Hostnames |
autodiscover.bhp.com exmte.bhp.com mail.bhp.com autodiscover.bhpbilliton.com mail.bhpbilliton.com autodiscover.bhpb.onmicrosoft.com autodiscover.bhpb.mail.onmicrosoft.com namp156-provisioning.internal.outlook.com pod51219.outlook.com pod51219-pri.outlook.com pod51219ip.outlook.com pod51219psh.outlook.com |
Domains | bhp.com bhpbilliton.com onmicrosoft.com outlook.com |
Country | United States |
City | Des Moines |
Organization | Microsoft Corporation |
ISP | Microsoft Corporation |
ASN | AS8075 |
1456211925 | 2024-09-14T11:37:35.97508725 / tcp
220 DM8P156CA0004.outlook.office365.com Microsoft ESMTP MAIL Service ready at Sat, 14 Sep 2024 11:37:11 +0000 [08DCD478B5DF335E] 250-DM8P156CA0004.outlook.office365.com Hello [224.187.88.22] 250-SIZE 157286400 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
Certificate: Data: Version: 3 (0x2) Serial Number: 40:e3:7e:d4:55:5e:c8:16:97:c7:de:e8:2a:df:b1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:48:18 2024 GMT Not After : Sep 4 17:48:17 2025 GMT Subject: C=AU, ST=Victoria, L=Melbourne, O=BHP Innovation Pty Ltd, CN=exmte.bhp.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:95:40:9e:87:cb:b7:8e:30:75:3b:d8:6f:69:00: 57:3f:16:27:78:5e:88:b7:ef:31:38:e5:8d:12:d5: b5:7c:98:b9:25:92:9f:0e:54:cc:b7:96:b9:83:fc: 09:f7:fb:6c:ec:9c:69:c4:22:c4:ca:5d:6e:6e:6d: ff:aa:29:51:f8:c7:ca:7e:67:04:e2:fd:99:e7:0e: 19:f0:3d:64:7e:72:34:8e:e4:b4:4c:5f:3a:42:6b: c7:bc:85:05:13:d1:23:ea:67:86:ec:95:ed:22:31: 7d:7a:92:ed:5f:82:df:3c:a5:d8:ce:67:09:03:bf: ba:5f:bf:e2:14:95:4e:ad:09:2c:fa:f8:0b:fe:de: 03:c6:35:39:2a:98:e9:fe:2f:ed:1c:14:6c:d2:2d: 69:a2:43:77:20:f6:8b:fc:01:c9:b8:aa:45:36:f7: 9a:6c:9d:59:bc:d8:dc:1d:3d:90:c7:ea:6a:f0:87: f0:5c:32:96:42:c3:90:04:e3:97:88:56:7a:f0:f3: 88:a8:da:bb:24:1b:8a:63:16:c9:5d:19:61:cf:bc: 95:ba:5a:e3:e8:0c:3d:cf:34:c0:ba:3c:47:65:da: 10:5e:80:a5:ef:da:a8:01:8c:84:4b:db:fb:31:e1: 39:d9:a0:38:5f:ec:53:20:97:69:39:f1:ad:97:67: 34:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 93:EF:82:4B:59:8A:34:2E:23:F1:50:E2:7A:20:CB:56:DC:0E:E0:B1 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:exmte.bhp.com, DNS:*.pod51219.outlook.com, DNS:autodiscover.bhp.com, DNS:autodiscover.bhpb.mail.onmicrosoft.com, DNS:autodiscover.bhpb.onmicrosoft.com, DNS:autodiscover.bhpbilliton.com, DNS:mail.bhp.com, DNS:mail.bhpbilliton.com, DNS:namp156-provisioning.internal.outlook.com, DNS:pod51219.outlook.com, DNS:pod51219ip.outlook.com, DNS:pod51219-pri.outlook.com, DNS:pod51219psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:48:18.881 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:E0:17:4D:83:F6:24:3B:50:D5:D1:D7: 2A:C9:D7:E9:18:27:B5:BF:FB:3A:38:27:81:44:87:60: 44:5D:AC:04:09:02:20:05:8D:26:3B:CC:7D:5B:9F:BB: 2D:50:27:AC:69:BE:F6:FE:A6:AD:6B:AD:61:97:50:41: 02:24:9C:08:C8:78:1A Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 4 17:48:18.894 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:9B:B0:77:06:E4:18:C3:29:6D:0A:A2: D0:DE:F6:89:35:45:D2:93:3C:CB:DD:5D:E6:8F:88:59: 2D:6D:74:2E:E2:02:20:0E:92:01:ED:66:3A:E6:C1:B2: 1C:E8:2D:47:4F:D4:4E:F1:DE:A0:5A:69:DD:64:BE:7C: 2F:97:A1:A2:F4:70:81 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:48:18.926 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:43:02:1F:6C:0B:98:D8:F0:3C:BE:5F:95:93:A9:8D: 63:FF:65:BB:47:E7:52:B8:E8:F0:72:0F:82:D5:CA:D2: D8:39:C3:02:20:57:9E:0A:FF:5C:CA:59:83:B8:4F:20: 74:C4:A7:62:F8:CE:20:EB:EE:7C:C4:B5:DE:FA:A2:00: 7E:47:7E:A4:EA Signature Algorithm: sha256WithRSAEncryption Signature Value: b6:26:07:ae:2f:fb:21:01:74:a0:52:ee:2c:3b:c2:2f:43:0c: 71:42:29:f8:ce:9c:b1:14:f2:7c:61:3a:2d:38:06:cd:0c:ea: 9c:a1:ec:63:fc:ec:c4:5a:7f:94:e4:c2:f5:da:92:95:88:89: 4d:5d:87:93:c4:2a:cf:f4:40:f4:d4:37:10:61:87:ff:4e:96: 89:9d:c6:3d:8a:df:25:74:40:49:0a:db:9a:c3:9c:f4:c1:09: e8:fe:4e:67:3c:d5:70:e7:16:09:30:71:b0:1b:3b:fb:94:09: 03:11:9c:6e:97:9d:a5:4d:69:3c:2e:88:ee:3a:83:bb:81:44: cf:5c:38:45:d7:63:61:bf:ef:99:cb:83:d9:38:6c:b5:b2:5e: 15:28:b0:7c:7c:97:9c:b8:67:96:58:b1:a0:4f:81:82:08:b3: dc:d1:53:4d:3e:36:3b:4b:4c:30:ff:cd:c0:8d:1d:7d:40:73: ac:df:1c:26:e6:17:4c:0b:0a:0b:04:b3:7b:94:17:a2:b9:8d: 1a:3a:fd:31:28:14:43:55:6f:a0:eb:c4:15:6b:c4:87:ce:58: c6:0a:b2:db:93:f5:d4:5f:a8:a6:77:4d:2f:d7:c1:63:5d:6a: ca:ca:54:cf:e1:9d:87:f2:60:8e:b4:e3:c0:38:8f:05:ff:83: 6f:c2:4c:a6
