checkout.office-int.com
- Microsoft Corporation -
Issued by Microsoft Azure RSA TLS Issuing CA 03
About this certificate
This digital certificate with serial number 33:00:00:e8:2e:ba:59:7a:08:48:7c:ff:b8:00:00:00:00:e8:2e was issued on by Microsoft Corporation.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Microsoft Corporation
Organization:
Microsoft Corporation
State / Province:
WA
Locality: Redmond
Country: US
Locality: Redmond
Country: US
Microsoft Corporation
Organization:
Microsoft Corporation
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 33:00:00:e8:2e:ba:59:7a:08:48:7c:ff:b8:00:00:00:00:e8:2eSerial Number (int): 1137338313748582075071334117696132314787014702
Serial Number lenght: 150 bits, 19 octets
SubjectKeyId: d3:b1:52:1a:05:67:6c:89:0b:2f:a9:34:08:86:8a:f9:ba:cc:1f:98
AuthorityKeyId: fe:09:71:40:55:05:10:44:d8:a4:81:75:b8:9e:1a:e9:4a:06:88:c8
Fingerprint (sha1): 45:a7:80:be:be:70:e0:12:92:24:dc:9d:de:05:0c:83:30:81:9c:59
Fingerprint (sha256): 23:ca:f4:71:c6:06:b2:09:e6:30:e3:43:31:a3:39:49:77:97:be:c4:fb:7b:34:be:67:8e:a1:f2:a9:f9:0d:00
Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt
Revocation information
OCSP Server: http://oneocsp.microsoft.com/ocspCRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl
Check the revocation status for certificate checkout.office-int.com
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for checkout.office-int.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
12 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
checkout.microsoft365-int.com
officepurchaseexperience.omex.office-int.net
*.officepurchaseexperience.omex.office-int.net
external.omex.office-int.net
*.external.omex.office-int.net
checkout.office-int.com
stores.office-int.com
officepurchaseexperience.omex.office-int.net
*.officepurchaseexperience.omex.office-int.net
external.omex.office-int.net
*.external.omex.office-int.net
checkout.office-int.com
stores.office-int.com
Other certificates including the domain name office-int.com
(limited to 100 certificates)
lifecycle.office-int.com
neur.fis.office-int.com
*.osi.office-int.net
*.osi.office-int.net
c.msn-int.com
cert00046-azurecdn.akamaized.net
cert00046-azurecdn.akamaized.net
redwood.osikevlartorus.office-int.com
api.businesscentral.dynamics-tie.com
lynx.osikevlartorus.office-int.com
cdn.forms.office.net
tasks.osi.office-int.com
helene.osikevlartorus.office-int.com
sway.office-int.com
inclient.store.office-int.com
store.office-int.com
cert00046-azurecdn.akamaized.net
osikevlartorus.office-int.com
c.msn-int.com
*.r11s-wu2-ppe.prague.office-int.com
insertmedia.osi.office-int.net
Pineapple.osikevlartorus.office-int.com
*.financials.dynamics-tie.com
geneva-mds.rose.office-int.com
Eridanus-INT-Mds.office-int.com
ssu.office-int.com
tasks.office-int.com
Mahogany.osikevlartorus.office-int.com
*.osi.office-int.net
*.wu2-ppe.prague.office-int.com
jade.osikevlartorus.office-int.com
geneva-mds.Deimos.office-int.com
support.office-int.com
wheat.osikevlartorus.office-int.com
*.osi.office-int.net
*.osi.office-int.net
firstpartymarketplace.store.office-int.com
cek.rps.lifecycle.office-int.com
geneva-mds.Galatea.office-int.com
*.osi.office-int.net
eucalyptus.osikevlartorus.office-int.com
row.fis.office-int.com
cert00046-azurecdn.akamaized.net
messaging.engagement.office-int.com
*.eu2.prague.office-int.com
