Hostnames |
autodiscover.kpmg.com mail.ema.kpmg.com autodiscover.kpmg.onmicrosoft.com autodiscover.kpmg.mail.onmicrosoft.com eurp138-provisioning.internal.outlook.com pod51200.outlook.com pod51200-pri.outlook.com pod51200ip.outlook.com pod51200psh.outlook.com |
Domains | kpmg.com onmicrosoft.com outlook.com |
Country | Netherlands |
City | Amsterdam |
Organization | Microsoft Corporation |
ISP | Microsoft Corporation |
ASN | AS8075 |
Operating System | Windows |
832324528 | 2024-12-29T18:09:35.29991325 / tcp
220 AMXP138CA0002.outlook.office365.com Microsoft ESMTP MAIL Service ready at Sun, 29 Dec 2024 18:09:12 +0000 [08DD27A2468ADE9C] 250-AMXP138CA0002.outlook.office365.com Hello [224.97.167.172] 250-SIZE 157286400 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
Certificate: Data: Version: 3 (0x2) Serial Number: 40:b8:c8:5d:00:89:14:1c:67:b7:e2:02:00:59:0a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Nov 4 22:13:19 2024 GMT Not After : Nov 4 22:13:18 2025 GMT Subject: C=NL, L=Amstelveen, O=KPMG International Cooperative, CN=mail.ema.kpmg.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:93:14:81:27:92:90:80:3b:61:fe:41:96:58:fc: 27:08:09:2d:70:7c:33:28:08:53:54:c1:57:78:66: 07:44:22:74:38:d3:ee:97:79:0f:37:3b:5f:63:55: 53:20:cf:62:d9:c5:e8:c4:cb:6e:8b:fb:7e:81:6f: ed:68:66:06:a7:ba:bc:97:fc:b4:ea:71:16:e8:c5: 1c:76:4e:83:b2:a5:c3:2f:b2:3c:5c:54:53:2d:bb: 7a:65:43:d5:91:b2:21:db:77:c9:3d:21:02:bb:e1: d0:73:34:72:5e:c2:5a:a6:69:01:2a:06:d5:b9:dc: d3:49:f1:24:0e:6c:76:67:b3:56:1c:cd:84:f2:59: 8e:ae:14:9e:a6:0c:c4:1d:67:75:0d:11:80:b5:ec: f4:6e:ab:bb:a3:4a:ee:04:34:d1:53:74:a0:11:96: 8c:69:8b:3b:b3:6e:cc:7f:dc:ff:12:0f:e4:7a:44: f2:c3:34:ed:97:25:d4:22:21:a6:15:56:38:47:a9: ed:e3:c9:c8:a4:19:af:80:0a:8d:14:fc:36:34:2f: f0:71:de:11:7c:06:2f:18:35:77:2d:6c:9b:65:c1: b8:1c:95:27:e1:5a:4e:d3:88:ec:93:d0:72:24:20: b6:f0:10:6a:66:1e:f4:dd:27:7c:b7:1a:b8:31:0b: 20:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 11:55:DB:2E:40:30:08:17:A0:54:84:D1:05:04:D8:09:ED:BE:51:04 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Subject Alternative Name: DNS:mail.ema.kpmg.com, DNS:*.pod51200.outlook.com, DNS:autodiscover.kpmg.com, DNS:autodiscover.kpmg.mail.onmicrosoft.com, DNS:autodiscover.kpmg.onmicrosoft.com, DNS:eurp138-provisioning.internal.outlook.com, DNS:pod51200.outlook.com, DNS:pod51200ip.outlook.com, DNS:pod51200-pri.outlook.com, DNS:pod51200psh.outlook.com Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Nov 4 22:13:19.933 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:4F:80:35:19:1F:F3:C6:FD:90:FA:E0:09: 27:E8:A1:4D:10:58:3D:F0:5F:D2:91:4E:FE:41:3A:9E: E9:E6:26:FA:02:20:24:06:FF:69:7C:7C:B8:C3:78:99: 71:A4:43:C6:4A:9A:93:9F:F1:13:4C:94:C4:D8:30:D5: A8:0B:11:9A:91:6B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Nov 4 22:13:19.981 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:74:E6:D6:84:01:1B:4D:8B:84:FB:2E:E6: C7:3A:F4:2F:15:0B:C8:AC:61:73:3D:7D:34:F9:6A:6E: D2:99:F8:EF:02:20:3F:4F:9D:DC:EE:E3:5C:77:9A:AB: 1E:83:32:4F:88:C9:AD:D8:FB:82:3F:6E:F6:A9:AA:6F: E6:E7:EC:47:7A:42 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Nov 4 22:13:19.970 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:C2:12:CD:D6:EF:CF:35:50:5E:11:38: 08:E8:66:A4:AA:3C:F2:B5:2C:44:CA:BA:92:02:61:2C: 6B:AC:47:14:88:02:20:2C:F0:40:EE:A1:10:42:94:AC: 80:2E:04:E5:04:1B:D7:AC:4F:E7:7B:33:BF:8F:87:10: D8:24:68:6C:DE:6D:46 Signature Algorithm: sha256WithRSAEncryption Signature Value: 70:36:3b:6e:32:1c:b2:40:b6:d3:e6:af:d3:3a:5f:c1:e4:d2: ef:8a:9f:30:b3:e5:e9:40:30:a7:e2:b2:9a:99:ec:d6:00:d9: 45:df:03:98:4e:df:c3:86:ad:eb:55:e8:74:9a:02:18:60:80: 01:d0:22:60:73:bf:78:45:5c:cd:bb:ce:16:6b:f4:24:0d:1f: 47:fa:f9:31:a9:23:0d:0d:c8:f6:fc:96:6e:90:5e:f2:57:d9: 9a:a1:ee:19:38:cb:8c:57:55:ca:f8:7a:1d:e7:3e:8a:7a:fe: 1b:e6:42:ba:dc:59:ce:92:fa:94:af:9f:ca:15:c1:6c:34:f0: 2e:59:f0:f0:5c:68:e8:3b:80:ac:ae:d0:3e:18:2f:f7:f6:0d: de:88:c1:76:35:d1:e9:9c:a7:74:36:ef:e6:8c:cf:e1:2c:37: d1:e8:b3:5f:d8:e6:17:db:e5:38:be:e2:7e:da:02:2b:63:47: 4c:bf:98:23:be:3b:2e:18:c5:75:ca:75:58:ad:92:95:d8:ef: d7:6f:11:b4:ac:79:3a:61:40:b7:dc:e5:1c:c0:60:57:be:1b: 40:93:b3:5e:4b:47:79:12:25:9d:86:da:41:2d:2c:26:ad:a4: ef:c9:66:52:25:af:73:32:8d:6b:25:73:09:33:15:4f:a6:f7: bc:5d:c8:31
