bookings.outlookapps.com

Issued by Microsoft IT TLS CA 4

About this certificate

This digital certificate with serial number 16:00:04:c3:2e:59:93:df:5a:63:90:c4:91:00:00:00:04:c3:2e was issued on by Microsoft Corporation.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=bookings.outlookapps.com

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 16:00:04:c3:2e:59:93:df:5a:63:90:c4:91:00:00:00:04:c3:2e
Serial Number (int): 490618014937263076537882236879150785799439150
Serial Number lenght: 149 bits, 19 octets

SubjectKeyId: 07:c4:b4:bf:cb:a1:06:d7:b0:82:dd:b3:ee:52:06:77:c4:67:67:4b
AuthorityKeyId: 7a:7b:8c:c1:cf:e7:a0:ca:1c:d4:6b:fa:fb:e1:33:c3:0f:1a:a2:9d

Fingerprint (sha1): c8:e8:15:72:20:da:45:ef:28:28:bb:8e:34:a1:10:63:30:e9:75:ef
Fingerprint (sha256): b2:14:94:d5:3c:d7:19:e5:cf:08:2a:27:1a:37:ce:2f:4e:c5:36:d2:c3:6e:63:3d:94:58:57:1f:72:c8:33:de

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%204.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl

Check the revocation status for certificate bookings.outlookapps.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bookings.outlookapps.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bookings.outlookapps.com
*.bookings.outlookapps.com
booker-api.outlookapps.com
msbookingsfacebook.outlookapps.com
bookings.office.net
bookings-api.outlookapps.com
bookings.microsoft.com
*.book.ms
book.ms
bookings.office.com

Other certificates including the domain name outlookapps.com

(limited to 100 certificates)
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
msbookingsfacebook.outlookapps.com
bookings.outlookapps.com
bookings-api.outlookapps.com
bookings-api.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings-ppe.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-ppe.outlookapps.com
booker-api.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
*.outlookapps.com
bookings.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
msbookingsfacebook.outlookapps.com
*.outlookapps.com
bookings.outlookapps.com
*.outlookapps.com
bookings.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
booker-api.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings-api.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
*.outlookapps.com
*.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings.outlookapps.com
outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings-df.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings-api-ppe.outlookapps.com
msbookingsfacebook.outlookapps.com
bookings-ppe.outlookapps.com
bookings-api.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-api-ppe.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings.outlookapps.com
x.bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings-api.outlookapps.com
bookings.outlookapps.com
bookings-api.outlookapps.com
bookings-df.outlookapps.com
bookings.outlookapps.com