forms.office-int.com
*.osi.office-int.net
geneva-mds.patriarch.office-int.com
*.osi.office-int.net
Buff.osikevlartorus.office-int.com
geneva-mds.Enceladus.office-int.com
sagittarius.osikevlartorus.office-int.com
Galatea.osikevlartorus.office-int.com
cluster.project.office-int.com
servicetrust.office-int.com
random12.fis.office-int.com
monitoring.servicetrust.office-int.com
cert00046-azurecdn.akamaized.net
eus.fis.office-int.com
servicetrust.office-int.com
Ginger.osikevlartorus.office-int.com
aqua.osikevlartorus.office-int.com
geneva-mds.Coffee.office-int.com
malachite.osikevlartorus.office-int.com
firstpartyapp-encrypt.marketplace.store.office-int.com
cert00046-azurecdn.akamaized.net
deployment.servicetrust.office-int.com
messaging.growth.office-int.com
cert00046-azurecdn.akamaized.net
persimmon.osikevlartorus.office-int.com
proteus.osikevlartorus.office-int.com
melon.osikevlartorus.office-int.com
addinslicensing.store.office-int.com
cert00046-azurecdn.akamaized.net
sway.office-int.com
cert00046-azurecdn.akamaized.net
burlywood.osikevlartorus.office-int.com
setup.office-int.com
prod.fis.office-int.com
*.r11s-wu2.prague.office-int.com
geneva-mds.auburn.office-int.com
cert00046-azurecdn.akamaized.net
*.osi.office-int.net
firstpartymarketplace.store.office-int.com
*.osi.office-int.net
api.servicetrust.office-int.com
sway.office-int.com
mint.osikevlartorus.office-int.com
forms.office-int.com
checkout.office-int.com
lifecycle.office-int.com
lumber.osikevlartorus.office-int.com
margaret.osikevlartorus.office-int.com
testIcmCert1.office-int.com
teal.officeapps.live-int.com
Eridanus-INT-Mds.office-int.com
ginger.osikevlartorus.office-int.com
store.office-int.com
messaging.engagement.office-int.com
scc-nexus.office-int.com
neur.fis.office-int.com
*.osi.office-int.net
*.osi.office-int.net
c.msn-int.com
cert00046-azurecdn.akamaized.net
cert00046-azurecdn.akamaized.net
redwood.osikevlartorus.office-int.com
api.businesscentral.dynamics-tie.com
lynx.osikevlartorus.office-int.com
cdn.forms.office.net
tasks.osi.office-int.com
helene.osikevlartorus.office-int.com
sway.office-int.com
inclient.store.office-int.com
store.office-int.com
cert00046-azurecdn.akamaized.net
osikevlartorus.office-int.com
c.msn-int.com
*.r11s-wu2-ppe.prague.office-int.com
insertmedia.osi.office-int.net
Pineapple.osikevlartorus.office-int.com
*.financials.dynamics-tie.com
geneva-mds.rose.office-int.com
Eridanus-INT-Mds.office-int.com
ssu.office-int.com
tasks.office-int.com
Mahogany.osikevlartorus.office-int.com
*.osi.office-int.net
*.wu2-ppe.prague.office-int.com
jade.osikevlartorus.office-int.com
geneva-mds.Deimos.office-int.com
support.office-int.com
wheat.osikevlartorus.office-int.com
*.osi.office-int.net
*.osi.office-int.net
firstpartymarketplace.store.office-int.com
cek.rps.lifecycle.office-int.com
geneva-mds.Galatea.office-int.com
*.osi.office-int.net
eucalyptus.osikevlartorus.office-int.com
row.fis.office-int.com
cert00046-azurecdn.akamaized.net
messaging.engagement.office-int.com
*.eu2.prague.office-int.com
forms.office-int.com
*.osi.office-int.net
geneva-mds.patriarch.office-int.com
*.osi.office-int.net
Buff.osikevlartorus.office-int.com
geneva-mds.Enceladus.office-int.com
sagittarius.osikevlartorus.office-int.com
Galatea.osikevlartorus.office-int.com
cluster.project.office-int.com
servicetrust.office-int.com
random12.fis.office-int.com
