portal.office.com

- Microsoft Corporation -

Issued by Microsoft Azure RSA TLS Issuing CA 03

About this certificate

This digital certificate with serial number 33:00:15:2d:bd:f1:16:80:b3:ae:60:a9:ad:00:00:00:15:2d:bd was issued on by Microsoft Corporation.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:15:2d:bd:f1:16:80:b3:ae:60:a9:ad:00:00:00:15:2d:bd
Serial Number (int): 1137345211856260880075708885348068745113054653
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 7d:ed:83:78:03:53:a1:48:9b:16:bd:1c:5e:cb:8a:78:29:f3:69:03
AuthorityKeyId: fe:09:71:40:55:05:10:44:d8:a4:81:75:b8:9e:1a:e9:4a:06:88:c8

Fingerprint (sha1): e0:f3:63:f0:1e:99:8c:56:a0:f4:13:97:33:d4:12:20:0c:e6:3d:bf
Fingerprint (sha256): 12:6f:84:87:b4:1f:db:3a:29:74:13:10:4c:e6:6d:23:1a:9d:87:ac:07:c9:e7:29:7a:98:b9:45:3a:66:b1:aa

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl

Check the revocation status for certificate portal.office.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.office.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.office.com
*.portal.office.com
portal.microsoftonline.com
portalprv.microsoftonline.com
ncuportal.office.com
scuportal.office.com
weuportal.office.com
seaportal.office.com
easportal.office.com
ncuportalprv.office.com
scuportalprv.office.com
wusportalprv.office.com
portal.microsoft.com
portal-sdf.office.com
prod.msocdn.com
ncuprodprv.msocdn.com
scuprodprv.msocdn.com
wusprodprv.msocdn.com
ejpportal.office.com
eusportal.office.com
wusportal.office.com
frcportal.office.com
eauportal.office.com
cusportal.office.com
wjpnportal.office.com
wjpportal.office.com
admin.microsoft.com
admin.microsoft365.com
ncuportalprv-staging.office.com
scuportalprv-staging.office.com
ejpportal-staging.office.com
admin-sdf.microsoft.com
admin-ignite.microsoft.com
wukportal.office.com
portal.office365.com
indportal.office.com
brzportal.office.com
staging.brzportal.office.com
staging.cusportal.office.com
staging.eauportal.office.com
staging.eusportal.office.com
staging.frcportal.office.com
staging.indportal.office.com
staging.scuportal.office.com
staging.seaportal.office.com
staging.weuportal.office.com
staging.wjpportal.office.com
staging.wukportal.office.com
staging.wusportal.office.com
staging.scuportalprv.office.com
staging.wusportalprv.office.com
staging.ncuportalprv.office.com
cusportal-csesstaging.office.com
weuportal-csesstaging.office.com
seaportal-csesstaging.office.com
cusportal-cses.office.com
wusportal-cses.office.com
weuportal-cses.office.com
eusportal-cses.office.com
scuportal-cses.office.com
brzportal-cses.office.com
wjpportal-cses.office.com
eauportal-cses.office.com
seaportal-cses.office.com
indportal-cses.office.com
wukportal-cses.office.com
frcportal-cses.office.com
ejpportal-cses.office.com

