portal.azure

Issued by Microsoft RSA TLS CA 02

About this certificate

This digital certificate with serial number 7f:00:28:2c:e2:c4:f3:7a:e9:af:b5:1f:5d:00:00:00:28:2c:e2 was issued on by Microsoft Corporation.

With 135 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=portal.azure

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7f:00:28:2c:e2:c4:f3:7a:e9:af:b5:1f:5d:00:00:00:28:2c:e2
Serial Number (int): 2832208311171551523844231570492619996642421986
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 4a:23:4e:a0:ef:91:74:38:b9:69:44:21:09:5b:52:3d:19:e8:aa:ad
AuthorityKeyId: ff:2f:7f:e1:06:f4:38:f3:2d:ed:25:8d:98:c2:fe:0e:f6:6c:fc:fa

Fingerprint (sha1): 77:da:be:4a:d5:ce:9f:5b:e5:05:aa:a9:0f:16:b5:44:52:55:b6:71
Fingerprint (sha256): 1d:2f:9c:6a:a4:69:78:f5:dc:1a:1d:d9:97:6d:73:6f:cb:ca:c3:c8:e7:02:cd:c6:47:65:e4:e0:8d:3e:80:e3

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2002.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl

Check the revocation status for certificate portal.azure

135

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.azure

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.azure
c.bing
api.bing
com.bing
com.xbox
ssl.bing
www.bing
www.xbox
dns.azure
home.bing
home.xbox
live.xbox
m.hotmail
mail.bing
maps.bing
news.bing
wfh.azure
www.azure
www.skype
call.skype
co.hotmail
home.azure
home.skype
ie.windows
music.xbox
pc.windows
store.xbox
video.xbox
www.office
com.hotmail
com.windows
images.bing
m365.office
msn.hotmail
pop.hotmail
search.bing
sip.hotmail
travel.bing
videos.bing
www.hotmail
www.windows
apps.windows
core.windows
edge.windows
go.microsoft
home.hotmail
home.windows
hotmail.xbox
imap.hotmail
mail.hotmail
my.microsoft
smtp.hotmail
support.bing
support.xbox
weather.bing
xbox360.xbox
xboxone.xbox
365.microsoft
com.microsoft
gamepass.xbox
games.windows
inbox.hotmail
lumia.windows
msoid.hotmail
net.microsoft
org.microsoft
phone.windows
store.windows
support.azure
support.skype
tcp.microsoft
udp.microsoft
wfh.microsoft
windows.azure
www.microsoft
xboxlive.xbox
yahoo.hotmail
band.microsoft
bing.microsoft
business.skype
corp.microsoft
data.microsoft
designlab.xbox
edge.microsoft
home.microsoft
ipv6.microsoft
m365.microsoft
microsoft.bing
microsoft.xbox
system.windows
update.windows
xbox.microsoft
about.microsoft
azure.microsoft
cloud.microsoft
cortana.windows
hotmail.hotmail
login.microsoft
lumia.microsoft
outlook.hotmail
support.hotmail
support.windows
surface.windows
translator.bing
windows.windows
groove.microsoft
office.microsoft
portal.microsoft
search.microsoft
update.microsoft
xboxseriesx.xbox
account.microsoft
microsoft.windows
playanywhere.xbox
remix3d.microsoft
support.microsoft
surface.microsoft
windows.microsoft
download.microsoft
dynamics.microsoft
entertainment.xbox
hololens.microsoft
ieonline.microsoft
gamestack.microsoft
integrity.microsoft
microsoft365.office
empowering.microsoft
hackingstem.microsoft
xboxseriesx.microsoft
microsoft365.microsoft
productivity.microsoft
visualstudio.microsoft
windowsazure.microsoft
manufacturing.microsoft
ntservicepack.microsoft

Other certificates including the domain name portal.azure

(limited to 100 certificates)
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure

Certificate

The complete raw certificate details for portal.azure in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54A2tM4fQRoN87tFFGAN
gO3PNDjuqtnqMPl+gY5FUiPWkJZ3YcN4+gt7ZKHOg2CG+a7KHSFPD87MQwe81qCU
XX7GvQhQ7CZS4tKw4GlVXJfVW391YhNQ4zDSONFF4depLpNSzBFIzt9owKOsL2ID
mDSqF2i1xI665hu4JoTnnjWrJHreVhL5z6lxqAlSXN7kIvhHgVZ8SURb8q+RvsRt
LiTFXo9vgwDvxvVdG+yDLS3POzwgvzYxrkhAHFdpX9KDmXvjTDHKua3xtRi2shXs
6/bsSdHk+ebcAz2nw3NckLJRRWRY9vd0VUfCGPO8bhxjogm1QhKXvMNqGXayQl21
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2832208311171551523844231570492619996642421986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft RSA TLS CA 02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-07 16:31:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-07 16:31:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.azure'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29224272977249042481453057951820538902869238963967240539739926205801954362014420484144115735309501413259993415700769415035615814478133790143931071510346575997891420928198516404766718485211501627467999134641531118200253183297133621730477215229181925392099794164644136291917366469316428606350112067705375447775514587131020065692193640672839491642699747138925766559975074485427177941398000039283633233677971995504600777400423810304649187643464576571555704264019767175419335451535732444842286295573155005268996265674119374616443828793760201847230147868344138635931969761417157905668415604775132209965275117650756820120897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.15 (sMIMECapabilities)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.2 (rc2CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.4 (rc4)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.42 (aes256-CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.45 (aes256-wrap)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.2 (aes128-CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.5 (aes128-wrap)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.7 (desCBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.7 (des-EDE3-CBC)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.10585921.15764560
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2002.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a234ea0ef917438b9694421095b523d19e8aaad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2086 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dns.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfh.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'call.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pc.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.office'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm365.office'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotmail.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weather.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox360.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xboxone.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '365.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamepass.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'games.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inbox.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumia.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msoid.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'net.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'org.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phone.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcp.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udp.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfh.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windows.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xboxlive.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahoo.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'band.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bing.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designlab.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm365.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'system.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'update.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azure.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortana.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotmail.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumia.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surface.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translator.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windows.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'update.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xboxseriesx.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playanywhere.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remix3d.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surface.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windows.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamics.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entertainment.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hololens.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ieonline.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamestack.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrity.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft365.office'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empowering.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackingstem.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xboxseriesx.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft365.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productivity.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visualstudio.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windowsazure.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manufacturing.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntservicepack.microsoft'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ff2f7fe106f438f32ded258d98c2fe0ef66cfcfa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00ebe63098da1ffa4cf1c014e745e763b4e36c85332273a0dd78ed50ae0ba5fbe4a564a4c94075e9599a3dd6345bfba271fdb8371fab6f78c9d47a470aa61a5e22c23675baa779f23bac9a3c2d89a7e8e0122b80c3b5e982c4078278ac7b8e3ca1b30c4705203259b5773ae17f4919c32ccca55dc57a66fa09b0ba18494555a95b672d8324baf9308f25f6d7853bf27e8c7a1c2db21c83b26608c8181da626420137100ad91afe7ea552062eb45f2caebcbd9fe32da88e28d571b5eeff4cabcc15c065cd3d536c62e4c6e4210d88b87fbc339c5e6ef92b3623eee40b2e60a2b698310d28a1644254cbc259cc302baa073459fc620ddeb4149222782088b28867a49df55d77730e51887cf98cd34ad5c0e061814de0b20296cf2598a77c96339c8edbdb8d2e6b0d455e69b286492a89f7fdabf4910cdc4de10189802b270714e9b480895230213404a9076eff25815f0c0e2606dc2d194381c939822a1eb1af2fae6a1e7a665741d00ac3459e204b13a756c7341330b0dd5fc86a3d8696c6e5e5311bd3e20428ec6ff2ef8c6c43ff50600b31841fa0c90f50549f5f6e2d244fde41ea2d0b42b199098985540a377f71a2f4b660c9376be0ba5b6db0970bc63991cfc1c1574d4d8c89a92771b3d428120d03960a671dd54cff3a2be9145df1f59e59eb85760dd98a1bcb774e3ed2db9391a290b141a36a12386bbe83baa0e0d034c9