portal.azure

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 01

About this certificate

This digital certificate with serial number 33:00:38:a7:69:56:85:b6:3c:9c:b6:ba:14:00:00:00:38:a7:69 was issued on by Microsoft Corporation.

With 135 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:00:38:a7:69:56:85:b6:3c:9c:b6:ba:14:00:00:00:38:a7:69
Serial Number (int): 1137357283465630699970459094176694530943264617
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 88:9b:19:f7:0e:ac:33:f7:c3:4e:66:ad:f8:f7:36:37:68:49:5a:0b
AuthorityKeyId: 0f:20:5d:d7:a1:57:95:db:92:cf:2b:d0:c7:c2:77:04:ce:72:80:76

Fingerprint (sha1): fb:cf:b0:23:e6:f0:6b:55:7d:6d:a4:25:bf:f8:0e:5a:3e:ff:0c:20
Fingerprint (sha256): a9:41:65:23:ee:fa:60:9a:8a:1d:82:89:03:7f:a5:00:97:37:2e:75:9f:60:ac:27:1c:bb:29:a5:e4:d4:d1:32

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.crl

Check the revocation status for certificate portal.azure

135

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.azure

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.azure
c.bing
api.bing
com.bing
com.xbox
ssl.bing
www.bing
www.xbox
dns.azure
home.bing
home.xbox
live.xbox
m.hotmail
mail.bing
maps.bing
news.bing
wfh.azure
www.azure
www.skype
call.skype
co.hotmail
home.azure
home.skype
ie.windows
music.xbox
pc.windows
store.xbox
video.xbox
www.office
com.hotmail
com.windows
images.bing
m365.office
msn.hotmail
pop.hotmail
search.bing
sip.hotmail
travel.bing
videos.bing
www.hotmail
www.windows
apps.windows
core.windows
edge.windows
go.microsoft
home.hotmail
home.windows
hotmail.xbox
imap.hotmail
mail.hotmail
my.microsoft
smtp.hotmail
support.bing
support.xbox
weather.bing
xbox360.xbox
xboxone.xbox
365.microsoft
com.microsoft
gamepass.xbox
games.windows
inbox.hotmail
lumia.windows
msoid.hotmail
net.microsoft
org.microsoft
phone.windows
store.windows
support.azure
support.skype
tcp.microsoft
udp.microsoft
wfh.microsoft
windows.azure
www.microsoft
xboxlive.xbox
yahoo.hotmail
band.microsoft
bing.microsoft
business.skype
corp.microsoft
data.microsoft
designlab.xbox
edge.microsoft
home.microsoft
ipv6.microsoft
m365.microsoft
microsoft.bing
microsoft.xbox
system.windows
update.windows
xbox.microsoft
about.microsoft
azure.microsoft
cloud.microsoft
cortana.windows
hotmail.hotmail
login.microsoft
lumia.microsoft
outlook.hotmail
support.hotmail
support.windows
surface.windows
translator.bing
windows.windows
groove.microsoft
office.microsoft
portal.microsoft
search.microsoft
update.microsoft
xboxseriesx.xbox
account.microsoft
microsoft.windows
playanywhere.xbox
remix3d.microsoft
support.microsoft
surface.microsoft
windows.microsoft
download.microsoft
dynamics.microsoft
entertainment.xbox
hololens.microsoft
ieonline.microsoft
gamestack.microsoft
integrity.microsoft
microsoft365.office
empowering.microsoft
hackingstem.microsoft
xboxseriesx.microsoft
microsoft365.microsoft
productivity.microsoft
visualstudio.microsoft
windowsazure.microsoft
manufacturing.microsoft
ntservicepack.microsoft

Other certificates including the domain name portal.azure

(limited to 100 certificates)
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure
portal.azure