monitoring.servicetrust.office-int.com
cert00046-azurecdn.akamaized.net
eus.fis.office-int.com
servicetrust.office-int.com
Ginger.osikevlartorus.office-int.com
aqua.osikevlartorus.office-int.com
geneva-mds.Coffee.office-int.com
malachite.osikevlartorus.office-int.com
firstpartyapp-encrypt.marketplace.store.office-int.com
cert00046-azurecdn.akamaized.net
deployment.servicetrust.office-int.com
messaging.growth.office-int.com
cert00046-azurecdn.akamaized.net
persimmon.osikevlartorus.office-int.com
proteus.osikevlartorus.office-int.com
melon.osikevlartorus.office-int.com
addinslicensing.store.office-int.com
cert00046-azurecdn.akamaized.net
sway.office-int.com
cert00046-azurecdn.akamaized.net
burlywood.osikevlartorus.office-int.com
setup.office-int.com
prod.fis.office-int.com
*.r11s-wu2.prague.office-int.com
geneva-mds.auburn.office-int.com
cert00046-azurecdn.akamaized.net
*.osi.office-int.net
firstpartymarketplace.store.office-int.com
*.osi.office-int.net
api.servicetrust.office-int.com
sway.office-int.com
mint.osikevlartorus.office-int.com
forms.office-int.com
checkout.office-int.com
lifecycle.office-int.com
lumber.osikevlartorus.office-int.com
margaret.osikevlartorus.office-int.com
testIcmCert1.office-int.com
teal.officeapps.live-int.com
Eridanus-INT-Mds.office-int.com
ginger.osikevlartorus.office-int.com
store.office-int.com
messaging.engagement.office-int.com
scc-nexus.office-int.com
Certificate
The complete raw certificate details for checkout.office-int.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH2zCCBcOgAwIBAgITMwAA6C66WXoISHz/uAAAAADoLjANBgkqhkiG9w0BAQwF ADBdMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u MS4wLAYDVQQDEyVNaWNyb3NvZnQgQXp1cmUgUlNBIFRMUyBJc3N1aW5nIENBIDAz MB4XDTIzMDgzMDEwMzMyMloXDTI0MDgyNDEwMzMyMlowbjELMAkGA1UEBhMCVVMx CzAJBgNVBAgTAldBMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv ZnQgQ29ycG9yYXRpb24xIDAeBgNVBAMTF2NoZWNrb3V0Lm9mZmljZS1pbnQuY29t MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZN35f1vIPa9KfD5oSsR kLItLJtZA2EXnvGYmisEKn0Rqf5oTimTTm0sAgpDrQ0cz6eQBrwmXj1RSbpu0ysS pUW51t5QLlb6CQIhPPMRt7nM43A6jCbcybWEgFy9qZSVapcjnzhZLucKnf8ucm6P xHnF4x0zrDejJIUvZSGPUGc3ZpC2aHS7/VOWkbXHFHmtM7VDDOU/cuykMju8YJpt you8haNwytEArspLoNOB10YTDCQaFWKsdmJ7wAl/GAoKl+ZIz5sDbZ5gzEZ7BiwH QH20QSoo/B1IPusw5tjWo1qvf+OapnvIe+Sg+riXD2/z6XnFkiJM9o0j6TDp8rzb RQIDAQABo4IDgTCCA30wEwYKKwYBBAHWeQIEAwEB/wQCBQAwJwYJKwYBBAGCNxUK BBowGDAKBggrBgEFBQcDAjAKBggrBgEFBQcDATA8BgkrBgEEAYI3FQcELzAtBiUr BgEEAYI3FQiHvdcbgefrRoKBnS6O0AyH8NodXYKE5WmC86c+AgFkAgEmMIG0Bggr BgEFBQcBAQSBpzCBpDBzBggrBgEFBQcwAoZnaHR0cDovL3d3dy5taWNyb3NvZnQu Y29tL3BraW9wcy9jZXJ0cy9NaWNyb3NvZnQlMjBBenVyZSUyMFJTQSUyMFRMUyUy MElzc3VpbmclMjBDQSUyMDAzJTIwLSUyMHhzaWduLmNydDAtBggrBgEFBQcwAYYh aHR0cDovL29uZW9jc3AubWljcm9zb2Z0LmNvbS9vY3NwMB0GA1UdDgQWBBTTsVIa BWdsiQsvqTQIhor5uswfmDAOBgNVHQ8BAf8EBAMCBaAwgfYGA1UdEQSB7jCB64Id Y2hlY2tvdXQubWljcm9zb2Z0MzY1LWludC5jb22CLG9mZmljZXB1cmNoYXNlZXhw ZXJpZW5jZS5vbWV4Lm9mZmljZS1pbnQubmV0gi4qLm9mZmljZXB1cmNoYXNlZXhw ZXJpZW5jZS5vbWV4Lm9mZmljZS1pbnQubmV0ghxleHRlcm5hbC5vbWV4Lm9mZmlj ZS1pbnQubmV0gh4qLmV4dGVybmFsLm9tZXgub2ZmaWNlLWludC5uZXSCF2NoZWNr b3V0Lm9mZmljZS1pbnQuY29tghVzdG9yZXMub2ZmaWNlLWludC5jb20wDAYDVR0T AQH/BAIwADBqBgNVHR8EYzBhMF+gXaBbhllodHRwOi8vd3d3Lm1pY3Jvc29mdC5j b20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBBenVyZSUyMFJTQSUyMFRMUyUyMElz