Hostnames |
autodiscover.novartis.com eu-messaging.novartis.com na-messaging.novartis.com autodiscover.novartis.net messaging1.novartis.net messaging2.novartis.net webmail1.novartis.net webmail2.novartis.net autodiscover.Novartis.onmicrosoft.com autodiscover.Novartis.mail.onmicrosoft.com eurp176-provisioning.internal.outlook.com pod51280.outlook.com pod51280-pri.outlook.com pod51280ip.outlook.com pod51280psh.outlook.com |
Domains | novartis.com novartis.net onmicrosoft.com outlook.com |
Country | Austria |
City | Vienna |
Organization | Microsoft Corporation |
ISP | Microsoft Corporation |
ASN | AS8075 |
Operating System | Windows |
-1282454826 | 2024-09-09T11:58:02.65681225 / tcp
220 VI1P176CA0021.outlook.office365.com Microsoft ESMTP MAIL Service ready at Mon, 9 Sep 2024 11:57:44 +0000 [08DCD08369690788] 250-VI1P176CA0021.outlook.office365.com Hello [224.10.112.4] 250-SIZE 157286400 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
Certificate: Data: Version: 3 (0x2) Serial Number: 16:3c:88:de:62:53:73:00:01:e7:f1:cf:90:c2:8b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:16:00 2024 GMT Not After : Jun 6 09:15:58 2025 GMT Subject: C=US, ST=New Jersey, L=East Hanover, O=Novartis Pharma AG, CN=eu-messaging.novartis.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:cd:23:35:1b:dd:09:b1:14:70:29:01:b2:4b:2c: ad:16:c5:c9:31:85:9c:9c:43:b5:f1:ad:15:54:d3: 4a:e3:f6:f6:2d:43:b3:c3:db:a2:30:59:bb:0e:64: cc:58:5c:cb:a6:c9:a0:b3:f6:ba:2c:1b:95:c0:65: 4b:fc:4a:f8:9b:2a:a6:0c:9e:51:7b:7f:39:0d:12: b1:8a:b3:e3:b3:45:45:24:94:3f:9a:9c:96:69:68: 89:0c:81:59:d8:08:45:3e:90:1a:97:75:31:ef:18: d1:29:56:30:a4:94:ec:46:b7:ab:a7:66:3b:94:f1: 9a:8e:a1:f2:f7:62:c5:71:64:37:90:0a:c2:e2:c3: 95:fb:f4:5b:a9:25:9d:21:a0:bf:7d:c0:fb:0e:27: 89:9d:36:60:7b:62:09:97:aa:27:5f:93:2c:89:65: b3:d6:48:1b:f1:94:2f:9d:71:26:7d:3e:9b:60:6a: 57:cf:f3:0a:8b:84:a4:9e:a5:49:3e:d5:26:c4:d0: 2f:b2:71:89:f6:07:12:14:ad:69:23:68:9f:b0:ea: e5:75:e5:61:73:b8:b3:b5:10:b0:ce:b7:4e:53:c4: 2a:8e:ff:bd:07:6c:c4:aa:be:8e:38:95:01:25:da: b9:65:b1:83:46:68:fb:5e:a7:aa:5c:f0:b8:09:96: a2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: E0:59:85:5B:A7:80:FF:FA:FA:FE:08:6D:D4:7C:21:71:4A:28:22:17 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:eu-messaging.novartis.com, DNS:*.pod51280.outlook.com, DNS:autodiscover.novartis.com, DNS:autodiscover.Novartis.mail.onmicrosoft.com, DNS:autodiscover.novartis.net, DNS:autodiscover.Novartis.onmicrosoft.com, DNS:eurp176-provisioning.internal.outlook.com, DNS:messaging1.novartis.net, DNS:messaging2.novartis.net, DNS:na-messaging.novartis.com, DNS:pod51280.outlook.com, DNS:pod51280ip.outlook.com, DNS:pod51280-pri.outlook.com, DNS:pod51280psh.outlook.com, DNS:webmail1.novartis.net, DNS:webmail2.novartis.net