portal.azure

Issued by Microsoft RSA TLS CA 02

About this certificate

This digital certificate with serial number 2d:00:30:58:34:e0:be:a3:ff:a5:b3:eb:2e:00:00:00:30:58:34 was issued on by Microsoft Corporation.

With 146 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=portal.azure

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:00:30:58:34:e0:be:a3:ff:a5:b3:eb:2e:00:00:00:30:58:34
Serial Number (int): 1003549984734111675988972295132368839075977268
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 4c:c9:07:42:db:17:8b:15:af:8f:19:d9:4c:e6:ae:34:90:64:61:e8
AuthorityKeyId: ff:2f:7f:e1:06:f4:38:f3:2d:ed:25:8d:98:c2:fe:0e:f6:6c:fc:fa

Fingerprint (sha1): 23:b9:0b:5d:51:02:b3:56:2a:3d:75:05:29:65:62:25:51:90:54:37
Fingerprint (sha256): 8e:bf:aa:63:90:f9:b3:df:21:39:db:21:f0:ab:56:dc:25:4b:29:86:31:91:6e:ff:72:e8:db:d8:2c:4c:02:d2

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2002.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl

Check the revocation status for certificate portal.azure

146

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.azure

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.azure
c.bing
api.bing
com.bing
com.xbox
ssl.bing
www.bing
www.xbox
dns.azure
home.bing
home.xbox
live.xbox
m.hotmail
mail.bing
maps.bing
news.bing
wfh.azure
www.azure
www.skype
call.skype
co.hotmail
home.azure
home.skype
ie.windows
music.xbox
pc.windows
store.xbox
video.xbox
www.office
com.hotmail
com.windows
images.bing
m365.office
media.azure
msn.hotmail
pop.hotmail
search.bing
sip.hotmail
travel.bing
videos.bing
www.hotmail
www.windows
apps.windows
core.windows
edge.windows
go.microsoft
home.hotmail
home.windows
hotmail.xbox
imap.hotmail
mail.hotmail
my.microsoft
smtp.hotmail
support.bing
support.xbox
weather.bing
xbox360.xbox
xboxone.xbox
365.microsoft
com.microsoft
gamepass.xbox
games.windows
inbox.hotmail
lumia.windows
minecraft.com
msoid.hotmail
net.microsoft
org.microsoft
phone.windows
promoteiq.com
store.windows
support.azure
support.skype
tcp.microsoft
udp.microsoft
wfh.microsoft
windows.azure
www.microsoft
xboxlive.xbox
yahoo.hotmail
band.microsoft
bing.microsoft
business.skype
corp.microsoft
data.microsoft
designlab.xbox
edge.microsoft
home.microsoft
ipv6.microsoft
m365.microsoft
microsoft.bing
microsoft.xbox
playwright.com
system.windows
update.windows
xbox.microsoft
about.microsoft
azure.microsoft
cloud.microsoft
cortana.windows
hotmail.hotmail
login.microsoft
lumia.microsoft
outlook.hotmail
support.hotmail
support.windows
surface.windows
translator.bing
windows.windows
www.media.azure
groove.microsoft
office.microsoft
portal.microsoft
search.microsoft
update.microsoft
xboxseriesx.xbox
account.microsoft
microsoft.windows
playanywhere.xbox
remix3d.microsoft
support.microsoft
surface.microsoft
windows.microsoft
www.minecraft.com
www.promoteiq.com
download.microsoft
dynamics.microsoft
entertainment.xbox
hololens.microsoft
ieonline.microsoft
www.playwright.com
gamestack.microsoft
integrity.microsoft
microsoft365.office
empowering.microsoft
hackingstem.microsoft
xboxseriesx.microsoft
microsoft365.microsoft
productivity.microsoft
visualstudio.microsoft
windowsazure.microsoft
manufacturing.microsoft
ntservicepack.microsoft
summit.microsoftedge.com
microsoftadvertisingpartners.com
www.microsoftadvertisingpartners.com

Other certificates including the domain name portal.azure

(limited to 100 certificates)

Certificate

The complete raw certificate details for portal.azure in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8+XDcj9eSpCT6Z7TdzV
17NmfOMuzDPHBqNI/mDs+khZixtmlKiZMKOMTlrX9yqyg/mhVe5KulIPr9PD/Mh+
B6Ss2hj5YfmvYksq6J7HE77TinQTYrHyeCmbRwMmQPr2a80SwVOytJKseYhaIpWJ
EfPZovko7cmwkgb6YfuNAH3UukRGRx0WZXUipunAbArB3ItCMzH2WncXe+NGYDz2
dBth+h9FZ9BFHybiXWXxVIXrdv8VShs7wMP/PHsnjUJLFeV9U4uBE3ozYylHOYmK
2nCPDBGl2eqeYpQXS403PZR0CRnwIR+hJsm4kT7n5oyd0EGIhCus5sBILPKCJEOl
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1003549984734111675988972295132368839075977268
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft RSA TLS CA 02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-13 18:48:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-13 18:48:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.azure'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24718835939305902512971952631102229796826225599738213249720576877049216843564259867895662761275036041095124666461908599208784474489406907829127215373296592703812533959281348031313344340902099353558311533980329183135335989172782086739806171405481336263071453232932978908607893172347328257856967634883294741381695005284976727821132959720960436925572112810660435682029696986544064896861740260825503213308851297053985503631047162227376555035391353767078209948614577187208331989571683838560024692228818957137803850848118081589461899600965530659005815320124886916487091574270465596694797558436208729093039789664323850446309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.15 (sMIMECapabilities)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.2 (rc2CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.4 (rc4)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.42 (aes256-CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.45 (aes256-wrap)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.2 (aes128-CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.5 (aes128-wrap)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.7 (desCBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.7 (des-EDE3-CBC)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.10585921.15764560
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2002.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cc90742db178b15af8f19d94ce6ae34906461e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2318 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dns.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfh.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'call.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pc.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.office'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm365.office'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotmail.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weather.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox360.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xboxone.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '365.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamepass.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'games.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inbox.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumia.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minecraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msoid.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'net.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'org.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phone.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promoteiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcp.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udp.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfh.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windows.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xboxlive.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahoo.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'band.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bing.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designlab.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm365.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playwright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'system.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'update.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azure.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortana.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotmail.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumia.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surface.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translator.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windows.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.media.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'update.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xboxseriesx.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playanywhere.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remix3d.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surface.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windows.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minecraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promoteiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamics.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entertainment.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hololens.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ieonline.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playwright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamestack.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrity.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft365.office'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empowering.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackingstem.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xboxseriesx.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft365.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productivity.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visualstudio.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windowsazure.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manufacturing.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntservicepack.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summit.microsoftedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoftadvertisingpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microsoftadvertisingpartners.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ff2f7fe106f438f32ded258d98c2fe0ef66cfcfa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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