-168662204 | 2024-09-14T16:31:44.24963380 / tcp
HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://52.96.193.230/owa/ Server: Microsoft-IIS/10.0 request-id: 26990314-2858-2f02-538d-591ba848a6c7 X-FEServer: DM8P156CA0001 X-RequestId: d2caa573-ba3a-4c5f-a2c7-692c34b55b4c X-FEProxyInfo: DM8P156CA0001.NAMP156.PROD.OUTLOOK.COM X-FEEFZInfo: DSM MS-CV: FAOZJlgoAi9TjVkbqEimxw.0 X-Powered-By: ASP.NET X-FEServer: DM8P156CA0001 Date: Sat, 14 Sep 2024 16:31:43 GMT Connection: close Content-Length: 0
-1098658572 | 2024-09-17T02:00:18.705989110 / tcp
+OK The Microsoft Exchange POP3 service is ready. [RABNADgAUAAxADUANgBDAEEAMAAwADAAMQAuAE4AQQBNAFAAMQA1ADYALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] +OK TOP UIDL STLS .
Certificate: Data: Version: 3 (0x2) Serial Number: 40:e3:7e:d4:55:5e:c8:16:97:c7:de:e8:2a:df:b1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:48:18 2024 GMT Not After : Sep 4 17:48:17 2025 GMT Subject: C=AU, ST=Victoria, L=Melbourne, O=BHP Innovation Pty Ltd, CN=exmte.bhp.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:95:40:9e:87:cb:b7:8e:30:75:3b:d8:6f:69:00: 57:3f:16:27:78:5e:88:b7:ef:31:38:e5:8d:12:d5: b5:7c:98:b9:25:92:9f:0e:54:cc:b7:96:b9:83:fc: 09:f7:fb:6c:ec:9c:69:c4:22:c4:ca:5d:6e:6e:6d: ff:aa:29:51:f8:c7:ca:7e:67:04:e2:fd:99:e7:0e: 19:f0:3d:64:7e:72:34:8e:e4:b4:4c:5f:3a:42:6b: c7:bc:85:05:13:d1:23:ea:67:86:ec:95:ed:22:31: 7d:7a:92:ed:5f:82:df:3c:a5:d8:ce:67:09:03:bf: ba:5f:bf:e2:14:95:4e:ad:09:2c:fa:f8:0b:fe:de: 03:c6:35:39:2a:98:e9:fe:2f:ed:1c:14:6c:d2:2d: 69:a2:43:77:20:f6:8b:fc:01:c9:b8:aa:45:36:f7: 9a:6c:9d:59:bc:d8:dc:1d:3d:90:c7:ea:6a:f0:87: f0:5c:32:96:42:c3:90:04:e3:97:88:56:7a:f0:f3: 88:a8:da:bb:24:1b:8a:63:16:c9:5d:19:61:cf:bc: 95:ba:5a:e3:e8:0c:3d:cf:34:c0:ba:3c:47:65:da: 10:5e:80:a5:ef:da:a8:01:8c:84:4b:db:fb:31:e1: 39:d9:a0:38:5f:ec:53:20:97:69:39:f1:ad:97:67: 34:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 93:EF:82:4B:59:8A:34:2E:23:F1:50:E2:7A:20:CB:56:DC:0E:E0:B1 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:exmte.bhp.com, DNS:*.pod51219.outlook.com, DNS:autodiscover.bhp.com, DNS:autodiscover.bhpb.mail.onmicrosoft.com, DNS:autodiscover.bhpb.onmicrosoft.com, DNS:autodiscover.bhpbilliton.com, DNS:mail.bhp.com, DNS:mail.bhpbilliton.com, DNS:namp156-provisioning.internal.outlook.com, DNS:pod51219.outlook.com, DNS:pod51219ip.outlook.com, DNS:pod51219-pri.outlook.com, DNS:pod51219psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:48:18.881 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:E0:17:4D:83:F6:24:3B:50:D5:D1:D7: 2A:C9:D7:E9:18:27:B5:BF:FB:3A:38:27:81:44:87:60: 44:5D:AC:04:09:02:20:05:8D:26:3B:CC:7D:5B:9F:BB: 2D:50:27:AC:69:BE:F6:FE:A6:AD:6B:AD:61:97:50:41: 02:24:9C:08:C8:78:1A Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 4 17:48:18.894 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:9B:B0:77:06:E4:18:C3:29:6D:0A:A2: D0:DE:F6:89:35:45:D2:93:3C:CB:DD:5D:E6:8F:88:59: 2D:6D:74:2E:E2:02:20:0E:92:01:ED:66:3A:E6:C1:B2: 1C:E8:2D:47:4F:D4:4E:F1:DE:A0:5A:69:DD:64:BE:7C: 2F:97:A1:A2:F4:70:81 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:48:18.926 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:43:02:1F:6C:0B:98:D8:F0:3C:BE:5F:95:93:A9:8D: 63:FF:65:BB:47:E7:52:B8:E8:F0:72:0F:82:D5:CA:D2: D8:39:C3:02:20:57:9E:0A:FF:5C:CA:59:83:B8:4F:20: 74:C4:A7:62:F8:CE:20:EB:EE:7C:C4:B5:DE:FA:A2:00: 7E:47:7E:A4:EA Signature Algorithm: sha256WithRSAEncryption Signature Value: b6:26:07:ae:2f:fb:21:01:74:a0:52:ee:2c:3b:c2:2f:43:0c: 71:42:29:f8:ce:9c:b1:14:f2:7c:61:3a:2d:38:06:cd:0c:ea: 9c:a1:ec:63:fc:ec:c4:5a:7f:94:e4:c2:f5:da:92:95:88:89: 