X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Jun 6 09:16:00.302 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:FA:B4:8F:7E:3F:C5:5C:38:B7:BE:A7: 76:61:B3:D0:20:AA:FA:4A:F0:B6:46:38:D7:3C:B3:C8: 94:E8:FF:77:AC:02:21:00:ED:4D:D0:9E:44:10:B4:4C: BE:AE:1F:12:27:92:4D:26:C7:4F:22:F9:9E:C3:BA:D7: 44:B0:2A:EB:17:71:CC:D6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:16:00.276 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F4:80:B0:75:AE:FB:0A:24:B6:48:18: 96:8F:49:16:A4:09:12:2F:73:3E:A2:BF:5A:FD:80:71: 99:90:8B:2B:6C:02:21:00:E6:A7:08:80:67:07:26:BD: 88:29:8E:F2:4C:95:2B:E1:9B:5D:FF:C2:6A:6F:48:BF: 99:57:16:8D:73:52:9E:19 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:16:00.344 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D5:C9:22:2F:C2:AB:01:AE:A7:F6:2F: 66:E4:D7:CD:34:A6:2B:AE:67:7E:C3:5E:78:56:E7:40: 22:FE:20:71:23:02:20:0E:AE:5C:87:C3:BF:04:92:D0: 6C:A8:09:D6:9D:2B:2A:78:90:3D:DE:22:44:32:CA:8A: 5F:82:59:77:E9:3D:36 Signature Algorithm: sha256WithRSAEncryption Signature Value: 3a:ef:aa:e4:4e:a8:f6:ec:26:df:c5:e2:5c:8c:60:bb:5c:b0: d7:a0:ce:b2:85:32:99:0f:97:1f:72:ec:94:de:d6:2e:62:15: 6b:d1:f9:30:ce:c9:ad:ec:fd:64:3d:4f:df:6d:3b:77:4e:e5: 0b:99:50:5c:91:e4:fd:99:e1:0e:34:da:65:59:7d:d0:91:d8: 9b:ac:09:59:c2:63:7c:29:27:11:b3:a9:bb:d5:81:ae:2c:89: 5c:1a:7a:3d:4a:76:cf:29:bc:84:8e:91:da:a4:e8:31:28:50: 9f:51:3e:10:33:d5:4a:df:bb:2c:73:32:42:61:3f:58:0d:af: 8c:a4:dd:e3:bc:b1:0b:18:55:d9:66:bd:15:62:1a:b2:f3:5f: ed:47:82:65:2a:e3:f8:d5:d5:37:48:bb:0a:2a:0f:b0:f4:87: e6:0b:e3:a1:f7:54:c5:78:6d:f5:8c:4b:11:d7:96:f8:b3:09: c6:35:63:91:8a:db:f0:f8:e5:2f:d6:29:89:8f:2c:f3:aa:03: bb:af:4e:a1:89:bc:9a:f9:e9:bc:3c:b2:32:7d:10:38:6f:c6: 33:c0:d5:c5:40:0d:f2:09:b8:93:e7:6a:db:1c:6e:ca:5a:4a: d0:d8:18:fe:3e:45:15:a1:74:dd:e0:f4:7e:9f:c1:88:3c:d2: dc:55:1a:24
101399970 | 2024-09-08T15:13:29.96979580 / tcp
HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://52.97.231.131/owa/ Server: Microsoft-IIS/10.0 request-id: 8abd9df9-2587-3858-e5a5-bc57dade4229 X-FEServer: VI1P176CA0023 X-RequestId: dfb689da-5e9b-4e3a-bf32-5082869937e8 X-FEProxyInfo: VI1P176CA0023.EURP176.PROD.OUTLOOK.COM X-FEEFZInfo: VIE MS-CV: +Z29ioclWDjlpbxX2t5CKQ.0 X-Powered-By: ASP.NET X-FEServer: VI1P176CA0023 Date: Sun, 08 Sep 2024 15:13:29 GMT Connection: close Content-Length: 0
432570689 | 2024-08-31T19:15:54.015482110 / tcp
+OK The Microsoft Exchange POP3 service is ready. [VgBJADEAUAAxADcANgBDAEEAMAAwADIAMQAuAEUAVQBSAFAAMQA3ADYALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] +OK TOP UIDL STLS .