-524785304 | 2024-12-31T14:55:28.22884780 / tcp
HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://40.101.91.143/owa/ Server: Microsoft-IIS/10.0 request-id: 5f673147-7fbd-62e2-61de-e688ffffcf4a X-FEServer: AMXP138CA0006 X-RequestId: 37fa9de0-fb08-4692-9745-1c498f5936f2 X-FEProxyInfo: AMXP138CA0006.EURP138.PROD.OUTLOOK.COM X-FEEFZInfo: AMS MS-CV: RzFnX71/4mJh3uaI///PSg.0 X-Powered-By: ASP.NET X-FEServer: AMXP138CA0006 Date: Tue, 31 Dec 2024 14:55:27 GMT Connection: close Content-Length: 0
400421510 | 2024-12-15T02:13:23.661665110 / tcp
+OK The Microsoft Exchange POP3 service is ready. [QQBNAFgAUAAxADMAOABDAEEAMAAwADAAMgAuAEUAVQBSAFAAMQAzADgALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] +OK TOP UIDL STLS .
Certificate: Data: Version: 3 (0x2) Serial Number: 40:b8:c8:5d:00:89:14:1c:67:b7:e2:02:00:59:0a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Nov 4 22:13:19 2024 GMT Not After : Nov 4 22:13:18 2025 GMT Subject: C=NL, L=Amstelveen, O=KPMG International Cooperative, CN=mail.ema.kpmg.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:93:14:81:27:92:90:80:3b:61:fe:41:96:58:fc: 27:08:09:2d:70:7c:33:28:08:53:54:c1:57:78:66: 07:44:22:74:38:d3:ee:97:79:0f:37:3b:5f:63:55: 53:20:cf:62:d9:c5:e8:c4:cb:6e:8b:fb:7e:81:6f: ed:68:66:06:a7:ba:bc:97:fc:b4:ea:71:16:e8:c5: 1c:76:4e:83:b2:a5:c3:2f:b2:3c:5c:54:53:2d:bb: 7a:65:43:d5:91:b2:21:db:77:c9:3d:21:02:bb:e1: d0:73:34:72:5e:c2:5a:a6:69:01:2a:06:d5:b9:dc: d3:49:f1:24:0e:6c:76:67:b3:56:1c:cd:84:f2:59: 8e:ae:14:9e:a6:0c:c4:1d:67:75:0d:11:80:b5:ec: f4:6e:ab:bb:a3:4a:ee:04:34:d1:53:74:a0:11:96: 8c:69:8b:3b:b3:6e:cc:7f:dc:ff:12:0f:e4:7a:44: f2:c3:34:ed:97:25:d4:22:21:a6:15:56:38:47:a9: ed:e3:c9:c8:a4:19:af:80:0a:8d:14:fc:36:34:2f: f0:71:de:11:7c:06:2f:18:35:77:2d:6c:9b:65:c1: b8:1c:95:27:e1:5a:4e:d3:88:ec:93:d0:72:24:20: b6:f0:10:6a:66:1e:f4:dd:27:7c:b7:1a:b8:31:0b: 20:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 11:55:DB:2E:40:30:08:17:A0:54:84:D1:05:04:D8:09:ED:BE:51:04 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Subject Alternative Name: DNS:mail.ema.kpmg.com, DNS:*.pod51200.outlook.com, DNS:autodiscover.kpmg.com, DNS:autodiscover.kpmg.mail.onmicrosoft.com, DNS:autodiscover.kpmg.onmicrosoft.com, DNS:eurp138-provisioning.internal.outlook.com, DNS:pod51200.outlook.com, DNS:pod51200ip.outlook.com, DNS:pod51200-pri.outlook.com, DNS:pod51200psh.outlook.com Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Nov 4 22:13:19.933 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:4F:80:35:19:1F:F3:C6:FD:90:FA:E0:09: 27:E8:A1:4D:10:58:3D:F0:5F:D2:91:4E:FE:41:3A:9E: E9:E6:26:FA:02:20:24:06:FF:69:7C:7C:B8:C3:78:99: 71:A4:43:C6:4A:9A:93:9F:F1:13:4C:94:C4:D8:30:D5: A8:0B:11:9A:91:6B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Nov 4 22:13:19.981 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:74:E6:D6:84:01:1B:4D:8B:84:FB:2E:E6: C7:3A:F4:2F:15:0B:C8:AC:61:73:3D:7D:34:F9:6A:6E: D2:99:F8:EF:02:20:3F:4F:9D:DC:EE:E3:5C:77:9A:AB: 1E:83:32:4F:88:C9:AD:D8:FB:82:3F:6E:F6:A9:AA:6F: E6:E7:EC:47:7A:42 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Nov 4 22:13:19.970 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:C2:12:CD:D6:EF:CF:35:50:5E:11:38: 08:E8:66:A4:AA:3C:F2:B5:2C:44:CA:BA:92:02:61:2C: 6B:AC:47:14:88:02:20:2C:F0:40:EE:A1:10:42:94:AC: 80:2E:04:E5:04:1B:D7:AC:4F:E7:7B:33:BF:8F:87:10: D8:24:68:6C:DE:6D:46 Signature Algorithm: sha256WithRSAEncryption Signature Value: 70:36:3b:6e:32:1c:b2:40:b6:d3:e6:af:d3:3a:5f:c1:e4:d2: ef:8a:9f:30:b3:e5:e9:40:30:a7:e2:b2:9a:99:ec:d6:00:d9: 45:df:03:98:4e:df:c3:86:ad:eb:55:e8:74:9a:02:18:60:80: 01:d0:22:60:73:bf:78:45:5c:cd:bb:ce:16:6b:f4:24:0d:1f: 47:fa:f9:31:a9:23:0d:0d:c8:f6:fc:96:6e:90:5e:f2:57:d9: 9a:a1:ee:19:38:cb:8c:57:55:ca:f8:7a:1d:e7:3e:8a:7a:fe: 1b:e6:42:ba:dc:59:ce:92:fa:94:af:9f:ca:15:c1:6c:34:f0: 2e:59:f0:f0:5c:68:e8:3b:80:ac:ae:d0:3e:18:2f:f7:f6:0d: de:88:c1:76:35:d1:e9:9c:a7:74:36:ef:e6:8c:cf:e1:2c:37: d1:e8:b3:5f:d8:e6:17:db:e5:38:be:e2:7e:da:02:2b:63:47: 4c:bf:98:23:be:3b:2e:18:c5:75:ca:75:58:ad:92:95:d8:ef: d7:6f:11:b4:ac:79:3a:61:40:b7:dc:e5:1c:c0:60:57:be:1b: 40:93:b3:5e:4b:47:79:12:25:9d:86:da:41:2d:2c:26:ad:a4: ef:c9:66:52:25:af:73:32:8d:6b:25:73:09:33:15:4f:a6:f7: bc:5d:c8:31
