bookings.outlookapps.com

Issued by Microsoft IT TLS CA 5

About this certificate

This digital certificate with serial number 2d:00:04:f9:39:36:ba:51:4f:40:f2:9b:79:00:00:00:04:f9:39 was issued on by Microsoft Corporation.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=bookings.outlookapps.com

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:00:04:f9:39:36:ba:51:4f:40:f2:9b:79:00:00:00:04:f9:39
Serial Number (int): 1003535226338187608224421189059949160732883257
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: e9:5c:23:98:f3:44:bd:9e:85:8c:99:ec:29:07:8e:7c:41:f3:b6:44
AuthorityKeyId: 08:fe:25:9f:74:ea:87:04:c2:bc:bb:8e:a8:38:5f:33:c6:d1:6c:65

Fingerprint (sha1): c0:a6:22:46:f0:67:a7:36:f9:86:2a:04:d8:8f:22:64:18:d4:71:44
Fingerprint (sha256): ef:fb:c3:f3:c9:71:16:4d:d5:53:73:01:2a:2b:2c:26:9c:3c:5f:7d:e3:07:66:1a:82:a0:5f:44:ad:c8:7f:45

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%205.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl

Check the revocation status for certificate bookings.outlookapps.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bookings.outlookapps.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bookings.outlookapps.com
bookings-api.outlookapps.com
booker-api.outlookapps.com
msbookingsfacebook.outlookapps.com
bookings.microsoft.com
bookings.office.net
*.book.ms
book.ms
bookings.office.com

Other certificates including the domain name outlookapps.com

(limited to 100 certificates)
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
msbookingsfacebook.outlookapps.com
bookings.outlookapps.com
bookings-api.outlookapps.com
bookings-api.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings-ppe.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-ppe.outlookapps.com
booker-api.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
*.outlookapps.com
bookings.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
msbookingsfacebook.outlookapps.com
*.outlookapps.com
bookings.outlookapps.com
*.outlookapps.com
bookings.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
booker-api.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings-api.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
*.outlookapps.com
*.outlookapps.com
bookings-df.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings.outlookapps.com
outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings-df.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings-api-ppe.outlookapps.com
msbookingsfacebook.outlookapps.com
bookings-ppe.outlookapps.com
bookings-api.outlookapps.com
bookings-api-ppe.outlookapps.com
bookings-api-ppe.outlookapps.com
bookingso365compliancepackdownload.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings.outlookapps.com
bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings.outlookapps.com
x.bookings.outlookapps.com
bookings-ppe.outlookapps.com
bookings-api.outlookapps.com
bookings.outlookapps.com
bookings-api.outlookapps.com
bookings-df.outlookapps.com
bookings.outlookapps.com