Certificate: Data: Version: 3 (0x2) Serial Number: 16:3c:88:de:62:53:73:00:01:e7:f1:cf:90:c2:8b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:16:00 2024 GMT Not After : Jun 6 09:15:58 2025 GMT Subject: C=US, ST=New Jersey, L=East Hanover, O=Novartis Pharma AG, CN=eu-messaging.novartis.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:cd:23:35:1b:dd:09:b1:14:70:29:01:b2:4b:2c: ad:16:c5:c9:31:85:9c:9c:43:b5:f1:ad:15:54:d3: 4a:e3:f6:f6:2d:43:b3:c3:db:a2:30:59:bb:0e:64: cc:58:5c:cb:a6:c9:a0:b3:f6:ba:2c:1b:95:c0:65: 4b:fc:4a:f8:9b:2a:a6:0c:9e:51:7b:7f:39:0d:12: b1:8a:b3:e3:b3:45:45:24:94:3f:9a:9c:96:69:68: 89:0c:81:59:d8:08:45:3e:90:1a:97:75:31:ef:18: d1:29:56:30:a4:94:ec:46:b7:ab:a7:66:3b:94:f1: 9a:8e:a1:f2:f7:62:c5:71:64:37:90:0a:c2:e2:c3: 95:fb:f4:5b:a9:25:9d:21:a0:bf:7d:c0:fb:0e:27: 89:9d:36:60:7b:62:09:97:aa:27:5f:93:2c:89:65: b3:d6:48:1b:f1:94:2f:9d:71:26:7d:3e:9b:60:6a: 57:cf:f3:0a:8b:84:a4:9e:a5:49:3e:d5:26:c4:d0: 2f:b2:71:89:f6:07:12:14:ad:69:23:68:9f:b0:ea: e5:75:e5:61:73:b8:b3:b5:10:b0:ce:b7:4e:53:c4: 2a:8e:ff:bd:07:6c:c4:aa:be:8e:38:95:01:25:da: b9:65:b1:83:46:68:fb:5e:a7:aa:5c:f0:b8:09:96: a2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: E0:59:85:5B:A7:80:FF:FA:FA:FE:08:6D:D4:7C:21:71:4A:28:22:17 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:eu-messaging.novartis.com, DNS:*.pod51280.outlook.com, DNS:autodiscover.novartis.com, DNS:autodiscover.Novartis.mail.onmicrosoft.com, DNS:autodiscover.novartis.net, DNS:autodiscover.Novartis.onmicrosoft.com, DNS:eurp176-provisioning.internal.outlook.com, DNS:messaging1.novartis.net, DNS:messaging2.novartis.net, DNS:na-messaging.novartis.com, DNS:pod51280.outlook.com, DNS:pod51280ip.outlook.com, DNS:pod51280-pri.outlook.com, DNS:pod51280psh.outlook.com, DNS:webmail1.novartis.net, DNS:webmail2.novartis.net X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Jun 6 09:16:00.302 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:FA:B4:8F:7E:3F:C5:5C:38:B7:BE:A7: 76:61:B3:D0:20:AA:FA:4A:F0:B6:46:38:D7:3C:B3:C8: 94:E8:FF:77:AC:02:21:00:ED:4D:D0:9E:44:10:B4:4C: BE:AE:1F:12:27:92:4D:26:C7:4F:22:F9:9E:C3:BA:D7: 44:B0:2A:EB:17:71:CC:D6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:16:00.276 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F4:80:B0:75:AE:FB:0A:24:B6:48:18: 96:8F:49:16:A4:09:12:2F:73:3E:A2:BF:5A:FD:80:71: 99:90:8B:2B:6C:02:21:00:E6:A7:08:80:67:07:26:BD: 88:29:8E:F2:4C:95:2B:E1:9B:5D:FF:C2:6A:6F:48:BF: 99:57:16:8D:73:52:9E:19 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:16:00.344 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D5:C9:22:2F:C2:AB:01:AE:A7:F6:2F: 66:E4:D7:CD:34:A6:2B:AE:67:7E:C3:5E:78:56:E7:40: 22:FE:20:71:23:02:20:0E:AE:5C:87:C3:BF:04:92:D0: 6C:A8:09:D6:9D:2B:2A:78:90:3D:DE:22:44:32:CA:8A: 5F:82:59:77:E9:3D:36 