4d:5d:87:93:c4:2a:cf:f4:40:f4:d4:37:10:61:87:ff:4e:96: 89:9d:c6:3d:8a:df:25:74:40:49:0a:db:9a:c3:9c:f4:c1:09: e8:fe:4e:67:3c:d5:70:e7:16:09:30:71:b0:1b:3b:fb:94:09: 03:11:9c:6e:97:9d:a5:4d:69:3c:2e:88:ee:3a:83:bb:81:44: cf:5c:38:45:d7:63:61:bf:ef:99:cb:83:d9:38:6c:b5:b2:5e: 15:28:b0:7c:7c:97:9c:b8:67:96:58:b1:a0:4f:81:82:08:b3: dc:d1:53:4d:3e:36:3b:4b:4c:30:ff:cd:c0:8d:1d:7d:40:73: ac:df:1c:26:e6:17:4c:0b:0a:0b:04:b3:7b:94:17:a2:b9:8d: 1a:3a:fd:31:28:14:43:55:6f:a0:eb:c4:15:6b:c4:87:ce:58: c6:0a:b2:db:93:f5:d4:5f:a8:a6:77:4d:2f:d7:c1:63:5d:6a: ca:ca:54:cf:e1:9d:87:f2:60:8e:b4:e3:c0:38:8f:05:ff:83: 6f:c2:4c:a6
1176311605 | 2024-09-17T21:50:37.311792143 / tcp
* OK The Microsoft Exchange IMAP4 service is ready. [RABNADgAUAAxADUANgBDAEEAMAAwADAAMwAuAE4AQQBNAFAAMQA1ADYALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] * CAPABILITY IMAP4 IMAP4rev1 LOGINDISABLED STARTTLS SASL-IR UIDPLUS ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+ A001 OK CAPABILITY completed. * ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.20") A002 OK ID completed A003 BAD Command Error. 12 * BYE Microsoft Exchange Server IMAP4 server signing off. A004 OK LOGOUT completed.
Certificate: Data: Version: 3 (0x2) Serial Number: 40:e3:7e:d4:55:5e:c8:16:97:c7:de:e8:2a:df:b1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:48:18 2024 GMT Not After : Sep 4 17:48:17 2025 GMT Subject: C=AU, ST=Victoria, L=Melbourne, O=BHP Innovation Pty Ltd, CN=exmte.bhp.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:95:40:9e:87:cb:b7:8e:30:75:3b:d8:6f:69:00: 57:3f:16:27:78:5e:88:b7:ef:31:38:e5:8d:12:d5: b5:7c:98:b9:25:92:9f:0e:54:cc:b7:96:b9:83:fc: 09:f7:fb:6c:ec:9c:69:c4:22:c4:ca:5d:6e:6e:6d: ff:aa:29:51:f8:c7:ca:7e:67:04:e2:fd:99:e7:0e: 19:f0:3d:64:7e:72:34:8e:e4:b4:4c:5f:3a:42:6b: c7:bc:85:05:13:d1:23:ea:67:86:ec:95:ed:22:31: 7d:7a:92:ed:5f:82:df:3c:a5:d8:ce:67:09:03:bf: ba:5f:bf:e2:14:95:4e:ad:09:2c:fa:f8:0b:fe:de: 03:c6:35:39:2a:98:e9:fe:2f:ed:1c:14:6c:d2:2d: 69:a2:43:77:20:f6:8b:fc:01:c9:b8:aa:45:36:f7: 9a:6c:9d:59:bc:d8:dc:1d:3d:90:c7:ea:6a:f0:87: f0:5c:32:96:42:c3:90:04:e3:97:88:56:7a:f0:f3: 88:a8:da:bb:24:1b:8a:63:16:c9:5d:19:61:cf:bc: 95:ba:5a:e3:e8:0c:3d:cf:34:c0:ba:3c:47:65:da: 10:5e:80:a5:ef:da:a8:01:8c:84:4b:db:fb:31:e1: 39:d9:a0:38:5f:ec:53:20:97:69:39:f1:ad:97:67: 34:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 93:EF:82:4B:59:8A:34:2E:23:F1:50:E2:7A:20:CB:56:DC:0E:E0:B1 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:exmte.bhp.com, DNS:*.pod51219.outlook.com, DNS:autodiscover.bhp.com, DNS:autodiscover.bhpb.mail.onmicrosoft.com, DNS:autodiscover.bhpb.onmicrosoft.com, DNS:autodiscover.bhpbilliton.com, DNS:mail.bhp.com, DNS:mail.bhpbilliton.com, DNS:namp156-provisioning.internal.outlook.com, DNS:pod51219.outlook.com, DNS:pod51219ip.outlook.com, DNS:pod51219-pri.outlook.com, DNS:pod51219psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:48:18.881 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:E0:17:4D:83:F6:24:3B:50:D5:D1:D7: 2A:C9:D7:E9:18:27:B5:BF:FB:3A:38:27:81:44:87:60: 44:5D:AC:04:09:02:20:05:8D:26:3B:CC:7D:5B:9F:BB: 2D:50:27:AC:69:BE:F6:FE:A6:AD:6B:AD:61:97:50:41: 02:24:9C:08:C8:78:1A Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 4 17:48:18.894 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:9B:B0:77:06:E4:18:C3:29:6D:0A:A2: D0:DE:F6:89:35:45:D2:93:3C:CB:DD:5D:E6:8F:88:59: 2D:6D:74:2E:E2:02:20:0E:92:01:ED:66:3A:E6:C1:B2: 1C:E8:2D:47:4F:D4:4E:F1:DE:A0:5A:69:DD:64:BE:7C: 2F:97:A1:A2:F4:70:81 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:48:18.926 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:43:02:1F:6C:0B:98:D8:F0:3C:BE:5F:95:93:A9:8D: 63:FF:65:BB:47:E7:52:B8:E8:F0:72:0F:82:D5:CA:D2: D8:39:C3:02:20:57:9E:0A:FF:5C:CA:59:83:B8:4F:20: 74:C4:A7:62:F8:CE:20:EB:EE:7C:C4:B5:DE:FA:A2:00: 7E:47:7E:A4:EA Signature Algorithm: sha256WithRSAEncryption Signature Value: b6:26:07:ae:2f:fb:21:01:74:a0:52:ee:2c:3b:c2:2f:43:0c: 