portal.azure

Issued by Microsoft RSA TLS CA 01

About this certificate

This digital certificate with serial number 12:00:2f:b9:ef:7c:41:3e:41:16:20:53:95:00:00:00:2f:b9:ef was issued on by Microsoft Corporation.

With 141 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=portal.azure

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:00:2f:b9:ef:7c:41:3e:41:16:20:53:95:00:00:00:2f:b9:ef
Serial Number (int): 401429653995454857942857507831326339150887407
Serial Number lenght: 149 bits, 19 octets

SubjectKeyId: 24:55:e0:65:30:bb:91:5a:72:4b:88:19:b2:a4:d5:71:de:fe:4e:9a
AuthorityKeyId: b5:76:0c:30:11:ce:c7:92:42:4d:4c:c7:5c:2c:c8:a9:0c:e8:0b:64

Fingerprint (sha1): 70:48:71:07:40:08:a4:1a:bb:cc:3b:8f:24:cf:c2:7e:8d:d6:66:24
Fingerprint (sha256): 14:1a:f2:79:23:44:a3:51:96:2f:f7:f7:77:c9:54:b5:27:fb:59:4b:d1:b5:7a:6b:5f:a6:a9:5e:ef:37:bc:32

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl

Check the revocation status for certificate portal.azure

141

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.azure

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.azure
c.bing
api.bing
com.bing
com.xbox
ssl.bing
www.bing
www.xbox
dns.azure
home.bing
home.xbox
live.xbox
m.hotmail
mail.bing
maps.bing
news.bing
wfh.azure
www.azure
www.skype
call.skype
co.hotmail
home.azure
home.skype
ie.windows
music.xbox
pc.windows
store.xbox
video.xbox
www.office
com.hotmail
com.windows
images.bing
m365.office
media.azure
msn.hotmail
pop.hotmail
search.bing
sip.hotmail
travel.bing
videos.bing
www.hotmail
www.windows
apps.windows
core.windows
edge.windows
go.microsoft
home.hotmail
home.windows
hotmail.xbox
imap.hotmail
mail.hotmail
my.microsoft
smtp.hotmail
support.bing
support.xbox
weather.bing
xbox360.xbox
xboxone.xbox
365.microsoft
com.microsoft
gamepass.xbox
games.windows
inbox.hotmail
lumia.windows
msoid.hotmail
net.microsoft
org.microsoft
phone.windows
promoteiq.com
store.windows
support.azure
support.skype
tcp.microsoft
udp.microsoft
wfh.microsoft
windows.azure
www.microsoft
xboxlive.xbox
yahoo.hotmail
band.microsoft
bing.microsoft
business.skype
corp.microsoft
data.microsoft
designlab.xbox
edge.microsoft
home.microsoft
ipv6.microsoft
m365.microsoft
microsoft.bing
microsoft.xbox
playwright.com
system.windows
update.windows
xbox.microsoft
about.microsoft
azure.microsoft
cloud.microsoft
cortana.windows
hotmail.hotmail
login.microsoft
lumia.microsoft
outlook.hotmail
support.hotmail
support.windows
surface.windows
translator.bing
windows.windows
www.media.azure
groove.microsoft
office.microsoft
portal.microsoft
search.microsoft
update.microsoft
xboxseriesx.xbox
account.microsoft
microsoft.windows
playanywhere.xbox
remix3d.microsoft
support.microsoft
surface.microsoft
windows.microsoft
www.promoteiq.com
download.microsoft
dynamics.microsoft
entertainment.xbox
hololens.microsoft
ieonline.microsoft
www.playwright.com
gamestack.microsoft
integrity.microsoft
microsoft365.office
empowering.microsoft
hackingstem.microsoft
xboxseriesx.microsoft
microsoft365.microsoft
productivity.microsoft
visualstudio.microsoft
windowsazure.microsoft
manufacturing.microsoft
ntservicepack.microsoft

Other certificates including the domain name portal.azure

(limited to 100 certificates)
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure

