portal.office.com
- Microsoft Corporation -
Issued by Microsoft Azure RSA TLS Issuing CA 08
About this certificate
This digital certificate with serial number 33:00:2b:2f:c2:6b:0e:eb:a4:b8:2a:e3:5a:00:00:00:2b:2f:c2 was issued on by Microsoft Corporation.
With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Microsoft Corporation
Organization:
Microsoft Corporation
State / Province:
WA
Locality: Redmond
Country: US
Locality: Redmond
Country: US
Microsoft Corporation
Organization:
Microsoft Corporation
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 33:00:2b:2f:c2:6b:0e:eb:a4:b8:2a:e3:5a:00:00:00:2b:2f:c2Serial Number (int): 1137352700750032172969029920874518829398175682
Serial Number lenght: 150 bits, 19 octets
SubjectKeyId: 0f:19:d7:80:3a:ae:ea:23:66:00:ea:4b:60:52:b3:57:b4:d2:fb:e5
AuthorityKeyId: f6:7e:2f:bd:80:a3:4a:b2:70:5b:eb:df:9a:1f:d8:ed:ca:61:80:07
Fingerprint (sha1): 57:ed:10:91:c6:04:5d:37:5f:8b:0e:23:ab:ed:c8:7b:60:b8:2e:2e
Fingerprint (sha256): 0d:0d:4e:f5:2a:cd:de:47:d1:a7:a4:55:4f:b8:0e:ae:23:06:b3:eb:96:91:9b:eb:5d:95:fc:4f:cb:d3:96:5a
Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt
Revocation information
OCSP Server: http://oneocsp.microsoft.com/ocspCRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl
Check the revocation status for certificate portal.office.com
29
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for portal.office.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
12 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
portal.office.com
portal.microsoftonline.com
portalprv.microsoftonline.com
ncuportalprv.office.com
office.com
portal.microsoft.com
home.office.com
portal-sdf.office.com
prod.msocdn.com
www.office.com
*.portal.office.com
*.www.office.com
admin.microsoft.com
admin.microsoft365.com
www.microsoft365.com
ntp.www.office.com
fluid.office.com
microsoft365.com
word.office.com
excel.office.com
powerpoint.office.com
visio.office.com
apps.office.com
stream.office.com
portal.office365.com
m365.go.microsoft
m365.cloud.microsoft
helpdeskbusinessassist.microsoft.com
admin.cloud.microsoft
portal.microsoftonline.com
portalprv.microsoftonline.com
ncuportalprv.office.com
office.com
portal.microsoft.com
home.office.com
portal-sdf.office.com
prod.msocdn.com
www.office.com
*.portal.office.com
*.www.office.com
admin.microsoft.com
admin.microsoft365.com
www.microsoft365.com
ntp.www.office.com
fluid.office.com
microsoft365.com
word.office.com
excel.office.com
powerpoint.office.com
visio.office.com
apps.office.com
stream.office.com
portal.office365.com
m365.go.microsoft
m365.cloud.microsoft
helpdeskbusinessassist.microsoft.com
admin.cloud.microsoft
Other certificates including the domain name office.com
(limited to 100 certificates)
loki.delve.office.com
*.asm.skype.com
df.incubator.aesir.office.com
5702666986455040-fe2.pantheonsite.io
officeapps.live.com
*.footprintdns.com
*.wac.gbl.office.com
5702666986455040-fe2.pantheonsite.io
augloop.office.com
www.office.com
gls.itarl4.ingestion.office.com
nam1.gcs.office.com
outlook.com
graph.windows.net
o365auditrealtimeingestion.manage.office.com
forms.office.com
*.config.skype.com
app.ingestion.office.com
*.config.skype.com
augloop.office.com
www.office.com
ppe.sso.eduupgrade.office.com
bookings.outlookapps.com
www.office.com
www.office.com
tr-tmc-afd.office.com
augloop.office.com
cert00010-azurecdn.akamaized.net
SPOActivityPipeSigningCertKey.office.com
chatsvcagg.teams.microsoft.com
graph.windows.net
store.office.com
delve.office.com
graph.windows.net
test.test.test.outlook.com
*.footprintdns.com
*.asm.skype.com
outlook.com
setup.office.com
5702666986455040-fe2.pantheonsite.io
*.footprintdns.com
griffinb2-gru-client.office.com
outlook.com