Certificate

The complete raw certificate details for portal.azure in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+NNt2xahoUj7t6d2W2o
qhse/1JNj3X6RjExTBBCrWFONLTOwcHZXGk7X3RCsMKBvJEGcdAb6z/2kyKYDsUL
+a58PSb8LmN/AtoZJJlGXw0oj9mBkCCycuSbBpBIIqUeHXHxgc6EMG/KMmRk4/h3
4cHZrkcRGqgXFW3Vcle28CKcjoKyTV11hy+e9qMEaFWet2pqtBCe5i/0+pDqhMQg
JdHpof/LLm1VSHe5aArYMtY5Y07tvxtebcw+oU3PsXtSWsCL9ewhH1MxTTVbFKkZ
ZLhthAdzGtVd4sT9mrfdh4wXT4uqcS/zeTBRjb1gutNlbvOhSepXR7xzXH8iEOYx
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137357283465630699970459094176694530943264617
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-26 20:08:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-21 20:08:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.azure'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20183978062495300397317267376218991717062157454281057033591533241844105691484245910488605968268467536211450850407108941611388674332776525734395154613173893617124698379544694524566679308163215553645732121455282035556464046019578449428984934144282682492158690120812744868876618479249476442937430512607313521751731610949354802724070917765092553999339793451296081152618002040938139437685326413886658414262546923036258957227880345767958556062790427053436407231099983329991348003750037311638221727184046408453903779611880823031653272132338504984850401703188331403635272167293527590097906131361394757234754339054361237664177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2001%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							889b19f70eac33f7c34e66adf8f7363768495a0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2086 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dns.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfh.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'call.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pc.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.office'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm365.office'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotmail.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weather.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox360.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xboxone.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '365.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamepass.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'games.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inbox.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumia.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msoid.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'net.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'org.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phone.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcp.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udp.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfh.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windows.azure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xboxlive.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahoo.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'band.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bing.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.skype'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designlab.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm365.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'system.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'update.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azure.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortana.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotmail.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumia.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.hotmail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surface.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translator.bing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windows.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'update.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xboxseriesx.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft.windows'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playanywhere.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remix3d.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surface.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windows.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamics.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entertainment.xbox'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hololens.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ieonline.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamestack.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrity.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft365.office'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empowering.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackingstem.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xboxseriesx.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft365.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productivity.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visualstudio.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windowsazure.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manufacturing.microsoft'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntservicepack.microsoft'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2001.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f205dd7a15795db92cf2bd0c7c27704ce728076
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0054d20d9bbdce58213cc097c43805e29c329f4fa5f2c39e455edb247508615e8b1a3e167c726dbd5fb8683c5593d27d5365f83d282bf949cd0f9d56e0e8a3ef18c28ce928874fb4bad26d18a49f14b1b452828574e39fb078e15245b07b34c2c3c2cce42f47e90347c5a62c26950ad8a02f4cd1830b89c7f7d959f4ae314c92644d8a4edf0fee504664d68a8d54d076a18773847002b5ee1fc722d0bb55e922a32fc5702cdc35c3d2714f4dd2ccfc9d081437a45f5ffa648514c15370edd9447d6693e92460fa38386096ba719bb9f038d41daf00da0e219b9510a38ed90e5cbcc7e880e905045ee44d3e20a745c68e99e396de747c606590da476eb7c3199838370ebae7d18bcc5ad78f14296c0d42bba7c9eccbfd869c5c05fb5d0f9b10fb717d68017288bd5d3f34d7fd49bf76f274cd189e2a46ee6b7d0ef432c365b746dde0995c0227f21fa215c47520808f99b5813c070e41fd1a2d144ec5f875b5b2c6851e972ec6e62ae8a32e227bb0021e175e685ac58b9c29ad00414990e65b4a1eea20d67e0e3ccd36e48253b85f824af5665e041aaba69814ab665be880795276b33ac59e48b3bfb9071396b9f43f071afc9542a1eed15a0766e5bf0ff7196f381f334a6ebaad41ab37be08648f3de7f2ff1de97b9a9cd00d03b5ab7d2c105ef8dcdc900abeca187658ee08133666194bdf0cc6bc3eff7d8b31895ff8034ec64e