1183533906 | 2024-12-30T17:12:21.120064143 / tcp
* OK The Microsoft Exchange IMAP4 service is ready. [QQBNAFgAUAAxADMAOABDAEEAMAAwADAAMwAuAEUAVQBSAFAAMQAzADgALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] * CAPABILITY IMAP4 IMAP4rev1 LOGINDISABLED STARTTLS SASL-IR UIDPLUS ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+ A001 OK CAPABILITY completed. * ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.20") A002 OK ID completed A003 BAD Command Error. 12 * BYE Microsoft Exchange Server IMAP4 server signing off. A004 OK LOGOUT completed.
Certificate: Data: Version: 3 (0x2) Serial Number: 40:b8:c8:5d:00:89:14:1c:67:b7:e2:02:00:59:0a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Nov 4 22:13:19 2024 GMT Not After : Nov 4 22:13:18 2025 GMT Subject: C=NL, L=Amstelveen, O=KPMG International Cooperative, CN=mail.ema.kpmg.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:93:14:81:27:92:90:80:3b:61:fe:41:96:58:fc: 27:08:09:2d:70:7c:33:28:08:53:54:c1:57:78:66: 07:44:22:74:38:d3:ee:97:79:0f:37:3b:5f:63:55: 53:20:cf:62:d9:c5:e8:c4:cb:6e:8b:fb:7e:81:6f: ed:68:66:06:a7:ba:bc:97:fc:b4:ea:71:16:e8:c5: 1c:76:4e:83:b2:a5:c3:2f:b2:3c:5c:54:53:2d:bb: 7a:65:43:d5:91:b2:21:db:77:c9:3d:21:02:bb:e1: d0:73:34:72:5e:c2:5a:a6:69:01:2a:06:d5:b9:dc: d3:49:f1:24:0e:6c:76:67:b3:56:1c:cd:84:f2:59: 8e:ae:14:9e:a6:0c:c4:1d:67:75:0d:11:80:b5:ec: f4:6e:ab:bb:a3:4a:ee:04:34:d1:53:74:a0:11:96: 8c:69:8b:3b:b3:6e:cc:7f:dc:ff:12:0f:e4:7a:44: f2:c3:34:ed:97:25:d4:22:21:a6:15:56:38:47:a9: ed:e3:c9:c8:a4:19:af:80:0a:8d:14:fc:36:34:2f: f0:71:de:11:7c:06:2f:18:35:77:2d:6c:9b:65:c1: b8:1c:95:27:e1:5a:4e:d3:88:ec:93:d0:72:24:20: b6:f0:10:6a:66:1e:f4:dd:27:7c:b7:1a:b8:31:0b: 20:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 11:55:DB:2E:40:30:08:17:A0:54:84:D1:05:04:D8:09:ED:BE:51:04 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Subject Alternative Name: DNS:mail.ema.kpmg.com, DNS:*.pod51200.outlook.com, DNS:autodiscover.kpmg.com, DNS:autodiscover.kpmg.mail.onmicrosoft.com, DNS:autodiscover.kpmg.onmicrosoft.com, DNS:eurp138-provisioning.internal.outlook.com, DNS:pod51200.outlook.com, DNS:pod51200ip.outlook.com, DNS:pod51200-pri.outlook.com, DNS:pod51200psh.outlook.com Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Nov 4 22:13:19.933 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:4F:80:35:19:1F:F3:C6:FD:90:FA:E0:09: 27:E8:A1:4D:10:58:3D:F0:5F:D2:91:4E:FE:41:3A:9E: E9:E6:26:FA:02:20:24:06:FF:69:7C:7C:B8:C3:78:99: 71:A4:43:C6:4A:9A:93:9F:F1:13:4C:94:C4:D8:30:D5: A8:0B:11:9A:91:6B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Nov 4 22:13:19.981 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:74:E6:D6:84:01:1B:4D:8B:84:FB:2E:E6: C7:3A:F4:2F:15:0B:C8:AC:61:73:3D:7D:34:F9:6A:6E: D2:99:F8:EF:02:20:3F:4F:9D:DC:EE:E3:5C:77:9A:AB: 1E:83:32:4F:88:C9:AD:D8:FB:82:3F:6E:F6:A9:AA:6F: E6:E7:EC:47:7A:42 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Nov 4 22:13:19.970 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:C2:12:CD:D6:EF:CF:35:50:5E:11:38: 08:E8:66:A4:AA:3C:F2:B5:2C:44:CA:BA:92:02:61:2C: 6B:AC:47:14:88:02:20:2C:F0:40:EE:A1:10:42:94:AC: 80:2E:04:E5:04:1B:D7:AC:4F:E7:7B:33:BF:8F:87:10: D8:24:68:6C:DE:6D:46 Signature Algorithm: sha256WithRSAEncryption Signature Value: 70:36:3b:6e:32:1c:b2:40:b6:d3:e6:af:d3:3a:5f:c1:e4:d2: ef:8a:9f:30:b3:e5:e9:40:30:a7:e2:b2:9a:99:ec:d6:00:d9: 