cisurvey.office.com
support.office.com
mdsrunnermgmt.office.com
bookings.outlookapps.com
gcp.ingestion.office.com
*.domains.live.com
support.officeppe.com
portal.office.com
*.footprintdns.com
prod.invite.teams.internal.office.com
ifttt.edog.office.com
OfficeOMEXSigningCertKey.office.com
www.office.com
cortana.office.com
setup.office.com
manage.office.com
api.orginsights.viva.office.com
office365-waffle.forms.office.com
*.config.skype.com
portal.office.com
outlook.live.com
desdemona.osikevlartorus.office.com
support.office.com
*.gcscluster.office.com
sender.office.com
lifecycle.office.com
afd.loki.delve.office.com
support.outlook.com
portal.office.com
*.footprintdns.com
YPPServicesSigningCertKey.office.com
gcc.loki.delve.office.com
reverseproxy.onenote.com
graph.windows.net
kvaccess.delve.office.com
config.office.com
www.silicon.help
outlook.com
www.office.com
o365auditrealtimeingestion.manage.office.com
support.office.com
kvapp.df.aesir.office.com
df.invite.teams.internal.office.com
outlook.com
prod.idsapi.loki.delve.office.com
cdn.forms.office.net
uci.officeapps.live.com
hrd.office.com
*.footprintdns.com
settings.teams.internal.office.com
dreamspace.ie
chatsvcagg.teams.microsoft.com
delve-gcc.office.com
listings-dev.office.com
status.office.com
pdapi.substrate.office.com
bcws.office.com
*.asm.skype.com
df.incubator.aesir.office.com
5702666986455040-fe2.pantheonsite.io
officeapps.live.com
*.footprintdns.com
*.wac.gbl.office.com
5702666986455040-fe2.pantheonsite.io
augloop.office.com
www.office.com
gls.itarl4.ingestion.office.com
nam1.gcs.office.com
outlook.com
graph.windows.net
o365auditrealtimeingestion.manage.office.com
forms.office.com
*.config.skype.com
app.ingestion.office.com
*.config.skype.com
augloop.office.com
www.office.com
ppe.sso.eduupgrade.office.com
bookings.outlookapps.com
www.office.com
www.office.com
tr-tmc-afd.office.com
augloop.office.com
cert00010-azurecdn.akamaized.net
SPOActivityPipeSigningCertKey.office.com
chatsvcagg.teams.microsoft.com
graph.windows.net
store.office.com
delve.office.com
graph.windows.net
test.test.test.outlook.com
*.footprintdns.com
*.asm.skype.com
outlook.com
setup.office.com
5702666986455040-fe2.pantheonsite.io
*.footprintdns.com
griffinb2-gru-client.office.com
outlook.com
cisurvey.office.com
support.office.com
mdsrunnermgmt.office.com
bookings.outlookapps.com
gcp.ingestion.office.com
*.domains.live.com
support.officeppe.com
portal.office.com
*.footprintdns.com
prod.invite.teams.internal.office.com
ifttt.edog.office.com
OfficeOMEXSigningCertKey.office.com
www.office.com
cortana.office.com
setup.office.com
manage.office.com
api.orginsights.viva.office.com
office365-waffle.forms.office.com
*.config.skype.com
portal.office.com
outlook.live.com
desdemona.osikevlartorus.office.com
support.office.com
*.gcscluster.office.com
sender.office.com
lifecycle.office.com
afd.loki.delve.office.com
support.outlook.com
portal.office.com
*.footprintdns.com
YPPServicesSigningCertKey.office.com
gcc.loki.delve.office.com
reverseproxy.onenote.com
graph.windows.net
kvaccess.delve.office.com
config.office.com
www.silicon.help
outlook.com
www.office.com
o365auditrealtimeingestion.manage.office.com
support.office.com
kvapp.df.aesir.office.com
df.invite.teams.internal.office.com
outlook.com
prod.idsapi.loki.delve.office.com
cdn.forms.office.net
uci.officeapps.live.com
hrd.office.com
*.footprintdns.com
settings.teams.internal.office.com
dreamspace.ie
chatsvcagg.teams.microsoft.com
delve-gcc.office.com
listings-dev.office.com
status.office.com
pdapi.substrate.office.com
bcws.office.com
Certificate