Other certificates including the domain name office.com

(limited to 100 certificates)
loki.delve.office.com
*.asm.skype.com
df.incubator.aesir.office.com
5702666986455040-fe2.pantheonsite.io
officeapps.live.com
*.footprintdns.com
*.wac.gbl.office.com
5702666986455040-fe2.pantheonsite.io
augloop.office.com
cachewriter.teams.microsoft.com
www.office.com
gls.itarl4.ingestion.office.com
nam1.gcs.office.com
outlook.com
graph.windows.net
o365auditrealtimeingestion.manage.office.com
cachewriter.teams.microsoft.com
forms.office.com
authsvc.teams.microsoft.com
*.config.skype.com
*.fp.measure.office.com
app.ingestion.office.com
*.config.skype.com
augloop.office.com
www.office.com
ppe.sso.eduupgrade.office.com
bookings.outlookapps.com
www.office.com
www.office.com
tr-tmc-afd.office.com
augloop.office.com
cert00010-azurecdn.akamaized.net
SPOActivityPipeSigningCertKey.office.com
chatsvcagg.teams.microsoft.com
graph.windows.net
store.office.com
delve.office.com
graph.windows.net
test.test.test.outlook.com
*.footprintdns.com
*.asm.skype.com
outlook.com
setup.office.com
*.fp.measure.office.com
pls-cacheinv.teams.microsoft.com
5702666986455040-fe2.pantheonsite.io
*.footprintdns.com
griffinb2-gru-client.office.com
outlook.com
cisurvey.office.com
support.office.com
mdsrunnermgmt.office.com
bookings.outlookapps.com
gcp.ingestion.office.com
*.domains.live.com
support.officeppe.com
portal.office.com
*.footprintdns.com
prod.invite.teams.internal.office.com
ifttt.edog.office.com
OfficeOMEXSigningCertKey.office.com
www.office.com
cortana.office.com
setup.office.com
manage.office.com
api.orginsights.viva.office.com
office365-waffle.forms.office.com
*.config.skype.com
portal.office.com
outlook.live.com
desdemona.osikevlartorus.office.com
support.office.com
*.gcscluster.office.com
sender.office.com
lifecycle.office.com
afd.loki.delve.office.com
support.outlook.com
portal.office.com
*.footprintdns.com
YPPServicesSigningCertKey.office.com
gcc.loki.delve.office.com
reverseproxy.onenote.com
graph.windows.net
kvaccess.delve.office.com
config.office.com
www.silicon.help
outlook.com
www.office.com
o365auditrealtimeingestion.manage.office.com
support.office.com
kvapp.df.aesir.office.com
df.invite.teams.internal.office.com
outlook.com
prod.idsapi.loki.delve.office.com
*.footprintdns.com
cdn.forms.office.net
uci.officeapps.live.com
*.footprintdns.com
hrd.office.com
*.footprintdns.com

Certificate

The complete raw certificate details for portal.office.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs33PLjAnW4vHS/2z4hmB
VrQLAQD8M5No3UXvBWyfOUS+YRIFoedv2NssJjkja5u/SCjtuWrv1nwJay8Xm36p
fTvj2/jhMyc4LokWkEVmHPN+InXd1iKI+ma+PwVz8WD79Z7Yzbq1gWmY28ld27EP
rIU2ROjbvoJUeZ58EYf/qkPkCWV8VTCIh1fmtqS+aOgogk0D699tKeGPb6Cw5zT6
rjZQL+ICMHD74z8NNAbx5n8GxCjYbr1as/blM3iVQsLYRM9Kz42gKSetayaHjsTI
KlI+P2SkU2rIhfHkBj73f/ylbH8gPPN2ncSfxQaKi8OJS4lZ6VvhCf3blarBksDa
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137345211856260880075708885348068745113054653
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 09:32:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-29 09:32:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.office.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22658695466247538911764568162500154101129376133054325440223003769645134465538457892664125152184139028271771325633624858176718521974643334012733886542359976261378758227888693809312825241960073381031870735695843266809548735354398022067128461964087983155320054807462439242632371342158440217750390294904489948373812322650864507301454813194385217663425755901945679809651342098317638261127550292450272984072472694035827567499015348924782487499557898859872399066511594679524240396119161358943174645178022356978347169874945819168600691366587490537124871949229338157968023248116856351411507919805938511788721966256892355336797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ded83780353a1489b16bd1c5ecb8a7829f36903
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1790 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprv.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-sdf.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.msocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuprodprv.msocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuprodprv.msocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusprodprv.msocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejpportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frcportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eauportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wjpnportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wjpportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.microsoft365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncuportalprv-staging.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuportalprv-staging.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejpportal-staging.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-sdf.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-ignite.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wukportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.office365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brzportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.brzportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.eauportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.eusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.frcportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.indportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.scuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.seaportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.weuportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wjpportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wukportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wusportal.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.scuportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wusportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ncuportalprv.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cusportal-csesstaging.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weuportal-csesstaging.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaportal-csesstaging.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cusportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weuportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eusportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brzportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wjpportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eauportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wukportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frcportal-cses.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejpportal-cses.office.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe09714055051044d8a48175b89e1ae94a0688c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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