45:df:03:98:4e:df:c3:86:ad:eb:55:e8:74:9a:02:18:60:80: 01:d0:22:60:73:bf:78:45:5c:cd:bb:ce:16:6b:f4:24:0d:1f: 47:fa:f9:31:a9:23:0d:0d:c8:f6:fc:96:6e:90:5e:f2:57:d9: 9a:a1:ee:19:38:cb:8c:57:55:ca:f8:7a:1d:e7:3e:8a:7a:fe: 1b:e6:42:ba:dc:59:ce:92:fa:94:af:9f:ca:15:c1:6c:34:f0: 2e:59:f0:f0:5c:68:e8:3b:80:ac:ae:d0:3e:18:2f:f7:f6:0d: de:88:c1:76:35:d1:e9:9c:a7:74:36:ef:e6:8c:cf:e1:2c:37: d1:e8:b3:5f:d8:e6:17:db:e5:38:be:e2:7e:da:02:2b:63:47: 4c:bf:98:23:be:3b:2e:18:c5:75:ca:75:58:ad:92:95:d8:ef: d7:6f:11:b4:ac:79:3a:61:40:b7:dc:e5:1c:c0:60:57:be:1b: 40:93:b3:5e:4b:47:79:12:25:9d:86:da:41:2d:2c:26:ad:a4: ef:c9:66:52:25:af:73:32:8d:6b:25:73:09:33:15:4f:a6:f7: bc:5d:c8:31
-1880037234 | 2025-01-01T14:19:59.270076443 / tcp
HTTP/1.1 302 Content-Length: 776 Content-Type: text/html; charset=utf-8 Location: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f40.101.91.143%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=0&msaredir=0&client-request-id=8e1c9572-5ad9-1f0d-65a9-ae78de6a9f90&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638713379991126751.f584ed65-464b-461f-b974-2836f4bbf125&state=Dcs7EoAwCABRouNxohJ-4TgySmvp9aXY120DgLVaqnYWYErTkMjcHXGoCe4pk59bpbNyFJg93LiPSZockTik1bsd73cdPw Server: Microsoft-IIS/10.0 request-id: 8e1c9572-5ad9-1f0d-65a9-ae78de6a9f90 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-CalculatedBETarget: DBBP138MB0154.EURP138.PROD.OUTLOOK.COM X-BackEndHttpStatus: 302 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: ClientId=E044ED8818BA48AE8BB1377767AB01E8; expires=Thu, 01-Jan-2026 14:19:59 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=E044ED8818BA48AE8BB1377767AB01E8; expires=Thu, 01-Jan-2026 14:19:59 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Tue, 01-Jul-2025 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=40.101.91.143; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=40.101.91.143; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=40.101.91.143; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=40.101.91.143; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=40.101.91.143; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=40.101.91.143; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.fHU-TxNUvfbQYsEJyP3I44Qwg3j7_Tz1Du0630zCaSM=638713379991126751.f584ed65-464b-461f-b974-2836f4bbf125; expires=Wed, 01-Jan-2025 15:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: ClientId=E044ED8818BA48AE8BB1377767AB01E8; expires=Thu, 01-Jan-2026 14:19:59 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Tue, 01-Jul-2025 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=40.101.91.143; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=40.101.91.143; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=40.101.91.143; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=40.101.91.143; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=40.101.91.143; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=40.101.91.143; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.fHU-TxNUvfbQYsEJyP3I44Qwg3j7_Tz1Du0630zCaSM=638713379991126751.f584ed65-464b-461f-b974-2836f4bbf125; expires=Wed, 01-Jan-2025 15:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Sun, 01-Jan-1995 14:19:59 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: X-OWA-RedirectHistory=ArLym14B3wKpX28q3Qg; expires=Wed, 01-Jan-2025 20:21:59 GMT; path=/;SameSite=None; secure; HttpOnly X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS6 X-OWA-DiagnosticsInfo: 5;0;0; X-BackEnd-Begin: 2025-01-01T14:19:59.112 X-BackEnd-End: 2025-01-01T14:19:59.112 X-DiagInfo: DBBP138MB0154 X-BEServer: DBBP138MB0154 X-UA-Compatible: IE=EmulateIE7 X-ResponseOrigin: OwaAppPool X-Proxy-RoutingCorrectness: 1 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=AMS&RemoteIP=94.102.49.0&Environment=MT"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 302 X-FirstHopCafeEFZ: AMS X-FEProxyInfo: AMXP138CA0001.EURP138.PROD.OUTLOOK.COM X-FEEFZInfo: AMS X-FEServer: AMXP138CA0001 Date: Wed, 01 Jan 2025 14:19:58 GMT