The complete raw certificate details for portal.office.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKvDCCCKSgAwIBAgITMwArL8JrDuukuCrjWgAAACsvwjANBgkqhkiG9w0BAQwF ADBdMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u MS4wLAYDVQQDEyVNaWNyb3NvZnQgQXp1cmUgUlNBIFRMUyBJc3N1aW5nIENBIDA4 MB4XDTI0MDUxMDA2MjIwNFoXDTI1MDUwNTA2MjIwNFowaDELMAkGA1UEBhMCVVMx CzAJBgNVBAgTAldBMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv ZnQgQ29ycG9yYXRpb24xGjAYBgNVBAMTEXBvcnRhbC5vZmZpY2UuY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLf1VXMg3DwrWRgEyReXn0+PA8OP ltwJ2kzku4+Pz7NWbdoBXntliaGyr1HDxrwmLHY56n1zvqksdb98EY/tE5fJM3YE 53b/KShGLcKG9Sr78h9SiJz6AoHcc436iq3kSvsc7HVZwNzJrPumnPhFg9E3QsT1 5/8vmY2E5dcgBLwH3wPzYZcaSsiDYzHjpOo9+/pwZj1kHC7XNsikyJkSxqC85drr 8/6wF+bei5BZB5DEFszhtmjAv4QQ3I88zOLI/jAi8shJ10biIo51lkds2cdaXAmA QoIbzKtWERUOVGxj6jM6f85+Xb8L2XwwCDhjWipGOML3crMi19+pcR4D/QIDAQAB o4IGaDCCBmQwggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB3AE51oydcmhDDOFts 1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABj2EzrUwAAAQDAEgwRgIhAPSu0Zc91vCE Ter5idppW71QQFEA6rvK/3MGetg/axG/AiEA4QQy3JHap5anWuvzfE7eapVVnl2q SCt4jXNewQwtRKUAdgB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkDL9kOjC55uAAA AY9hM69JAAAEAwBHMEUCIQCyOFZTbtUVJvOPgQ2hH8IDnvMujidTs6B+hqVSOuZa DAIgbcF7pjoj31Nnulj8/Sm6GZl/aw9fJYhogBvqdz6eLCcAdwDPEVbu1S58r/OH W9lpLpvpGnFnSrAX7KwB0lt3zsw7CAAAAY9hM60lAAAEAwBIMEYCIQCiP6o+MKxh qz8uBgMKsdbsVJ0nNxkkKs+vTwNJU07K/QIhAMlxLq1SwL6M4RD08Ygpjm/gpcbB 5sx5MsT6CKg4WfUsMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwIwCgYIKwYB BQUHAwEwPAYJKwYBBAGCNxUHBC8wLQYlKwYBBAGCNxUIh73XG4Hn60aCgZ0ujtAM h/DaHV2ChOVpgvOnPgIBZAIBJjCBtAYIKwYBBQUHAQEEgacwgaQwcwYIKwYBBQUH MAKGZ2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9z b2Z0JTIwQXp1cmUlMjBSU0ElMjBUTFMlMjBJc3N1aW5nJTIwQ0ElMjAwOCUyMC0l MjB4c2lnbi5jcnQwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vbmVvY3NwLm1pY3Jvc29m dC5jb20vb2NzcDAdBgNVHQ4EFgQUDxnXgDqu6iNmAOpLYFKzV7TS++UwDgYDVR0P AQH/BAQDAgWgMIICbQYDVR0RBIICZDCCAmCCEXBvcnRhbC5vZmZpY2UuY29tghpw b3J0YWwubWljcm9zb2Z0b25saW5lLmNvbYIdcG9ydGFscHJ2Lm1pY3Jvc29mdG9u bGluZS5jb22CF25jdXBvcnRhbHBydi5vZmZpY2UuY29tggpvZmZpY2UuY29tghRw b3J0YWwubWljcm9zb2Z0LmNvbYIPaG9tZS5vZmZpY2UuY29tghVwb3J0YWwtc2Rm Lm9mZmljZS5jb22CD3Byb2QubXNvY2RuLmNvbYIOd3d3Lm9mZmljZS5jb22CEyou cG9ydGFsLm9mZmljZS5jb22CECoud3d3Lm9mZmljZS5jb22CE2FkbWluLm1pY3Jv c29mdC5jb22CFmFkbWluLm1pY3Jvc29mdDM2NS5jb22CFHd3dy5taWNyb3NvZnQz NjUuY29tghJudHAud3d3Lm9mZmljZS5jb22CEGZsdWlkLm9mZmljZS5jb22CEG1p Y3Jvc29mdDM2NS5jb22CD3dvcmQub2ZmaWNlLmNvbYIQZXhjZWwub2ZmaWNlLmNv bYIVcG93ZXJwb2ludC5vZmZpY2UuY29tghB2aXNpby5vZmZpY2UuY29tgg9hcHBz Lm9mZmljZS5jb22CEXN0cmVhbS5vZmZpY2UuY29tghRwb3J0YWwub2ZmaWNlMzY1 LmNvbYIRbTM2NS5nby5taWNyb3NvZnSCFG0zNjUuY2xvdWQubWljcm9zb2Z0giRo ZWxwZGVza2J1c2luZXNzYXNzaXN0Lm1pY3Jvc29mdC5jb22CFWFkbWluLmNsb3Vk Lm1pY3Jvc29mdDAMBgNVHRMBAf8EAjAAMGoGA1UdHwRjMGEwX6BdoFuGWWh0dHA6 Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMEF6dXJl JTIwUlNBJTIwVExTJTIwSXNzdWluZyUyMENBJTIwMDguY3JsMGYGA1UdIARfMF0w UQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9z b2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTAIBgZngQwBAgIwHwYD VR0jBBgwFoAU9n4vvYCjSrJwW+vfmh/Y7cphgAcwHQYDVR0lBBYwFAYIKwYBBQUH AwIGCCsGAQUFBwMBMA0GCSqGSIb3DQEBDAUAA4ICAQBm5/0n62mnBPsl2TDNZS12 cKYJZ6CUniiAlgYK/VQqarUGVQpAUQBIuEllHvIEQEkCXWiIFjA/j4Ifd7dD8YVY faov0XOXwlUjsXtkewU+jyOIL5PaUaZ2MfUyAoM0Hk3g6qCXE2414eOz1ElnDNqQ w68MXx3TdBrlopns2+WKySwwc7HRNn5SvhNxbV3sZARa7BMQmMpeYFt3HaU4XTcd O2wLT4hvUV2nuJDeVgW3E2VtJokiZ4tq+i4hUVAiMJwvDSavV1JjGpNqM3lrUDey SsQZq/r9pTzv6RWT+8JIXObwZ7d5SQkrUIZrFjF1J+hIYryGSm9giqLZPXkqqhbj KuLfRd7NFV3ZQ1BtdsVC9+jQzyLeSpnvVXzE+1cRnxWDa/X7j9Cequ9K5Ej/P8Xp byBxZJM9I5yEdfBPhECzPv3i+KPvGSMIZe0H4K+LQRm6ilWsg4Y9d2s9LrLe6+rK P5Z7cJgGK8tZbXdg5qZ0x0d3p8EXoZoxn+W3BSYddRjWfQgWsFzo502h1PV6BdwW RUjbNaTMf9DaWDAmXv8lWbE+dBsUCUWbewzbxGi4F540y3Avqv1o62AACADiAPJf