portal.officeppe.com

- Microsoft Corporation -

Issued by Microsoft IT TLS CA 1

About this certificate

This digital certificate with serial number 7b:00:01:56:e2:bf:53:a9:9d:ff:8b:20:a3:00:00:00:01:56:e2 was issued on by Microsoft Corporation.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:00:01:56:e2:bf:53:a9:9d:ff:8b:20:a3:00:00:00:01:56:e2
Serial Number (int): 2742992115192580863544753861065744271152338658
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 0e:ae:bd:17:76:3e:33:3a:ce:8b:03:db:59:05:00:e8:e3:43:9d:47
AuthorityKeyId: 58:88:9f:d6:dc:9c:48:22:b7:14:3e:ff:84:88:e8:e6:85:ff:fa:7d

Fingerprint (sha1): 34:8c:ad:ee:19:61:06:36:5d:83:5a:3f:c8:bf:fb:1e:b2:56:bc:c6
Fingerprint (sha256): 0d:19:39:67:f7:fb:f3:2c:bf:a6:c9:8e:be:e8:41:f9:1e:46:02:32:7c:03:b7:63:e1:67:03:1c:96:87:d6:80

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%201.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl

Check the revocation status for certificate portal.officeppe.com

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.officeppe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.officeppe.com
portal-staging.officeppe.com
portal.ccsctp.com
portalprv.ccsctp.com
auth.officeppe.com
auth.ccsctp.com
authprv.ccsctp.com
weuportal.officeppe.com
seaportal.officeppe.com
portalprv.officeppe.com
weuportal-staging.officeppe.com
seaportal-staging.officeppe.com
portalprv-staging.officeppe.com
weuauth.officeppe.com
seaauth.officeppe.com
authprv.officeppe.com
ppe.msocdn.com
wusportal.officeppe.com
wusportal-staging.officeppe.com
wusauth.officeppe.com
portalprvinstance21.officeppe.com
portalprvinstance22.officeppe.com
portalprvinstance23.officeppe.com
portalprvinstance24.officeppe.com
portalprvinstance25.officeppe.com
portalprvinstance26.officeppe.com
portalprvinstance27.officeppe.com
portalprvinstance28.officeppe.com
portalprvinstance29.officeppe.com
portalprvinstance30.officeppe.com
portalprvinstance31.officeppe.com
portalprvinstance32.officeppe.com
portalprvinstance33.officeppe.com
portalprvinstance34.officeppe.com
portalprvinstance35.officeppe.com
portalprvinstance36.officeppe.com
portalprvinstance37.officeppe.com
portalprvinstance38.officeppe.com
portalprvinstance39.officeppe.com
portalprvinstance40.officeppe.com
portalprvinstance21-staging.officeppe.com
portalprvinstance22-staging.officeppe.com
portalprvinstance23-staging.officeppe.com
portalprvinstance24-staging.officeppe.com
portalprvinstance25-staging.officeppe.com
portalprvinstance26-staging.officeppe.com
portalprvinstance27-staging.officeppe.com
portalprvinstance28-staging.officeppe.com
portalprvinstance29-staging.officeppe.com
portalprvinstance30-staging.officeppe.com
portalprvinstance31-staging.officeppe.com
portalprvinstance32-staging.officeppe.com
portalprvinstance33-staging.officeppe.com
portalprvinstance34-staging.officeppe.com
portalprvinstance35-staging.officeppe.com
portalprvinstance36-staging.officeppe.com
portalprvinstance37-staging.officeppe.com
portalprvinstance38-staging.officeppe.com
portalprvinstance39-staging.officeppe.com
portalprvinstance40-staging.officeppe.com