Certificate: Data: Version: 3 (0x2) Serial Number: 40:b8:c8:5d:00:89:14:1c:67:b7:e2:02:00:59:0a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Nov 4 22:13:19 2024 GMT Not After : Nov 4 22:13:18 2025 GMT Subject: C=NL, L=Amstelveen, O=KPMG International Cooperative, CN=mail.ema.kpmg.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:93:14:81:27:92:90:80:3b:61:fe:41:96:58:fc: 27:08:09:2d:70:7c:33:28:08:53:54:c1:57:78:66: 07:44:22:74:38:d3:ee:97:79:0f:37:3b:5f:63:55: 53:20:cf:62:d9:c5:e8:c4:cb:6e:8b:fb:7e:81:6f: ed:68:66:06:a7:ba:bc:97:fc:b4:ea:71:16:e8:c5: 1c:76:4e:83:b2:a5:c3:2f:b2:3c:5c:54:53:2d:bb: 7a:65:43:d5:91:b2:21:db:77:c9:3d:21:02:bb:e1: d0:73:34:72:5e:c2:5a:a6:69:01:2a:06:d5:b9:dc: d3:49:f1:24:0e:6c:76:67:b3:56:1c:cd:84:f2:59: 8e:ae:14:9e:a6:0c:c4:1d:67:75:0d:11:80:b5:ec: f4:6e:ab:bb:a3:4a:ee:04:34:d1:53:74:a0:11:96: 8c:69:8b:3b:b3:6e:cc:7f:dc:ff:12:0f:e4:7a:44: f2:c3:34:ed:97:25:d4:22:21:a6:15:56:38:47:a9: ed:e3:c9:c8:a4:19:af:80:0a:8d:14:fc:36:34:2f: f0:71:de:11:7c:06:2f:18:35:77:2d:6c:9b:65:c1: b8:1c:95:27:e1:5a:4e:d3:88:ec:93:d0:72:24:20: b6:f0:10:6a:66:1e:f4:dd:27:7c:b7:1a:b8:31:0b: 20:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 11:55:DB:2E:40:30:08:17:A0:54:84:D1:05:04:D8:09:ED:BE:51:04 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Subject Alternative Name: DNS:mail.ema.kpmg.com, DNS:*.pod51200.outlook.com, DNS:autodiscover.kpmg.com, DNS:autodiscover.kpmg.mail.onmicrosoft.com, DNS:autodiscover.kpmg.onmicrosoft.com, DNS:eurp138-provisioning.internal.outlook.com, DNS:pod51200.outlook.com, DNS:pod51200ip.outlook.com, DNS:pod51200-pri.outlook.com, DNS:pod51200psh.outlook.com Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Nov 4 22:13:19.933 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:4F:80:35:19:1F:F3:C6:FD:90:FA:E0:09: 27:E8:A1:4D:10:58:3D:F0:5F:D2:91:4E:FE:41:3A:9E: E9:E6:26:FA:02:20:24:06:FF:69:7C:7C:B8:C3:78:99: 71:A4:43:C6:4A:9A:93:9F:F1:13:4C:94:C4:D8:30:D5: A8:0B:11:9A:91:6B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Nov 4 22:13:19.981 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:74:E6:D6:84:01:1B:4D:8B:84:FB:2E:E6: C7:3A:F4:2F:15:0B:C8:AC:61:73:3D:7D:34:F9:6A:6E: D2:99:F8:EF:02:20:3F:4F:9D:DC:EE:E3:5C:77:9A:AB: 1E:83:32:4F:88:C9:AD:D8:FB:82:3F:6E:F6:A9:AA:6F: E6:E7:EC:47:7A:42 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Nov 4 22:13:19.970 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:C2:12:CD:D6:EF:CF:35:50:5E:11:38: 08:E8:66:A4:AA:3C:F2:B5:2C:44:CA:BA:92:02:61:2C: 6B:AC:47:14:88:02:20:2C:F0:40:EE:A1:10:42:94:AC: 80:2E:04:E5:04:1B:D7:AC:4F:E7:7B:33:BF:8F:87:10: D8:24:68:6C:DE:6D:46 Signature Algorithm: sha256WithRSAEncryption Signature Value: 70:36:3b:6e:32:1c:b2:40:b6:d3:e6:af:d3:3a:5f:c1:e4:d2: ef:8a:9f:30:b3:e5:e9:40:30:a7:e2:b2:9a:99:ec:d6:00:d9: 45:df:03:98:4e:df:c3:86:ad:eb:55:e8:74:9a:02:18:60:80: 01:d0:22:60:73:bf:78:45:5c:cd:bb:ce:16:6b:f4:24:0d:1f: 47:fa:f9:31:a9:23:0d:0d:c8:f6:fc:96:6e:90:5e:f2:57:d9: 9a:a1:ee:19:38:cb:8c:57:55:ca:f8:7a:1d:e7:3e:8a:7a:fe: 1b:e6:42:ba:dc:59:ce:92:fa:94:af:9f:ca:15:c1:6c:34:f0: 2e:59:f0:f0:5c:68:e8:3b:80:ac:ae:d0:3e:18:2f:f7:f6:0d: de:88:c1:76:35:d1:e9:9c:a7:74:36:ef:e6:8c:cf:e1:2c:37: d1:e8:b3:5f:d8:e6:17:db:e5:38:be:e2:7e:da:02:2b:63:47: 4c:bf:98:23:be:3b:2e:18:c5:75:ca:75:58:ad:92:95:d8:ef: d7:6f:11:b4:ac:79:3a:61:40:b7:dc:e5:1c:c0:60:57:be:1b: 40:93:b3:5e:4b:47:79:12:25:9d:86:da:41:2d:2c:26:ad:a4: ef:c9:66:52:25:af:73:32:8d:6b:25:73:09:33:15:4f:a6:f7: bc:5d:c8:31
-300419334 | 2024-12-30T04:55:50.318114587 / tcp
220 AMXP138CA0005.outlook.office365.com Microsoft ESMTP MAIL Service ready at Mon, 30 Dec 2024 04:55:28 +0000 [08DD27BB1FC37CBC] 250-AMXP138CA0005.outlook.office365.com Hello [224.112.13.35] 250-SIZE 157286400 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