71:42:29:f8:ce:9c:b1:14:f2:7c:61:3a:2d:38:06:cd:0c:ea: 9c:a1:ec:63:fc:ec:c4:5a:7f:94:e4:c2:f5:da:92:95:88:89: 4d:5d:87:93:c4:2a:cf:f4:40:f4:d4:37:10:61:87:ff:4e:96: 89:9d:c6:3d:8a:df:25:74:40:49:0a:db:9a:c3:9c:f4:c1:09: e8:fe:4e:67:3c:d5:70:e7:16:09:30:71:b0:1b:3b:fb:94:09: 03:11:9c:6e:97:9d:a5:4d:69:3c:2e:88:ee:3a:83:bb:81:44: cf:5c:38:45:d7:63:61:bf:ef:99:cb:83:d9:38:6c:b5:b2:5e: 15:28:b0:7c:7c:97:9c:b8:67:96:58:b1:a0:4f:81:82:08:b3: dc:d1:53:4d:3e:36:3b:4b:4c:30:ff:cd:c0:8d:1d:7d:40:73: ac:df:1c:26:e6:17:4c:0b:0a:0b:04:b3:7b:94:17:a2:b9:8d: 1a:3a:fd:31:28:14:43:55:6f:a0:eb:c4:15:6b:c4:87:ce:58: c6:0a:b2:db:93:f5:d4:5f:a8:a6:77:4d:2f:d7:c1:63:5d:6a: ca:ca:54:cf:e1:9d:87:f2:60:8e:b4:e3:c0:38:8f:05:ff:83: 6f:c2:4c:a6
1309263598 | 2024-09-14T20:33:28.190470443 / tcp
HTTP/1.1 302 Content-Length: 777 Content-Type: text/html; charset=utf-8 Location: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f52.96.193.230%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=0&msaredir=0&client-request-id=d68d1dc5-0714-4684-feb2-c5229f6b7722&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638619428073783656.d17ca8cc-92ec-4728-877f-8b3787056b21&state=DYsxFoAgDMWKPo-DQIH-chyoujp6fTskUxKIaHc2J2QXQapKGY01o0KrdDmvAptqFgffFhtYowJP1OUFcpfFJfh7pPeb6Qc Server: Microsoft-IIS/10.0 request-id: d68d1dc5-0714-4684-feb2-c5229f6b7722 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-CalculatedBETarget: DM8P156MB0413.NAMP156.PROD.OUTLOOK.COM X-BackEndHttpStatus: 302 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: ClientId=FBB06A68DBB4420193BB820D7FE3B133; expires=Sun, 14-Sep-2025 20:33:27 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=FBB06A68DBB4420193BB820D7FE3B133; expires=Sun, 14-Sep-2025 20:33:27 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Fri, 14-Mar-2025 20:33:27 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=52.96.193.230; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=52.96.193.230; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=52.96.193.230; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=52.96.193.230; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=52.96.193.230; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=52.96.193.230; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.YRxD_iQOW6cvak8ZyCci3LeHZGf5CVktbt7U9ndsiLY=638619428073783656.d17ca8cc-92ec-4728-877f-8b3787056b21; expires=Sat, 14-Sep-2024 21:33:27 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: ClientId=FBB06A68DBB4420193BB820D7FE3B133; expires=Sun, 14-Sep-2025 20:33:27 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Fri, 14-Mar-2025 20:33:27 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=52.96.193.230; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=52.96.193.230; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=52.96.193.230; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=52.96.193.230; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=52.96.193.230; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=52.96.193.230; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.YRxD_iQOW6cvak8ZyCci3LeHZGf5CVktbt7U9ndsiLY=638619428073783656.d17ca8cc-92ec-4728-877f-8b3787056b21; expires=Sat, 14-Sep-2024 21:33:27 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Wed, 14-Sep-1994 20:33:27 GMT; path=/; secure; HttpOnly Set-Cookie: X-OWA-RedirectHistory=ArLym14BaEEAffzU3Ag; expires=Sun, 15-Sep-2024 02:35:27 GMT; path=/;SameSite=None; secure; HttpOnly X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS6 X-OWA-DiagnosticsInfo: 4;0;0; X-BackEnd-Begin: 2024-09-14T20:33:27.362 X-BackEnd-End: 2024-09-14T20:33:27.378 X-DiagInfo: DM8P156MB0413 X-BEServer: DM8P156MB0413 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=DSM&RemoteIP=185.142.236.0&Environment=MT"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 302 X-FirstHopCafeEFZ: DSM X-FEProxyInfo: DM8P156CA0006.NAMP156.PROD.OUTLOOK.COM X-FEEFZInfo: DSM X-FEServer: DM8P156CA0006 Date: Sat, 14 Sep 2024 20:33:27 GMT