Other certificates including the domain name officeppe.com

(limited to 100 certificates)
portfolios.officeppe.com
sway.officeppe.com
trustportal.officeppe.com
project.officeppe.com
officeapps.live.com
vanquishppe.securitysignals-siphonclient.officeppe.com
cisurvey.officeppe.com
vanquishppe.securitysignals-siphonclient.officeppe.com
shell.suite.officeppe.com
cert00016-azurecdn.akamaized.net
status.officeppe.com
c.msn-int.com
vanquishppe.securitysignals.tracegenevaconsumer.officeppe.com
manage.officeppe.com
*.lifecycle.officeppe.com
uci.edog.officeapps.live.com
redemptionservice.setup.officeppe.com
secure06.stage.lithium.com
support.officeppe.com
vanquishppe.securitysignals.tracegenevaconsumer.officeppe.com
test.augloop.svc.cloud-dev.microsoft
manage.officeppe.com
idsapi-edog-s2s.store.officeppe.com
*.lifecycle.officeppe.com
portal.officeppe.com
cisurvey.officeppe.com
portal.azure
mock.m365admin.officeppe.com
cdn.forms.office.net
cert00016-azurecdn.akamaized.net
cert00016-azurecdn.akamaized.net
mysmallbusiness.officeppe.com
pubsub.augloop-test.officeppe.com
secure06.stage.lithium.com
pubsub.augloop-int.officeppe.com
test.augloop.svc.cloud-dev.microsoft
support.officeppe.com
augloop-test.officeppe.com
c.msn-int.com
uci.edog.officeapps.live.com
portfolios.officeppe.com
test.augloop.svc.cloud-dev.microsoft
augloop-test.officeppe.com
webjobs.servicetrust.officeppe.com
kevlar-ssl.augloop-dogfood.officeppe.com
augloop-test.officeppe.com
cisurvey.officeppe.com
sway.officeppe.com
protection.officeppe.com
odc.edog.officeapps.live.com
api.augloop-tools.officeppe.com
manage.officeppe.com
store.officeppe.com
vanquishppe.securitysignals.tracegenevaconsumer.officeppe.com
status.office365.com
manage.officeppe.com
connectivity.officeppe.com
webjobs.servicetrust.officeppe.com
portfolios.officeppe.com
store.officeppe.com
offlineconsumer.suite.officeppe.com
portal.azure
status.office365.com
cisurvey.officeppe.com
sway.officeppe.com
portal.officeppe.com
bcqr.officeppe.com
augloop-test.officeppe.com
setup.officeppe.com
cisurvey.officeppe.com
portal.azure
cert00016-azurecdn.akamaized.net
appamangement-ppe.officeppe.com
localization.checkout.office.net
cisurvey.officeppe.com
augloop-test.officeppe.com
cert00016-azurecdn.akamaized.net
dragongate.officeppe.com
messaging.officeppe.com
uci.edog.officeapps.live.com
api.servicetrust.officeppe.com
cisurvey.officeppe.com
msn.co
augloop-int.officeppe.com
setup.officeppe.com
sway.officeppe.com
augloop-test.officeppe.com
pubsub.augloop-dogfood.officeppe.com
ifttt.edog.office.com
dogfood.augloop.svc.cloud.microsoft
augloop-int.officeppe.com
stores.officeppe.com
portfolios.officeppe.com
endpoints.officeppe.com
cisurvey.officeppe.com
portfolios.officeppe.com
vanquishppe.securitysignals.tracegenevaconsumer.officeppe.com
npp.officeppe.com
augloop-test.officeppe.com
setup.officeppe.com

Certificate

The complete raw certificate details for portal.officeppe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9VRrQ8GJ+CXQXlM1I3m
zz+s7ct+VgDIqCuFca7I30MaIGJtqEquoKmpIrHCYpyYkMDgaFpUSgvD8IkP64Mt
zLWqe/wlmPoi0iJLmxzW3O/4hJ2ubKYib8TsSdX8Xo/gvLc5Z7lvcIdMwU/6WGoh
LVL1CkpoRHdTegRqCTtvpbI5cvl4d5JvPzrnn2xGKJButCNScjdyskAWtKG8fRVr
hPTYHuFOms9YWQoUQU4u2fLyh/coJPbQqtw8QQHcicL0fdBl+Tvx2Uq2XhwjGuyR
7cLGhMRVEmXYgukzxjIcXykAAzAOg5u2izQ/VacOb5vIkn40TLh4PeAQRssQ/PFe
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2742992115192580863544753861065744271152338658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-20 17:57:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-20 17:57:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.officeppe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23206801351365494790550489994731037785116770790602748359345894797831662412483543205386814034564654053969934853320528909861602224991815994438452832949763197601284469669070143861253895955052668654341468494814825815943894726309879982029989619037011016154857608634121884940148694650310342203615124157844274890485747500300151996887846253437113087497403852366755794143819854821188097143393065377205349072590437609951569673632107961241094205197667110975497737536062450572365970091968461968960982353598802418428692093833287122364285269562342081591503796866520524707285882124050207106599310543033559237656995480502515738435289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2054 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ccsctp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprv.ccsctp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.ccsctp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authprv.ccsctp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weuportal.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaportal.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprv.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weuportal-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaportal-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprv-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weuauth.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaauth.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authprv.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppe.msocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusportal.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusportal-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusauth.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance21.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance22.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance23.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance24.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance25.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance26.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance27.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance28.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance29.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance30.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance31.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance32.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance33.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance34.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance35.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance36.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance37.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance38.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance39.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance40.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance21-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance22-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance23-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance24-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance25-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance26-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance27-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance28-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance29-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance30-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance31-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance32-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance33-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance34-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance35-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance36-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance37-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance38-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance39-staging.officeppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprvinstance40-staging.officeppe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0eaebd17763e333ace8b03db590500e8e3439d47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 58889fd6dc9c4822b7143eff8488e8e685fffa7d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%201.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%201.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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