Certificate

The complete raw certificate details for portal.azure in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SH2ussJ4DojpheANRE+
DHPMR6J/tEX/UIh5X0P4CPL6+rM/McjiibpTA0F1mM5uwZRoGUfo0eaamlf/ohfB
L0nNArdrYd606gXPCoXELCPlYMKaDnr3PnIhO2ZwB0X/PZm0SjoF201BrVNB5Hjx
aokuLNUtJOuLm6/eW/Nl4QDbWB8EWqdBCAPuYh94Ar22qbTRdAe+8fLErUClx/3T
A/jidwEOloNJdrIJHK2eCaCd5JBLH0uhMzXRWqNbyHgufnnAY4Lsab/M22MGp+yP
pHrX2Cb1CA7vWNGWfwSHNYgAnY0oBHAMSQwjGoJ3rW/QOO1q9fc9Y3Q5g/zZaX4J
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401429653995454857942857507831326339150887407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft RSA TLS CA 01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-24 17:22:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-24 17:22:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.azure'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27915413565444743180040300194742117387236795845975626317251529275851813772794101826223524576490876069045719147332044405484569109631391773434824224099135403260875133402839509812397407246860455897044841975658327816719673889787921557232748926536237318530461442128293768739055564442795356471046016820238446896597578861459095758257712433682708807998248618456904564981427977949423553981179685576527403252329789077852091195658040714537517817360888530840001750871481748661107820896575588399181652971172829723966843867606898044242012201360020694674678031288438955484737354250803007069394254104878111894974953927097904864823773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.15 (sMIMECapabilities)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.2 (rc2CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.4 (rc4)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.42 (aes256-CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.45 (aes256-wrap)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.2 (aes128-CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.5 (aes128-wrap)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.7 (desCBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.7 (des-EDE3-CBC)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.10585921.15764560
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2455e06530bb915a724b8819b2a4d571defe4e9a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dns.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfh.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'call.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pc.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.office'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm365.office'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotmail.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weather.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox360.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xboxone.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '365.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamepass.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'games.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inbox.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumia.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msoid.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'net.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'org.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phone.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promoteiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcp.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udp.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfh.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windows.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xboxlive.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahoo.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'band.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bing.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designlab.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm365.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playwright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'system.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'update.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azure.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortana.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotmail.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumia.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surface.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translator.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windows.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.media.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'update.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xboxseriesx.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playanywhere.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remix3d.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surface.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windows.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promoteiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamics.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entertainment.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hololens.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ieonline.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playwright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamestack.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrity.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft365.office'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empowering.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackingstem.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xboxseriesx.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft365.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productivity.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visualstudio.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windowsazure.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manufacturing.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntservicepack.microsoft'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b5760c3011cec792424d4cc75c2cc8a90ce80b64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		008ec0c594a1362757dd9e9bd911e219f530054154db1c25e59479bfbea773cd1667b5f20ff634a08ca53196344fa1a3a2a76387648e0a74e752c61b6d1ac3b04b1ea0bd6b714394ffe38865094cbf01f99d0defdbd7e2f2de62afcb97b52a476376456fa389e2fd252f58df032c305945284bf34bf2cf3a026b15f665140d5b25d253e616172f275eca2f1ec5d9e29e7d0d1b97c792a659d3489d5651e467812fa0f1c4b65f5e212a4d4ea62d31f5297669df4161da8734c80fbff9f8d2793f9d48609349ba72b5ae9decef7cdcfaffbd16833e0c307951f25cc169622ca6d2578b6136e09afa63e287bf09220670b7c0314c88909ef1b6a0a1367f8dad291246569bdd8a9ea4d841207d80dc1edf002e985f177ae67f02753440c4950024dad5beac45b3339421c9f93da39926656ce229b3a4602e771b604509de950e14f38937fc2b329f1d30551624c00e971b76495140cbfa760c3f428b9706ccebbcf5d43ace75d08ecf0f31e1f82f38187a5c0c8d2c32a6c0fa1bc006b8a484187042ef9972358cf4233c410a34118e5f6a2fbea5e9fb597d79a7a3f08eda344dd0fbecbe9f06b8842b0e3ad10c9291d8bd966c22210b4a1a5174976344099b1c196b4dcbb57aec628e0aa5629b68a36de9ce02ca61ec1a59d1570e1649ab348d4d3a50202ed91ec0951cda1760908545fdc09e43518bb8fa804f13265ce205c9a1a528