Certificate: Data: Version: 3 (0x2) Serial Number: 40:e3:7e:d4:55:5e:c8:16:97:c7:de:e8:2a:df:b1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:48:18 2024 GMT Not After : Sep 4 17:48:17 2025 GMT Subject: C=AU, ST=Victoria, L=Melbourne, O=BHP Innovation Pty Ltd, CN=exmte.bhp.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:95:40:9e:87:cb:b7:8e:30:75:3b:d8:6f:69:00: 57:3f:16:27:78:5e:88:b7:ef:31:38:e5:8d:12:d5: b5:7c:98:b9:25:92:9f:0e:54:cc:b7:96:b9:83:fc: 09:f7:fb:6c:ec:9c:69:c4:22:c4:ca:5d:6e:6e:6d: ff:aa:29:51:f8:c7:ca:7e:67:04:e2:fd:99:e7:0e: 19:f0:3d:64:7e:72:34:8e:e4:b4:4c:5f:3a:42:6b: c7:bc:85:05:13:d1:23:ea:67:86:ec:95:ed:22:31: 7d:7a:92:ed:5f:82:df:3c:a5:d8:ce:67:09:03:bf: ba:5f:bf:e2:14:95:4e:ad:09:2c:fa:f8:0b:fe:de: 03:c6:35:39:2a:98:e9:fe:2f:ed:1c:14:6c:d2:2d: 69:a2:43:77:20:f6:8b:fc:01:c9:b8:aa:45:36:f7: 9a:6c:9d:59:bc:d8:dc:1d:3d:90:c7:ea:6a:f0:87: f0:5c:32:96:42:c3:90:04:e3:97:88:56:7a:f0:f3: 88:a8:da:bb:24:1b:8a:63:16:c9:5d:19:61:cf:bc: 95:ba:5a:e3:e8:0c:3d:cf:34:c0:ba:3c:47:65:da: 10:5e:80:a5:ef:da:a8:01:8c:84:4b:db:fb:31:e1: 39:d9:a0:38:5f:ec:53:20:97:69:39:f1:ad:97:67: 34:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 93:EF:82:4B:59:8A:34:2E:23:F1:50:E2:7A:20:CB:56:DC:0E:E0:B1 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:exmte.bhp.com, DNS:*.pod51219.outlook.com, DNS:autodiscover.bhp.com, DNS:autodiscover.bhpb.mail.onmicrosoft.com, DNS:autodiscover.bhpb.onmicrosoft.com, DNS:autodiscover.bhpbilliton.com, DNS:mail.bhp.com, DNS:mail.bhpbilliton.com, DNS:namp156-provisioning.internal.outlook.com, DNS:pod51219.outlook.com, DNS:pod51219ip.outlook.com, DNS:pod51219-pri.outlook.com, DNS:pod51219psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:48:18.881 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:E0:17:4D:83:F6:24:3B:50:D5:D1:D7: 2A:C9:D7:E9:18:27:B5:BF:FB:3A:38:27:81:44:87:60: 44:5D:AC:04:09:02:20:05:8D:26:3B:CC:7D:5B:9F:BB: 2D:50:27:AC:69:BE:F6:FE:A6:AD:6B:AD:61:97:50:41: 02:24:9C:08:C8:78:1A Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 4 17:48:18.894 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:9B:B0:77:06:E4:18:C3:29:6D:0A:A2: D0:DE:F6:89:35:45:D2:93:3C:CB:DD:5D:E6:8F:88:59: 2D:6D:74:2E:E2:02:20:0E:92:01:ED:66:3A:E6:C1:B2: 1C:E8:2D:47:4F:D4:4E:F1:DE:A0:5A:69:DD:64:BE:7C: 2F:97:A1:A2:F4:70:81 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:48:18.926 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:43:02:1F:6C:0B:98:D8:F0:3C:BE:5F:95:93:A9:8D: 63:FF:65:BB:47:E7:52:B8:E8:F0:72:0F:82:D5:CA:D2: D8:39:C3:02:20:57:9E:0A:FF:5C:CA:59:83:B8:4F:20: 74:C4:A7:62:F8:CE:20:EB:EE:7C:C4:B5:DE:FA:A2:00: 7E:47:7E:A4:EA Signature Algorithm: sha256WithRSAEncryption Signature Value: b6:26:07:ae:2f:fb:21:01:74:a0:52:ee:2c:3b:c2:2f:43:0c: 71:42:29:f8:ce:9c:b1:14:f2:7c:61:3a:2d:38:06:cd:0c:ea: 9c:a1:ec:63:fc:ec:c4:5a:7f:94:e4:c2:f5:da:92:95:88:89: 4d:5d:87:93:c4:2a:cf:f4:40:f4:d4:37:10:61:87:ff:4e:96: 89:9d:c6:3d:8a:df:25:74:40:49:0a:db:9a:c3:9c:f4:c1:09: e8:fe:4e:67:3c:d5:70:e7:16:09:30:71:b0:1b:3b:fb:94:09: 03:11:9c:6e:97:9d:a5:4d:69:3c:2e:88:ee:3a:83:bb:81:44: cf:5c:38:45:d7:63:61:bf:ef:99:cb:83:d9:38:6c:b5:b2:5e: 15:28:b0:7c:7c:97:9c:b8:67:96:58:b1:a0:4f:81:82:08:b3: dc:d1:53:4d:3e:36:3b:4b:4c:30:ff:cd:c0:8d:1d:7d:40:73: ac:df:1c:26:e6:17:4c:0b:0a:0b:04:b3:7b:94:17:a2:b9:8d: 1a:3a:fd:31:28:14:43:55:6f:a0:eb:c4:15:6b:c4:87:ce:58: c6:0a:b2:db:93:f5:d4:5f:a8:a6:77:4d:2f:d7:c1:63:5d:6a: ca:ca:54:cf:e1:9d:87:f2:60:8e:b4:e3:c0:38:8f:05:ff:83: 6f:c2:4c:a6
56870378 | 2024-09-14T01:41:58.577611587 / tcp
220 DM8P156CA0005.outlook.office365.com Microsoft ESMTP MAIL Service ready at Sat, 14 Sep 2024 01:41:50 +0000 [08DCD3C198FB1CE6] 250-DM8P156CA0005.outlook.office365.com Hello [224.70.106.173] 250-SIZE 157286400 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
