*.sharepoint.com

- Microsoft Corporation -

Issued by DigiCert Cloud Services CA-1

About this certificate

This digital certificate with serial number 02:8e:e4:06:5b:05:e0:a8:c6:69:a5:26:b7:e5:32:61 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: Washington
Locality: Redmond
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:8e:e4:06:5b:05:e0:a8:c6:69:a5:26:b7:e5:32:61
Serial Number (int): 3400387038410626381784411795204944481
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 77:57:d6:18:cf:8c:e0:7c:e7:bc:1c:42:58:56:e8:22:69:d1:0e:ce
AuthorityKeyId: dd:51:d0:a2:31:73:a9:73:ae:8f:b4:01:7e:5d:8c:57:cb:9f:f0:f7

Fingerprint (sha1): 68:ec:66:02:cb:bf:49:5b:b6:b9:9f:20:f7:77:66:83:55:38:29:4a
Fingerprint (sha256): 0f:06:c1:1b:5b:07:4e:17:65:5e:51:cf:48:d3:1d:b1:1e:81:18:48:dc:e8:ab:59:ac:8b:61:27:e2:72:fa:0f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertCloudServicesCA-1.crt

Revocation information

OCSP Server: http://ocspx.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertCloudServicesCA-1-g1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertCloudServicesCA-1-g1.crl

Check the revocation status for certificate *.sharepoint.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sharepoint.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sharepoint.com
*.sharepoint.apac.microsoftonline.com
*.sharepoint.emea.microsoftonline.com
*.sharepoint.microsoftonline.com
*.gr.global.aa-rt.sharepoint.com

Other certificates including the domain name sharepoint.com

(limited to 100 certificates)
*.sharepoint.com
*.sharepoint.com
*.sharepoint.com
*.sharepoint.com
*.sharepoint.com
spoprod.cma.sharepoint.com
eopgov.sharepoint.com
csharp.net
csharp.net
svc.ms
*.sharepoint.com
csharp.net
csharp.net
csharp.net
*.sharepoint.com
eopgov.sharepoint.com
*.sharepoint.com
*.sharepoint.com
spoprod.cma.sharepoint.com
*.sharepoint.com
test.sharepoint.com
*.sharepoint.com
csharp.net
*.sharepoint.com
csharp.net
*.sharepointmktgv7.microsoft.com
*.sharepoint.com
csharp.net
hrwebdev.azurewebsites.net
csharp.net
spoauditingcc-prodbubble.yloppe.sharepoint.com
csharp.net
csharp.net
csharp.net
*.sharepoint.com
odsp.cbservice.edog.sharepoint.com
csharp.net
svc.ms
my.microsoft.com
gfedogfood.cma.sharepoint.com
csharp.net
*.sharepoint.com
spaces.aexp.com
hpenterprise-my.sharepoint.com
test.sharepoint.com
csharp.net
csharp.net
csharp.net
my.microsoft.com
*.sharepoint.com
sharepointmktgv5.microsoft.com
my.microsoft.com
csharp.net
csharp.net
csharp.net
csharp.net
*.sharepoint.com
csharp.net
csharp.net
*.sharepoint.com
csharp.net
csharp.net
*.sharepoint.com
*.sharepoint.com
microsoft.sharepoint.com
csctestportal-my.sharepoint.com
cscportal.sharepoint.com
*.sharepoint.com
csharp.net
*.sharepoint.com
*.sharepoint.com
csharp.net
csharp.net
*.sharepoint.com
csharp.net
csharp.net
spoprod.cma.sharepoint.com
csharp.net
*.sharepoint.com
csharp.net
csharp.net
csharp.net
csharp.net
*.sharepoint.com
*.sharepoint.com
csharp.net
csharp.net
csharp.net
csharp.net
*.sharepoint.com
csharp.net
*.spoppe.com
csharp.net
*.sharepoint.com
*.sharepoint.com
csharp.net
*.sharepoint.com
*.svc.ms
*.sharepoint.com
*.sharepoint.com

Certificate

The complete raw certificate details for *.sharepoint.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP6jxc0Sms5lz+LTeDsF
4HwrdJKvKRKDhKicITxGuOfXD8G4/pajRYSQPg5NKRhy1h5sBw2NP69SADEiFCIQ
NI8HGYzD4gR5vuM/2Jqwzor8MWvGFnjt1k9Hl1HMnq2ucduE3BmDGWv6TmWrvVFl
BTZrriBMjQCG57eJbhuD8UQDFkL1vQttCmI9sDlnAaQCL4FmxnBVCnlci3hmz2Gs
6N2beSSvDgyt5nnFsuH18TkcOz4eUCmiQg8FYloGKiEJYg1ThECFE46BeYgXxPZr
EBBDcO5JU8OWNavP+HkSrlV7g/grSv8Cli/A/wexuEg7Y8KtNp1oydEFn15jOujm
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3400387038410626381784411795204944481
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Cloud Services CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sharepoint.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25373228527470193427528550836291513637302133590196731727477711875523514946435122742111133875351242758437473049654314080443874693351452569529971484533225580813378662677127963716531815007051168563099647304260058204606017417002151924058494851898267999980554769245732700211904931445889961568603304267023135698962959351660317596754316377127915079848570355428985598361425007585530747333131914304029834285175059095468375061780726285929727771469385527193832250434439784474387830644104660855295519759677446249276561955585086652799727274188981034000131026793868118958905090459005106975448359719276824101835132057001420867036809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7757d618cf8ce07ce7bc1c425856e82269d10ece
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharepoint.apac.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharepoint.emea.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharepoint.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gr.global.aa-rt.sharepoint.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertCloudServicesCA-1-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertCloudServicesCA-1-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocspx.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertCloudServicesCA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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