Certificate

The complete raw certificate details for bookings.outlookapps.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJczCCB1ugAwIBAgITLQAE+Tk2ulFPQPKbeQAAAAT5OTANBgkqhkiG9w0BAQsF
ADCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT
B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UE
CxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDUw
HhcNMTgxMjExMjMzNDQyWhcNMjAxMjExMjMzNDQyWjAjMSEwHwYDVQQDExhib29r
aW5ncy5vdXRsb29rYXBwcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNTY9+3hvB2pJqSD7qM9kz8WD7LT2qPcCugVwlEm/U6u1/lY+UOH/4a2ip
9/b127OeWJpt9By/I4aEgN85Mwl+lQ6YWXn7VdPFiKExMz280UFXqkgsekMvIsDw
+d+2rRSXxi9fw64Cs50w7S9guV7bq0g9BclTPYA8qHFyVcJGeBSiJSuGPWeM3Vb6
7G8KEHTXtTWwYs5HkJbinNVxZj84PFdTlQqadrIDcpo2YQfp+qbu9wdof4Zm1ImZ
HBefChggyE6k448BMXrw1vZPUSBE2rJ7Hv9JA+wLAIKBOAKt+uaJhHYMnQiMKpJv
pkt+LAwv8nIOXGfyPV2azv1zPyINAgMBAAGjggU1MIIFMTCCAfYGCisGAQQB1nkC
BAIEggHmBIIB4gHgAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csA
AAFnn6iT/wAABAMARzBFAiEApRQGAiI2MZSYqdXsdbbE1o9dFKbK66bw7EcnTxPN
xF4CIHaeDmNx5e3idiGjXkGgLuJLDQO3jkJJPLrxpyn8C8/CAHYA8JWkWfIA0YJA
EC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFnn6iUFgAABAMARzBFAiADOkbDeK94
rSgzHZLTk9Y2TWH5EM6c4DUaX0XRgH6M3AIhAPQ9OL/VVKczumySUTxjRo83bWN1
0ohKfs4hzIvSkjO+AHUAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwA
AAFnn6iVBQAABAMARjBEAiA0g8kZWgbGEbUd3vJghUPrO8jVTDR/bdratOEO45+K
EgIgCQfFeMWr+Br1iiJuxtfEwKf7QLnbN01cW11Og3LaTDUAdwBep3P531bA57U2
SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAWefqJQYAAAEAwBIMEYCIQDGGzFT2cGF
MUEvXRFlYkxSttwVC9TYAQa0R/emK6YYhAIhAN6IfbMzzAaipGd1m9ahowanMZ5e
DjhUrvtKyUrMLo3WMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwIwCgYIKwYB
BQUHAwEwPgYJKwYBBAGCNxUHBDEwLwYnKwYBBAGCNxUIh9qGdYPu2QGCyYUbgbWe
YYX062CBXYTS30KC55N6AgFkAgEdMIGFBggrBgEFBQcBAQR5MHcwUQYIKwYBBQUH
MAKGRWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL01pY3Jvc29m
dCUyMElUJTIwVExTJTIwQ0ElMjA1LmNydDAiBggrBgEFBQcwAYYWaHR0cDovL29j
c3AubXNvY3NwLmNvbTAdBgNVHQ4EFgQU6VwjmPNEvZ6FjJnsKQeOfEHztkQwCwYD
VR0PBAQDAgSwMIHZBgNVHREEgdEwgc6CGGJvb2tpbmdzLm91dGxvb2thcHBzLmNv
bYIcYm9va2luZ3MtYXBpLm91dGxvb2thcHBzLmNvbYIaYm9va2VyLWFwaS5vdXRs
b29rYXBwcy5jb22CIm1zYm9va2luZ3NmYWNlYm9vay5vdXRsb29rYXBwcy5jb22C
FmJvb2tpbmdzLm1pY3Jvc29mdC5jb22CE2Jvb2tpbmdzLm9mZmljZS5uZXSCCSou
Ym9vay5tc4IHYm9vay5tc4ITYm9va2luZ3Mub2ZmaWNlLmNvbTCBrAYDVR0fBIGk
MIGhMIGeoIGboIGYhktodHRwOi8vbXNjcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNj
b3JwL2NybC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUyMENBJTIwNS5jcmyGSWh0dHA6
Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9NaWNyb3NvZnQlMjBJ
VCUyMFRMUyUyMENBJTIwNS5jcmwwTQYDVR0gBEYwRDBCBgkrBgEEAYI3KgEwNTAz
BggrBgEFBQcCARYnaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAv
Y3BzMB8GA1UdIwQYMBaAFAj+JZ906ocEwry7jqg4XzPG0WxlMB0GA1UdJQQWMBQG
CCsGAQUFBwMCBggrBgEFBQcDATANBgkqhkiG9w0BAQsFAAOCAgEAhNeYzNZlO2VB
Maqmj5qFvCpHLfg/086YXhXo/7C2uX/MWHtQeMaUOKOjk6zYxUz1+7h67CvhT8/9
Sd03C3h52TXw0hnRdCHDli24qo+dzI3M2/u3m+NH0EIrcfVKYAe60tpXDXrUi3xY
EEMxW9FWDoHnAo31w8gviiHarfrHNMPx3H+R8pOwLkej6DwLsHKyS6uDULF5LPoJ
Q0G04ZqMt8MRxyh2zbUWSugg7BOEafoWKgcd9DGdjzyWS/9pIY+6KiXhnSEsckQ2
Xg9Y1iVnA74tnRrd3So6Lew6zk2up0ANQhfVZaeaGj4w0s2/gdrVoaO86q45B40P
IAwC44+o2wWKkawp0Miq3oUuP36AOiz1zuYT5ovxgq9hfOuX1L0zOziM3YWotAIW
NIo5jPKXpMBdKjagpVSwjrxIOQxOjgEcLXXi5U3NkZIIzLddTjdzjx2VpD5AtuzO