Certificate: Data: Version: 3 (0x2) Serial Number: 40:e3:7e:d4:55:5e:c8:16:97:c7:de:e8:2a:df:b1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:48:18 2024 GMT Not After : Sep 4 17:48:17 2025 GMT Subject: C=AU, ST=Victoria, L=Melbourne, O=BHP Innovation Pty Ltd, CN=exmte.bhp.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:95:40:9e:87:cb:b7:8e:30:75:3b:d8:6f:69:00: 57:3f:16:27:78:5e:88:b7:ef:31:38:e5:8d:12:d5: b5:7c:98:b9:25:92:9f:0e:54:cc:b7:96:b9:83:fc: 09:f7:fb:6c:ec:9c:69:c4:22:c4:ca:5d:6e:6e:6d: ff:aa:29:51:f8:c7:ca:7e:67:04:e2:fd:99:e7:0e: 19:f0:3d:64:7e:72:34:8e:e4:b4:4c:5f:3a:42:6b: c7:bc:85:05:13:d1:23:ea:67:86:ec:95:ed:22:31: 7d:7a:92:ed:5f:82:df:3c:a5:d8:ce:67:09:03:bf: ba:5f:bf:e2:14:95:4e:ad:09:2c:fa:f8:0b:fe:de: 03:c6:35:39:2a:98:e9:fe:2f:ed:1c:14:6c:d2:2d: 69:a2:43:77:20:f6:8b:fc:01:c9:b8:aa:45:36:f7: 9a:6c:9d:59:bc:d8:dc:1d:3d:90:c7:ea:6a:f0:87: f0:5c:32:96:42:c3:90:04:e3:97:88:56:7a:f0:f3: 88:a8:da:bb:24:1b:8a:63:16:c9:5d:19:61:cf:bc: 95:ba:5a:e3:e8:0c:3d:cf:34:c0:ba:3c:47:65:da: 10:5e:80:a5:ef:da:a8:01:8c:84:4b:db:fb:31:e1: 39:d9:a0:38:5f:ec:53:20:97:69:39:f1:ad:97:67: 34:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 93:EF:82:4B:59:8A:34:2E:23:F1:50:E2:7A:20:CB:56:DC:0E:E0:B1 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:exmte.bhp.com, DNS:*.pod51219.outlook.com, DNS:autodiscover.bhp.com, DNS:autodiscover.bhpb.mail.onmicrosoft.com, DNS:autodiscover.bhpb.onmicrosoft.com, DNS:autodiscover.bhpbilliton.com, DNS:mail.bhp.com, DNS:mail.bhpbilliton.com, DNS:namp156-provisioning.internal.outlook.com, DNS:pod51219.outlook.com, DNS:pod51219ip.outlook.com, DNS:pod51219-pri.outlook.com, DNS:pod51219psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:48:18.881 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:E0:17:4D:83:F6:24:3B:50:D5:D1:D7: 2A:C9:D7:E9:18:27:B5:BF:FB:3A:38:27:81:44:87:60: 44:5D:AC:04:09:02:20:05:8D:26:3B:CC:7D:5B:9F:BB: 2D:50:27:AC:69:BE:F6:FE:A6:AD:6B:AD:61:97:50:41: 02:24:9C:08:C8:78:1A Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 4 17:48:18.894 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:9B:B0:77:06:E4:18:C3:29:6D:0A:A2: D0:DE:F6:89:35:45:D2:93:3C:CB:DD:5D:E6:8F:88:59: 2D:6D:74:2E:E2:02:20:0E:92:01:ED:66:3A:E6:C1:B2: 1C:E8:2D:47:4F:D4:4E:F1:DE:A0:5A:69:DD:64:BE:7C: 2F:97:A1:A2:F4:70:81 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:48:18.926 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:43:02:1F:6C:0B:98:D8:F0:3C:BE:5F:95:93:A9:8D: 63:FF:65:BB:47:E7:52:B8:E8:F0:72:0F:82:D5:CA:D2: D8:39:C3:02:20:57:9E:0A:FF:5C:CA:59:83:B8:4F:20: 74:C4:A7:62:F8:CE:20:EB:EE:7C:C4:B5:DE:FA:A2:00: 7E:47:7E:A4:EA Signature Algorithm: sha256WithRSAEncryption Signature Value: b6:26:07:ae:2f:fb:21:01:74:a0:52:ee:2c:3b:c2:2f:43:0c: 71:42:29:f8:ce:9c:b1:14:f2:7c:61:3a:2d:38:06:cd:0c:ea: 9c:a1:ec:63:fc:ec:c4:5a:7f:94:e4:c2:f5:da:92:95:88:89: 4d:5d:87:93:c4:2a:cf:f4:40:f4:d4:37:10:61:87:ff:4e:96: 89:9d:c6:3d:8a:df:25:74:40:49:0a:db:9a:c3:9c:f4:c1:09: e8:fe:4e:67:3c:d5:70:e7:16:09:30:71:b0:1b:3b:fb:94:09: 03:11:9c:6e:97:9d:a5:4d:69:3c:2e:88:ee:3a:83:bb:81:44: cf:5c:38:45:d7:63:61:bf:ef:99:cb:83:d9:38:6c:b5:b2:5e: 15:28:b0:7c:7c:97:9c:b8:67:96:58:b1:a0:4f:81:82:08:b3: dc:d1:53:4d:3e:36:3b:4b:4c:30:ff:cd:c0:8d:1d:7d:40:73: ac:df:1c:26:e6:17:4c:0b:0a:0b:04:b3:7b:94:17:a2:b9:8d: 1a:3a:fd:31:28:14:43:55:6f:a0:eb:c4:15:6b:c4:87:ce:58: c6:0a:b2:db:93:f5:d4:5f:a8:a6:77:4d:2f:d7:c1:63:5d:6a: ca:ca:54:cf:e1:9d:87:f2:60:8e:b4:e3:c0:38:8f:05:ff:83: 6f:c2:4c:a6
408095656 | 2024-09-18T04:08:13.434035993 / tcp
* OK The Microsoft Exchange IMAP4 service is ready. [RABNADgAUAAxADUANgBDAEEAMAAwADAANgAuAE4AQQBNAFAAMQA1ADYALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] * CAPABILITY IMAP4 IMAP4rev1 AUTH=PLAIN AUTH=XOAUTH2 SASL-IR UIDPLUS ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+ A001 OK CAPABILITY completed. * ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.20") A002 OK ID completed A003 BAD Command Error. 12 * BYE Microsoft Exchange Server IMAP4 server signing off. A004 OK LOGOUT completed.
