*.sharepoint.com

- Microsoft Corporation -

Issued by DigiCert Cloud Services CA-1

About this certificate

This digital certificate with serial number 02:65:d9:89:55:46:35:63:8a:17:38:29:27:85:7b:3e was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: Washington
Locality: Redmond
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:65:d9:89:55:46:35:63:8a:17:38:29:27:85:7b:3e
Serial Number (int): 3187290137815208966774535042246212414
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ed:e6:33:6a:b8:3d:f6:af:17:ca:78:38:5c:db:18:59:ad:01:88:92
AuthorityKeyId: dd:51:d0:a2:31:73:a9:73:ae:8f:b4:01:7e:5d:8c:57:cb:9f:f0:f7

Fingerprint (sha1): f8:2d:75:65:e6:4c:7f:51:04:3f:e8:ec:fc:7d:85:ea:04:df:08:78
Fingerprint (sha256): 6f:2b:a6:a2:c3:f1:e3:7e:be:7e:b1:3a:6d:53:13:28:12:2e:93:6a:42:8f:f0:87:ea:ef:49:0e:35:28:85:b9

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertCloudServicesCA-1.crt

Revocation information

OCSP Server: http://ocspx.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertCloudServicesCA-1-g1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertCloudServicesCA-1-g1.crl

Check the revocation status for certificate *.sharepoint.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sharepoint.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sharepoint.com
*.sharepoint.apac.microsoftonline.com
*.sharepoint.emea.microsoftonline.com
*.sharepoint.microsoftonline.com
*.gr.global.aa-rt.sharepoint.com

Other certificates including the domain name sharepoint.com

(limited to 100 certificates)
*.sharepoint.com
*.sharepoint.com
*.sharepoint.com
*.sharepoint.com
spoprod.cma.sharepoint.com
eopgov.sharepoint.com
csharp.net
csharp.net
svc.ms
*.sharepoint.com
csharp.net
csharp.net
csharp.net
*.sharepoint.com
eopgov.sharepoint.com
*.sharepoint.com
*.sharepoint.com
spoprod.cma.sharepoint.com
*.sharepoint.com
test.sharepoint.com
*.sharepoint.com
csharp.net
*.sharepoint.com
csharp.net
*.sharepointmktgv7.microsoft.com
*.sharepoint.com
csharp.net
hrwebdev.azurewebsites.net
csharp.net
spoauditingcc-prodbubble.yloppe.sharepoint.com
csharp.net
csharp.net
csharp.net
*.sharepoint.com
odsp.cbservice.edog.sharepoint.com
csharp.net
svc.ms
my.microsoft.com
gfedogfood.cma.sharepoint.com
csharp.net
*.sharepoint.com
spaces.aexp.com
hpenterprise-my.sharepoint.com
test.sharepoint.com
csharp.net
csharp.net
csharp.net
my.microsoft.com
*.sharepoint.com
sharepointmktgv5.microsoft.com
my.microsoft.com
csharp.net
csharp.net
csharp.net
csharp.net
*.sharepoint.com
csharp.net
csharp.net
*.sharepoint.com
csharp.net
csharp.net
*.sharepoint.com
*.sharepoint.com
microsoft.sharepoint.com
csctestportal-my.sharepoint.com
cscportal.sharepoint.com
*.sharepoint.com
csharp.net
*.sharepoint.com
*.sharepoint.com
csharp.net
csharp.net
*.sharepoint.com
csharp.net
csharp.net
spoprod.cma.sharepoint.com
csharp.net
*.sharepoint.com
csharp.net
csharp.net
csharp.net
csharp.net
*.sharepoint.com
*.sharepoint.com
csharp.net
csharp.net
csharp.net
csharp.net
*.sharepoint.com
csharp.net
*.spoppe.com
csharp.net
*.sharepoint.com
*.sharepoint.com
csharp.net
*.sharepoint.com
*.svc.ms
*.sharepoint.com
*.sharepoint.com
spoauditingcc-edog.yloppe.sharepoint.com

Certificate

The complete raw certificate details for *.sharepoint.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5q5LPS8PH6Ynzc1unvRu
aJQqN1SLUMQ6kwsTt9j64l8CjZuW0QOdaDr/E4+bMoUr/fgulAxSQTDP9IPMjduD
0o99gfy0aP7vqD1V+6yrX66uNNHxcggPMZ2yc90aEFC0CsDTTNsCgp3GiC61wTDB
UK8BDPhFMMJ0em19j+MnXt9c/tRs012n9zBByOVS3kdeY5FF2ltVUOZdKOdtOZsF
Rbf/x6wwLGBDe/i4bmbloUgEp0I1VQH3qREwh9pf0PiMIo03Uhhh+kClGSfOkRw0
ryYE/S+OT3sKgb8bFZqe1mDlRQUv1YW1q9rSZB67pTQgTISOjceucsbklkBfgDYd
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3187290137815208966774535042246212414
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Cloud Services CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sharepoint.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29120757668746048479506371026278863375914803339547930404988720255183415176344388392153562364548402295010377760979609493592256355344798333179260069318180256612123770267381417298020828658883351996619987575804903045616246821721737991213704202494249038408258041908879406009580555227360098916130986756495385177295304903969793427440649967985048215719639527069709820212658002831924453645183640977022568186317916955560796727685541136935970715857834622990121207497348641040985654161598794748341309558737505740250968837706553120657403536421728605966588959459569306315612574561889128685218066018479207864828851115187918846958957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ede6336ab83df6af17ca78385cdb1859ad018892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharepoint.apac.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharepoint.emea.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharepoint.microsoftonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gr.global.aa-rt.sharepoint.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertCloudServicesCA-1-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertCloudServicesCA-1-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocspx.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertCloudServicesCA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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