c3VpbmclMjBDQSUyMDAzLmNybDBmBgNVHSAEXzBdMFEGDCsGAQQBgjdMg30BATBB MD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0Rv Y3MvUmVwb3NpdG9yeS5odG0wCAYGZ4EMAQICMB8GA1UdIwQYMBaAFP4JcUBVBRBE 2KSBdbieGulKBojIMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATANBgkq hkiG9w0BAQwFAAOCAgEAUejg9y10DB557KM3QulePVn/+h6h+6GXp+Lk0WBQfNsU oUjGzaivr3XRZ/F/baUX9+lHWuxcsXolBvlAwfu09MGD6iV8ELGejeeEpt+j4WTX xL21AJnyMkkkqwknk72x7UmaQIRzjsoij7K5AOx8pQrHYZHxnigzC1mv3HdcCHO8 0QO8+FkW4tYd4W1GjH21x0MWNIQhULVEgcmNAZ2ORc3FBJ0lQm5E9a8kZZ5nkq9l Gtq0kZ5FItcxbPFmoalSVnZ8MModPJObCIEzMnq6VtYQWCuHEg6paaNpX7WWsFfD RawI5ARJitjSvKSO3RwJLcWlHdFq9qZchA6eJA1gAFWZuBTHmlC7A/8ZvcUpPj/M Jlg82nSKla14RkwfQdolyuG+lipTw1uIcyr2TuduUpLrRETSlB+I94W/h7zS5W42 nBAJCM5aDFdr77FXJmbuxYtQD2Fm0zqVEccRzcnwckoMHHDhNlBeQMLJf4LO07dt P0o81+TEexWcHyEP2ilYCpV9Lt5PtJeph6fl4MDSNSX0quwMTrUtM21lXHf1jU7d H308iolJzJK+oPaesNC4xkSr+ag3qpMMLtHgToR58/kprnqwgeQ0ny2RSQzLAnG5 hnEHPetHNcfsFlf8M2J0Ry1iyR+yzy9P1mvd1SzHP1ap418Fsg2DQ0NQ4O2DFjE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZN35f1vIPa9KfD5oSsR kLItLJtZA2EXnvGYmisEKn0Rqf5oTimTTm0sAgpDrQ0cz6eQBrwmXj1RSbpu0ysS pUW51t5QLlb6CQIhPPMRt7nM43A6jCbcybWEgFy9qZSVapcjnzhZLucKnf8ucm6P xHnF4x0zrDejJIUvZSGPUGc3ZpC2aHS7/VOWkbXHFHmtM7VDDOU/cuykMju8YJpt you8haNwytEArspLoNOB10YTDCQaFWKsdmJ7wAl/GAoKl+ZIz5sDbZ5gzEZ7BiwH QH20QSoo/B1IPusw5tjWo1qvf+OapnvIe+Sg+riXD2/z6XnFkiJM9o0j6TDp8rzb RQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1137338313748582075071334117696132314787014702 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 10:33:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-24 10:33:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'checkout.office-int.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27466431532844960321855939682096880371577570630209679963142199760279964989267866368029263135901251266491664474420310173986344833026864613192340730096305497465553833576495799110266077161129351196759942180843784914625408871608250717041345221810989274314177113703484240723287329791496327894565221651008924717452341849159497428629458123867137469047765348530395869945580763162017867889347609622249524909889112605685419329252387572193716759379708793239359857942244659622365187763583922426707737846013905393701570035144937141886122855808186010848598610748455406474779967499330263860339771544611725487541037586124610083806021 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003%20-%20xsign.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d3b1521a05676c890b2fa93408868af9bacc1f98 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (238 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.microsoft365-int.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officepurchaseexperience.omex.office-int.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officepurchaseexperience.omex.office-int.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'external.omex.office-int.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external.omex.office-int.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.office-int.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.office-int.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2003.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe09714055051044d8a48175b89e1ae94a0688c8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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