Certificate: Data: Version: 3 (0x2) Serial Number: 40:e3:7e:d4:55:5e:c8:16:97:c7:de:e8:2a:df:b1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Sep 4 17:48:18 2024 GMT Not After : Sep 4 17:48:17 2025 GMT Subject: C=AU, ST=Victoria, L=Melbourne, O=BHP Innovation Pty Ltd, CN=exmte.bhp.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:95:40:9e:87:cb:b7:8e:30:75:3b:d8:6f:69:00: 57:3f:16:27:78:5e:88:b7:ef:31:38:e5:8d:12:d5: b5:7c:98:b9:25:92:9f:0e:54:cc:b7:96:b9:83:fc: 09:f7:fb:6c:ec:9c:69:c4:22:c4:ca:5d:6e:6e:6d: ff:aa:29:51:f8:c7:ca:7e:67:04:e2:fd:99:e7:0e: 19:f0:3d:64:7e:72:34:8e:e4:b4:4c:5f:3a:42:6b: c7:bc:85:05:13:d1:23:ea:67:86:ec:95:ed:22:31: 7d:7a:92:ed:5f:82:df:3c:a5:d8:ce:67:09:03:bf: ba:5f:bf:e2:14:95:4e:ad:09:2c:fa:f8:0b:fe:de: 03:c6:35:39:2a:98:e9:fe:2f:ed:1c:14:6c:d2:2d: 69:a2:43:77:20:f6:8b:fc:01:c9:b8:aa:45:36:f7: 9a:6c:9d:59:bc:d8:dc:1d:3d:90:c7:ea:6a:f0:87: f0:5c:32:96:42:c3:90:04:e3:97:88:56:7a:f0:f3: 88:a8:da:bb:24:1b:8a:63:16:c9:5d:19:61:cf:bc: 95:ba:5a:e3:e8:0c:3d:cf:34:c0:ba:3c:47:65:da: 10:5e:80:a5:ef:da:a8:01:8c:84:4b:db:fb:31:e1: 39:d9:a0:38:5f:ec:53:20:97:69:39:f1:ad:97:67: 34:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 93:EF:82:4B:59:8A:34:2E:23:F1:50:E2:7A:20:CB:56:DC:0E:E0:B1 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:exmte.bhp.com, DNS:*.pod51219.outlook.com, DNS:autodiscover.bhp.com, DNS:autodiscover.bhpb.mail.onmicrosoft.com, DNS:autodiscover.bhpb.onmicrosoft.com, DNS:autodiscover.bhpbilliton.com, DNS:mail.bhp.com, DNS:mail.bhpbilliton.com, DNS:namp156-provisioning.internal.outlook.com, DNS:pod51219.outlook.com, DNS:pod51219ip.outlook.com, DNS:pod51219-pri.outlook.com, DNS:pod51219psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 4 17:48:18.881 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:E0:17:4D:83:F6:24:3B:50:D5:D1:D7: 2A:C9:D7:E9:18:27:B5:BF:FB:3A:38:27:81:44:87:60: 44:5D:AC:04:09:02:20:05:8D:26:3B:CC:7D:5B:9F:BB: 2D:50:27:AC:69:BE:F6:FE:A6:AD:6B:AD:61:97:50:41: 02:24:9C:08:C8:78:1A Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 4 17:48:18.894 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:9B:B0:77:06:E4:18:C3:29:6D:0A:A2: D0:DE:F6:89:35:45:D2:93:3C:CB:DD:5D:E6:8F:88:59: 2D:6D:74:2E:E2:02:20:0E:92:01:ED:66:3A:E6:C1:B2: 1C:E8:2D:47:4F:D4:4E:F1:DE:A0:5A:69:DD:64:BE:7C: 2F:97:A1:A2:F4:70:81 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Sep 4 17:48:18.926 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:43:02:1F:6C:0B:98:D8:F0:3C:BE:5F:95:93:A9:8D: 63:FF:65:BB:47:E7:52:B8:E8:F0:72:0F:82:D5:CA:D2: D8:39:C3:02:20:57:9E:0A:FF:5C:CA:59:83:B8:4F:20: 74:C4:A7:62:F8:CE:20:EB:EE:7C:C4:B5:DE:FA:A2:00: 7E:47:7E:A4:EA Signature Algorithm: sha256WithRSAEncryption Signature Value: b6:26:07:ae:2f:fb:21:01:74:a0:52:ee:2c:3b:c2:2f:43:0c: 71:42:29:f8:ce:9c:b1:14:f2:7c:61:3a:2d:38:06:cd:0c:ea: 9c:a1:ec:63:fc:ec:c4:5a:7f:94:e4:c2:f5:da:92:95:88:89: 4d:5d:87:93:c4:2a:cf:f4:40:f4:d4:37:10:61:87:ff:4e:96: 89:9d:c6:3d:8a:df:25:74:40:49:0a:db:9a:c3:9c:f4:c1:09: e8:fe:4e:67:3c:d5:70:e7:16:09:30:71:b0:1b:3b:fb:94:09: 03:11:9c:6e:97:9d:a5:4d:69:3c:2e:88:ee:3a:83:bb:81:44: cf:5c:38:45:d7:63:61:bf:ef:99:cb:83:d9:38:6c:b5:b2:5e: 15:28:b0:7c:7c:97:9c:b8:67:96:58:b1:a0:4f:81:82:08:b3: dc:d1:53:4d:3e:36:3b:4b:4c:30:ff:cd:c0:8d:1d:7d:40:73: ac:df:1c:26:e6:17:4c:0b:0a:0b:04:b3:7b:94:17:a2:b9:8d: 1a:3a:fd:31:28:14:43:55:6f:a0:eb:c4:15:6b:c4:87:ce:58: c6:0a:b2:db:93:f5:d4:5f:a8:a6:77:4d:2f:d7:c1:63:5d:6a: ca:ca:54:cf:e1:9d:87:f2:60:8e:b4:e3:c0:38:8f:05:ff:83: 6f:c2:4c:a6
-1014106216 | 2024-09-10T07:18:48.166778995 / tcp
+OK The Microsoft Exchange POP3 service is ready. [RABNADgAUAAxADUANgBDAEEAMAAwADAANgAuAE4AQQBNAFAAMQA1ADYALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] +OK TOP UIDL SASL PLAIN XOAUTH2 USER .
