bookings.outlookapps.com

Issued by Microsoft RSA TLS CA 01

About this certificate

This digital certificate with serial number 6b:00:04:c4:e4:f6:70:25:a4:6a:7c:9c:73:00:00:00:04:c4:e4 was issued on by Microsoft Corporation.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=bookings.outlookapps.com

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:00:04:c4:e4:f6:70:25:a4:6a:7c:9c:73:00:00:00:04:c4:e4
Serial Number (int): 2386181359089773575454039472976413229045826788
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 7a:28:ea:85:35:6a:89:53:cd:89:07:03:d5:29:bc:5d:3f:f8:94:13
AuthorityKeyId: b5:76:0c:30:11:ce:c7:92:42:4d:4c:c7:5c:2c:c8:a9:0c:e8:0b:64

Fingerprint (sha1): 9b:d9:49:69:ac:b0:4e:81:7e:7c:d7:ee:5a:a0:67:87:45:6a:bd:70
Fingerprint (sha256): 93:b4:33:80:26:6b:3c:65:08:d5:94:bd:60:d8:88:1b:e0:2c:23:32:a0:13:21:3b:60:3c:47:21:6e:c1:96:91

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl

Check the revocation status for certificate bookings.outlookapps.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bookings.outlookapps.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

booker-api.outlookapps.com
msbookingsfacebook.outlookapps.com
bookings.office.net
bookings-api.outlookapps.com
bookings.outlookapps.com
bookings.microsoft.com
book.ms
bookings.office.com
*.bookings.outlookapps.com

Other certificates including the domain name outlookapps.com

(limited to 100 certificates)
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
msbookingsfacebook.outlookapps.com
bookings.outlookapps.com
bookings-api.outlookapps.com
bookings-api.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings-ppe.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-ppe.outlookapps.com
booker-api.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
*.outlookapps.com
bookings.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
msbookingsfacebook.outlookapps.com
*.outlookapps.com
bookings.outlookapps.com
*.outlookapps.com
bookings.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
booker-api.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings-api.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
*.outlookapps.com
*.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings.outlookapps.com
outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings-df.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings-api-ppe.outlookapps.com
msbookingsfacebook.outlookapps.com
bookings-ppe.outlookapps.com
bookings-api.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-api-ppe.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings.outlookapps.com
x.bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings-api.outlookapps.com
bookings.outlookapps.com
bookings-api.outlookapps.com
bookings-df.outlookapps.com
bookings.outlookapps.com