Signature Algorithm: sha256WithRSAEncryption Signature Value: 3a:ef:aa:e4:4e:a8:f6:ec:26:df:c5:e2:5c:8c:60:bb:5c:b0: d7:a0:ce:b2:85:32:99:0f:97:1f:72:ec:94:de:d6:2e:62:15: 6b:d1:f9:30:ce:c9:ad:ec:fd:64:3d:4f:df:6d:3b:77:4e:e5: 0b:99:50:5c:91:e4:fd:99:e1:0e:34:da:65:59:7d:d0:91:d8: 9b:ac:09:59:c2:63:7c:29:27:11:b3:a9:bb:d5:81:ae:2c:89: 5c:1a:7a:3d:4a:76:cf:29:bc:84:8e:91:da:a4:e8:31:28:50: 9f:51:3e:10:33:d5:4a:df:bb:2c:73:32:42:61:3f:58:0d:af: 8c:a4:dd:e3:bc:b1:0b:18:55:d9:66:bd:15:62:1a:b2:f3:5f: ed:47:82:65:2a:e3:f8:d5:d5:37:48:bb:0a:2a:0f:b0:f4:87: e6:0b:e3:a1:f7:54:c5:78:6d:f5:8c:4b:11:d7:96:f8:b3:09: c6:35:63:91:8a:db:f0:f8:e5:2f:d6:29:89:8f:2c:f3:aa:03: bb:af:4e:a1:89:bc:9a:f9:e9:bc:3c:b2:32:7d:10:38:6f:c6: 33:c0:d5:c5:40:0d:f2:09:b8:93:e7:6a:db:1c:6e:ca:5a:4a: d0:d8:18:fe:3e:45:15:a1:74:dd:e0:f4:7e:9f:c1:88:3c:d2: dc:55:1a:24
-1425615694 | 2024-09-07T01:18:48.920252143 / tcp
* OK The Microsoft Exchange IMAP4 service is ready. [VgBJADEAUAAxADcANgBDAEEAMAAwADIAMwAuAEUAVQBSAFAAMQA3ADYALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] * CAPABILITY IMAP4 IMAP4rev1 LOGINDISABLED STARTTLS SASL-IR UIDPLUS ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+ A001 OK CAPABILITY completed. * ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.20") A002 OK ID completed A003 BAD Command Error. 12 * BYE Microsoft Exchange Server IMAP4 server signing off. A004 OK LOGOUT completed.
Certificate: Data: Version: 3 (0x2) Serial Number: 16:3c:88:de:62:53:73:00:01:e7:f1:cf:90:c2:8b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:16:00 2024 GMT Not After : Jun 6 09:15:58 2025 GMT Subject: C=US, ST=New Jersey, L=East Hanover, O=Novartis Pharma AG, CN=eu-messaging.novartis.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:cd:23:35:1b:dd:09:b1:14:70:29:01:b2:4b:2c: ad:16:c5:c9:31:85:9c:9c:43:b5:f1:ad:15:54:d3: 4a:e3:f6:f6:2d:43:b3:c3:db:a2:30:59:bb:0e:64: cc:58:5c:cb:a6:c9:a0:b3:f6:ba:2c:1b:95:c0:65: 4b:fc:4a:f8:9b:2a:a6:0c:9e:51:7b:7f:39:0d:12: b1:8a:b3:e3:b3:45:45:24:94:3f:9a:9c:96:69:68: 89:0c:81:59:d8:08:45:3e:90:1a:97:75:31:ef:18: d1:29:56:30:a4:94:ec:46:b7:ab:a7:66:3b:94:f1: 9a:8e:a1:f2:f7:62:c5:71:64:37:90:0a:c2:e2:c3: 95:fb:f4:5b:a9:25:9d:21:a0:bf:7d:c0:fb:0e:27: 89:9d:36:60:7b:62:09:97:aa:27:5f:93:2c:89:65: b3:d6:48:1b:f1:94:2f:9d:71:26:7d:3e:9b:60:6a: 57:cf:f3:0a:8b:84:a4:9e:a5:49:3e:d5:26:c4:d0: 2f:b2:71:89:f6:07:12:14:ad:69:23:68:9f:b0:ea: e5:75:e5:61:73:b8:b3:b5:10:b0:ce:b7:4e:53:c4: 2a:8e:ff:bd:07:6c:c4:aa:be:8e:38:95:01:25:da: b9:65:b1:83:46:68:fb:5e:a7:aa:5c:f0:b8:09:96: a2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: E0:59:85:5B:A7:80:FF:FA:FA:FE:08:6D:D4:7C:21:71:4A:28:22:17 