neHHhSl/VxgZF5BavlsUaiAUnn3zjDHihghVfgxkPUKs6sbCivEYk700UzyEZypL
65I511lRpWJnt1F4G6EkIim9DRDD97vfqrSfRqONMvzGv+E0dVVX0DTBO6v/CwGT
Ne10FeAg/bhNJfMvy473LQermm1jlYjPV1MWrAcGo55/MwTjy504vs1RJLxY//nk
2iz2CItvRXM3ZMJnj7KRatkBv4CQOPk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU2Pft4bwdqSakg+6jPZ
M/Fg+y09qj3AroFcJRJv1Ortf5WPlDh/+Gtoqff29duznliabfQcvyOGhIDfOTMJ
fpUOmFl5+1XTxYihMTM9vNFBV6pILHpDLyLA8Pnftq0Ul8YvX8OuArOdMO0vYLle
26tIPQXJUz2APKhxclXCRngUoiUrhj1njN1W+uxvChB017U1sGLOR5CW4pzVcWY/
ODxXU5UKmnayA3KaNmEH6fqm7vcHaH+GZtSJmRwXnwoYIMhOpOOPATF68Nb2T1Eg
RNqyex7/SQPsCwCCgTgCrfrmiYR2DJ0IjCqSb6ZLfiwML/JyDlxn8j1dms79cz8i
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1003535226338187608224421189059949160732883257
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-11 23:34:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-11 23:34:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bookings.outlookapps.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25917099040653281142459715937269757666596115934317432660626702519741848842312068173649251961236442335173794994429018038230128358778626367823801122528507814344005140624205915150442150681491172479610445141089949121836499784421965884300450687330081454835804637351214730628379932735827536978255824529699392117119216963886301970758074493763401440184554728968712667247805161568026938079182647788868440097380629755066400379802423983580207689410434224691820719250285914395124426314747550711248598682575949991604329986205452100208308299329966434152561442044460340130765070390004410346982637795640245953771028480013814011470349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001679fa893ff0000040300473045022100a51406022236319498a9d5ec75b6c4d68f5d14a6caeba6f0ec47274f13cdc45e0220769e0e6371e5ede27621a35e41a02ee24b0d03b78e42493cbaf1a729fc0bcfc2007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001679fa8941600000403004730450220033a46c378af78ad28331d92d393d6364d61f910ce9ce0351a5f45d1807e8cdc022100f43d38bfd554a733ba6c92513c63468f376d6375d2884a7ece21cc8bd29233be0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001679fa89505000004030046304402203483c9195a06c611b51ddef2608543eb3bc8d54c347f6ddadab4e10ee39f8a1202200907c578c5abf81af58a226ec6d7c4c0a7fb40b9db374d5c5b5d4e8372da4c350077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001679fa894180000040300483046022100c61b3153d9c18531412f5d1165624c52b6dc150bd4d80106b447f7a62ba61884022100de887db333cc06a2a467759bd6a1a306a7319e5e0e3854aefb4ac94acc2e8dd6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%205.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e95c2398f344bd9e858c99ec29078e7c41f3b644
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (209 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.outlookapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings-api.outlookapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booker-api.outlookapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msbookingsfacebook.outlookapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.office.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.book.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.office.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 08fe259f74ea8704c2bcbb8ea8385f33c6d16c65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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