dI5FF9z50kHRlIt/c8QrBmC4om8H7xe5MHQ0O6bRX8PZYx1zdDQWkqK9wJiIV7dJ LSjPLO5aSedksx8JYV9rkg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLf1VXMg3DwrWRgEyReX n0+PA8OPltwJ2kzku4+Pz7NWbdoBXntliaGyr1HDxrwmLHY56n1zvqksdb98EY/t E5fJM3YE53b/KShGLcKG9Sr78h9SiJz6AoHcc436iq3kSvsc7HVZwNzJrPumnPhF g9E3QsT15/8vmY2E5dcgBLwH3wPzYZcaSsiDYzHjpOo9+/pwZj1kHC7XNsikyJkS xqC85drr8/6wF+bei5BZB5DEFszhtmjAv4QQ3I88zOLI/jAi8shJ10biIo51lkds 2cdaXAmAQoIbzKtWERUOVGxj6jM6f85+Xb8L2XwwCDhjWipGOML3crMi19+pcR4D /QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1137352700750032172969029920874518829398175682 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 08' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 06:22:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-05 06:22:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.office.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21298748470268827389567620071302978066834264580713494149514860146249750270268020153903045815926334580137625072102128545602268552592481593306624747330771417148289267786705276739275968813866020378536436903211405218987336938806512524956770088889886803634886714008196644783519222077807237819022353151241669027760634741247271708395884512837874710260692355703723378367445472342467214075302329875605040553781081179805868318870371750921352612605891437865762105584957756085939674178247523321664596041218032338691075108327892901902828040019440640077058387540388343517706220409738252664116166324603933116735387514170695506330621 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0f19d7803aaeea236600ea4b6052b357b4d2fbe5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (612 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.office.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.microsoftonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprv.microsoftonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuportalprv.office.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.microsoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.office.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-sdf.office.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.msocdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.office.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal.office.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.office.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.microsoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.microsoft365.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microsoft365.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntp.www.office.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluid.office.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft365.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'word.office.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excel.office.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerpoint.office.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visio.office.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.office.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream.office.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.office365.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm365.go.microsoft' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm365.cloud.microsoft' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdeskbusinessassist.microsoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cloud.microsoft' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f67e2fbd80a34ab2705bebdf9a1fd8edca618007 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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