Certificate: Data: Version: 3 (0x2) Serial Number: 40:b8:c8:5d:00:89:14:1c:67:b7:e2:02:00:59:0a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Nov 4 22:13:19 2024 GMT Not After : Nov 4 22:13:18 2025 GMT Subject: C=NL, L=Amstelveen, O=KPMG International Cooperative, CN=mail.ema.kpmg.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:93:14:81:27:92:90:80:3b:61:fe:41:96:58:fc: 27:08:09:2d:70:7c:33:28:08:53:54:c1:57:78:66: 07:44:22:74:38:d3:ee:97:79:0f:37:3b:5f:63:55: 53:20:cf:62:d9:c5:e8:c4:cb:6e:8b:fb:7e:81:6f: ed:68:66:06:a7:ba:bc:97:fc:b4:ea:71:16:e8:c5: 1c:76:4e:83:b2:a5:c3:2f:b2:3c:5c:54:53:2d:bb: 7a:65:43:d5:91:b2:21:db:77:c9:3d:21:02:bb:e1: d0:73:34:72:5e:c2:5a:a6:69:01:2a:06:d5:b9:dc: d3:49:f1:24:0e:6c:76:67:b3:56:1c:cd:84:f2:59: 8e:ae:14:9e:a6:0c:c4:1d:67:75:0d:11:80:b5:ec: f4:6e:ab:bb:a3:4a:ee:04:34:d1:53:74:a0:11:96: 8c:69:8b:3b:b3:6e:cc:7f:dc:ff:12:0f:e4:7a:44: f2:c3:34:ed:97:25:d4:22:21:a6:15:56:38:47:a9: ed:e3:c9:c8:a4:19:af:80:0a:8d:14:fc:36:34:2f: f0:71:de:11:7c:06:2f:18:35:77:2d:6c:9b:65:c1: b8:1c:95:27:e1:5a:4e:d3:88:ec:93:d0:72:24:20: b6:f0:10:6a:66:1e:f4:dd:27:7c:b7:1a:b8:31:0b: 20:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 11:55:DB:2E:40:30:08:17:A0:54:84:D1:05:04:D8:09:ED:BE:51:04 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Subject Alternative Name: DNS:mail.ema.kpmg.com, DNS:*.pod51200.outlook.com, DNS:autodiscover.kpmg.com, DNS:autodiscover.kpmg.mail.onmicrosoft.com, DNS:autodiscover.kpmg.onmicrosoft.com, DNS:eurp138-provisioning.internal.outlook.com, DNS:pod51200.outlook.com, DNS:pod51200ip.outlook.com, DNS:pod51200-pri.outlook.com, DNS:pod51200psh.outlook.com Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Nov 4 22:13:19.933 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:4F:80:35:19:1F:F3:C6:FD:90:FA:E0:09: 27:E8:A1:4D:10:58:3D:F0:5F:D2:91:4E:FE:41:3A:9E: E9:E6:26:FA:02:20:24:06:FF:69:7C:7C:B8:C3:78:99: 71:A4:43:C6:4A:9A:93:9F:F1:13:4C:94:C4:D8:30:D5: A8:0B:11:9A:91:6B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Nov 4 22:13:19.981 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:74:E6:D6:84:01:1B:4D:8B:84:FB:2E:E6: C7:3A:F4:2F:15:0B:C8:AC:61:73:3D:7D:34:F9:6A:6E: D2:99:F8:EF:02:20:3F:4F:9D:DC:EE:E3:5C:77:9A:AB: 1E:83:32:4F:88:C9:AD:D8:FB:82:3F:6E:F6:A9:AA:6F: E6:E7:EC:47:7A:42 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Nov 4 22:13:19.970 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:C2:12:CD:D6:EF:CF:35:50:5E:11:38: 08:E8:66:A4:AA:3C:F2:B5:2C:44:CA:BA:92:02:61:2C: 6B:AC:47:14:88:02:20:2C:F0:40:EE:A1:10:42:94:AC: 80:2E:04:E5:04:1B:D7:AC:4F:E7:7B:33:BF:8F:87:10: D8:24:68:6C:DE:6D:46 Signature Algorithm: sha256WithRSAEncryption Signature Value: 70:36:3b:6e:32:1c:b2:40:b6:d3:e6:af:d3:3a:5f:c1:e4:d2: ef:8a:9f:30:b3:e5:e9:40:30:a7:e2:b2:9a:99:ec:d6:00:d9: 45:df:03:98:4e:df:c3:86:ad:eb:55:e8:74:9a:02:18:60:80: 01:d0:22:60:73:bf:78:45:5c:cd:bb:ce:16:6b:f4:24:0d:1f: 47:fa:f9:31:a9:23:0d:0d:c8:f6:fc:96:6e:90:5e:f2:57:d9: 9a:a1:ee:19:38:cb:8c:57:55:ca:f8:7a:1d:e7:3e:8a:7a:fe: 1b:e6:42:ba:dc:59:ce:92:fa:94:af:9f:ca:15:c1:6c:34:f0: 2e:59:f0:f0:5c:68:e8:3b:80:ac:ae:d0:3e:18:2f:f7:f6:0d: de:88:c1:76:35:d1:e9:9c:a7:74:36:ef:e6:8c:cf:e1:2c:37: d1:e8:b3:5f:d8:e6:17:db:e5:38:be:e2:7e:da:02:2b:63:47: 4c:bf:98:23:be:3b:2e:18:c5:75:ca:75:58:ad:92:95:d8:ef: d7:6f:11:b4:ac:79:3a:61:40:b7:dc:e5:1c:c0:60:57:be:1b: 40:93:b3:5e:4b:47:79:12:25:9d:86:da:41:2d:2c:26:ad:a4: ef:c9:66:52:25:af:73:32:8d:6b:25:73:09:33:15:4f:a6:f7: bc:5d:c8:31
-964116363 | 2024-12-27T01:13:18.352565993 / tcp
* OK The Microsoft Exchange IMAP4 service is ready. [QQBNAFgAUAAxADMAOABDAEEAMAAwADAANgAuAEUAVQBSAFAAMQAzADgALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] * CAPABILITY IMAP4 IMAP4rev1 AUTH=PLAIN AUTH=XOAUTH2 SASL-IR UIDPLUS ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+ A001 OK CAPABILITY completed. * ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.20") A002 OK ID completed A003 BAD Command Error. 12 * BYE Microsoft Exchange Server IMAP4 server signing off. A004 OK LOGOUT completed.