Certificate

The complete raw certificate details for bookings.outlookapps.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIZTCCBk2gAwIBAgITawAExOT2cCWkanyccwAAAATE5DANBgkqhkiG9w0BAQsF
ADBPMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
MSAwHgYDVQQDExdNaWNyb3NvZnQgUlNBIFRMUyBDQSAwMTAeFw0yMDEyMTUwODIz
MTdaFw0yMTEyMTUwODIzMTdaMCMxITAfBgNVBAMTGGJvb2tpbmdzLm91dGxvb2th
cHBzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALlCsKcCuzIP
5z/agK9fj3oFjFE1CKFGKAw/XaREDfQLrZ9FzBcfaZaKirvT64dwlLeS9o4Ihr5i
TjUr4knnT3wII8+SuuI0bW4Q4iFkyEMB81nz36OcfSWDLJ0IcSEtgjzUQXtj3CPT
VpCGRqq4/wJ3jlAwZAahIoC600wje5nLL60B8NJ5n5AdUQeX+Jg9ZhMTQRObQwIr
IdBHyJT8qmU6pID5cmgikJhNmkHu5rg2Tk96a6xnph95VUAhybih5x9/Ri0VDiB+
6TTJhpMBGqSUtUzjppRuHKgZqXtl3cB5thpUF32FsgimxvFUtrnXRyUAfs3tKmdf
WHpaqUwi4bkCAwEAAaOCBGQwggRgMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA
9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAF2ZYhSWgAABAMARzBF
AiEA46494nc7T02Y3zetUWhQJlu1rc8ulaRriqIUyy0W6RYCICDoCp5vlLjWyNLy
BeOV2KwHSFtWUt5iGvg39dAADSitAHYAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgX
L6OqHQcT0wwAAAF2ZYhTjAAABAMARzBFAiEAtLRH/haGfNfLDzzl7VEnyv40qaDL
xIZFML20K2OGC3MCIGA1UP1dGEzF2nK3tLiXQHw92bLyARQkITf2UAL09ZGCMCcG
CSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPgYJKwYBBAGC
NxUHBDEwLwYnKwYBBAGCNxUIh9qGdYPu2QGCyYUbgbWeYYX062CBXYWGjkGHwphQ
AgFkAgElMIGHBggrBgEFBQcBAQR7MHkwUwYIKwYBBQUHMAKGR2h0dHA6Ly93d3cu
bWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL01pY3Jvc29mdCUyMFJTQSUyMFRMUyUy
MENBJTIwMDEuY3J0MCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5tc29jc3AuY29t
MB0GA1UdDgQWBBR6KOqFNWqJU82JBwPVKbxdP/iUEzALBgNVHQ8EBAMCBLAwgeoG
A1UdEQSB4jCB34IaYm9va2VyLWFwaS5vdXRsb29rYXBwcy5jb22CIm1zYm9va2lu
Z3NmYWNlYm9vay5vdXRsb29rYXBwcy5jb22CE2Jvb2tpbmdzLm9mZmljZS5uZXSC
HGJvb2tpbmdzLWFwaS5vdXRsb29rYXBwcy5jb22CGGJvb2tpbmdzLm91dGxvb2th
cHBzLmNvbYIWYm9va2luZ3MubWljcm9zb2Z0LmNvbYIHYm9vay5tc4ITYm9va2lu
Z3Mub2ZmaWNlLmNvbYIaKi5ib29raW5ncy5vdXRsb29rYXBwcy5jb20wgbAGA1Ud
HwSBqDCBpTCBoqCBn6CBnIZNaHR0cDovL21zY3JsLm1pY3Jvc29mdC5jb20vcGtp
L21zY29ycC9jcmwvTWljcm9zb2Z0JTIwUlNBJTIwVExTJTIwQ0ElMjAwMS5jcmyG
S2h0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9NaWNyb3Nv
ZnQlMjBSU0ElMjBUTFMlMjBDQSUyMDAxLmNybDBXBgNVHSAEUDBOMEIGCSsGAQQB
gjcqATA1MDMGCCsGAQUFBwIBFidodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtp
L21zY29ycC9jcHMwCAYGZ4EMAQIBMB8GA1UdIwQYMBaAFLV2DDARzseSQk1Mx1ws
yKkM6AtkMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjANBgkqhkiG9w0B
AQsFAAOCAgEAIU46f7+zQxJCWV2LTvaM1BSVmWkRNZCfwmIs1bfgS6J7uHFCj/RL
CpJiVibYgI2cg6JVC6d53Vx0EvsuuogUuNjCsCujxpOtVRBkyc7P9H+uWeDPXWnM
/61FX1UNZkRw7bGJ0qRdu75h4qCSpiq+fMKI4xgY0DhXoiJCD5WKKZotHYeBwHc/
gTK3VslSpRHTMNOxM7G9QZ9Z/mkiETpLMqrTcC19DYboZ/C4Yh6fkaMfspKB10DV
xnBlBt2yT5ucqM3tPzIrarwht+KMCwKjGUGbrhnKmhkIeJky1c2c9hfh6G7PQiVT
UpOcZRhF5CLTAHxOs9xCGPkGc5tzUUiuVFlsGSMa+qzf6WIxqO18+x0F046IHAbH
lMVAJZy0aKwx6TDX9dyOGbqZPFNVGoYyPeqcHiRP/8IjpAKre+BrHgS1Gv/G+836
XznNYHeGuGc9WjMl/WiYz6MlyfNPHkg/AHGHDdJEgexMeL50XOBgr/g4tNrPD/Dk
HVq5LcQv3QWkofp8DtJjw6waCxQY3utIJO5mlGK6mcxadqY6bErER6WaSe+x7nFF
PSwaRqErJKj/FbypZqfF8GVrslKG+CiOS2bEg0cvcSNePQOx9seHzlLErkRoO+Zk
1ny2KVC3nbWjrpr5qXaDMQ2rGkw3ndz7rYINIqymbfcXiKr+o+XORGA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUKwpwK7Mg/nP9qAr1+P
egWMUTUIoUYoDD9dpEQN9Autn0XMFx9ploqKu9Prh3CUt5L2jgiGvmJONSviSedP
fAgjz5K64jRtbhDiIWTIQwHzWfPfo5x9JYMsnQhxIS2CPNRBe2PcI9NWkIZGqrj/
AneOUDBkBqEigLrTTCN7mcsvrQHw0nmfkB1RB5f4mD1mExNBE5tDAish0EfIlPyq
ZTqkgPlyaCKQmE2aQe7muDZOT3prrGemH3lVQCHJuKHnH39GLRUOIH7pNMmGkwEa
pJS1TOOmlG4cqBmpe2XdwHm2GlQXfYWyCKbG8VS2uddHJQB+ze0qZ19YelqpTCLh
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2386181359089773575454039472976413229045826788
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft RSA TLS CA 01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-15 08:23:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-15 08:23:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bookings.outlookapps.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23386972507258607991555573542495554280137443756023524472293718295802180154409770807767669369661637201511444989666049275551593671796619783023438482697782286737936039140921494091862487696559409021972813501574129967306007519350030178269800694028907239912460964745546701195827906125724204423453950568243996690858703695148600528908069246130802641106458792557806409442630333528005909335161449420729036299862571216611590178228102705141166266715844750671180178406385252962007353502037065597097087162172947349593241465731457667708972652508639067521608175401454170270762546750235915598668606883177189249220122806349474157486521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001766588525a0000040300473045022100e3ae3de2773b4f4d98df37ad516850265bb5adcf2e95a46b8aa214cb2d16e916022020e80a9e6f94b8d6c8d2f205e395d8ac07485b5652de621af837f5d0000d28ad0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001766588538c0000040300473045022100b4b447fe16867cd7cb0f3ce5ed5127cafe34a9a0cbc4864530bdb42b63860b730220603550fd5d184cc5da72b7b4b897407c3dd9b2f20114242137f65002f4f59182
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.10585921.15764560
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a28ea85356a8953cd890703d529bc5d3ff89413
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (226 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booker-api.outlookapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msbookingsfacebook.outlookapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings-api.outlookapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.outlookapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.office.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookings.outlookapps.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b5760c3011cec792424d4cc75c2cc8a90ce80b64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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