Certificate: Data: Version: 3 (0x2) Serial Number: 44:60:b2:4f:c4:6c:8c:5e:49:27:06:b8:d9:1f:40:1f Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:14:12 2024 GMT Not After : Jun 6 09:14:11 2025 GMT Subject: C=AU, ST=Victoria, L=Melbourne, O=BHP Innovation Pty Ltd, CN=exmte.bhp.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:c9:80:4b:2d:9e:15:08:a7:0b:64:89:41:9d:ee: d0:6b:05:e6:4d:26:53:db:fd:3f:75:b5:9a:69:39: 80:6b:97:53:c3:e7:0e:2f:1a:a9:a8:f8:0c:a3:e7: d2:a4:ce:d5:cf:84:91:1b:f5:df:5f:b6:3d:a7:43: e1:4f:68:8c:d6:74:a6:52:af:ca:52:e7:30:5b:bd: 6f:98:d7:b0:a2:eb:3a:7f:2a:7f:53:cc:23:ff:17: a2:a2:ba:f8:5c:60:0c:5e:b8:c3:0d:90:71:8c:66: 87:25:d3:4c:33:64:97:0c:25:de:e2:d7:31:2e:56: 8d:6d:6b:b4:12:41:13:f6:8d:e8:69:68:34:70:14: 04:04:af:73:0e:1d:c3:c4:6e:d6:c7:54:79:1d:81: 75:46:1c:4e:d1:ab:cd:39:81:ac:e2:c7:1c:2e:eb: 03:93:5d:54:dc:b1:d4:3f:b9:90:7c:b8:d5:9a:06: c4:f7:c4:5a:1d:6b:22:97:1a:ce:a8:ab:88:e7:1b: 2e:b5:91:4f:0c:82:e7:d8:3d:73:21:75:55:5d:0d: 27:23:1a:cb:ca:81:29:af:e1:47:0a:e0:c5:a2:81: f7:03:ca:1f:94:17:a0:d5:a6:ac:02:66:d4:c8:64: a9:7f:20:96:d3:9c:52:79:48:d3:6c:ba:4f:4c:c5: 85:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 2B:86:82:67:44:AF:24:DE:EB:E4:D5:6D:F3:CA:E0:B7:34:5B:0B:CD X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:exmte.bhp.com, DNS:*.pod51219.outlook.com, DNS:autodiscover.bhp.com, DNS:autodiscover.bhpb.mail.onmicrosoft.com, DNS:autodiscover.bhpb.onmicrosoft.com, DNS:autodiscover.bhpbilliton.com, DNS:mail.bhp.com, DNS:mail.bhpbilliton.com, DNS:namp156-provisioning.internal.outlook.com, DNS:pod51219.outlook.com, DNS:pod51219ip.outlook.com, DNS:pod51219-pri.outlook.com, DNS:pod51219psh.outlook.com X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:14:13.010 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:4A:F7:79:CD:AC:6B:D9:BC:01:4C:4A:EA: 51:51:66:59:C9:D7:E2:53:EE:EF:17:D7:A5:FA:9B:AB: 6E:CB:8E:86:02:20:0C:06:23:A9:F8:EE:56:A1:7E:5D: 38:67:72:F1:D6:6F:64:87:64:D5:7C:23:44:3B:78:7D: 19:1D:B3:CC:EE:B6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:14:13.034 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F0:B5:FE:22:18:95:7A:47:20:D8:5D: 67:65:A2:6C:8D:EA:06:11:9A:D5:AC:81:BF:C4:C4:0C: 87:8D:E1:16:0C:02:20:4D:98:D7:C8:C6:BF:C1:2F:A6: D6:EF:0D:2D:C3:07:93:39:E4:E2:4F:32:6D:7C:2B:C8: 23:FD:EC:A2:43:1A:0D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Jun 6 09:14:13.052 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:47:17:B8:6C:6C:A1:19:53:ED:C2:CC:15: C7:60:02:2C:E8:3A:1E:3F:4C:F8:AD:37:E2:3D:92:58: 23:78:7B:08:02:21:00:BB:CB:BF:EF:83:7A:18:C3:99: B6:EB:B0:2D:FE:00:BD:D6:25:C5:31:62:6C:71:EE:6F: 5E:94:B3:3F:36:34:98 Signature Algorithm: sha256WithRSAEncryption Signature Value: 73:a6:d7:cf:be:58:87:9a:6f:ee:aa:11:5f:aa:f1:9f:b7:70: e2:73:e5:c6:86:f2:0a:ba:27:c8:22:a6:48:25:24:00:42:10: 76:fa:bd:06:b5:58:2f:28:5c:6e:a9:27:d3:15:b6:df:63:91: 9b:76:9a:41:0c:a9:f6:22:41:ef:38:ff:35:1a:d2:46:68:78: 40:f3:0c:f2:ff:b4:7a:d5:9b:cd:ca:77:36:df:22:ce:a5:7f: 1c:89:48:3c:98:ab:0a:58:67:35:cf:5b:41:4a:b9:92:8b:4d: c5:57:4d:29:64:1b:c4:47:29:e5:4b:e2:3c:c0:76:a8:bc:59: 08:5f:99:85:4a:4b:8b:b0:38:95:e5:68:b2:3b:52:3c:72:c5: 1c:c7:6e:5f:41:c0:20:21:57:39:54:b7:02:ed:8d:65:cf:10: 62:09:40:34:6e:2b:44:3e:f8:19:d5:5d:70:c2:9b:d5:be:eb: 45:86:80:68:35:f4:f4:6c:00:f4:46:16:0c:15:46:68:e8:07: 84:70:f2:5c:99:bb:5c:ff:3b:bd:c1:76:94:5b:df:71:94:6a: 96:db:83:99:2a:05:ca:29:45:bb:cd:a3:d3:c6:66:f6:f9:f1: b9:54:79:0a:c4:f6:91:e2:fb:bb:d2:d0:3d:96:55:f4:27:89: a0:d6:ac:40