.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authprv.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuauthprv.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuauthprv.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusauthprv.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuauth.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuauth.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuauth.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weuauth.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaauth.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easauth.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuauth.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuauth.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuauth.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weuauth.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaauth.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easauth.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuauthprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuauthprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusauthprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-sdf.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-sdf.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-sdf.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.msocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuprodprv.msocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuprodprv.msocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejpportal.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wjpportal.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eusportal.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusportal.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejpauth.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wjpauth.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eusauth.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusauth.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejpportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wjpportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejpauth.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wjpauth.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eusauth.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusauth.office.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00813782d8e8b3de32fec8b66961d57de3cd51af2a94ff8e2b8be3a272ab5c807da305490c0673177df0b388620be123aee836d5e94cfdd3ff7ea47614c505b571dee05d13c14ef282fd51bc7b366b981eb446a1d0c0c6bb7929bc04c0b4f5949a1d6fb68e2fdcba13f8b141ebb7b3dd886f69b4bc98df1ef906330a5dd76df713410a8e6ea271e336a233c2ce572ac2419f552b26997bbaf43212a5e1bdeccd7a15535065abc043720e15ea0ff2210a389930923c2a39b1c9feb9de8822807830b7781f22d2993e45424b90c4493caff3b04e8f86ce896cb69e6ffcbbbe8e953045b6b8c8d239f13f1ce2082616c84af86c3dd4980ae79c29c791b573edf504a4f541a015eaf4d01c9b6c035c4bdc125621cb99c019ee665d2b49886053b0f1b577831057ebec628537c95144e1b0885cb1ac8f27914128081320891676d4e83cfbda626d0c4e4ec2ebf12f13344b53ceae7346acdfe999ea1620ee6bb2b11f14be551bd241316aace8b52f841898b6cde62ac1514b07921f15cd15e43791a62b9d6faf51c94d26288c38fbd1fe882ab097d746cfbfd98406bdb0d763058918a147a293932bb543820006ed713cd7392e98d67d6b64997c0ed429a0e2fc504b2d3ccbbd84c6565e099ddf52243b0832ef699038ecf35bdfa2a4b874b3603838f753cfcd4cd9ee79682845bf836ea210de107943f546e18ec37afbc19df456c8b0