Certificate: Data: Version: 3 (0x2) Serial Number: 40:b8:c8:5d:00:89:14:1c:67:b7:e2:02:00:59:0a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Nov 4 22:13:19 2024 GMT Not After : Nov 4 22:13:18 2025 GMT Subject: C=NL, L=Amstelveen, O=KPMG International Cooperative, CN=mail.ema.kpmg.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:93:14:81:27:92:90:80:3b:61:fe:41:96:58:fc: 27:08:09:2d:70:7c:33:28:08:53:54:c1:57:78:66: 07:44:22:74:38:d3:ee:97:79:0f:37:3b:5f:63:55: 53:20:cf:62:d9:c5:e8:c4:cb:6e:8b:fb:7e:81:6f: ed:68:66:06:a7:ba:bc:97:fc:b4:ea:71:16:e8:c5: 1c:76:4e:83:b2:a5:c3:2f:b2:3c:5c:54:53:2d:bb: 7a:65:43:d5:91:b2:21:db:77:c9:3d:21:02:bb:e1: d0:73:34:72:5e:c2:5a:a6:69:01:2a:06:d5:b9:dc: d3:49:f1:24:0e:6c:76:67:b3:56:1c:cd:84:f2:59: 8e:ae:14:9e:a6:0c:c4:1d:67:75:0d:11:80:b5:ec: f4:6e:ab:bb:a3:4a:ee:04:34:d1:53:74:a0:11:96: 8c:69:8b:3b:b3:6e:cc:7f:dc:ff:12:0f:e4:7a:44: f2:c3:34:ed:97:25:d4:22:21:a6:15:56:38:47:a9: ed:e3:c9:c8:a4:19:af:80:0a:8d:14:fc:36:34:2f: f0:71:de:11:7c:06:2f:18:35:77:2d:6c:9b:65:c1: b8:1c:95:27:e1:5a:4e:d3:88:ec:93:d0:72:24:20: b6:f0:10:6a:66:1e:f4:dd:27:7c:b7:1a:b8:31:0b: 20:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 11:55:DB:2E:40:30:08:17:A0:54:84:D1:05:04:D8:09:ED:BE:51:04 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Subject Alternative Name: DNS:mail.ema.kpmg.com, DNS:*.pod51200.outlook.com, DNS:autodiscover.kpmg.com, DNS:autodiscover.kpmg.mail.onmicrosoft.com, DNS:autodiscover.kpmg.onmicrosoft.com, DNS:eurp138-provisioning.internal.outlook.com, DNS:pod51200.outlook.com, DNS:pod51200ip.outlook.com, DNS:pod51200-pri.outlook.com, DNS:pod51200psh.outlook.com Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Nov 4 22:13:19.933 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:4F:80:35:19:1F:F3:C6:FD:90:FA:E0:09: 27:E8:A1:4D:10:58:3D:F0:5F:D2:91:4E:FE:41:3A:9E: E9:E6:26:FA:02:20:24:06:FF:69:7C:7C:B8:C3:78:99: 71:A4:43:C6:4A:9A:93:9F:F1:13:4C:94:C4:D8:30:D5: A8:0B:11:9A:91:6B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Nov 4 22:13:19.981 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:74:E6:D6:84:01:1B:4D:8B:84:FB:2E:E6: C7:3A:F4:2F:15:0B:C8:AC:61:73:3D:7D:34:F9:6A:6E: D2:99:F8:EF:02:20:3F:4F:9D:DC:EE:E3:5C:77:9A:AB: 1E:83:32:4F:88:C9:AD:D8:FB:82:3F:6E:F6:A9:AA:6F: E6:E7:EC:47:7A:42 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Nov 4 22:13:19.970 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:C2:12:CD:D6:EF:CF:35:50:5E:11:38: 08:E8:66:A4:AA:3C:F2:B5:2C:44:CA:BA:92:02:61:2C: 6B:AC:47:14:88:02:20:2C:F0:40:EE:A1:10:42:94:AC: 80:2E:04:E5:04:1B:D7:AC:4F:E7:7B:33:BF:8F:87:10: D8:24:68:6C:DE:6D:46 Signature Algorithm: sha256WithRSAEncryption Signature Value: 70:36:3b:6e:32:1c:b2:40:b6:d3:e6:af:d3:3a:5f:c1:e4:d2: ef:8a:9f:30:b3:e5:e9:40:30:a7:e2:b2:9a:99:ec:d6:00:d9: 45:df:03:98:4e:df:c3:86:ad:eb:55:e8:74:9a:02:18:60:80: 01:d0:22:60:73:bf:78:45:5c:cd:bb:ce:16:6b:f4:24:0d:1f: 47:fa:f9:31:a9:23:0d:0d:c8:f6:fc:96:6e:90:5e:f2:57:d9: 9a:a1:ee:19:38:cb:8c:57:55:ca:f8:7a:1d:e7:3e:8a:7a:fe: 1b:e6:42:ba:dc:59:ce:92:fa:94:af:9f:ca:15:c1:6c:34:f0: 2e:59:f0:f0:5c:68:e8:3b:80:ac:ae:d0:3e:18:2f:f7:f6:0d: de:88:c1:76:35:d1:e9:9c:a7:74:36:ef:e6:8c:cf:e1:2c:37: d1:e8:b3:5f:d8:e6:17:db:e5:38:be:e2:7e:da:02:2b:63:47: 4c:bf:98:23:be:3b:2e:18:c5:75:ca:75:58:ad:92:95:d8:ef: d7:6f:11:b4:ac:79:3a:61:40:b7:dc:e5:1c:c0:60:57:be:1b: 40:93:b3:5e:4b:47:79:12:25:9d:86:da:41:2d:2c:26:ad:a4: ef:c9:66:52:25:af:73:32:8d:6b:25:73:09:33:15:4f:a6:f7: bc:5d:c8:31
-508853622 | 2024-12-28T18:55:46.736113995 / tcp
+OK The Microsoft Exchange POP3 service is ready. [QQBNAFgAUAAxADMAOABDAEEAMAAwADAAMQAuAEUAVQBSAFAAMQAzADgALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] +OK TOP UIDL SASL PLAIN XOAUTH2 USER .