Certificate

The complete raw certificate details for bookings.outlookapps.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJjjCCB3agAwIBAgITFgAEwy5Zk99aY5DEkQAAAATDLjANBgkqhkiG9w0BAQsF
ADCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT
B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UE
CxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDQw
HhcNMTkwNDI2MDAxMDQwWhcNMjEwNDI2MDAxMDQwWjAjMSEwHwYDVQQDExhib29r
aW5ncy5vdXRsb29rYXBwcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCv9YuO2b5YFEVNXN03GiHoD8ZrdwF0AdatXRK/7xUF5Rzzri9W+q3jOpTa
zhN3r2lmuYtyFLR0w2xtc0XW2vevY4TpCZHvrs/jsMFjm2rOYPNFbdApr5r3aMi1
9Xo/2J3BjPUFxy716YT9ZvTsBecWl1g9iCL3HXRU221j5WzOhnOb8Eu5uaQK04uf
BXAQQ2Km2p2w8ub6UcpGSeEhQtfy2WyarZNVWrlTkxvpm2VyP1zUh9xfOv4wMrXX
d4rATSqKgpfz12lel4mB0VxXdae6G95y8O6AcyXPt0nOBcQh3L99jp643OawDoQN
LmS8gG8+3bENcTzhON7HUOOtpG7pAgMBAAGjggVQMIIFTDCCAfUGCisGAQQB1nkC
BAIEggHlBIIB4QHfAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csA
AAFqVwQG/QAABAMARzBFAiEArO9AogkTZVUNib2Q8ze/JNI93dGY/v0Zd520pvlw
bCcCIDa1uM3xsUWdFQX6uXyV6TrJ6CM0c3DVI0az++BXSPctAHUARJRlLrDuzq/E
QAfYqP4owNrmgr7YyzG1P9MzlrW2gagAAAFqVwQFmwAABAMARjBEAiB1Qc/ncmQm
8/YsNsWrv1BLRQ+EQQ2jvd8dX7sopAqo9wIgCWtjCOywGN418gkmr/koULuu2tXn
WOLzAJsMiDcpwyIAdwBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAA
AWpXBAc/AAAEAwBIMEYCIQCZenQ/WwqY9atmEXKjvz+1Dljg39YQH3e8YbRmoXRa
aQIhAL5kSjCRal/047164djXTiwzVwePPIG9rC3mbkItGVToAHUApLkJkLQYWBSH
uxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFqVwQG+wAABAMARjBEAiAMFR6E/Rr9
2KUwa2q4LGOFUfUvC38gWP2HQx3QsYQwsgIgSJPjRYdq497Kz4wbPld0bNR5J4aw
WxQnVE0SeMhzhVAwJwYJKwYBBAGCNxUKBBowGDAKBggrBgEFBQcDAjAKBggrBgEF
BQcDATA+BgkrBgEEAYI3FQcEMTAvBicrBgEEAYI3FQiH2oZ1g+7ZAYLJhRuBtZ5h
hfTrYIFdhNLfQoLnk3oCAWQCAR0wgYUGCCsGAQUFBwEBBHkwdzBRBggrBgEFBQcw
AoZFaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvTWljcm9zb2Z0
JTIwSVQlMjBUTFMlMjBDQSUyMDQuY3J0MCIGCCsGAQUFBzABhhZodHRwOi8vb2Nz
cC5tc29jc3AuY29tMB0GA1UdDgQWBBQHxLS/y6EG17CC3bPuUgZ3xGdnSzALBgNV
HQ8EBAMCBLAwgfUGA1UdEQSB7TCB6oIYYm9va2luZ3Mub3V0bG9va2FwcHMuY29t
ghoqLmJvb2tpbmdzLm91dGxvb2thcHBzLmNvbYIaYm9va2VyLWFwaS5vdXRsb29r
YXBwcy5jb22CIm1zYm9va2luZ3NmYWNlYm9vay5vdXRsb29rYXBwcy5jb22CE2Jv
b2tpbmdzLm9mZmljZS5uZXSCHGJvb2tpbmdzLWFwaS5vdXRsb29rYXBwcy5jb22C
FmJvb2tpbmdzLm1pY3Jvc29mdC5jb22CCSouYm9vay5tc4IHYm9vay5tc4ITYm9v
a2luZ3Mub2ZmaWNlLmNvbTCBrAYDVR0fBIGkMIGhMIGeoIGboIGYhktodHRwOi8v
bXNjcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9NaWNyb3NvZnQlMjBJ
VCUyMFRMUyUyMENBJTIwNC5jcmyGSWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9w
a2kvbXNjb3JwL2NybC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUyMENBJTIwNC5jcmww
TQYDVR0gBEYwRDBCBgkrBgEEAYI3KgEwNTAzBggrBgEFBQcCARYnaHR0cDovL3d3
dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3BzMB8GA1UdIwQYMBaAFHp7jMHP
56DKHNRr+vvhM8MPGqKdMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAN
BgkqhkiG9w0BAQsFAAOCAgEAnrDnQwY4pGXFeSOfIPBjz8MtspIV8/cZvd3yk9gn
cZCfHU05i09PTChMx5jyOT2N9Qqt04FVkxf4ST0ca4DSti8Vs24tSNfulz4fwli+
kz5y++PzBQzfbb9kT/KssO4bUcEgipuVCZHQhcGcHDwsFPKSqLLQxZDOkOmGEHMc
lmemIi6XmauoIASYmhFLgH0SOYftNmiqGlZzCo5QYIvUtyGcvKk2pW4qv0G1fRNd
Ivf6mm/eVTE2eEYrqqdThIOooGN4krYY3TphQGs5vQdGMdmcVl6YNZNvJ+7m9rN1
EdW9tlQ41kFO0JVpPHbK5YmvtTyUVbMbIUqkVF0idlPZ74jTAU1U+UwYUjlkWgcM
WEQgr1quXxABp4BuHob9OhlK9eg1zGEEzVUvCvxM47KL5CmBFMI73HxpdoikdHwX
irp/7fFjAzxVYJOpaFchiKaYYVqinQ578TaSmISKQWZmb7y9S7C7y6tPtg+JkXjK
8+Ll+hWAwdsrf7NG2sDGK79wT7OFtOCqQHgwRV5l4bUJBhigM5Zg4zHTb2EglHnl
XNqVWdwtQK7sjs6esWTyQEqjvQC99lgkJx3xky01vHUYtpS/In9P6cAXWrnPQ1Ah
KO1HXH9zJRSYjH2ySQp/IfVEzr63rEJAXDlYtgZ93UkYKKUW4RK3mIMEdh2a0do7
qRE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/WLjtm+WBRFTVzdNxoh
6A/Ga3cBdAHWrV0Sv+8VBeUc864vVvqt4zqU2s4Td69pZrmLchS0dMNsbXNF1tr3
r2OE6QmR767P47DBY5tqzmDzRW3QKa+a92jItfV6P9idwYz1Bccu9emE/Wb07AXn
FpdYPYgi9x10VNttY+VszoZzm/BLubmkCtOLnwVwEENiptqdsPLm+lHKRknhIULX
8tlsmq2TVVq5U5Mb6Ztlcj9c1IfcXzr+MDK113eKwE0qioKX89dpXpeJgdFcV3Wn
uhvecvDugHMlz7dJzgXEIdy/fY6euNzmsA6EDS5kvIBvPt2xDXE84Tjex1DjraRu
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 490618014937263076537882236879150785799439150
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-26 00:10:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-26 00:10:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bookings.outlookapps.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22212786194592765662155792735680549678788926770923834753842292976801407120309071234824856835192710026743219782952125799253869423810221866339644047213460964486475621306106852918096906644574434103888903082573924751233677530241995567558997306683879813068231192924371695860443944943642862138998206817965725862942731234234397940589225682826160383812866220223733589406576258226166898177130537240203414577062684055197993755427357995757000744234622773985689870982518256375245081601782882710458427631812110518547106297334352943201254523566852540185642495815215936702464802039191598413309237462255326695401222545358615721832169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%204.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07c4b4bfcba106d7b082ddb3ee520677c467674b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (237 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.outlookapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookings.outlookapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booker-api.outlookapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msbookingsfacebook.outlookapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings-api.outlookapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.book.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.office.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%204.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7a7b8cc1cfe7a0ca1cd46bfafbe133c30f1aa29d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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