Certificate: Data: Version: 3 (0x2) Serial Number: 40:b8:c8:5d:00:89:14:1c:67:b7:e2:02:00:59:0a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Nov 4 22:13:19 2024 GMT Not After : Nov 4 22:13:18 2025 GMT Subject: C=NL, L=Amstelveen, O=KPMG International Cooperative, CN=mail.ema.kpmg.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:93:14:81:27:92:90:80:3b:61:fe:41:96:58:fc: 27:08:09:2d:70:7c:33:28:08:53:54:c1:57:78:66: 07:44:22:74:38:d3:ee:97:79:0f:37:3b:5f:63:55: 53:20:cf:62:d9:c5:e8:c4:cb:6e:8b:fb:7e:81:6f: ed:68:66:06:a7:ba:bc:97:fc:b4:ea:71:16:e8:c5: 1c:76:4e:83:b2:a5:c3:2f:b2:3c:5c:54:53:2d:bb: 7a:65:43:d5:91:b2:21:db:77:c9:3d:21:02:bb:e1: d0:73:34:72:5e:c2:5a:a6:69:01:2a:06:d5:b9:dc: d3:49:f1:24:0e:6c:76:67:b3:56:1c:cd:84:f2:59: 8e:ae:14:9e:a6:0c:c4:1d:67:75:0d:11:80:b5:ec: f4:6e:ab:bb:a3:4a:ee:04:34:d1:53:74:a0:11:96: 8c:69:8b:3b:b3:6e:cc:7f:dc:ff:12:0f:e4:7a:44: f2:c3:34:ed:97:25:d4:22:21:a6:15:56:38:47:a9: ed:e3:c9:c8:a4:19:af:80:0a:8d:14:fc:36:34:2f: f0:71:de:11:7c:06:2f:18:35:77:2d:6c:9b:65:c1: b8:1c:95:27:e1:5a:4e:d3:88:ec:93:d0:72:24:20: b6:f0:10:6a:66:1e:f4:dd:27:7c:b7:1a:b8:31:0b: 20:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 11:55:DB:2E:40:30:08:17:A0:54:84:D1:05:04:D8:09:ED:BE:51:04 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Subject Alternative Name: DNS:mail.ema.kpmg.com, DNS:*.pod51200.outlook.com, DNS:autodiscover.kpmg.com, DNS:autodiscover.kpmg.mail.onmicrosoft.com, DNS:autodiscover.kpmg.onmicrosoft.com, DNS:eurp138-provisioning.internal.outlook.com, DNS:pod51200.outlook.com, DNS:pod51200ip.outlook.com, DNS:pod51200-pri.outlook.com, DNS:pod51200psh.outlook.com Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Nov 4 22:13:19.933 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:4F:80:35:19:1F:F3:C6:FD:90:FA:E0:09: 27:E8:A1:4D:10:58:3D:F0:5F:D2:91:4E:FE:41:3A:9E: E9:E6:26:FA:02:20:24:06:FF:69:7C:7C:B8:C3:78:99: 71:A4:43:C6:4A:9A:93:9F:F1:13:4C:94:C4:D8:30:D5: A8:0B:11:9A:91:6B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Nov 4 22:13:19.981 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:74:E6:D6:84:01:1B:4D:8B:84:FB:2E:E6: C7:3A:F4:2F:15:0B:C8:AC:61:73:3D:7D:34:F9:6A:6E: D2:99:F8:EF:02:20:3F:4F:9D:DC:EE:E3:5C:77:9A:AB: 1E:83:32:4F:88:C9:AD:D8:FB:82:3F:6E:F6:A9:AA:6F: E6:E7:EC:47:7A:42 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Nov 4 22:13:19.970 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:C2:12:CD:D6:EF:CF:35:50:5E:11:38: 08:E8:66:A4:AA:3C:F2:B5:2C:44:CA:BA:92:02:61:2C: 6B:AC:47:14:88:02:20:2C:F0:40:EE:A1:10:42:94:AC: 80:2E:04:E5:04:1B:D7:AC:4F:E7:7B:33:BF:8F:87:10: D8:24:68:6C:DE:6D:46 Signature Algorithm: sha256WithRSAEncryption Signature Value: 70:36:3b:6e:32:1c:b2:40:b6:d3:e6:af:d3:3a:5f:c1:e4:d2: ef:8a:9f:30:b3:e5:e9:40:30:a7:e2:b2:9a:99:ec:d6:00:d9: 45:df:03:98:4e:df:c3:86:ad:eb:55:e8:74:9a:02:18:60:80: 01:d0:22:60:73:bf:78:45:5c:cd:bb:ce:16:6b:f4:24:0d:1f: 47:fa:f9:31:a9:23:0d:0d:c8:f6:fc:96:6e:90:5e:f2:57:d9: 9a:a1:ee:19:38:cb:8c:57:55:ca:f8:7a:1d:e7:3e:8a:7a:fe: 1b:e6:42:ba:dc:59:ce:92:fa:94:af:9f:ca:15:c1:6c:34:f0: 2e:59:f0:f0:5c:68:e8:3b:80:ac:ae:d0:3e:18:2f:f7:f6:0d: de:88:c1:76:35:d1:e9:9c:a7:74:36:ef:e6:8c:cf:e1:2c:37: d1:e8:b3:5f:d8:e6:17:db:e5:38:be:e2:7e:da:02:2b:63:47: 4c:bf:98:23:be:3b:2e:18:c5:75:ca:75:58:ad:92:95:d8:ef: d7:6f:11:b4:ac:79:3a:61:40:b7:dc:e5:1c:c0:60:57:be:1b: 40:93:b3:5e:4b:47:79:12:25:9d:86:da:41:2d:2c:26:ad:a4: ef:c9:66:52:25:af:73:32:8d:6b:25:73:09:33:15:4f:a6:f7: bc:5d:c8:31