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:eu-messaging.novartis.com, DNS:*.pod51280.outlook.com, DNS:autodiscover.novartis.com, DNS:autodiscover.Novartis.mail.onmicrosoft.com, DNS:autodiscover.novartis.net, DNS:autodiscover.Novartis.onmicrosoft.com, DNS:eurp176-provisioning.internal.outlook.com, DNS:messaging1.novartis.net, DNS:messaging2.novartis.net, DNS:na-messaging.novartis.com, DNS:pod51280.outlook.com, DNS:pod51280ip.outlook.com, DNS:pod51280-pri.outlook.com, DNS:pod51280psh.outlook.com, DNS:webmail1.novartis.net, DNS:webmail2.novartis.net X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Jun 6 09:16:00.302 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:FA:B4:8F:7E:3F:C5:5C:38:B7:BE:A7: 76:61:B3:D0:20:AA:FA:4A:F0:B6:46:38:D7:3C:B3:C8: 94:E8:FF:77:AC:02:21:00:ED:4D:D0:9E:44:10:B4:4C: BE:AE:1F:12:27:92:4D:26:C7:4F:22:F9:9E:C3:BA:D7: 44:B0:2A:EB:17:71:CC:D6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:16:00.276 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F4:80:B0:75:AE:FB:0A:24:B6:48:18: 96:8F:49:16:A4:09:12:2F:73:3E:A2:BF:5A:FD:80:71: 99:90:8B:2B:6C:02:21:00:E6:A7:08:80:67:07:26:BD: 88:29:8E:F2:4C:95:2B:E1:9B:5D:FF:C2:6A:6F:48:BF: 99:57:16:8D:73:52:9E:19 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:16:00.344 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D5:C9:22:2F:C2:AB:01:AE:A7:F6:2F: 66:E4:D7:CD:34:A6:2B:AE:67:7E:C3:5E:78:56:E7:40: 22:FE:20:71:23:02:20:0E:AE:5C:87:C3:BF:04:92:D0: 6C:A8:09:D6:9D:2B:2A:78:90:3D:DE:22:44:32:CA:8A: 5F:82:59:77:E9:3D:36 Signature Algorithm: sha256WithRSAEncryption Signature Value: 3a:ef:aa:e4:4e:a8:f6:ec:26:df:c5:e2:5c:8c:60:bb:5c:b0: d7:a0:ce:b2:85:32:99:0f:97:1f:72:ec:94:de:d6:2e:62:15: 6b:d1:f9:30:ce:c9:ad:ec:fd:64:3d:4f:df:6d:3b:77:4e:e5: 0b:99:50:5c:91:e4:fd:99:e1:0e:34:da:65:59:7d:d0:91:d8: 9b:ac:09:59:c2:63:7c:29:27:11:b3:a9:bb:d5:81:ae:2c:89: 5c:1a:7a:3d:4a:76:cf:29:bc:84:8e:91:da:a4:e8:31:28:50: 9f:51:3e:10:33:d5:4a:df:bb:2c:73:32:42:61:3f:58:0d:af: 8c:a4:dd:e3:bc:b1:0b:18:55:d9:66:bd:15:62:1a:b2:f3:5f: ed:47:82:65:2a:e3:f8:d5:d5:37:48:bb:0a:2a:0f:b0:f4:87: e6:0b:e3:a1:f7:54:c5:78:6d:f5:8c:4b:11:d7:96:f8:b3:09: c6:35:63:91:8a:db:f0:f8:e5:2f:d6:29:89:8f:2c:f3:aa:03: bb:af:4e:a1:89:bc:9a:f9:e9:bc:3c:b2:32:7d:10:38:6f:c6: 33:c0:d5:c5:40:0d:f2:09:b8:93:e7:6a:db:1c:6e:ca:5a:4a: d0:d8:18:fe:3e:45:15:a1:74:dd:e0:f4:7e:9f:c1:88:3c:d2: dc:55:1a:24
1830615243 | 2024-09-08T18:23:27.434467443 / tcp
HTTP/1.1 302 Content-Length: 777 Content-Type: text/html; charset=utf-8 Location: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f52.97.231.131%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=0&msaredir=0&client-request-id=341dad7a-7c6d-ca1d-5ed9-f910b1db27c4&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638614166071568695.84b949be-028a-43fb-b744-993b1c0966e3&state=DcsxEoAwCADBRMfnYEAIgecEJ7aWfl-Kve5qKWVPW6qYKUPZlIRUcVBXU--nSbh4LMDLJgg_ATFEwJ2DbnTVxTXfo73fbD8 Server: Microsoft-IIS/10.0 request-id: 341dad7a-7c6d-ca1d-5ed9-f910b1db27c4 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-CalculatedBETarget: DUZP176MB0318.EURP176.PROD.OUTLOOK.COM X-BackEndHttpStatus: 302 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: ClientId=999F015D890A4063BD04D313A223DAE3; expires=Mon, 08-Sep-2025 18:23:27 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=999F015D890A4063BD04D313A223DAE3; expires=Mon, 08-Sep-2025 18:23:27 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Sat, 08-Mar-2025 18:23:27 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=52.97.231.131; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=52.97.231.131; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=52.97.231.131; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=52.97.231.131; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=52.97.231.131; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=52.97.231.131; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.jM3lyBejUyB3pufGXcK3lozkE4_jbItOIkVIiA0i90g=638614166071568695.84b949be-028a-43fb-b744-993b1c0966e3; expires=Sun, 08-Sep-2024 19:23:27 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: ClientId=999F015D890A4063BD04D313A223DAE3; expires=Mon, 08-Sep-2025 18:23:27 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Sat, 08-Mar-2025 18:23:27 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=52.97.231.131; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=52.97.231.131; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=52.97.231.131; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=52.97.231.131; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=52.97.231.131; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=52.97.231.131; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.jM3lyBejUyB3pufGXcK3lozkE4_jbItOIkVIiA0i90g=638614166071568695.84b949be-028a-43fb-b744-993b1c0966e3; expires=Sun, 08-Sep-2024 19:23:27 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Thu, 08-Sep-1994 18:23:27 GMT; path=/; secure; HttpOnly Set-Cookie: X-OWA-RedirectHistory=ArLym14BN2k6VTPQ3Ag; expires=Mon, 09-Sep-2024 00:25:27 GMT; path=/;SameSite=None; secure; HttpOnly X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS7 X-OWA-DiagnosticsInfo: 3;0;0; X-BackEnd-Begin: 2024-09-08T18:23:27.156 X-BackEnd-End: 2024-09-08T18:23:27.156 X-DiagInfo: DUZP176MB0318 X-BEServer: DUZP176MB0318 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=VIE&RemoteIP=185.142.236.0&Environment=MT"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 302 X-FirstHopCafeEFZ: VIE X-FEProxyInfo: VI1P176CA0024.EURP176.PROD.OUTLOOK.COM X-FEEFZInfo: VIE X-FEServer: VI1P176CA0024 Date: Sun, 08 Sep 2024 18:23:26 GMT
Certificate: Data: Version: 3 (0x2) Serial Number: 16:3c:88:de:62:53:73:00:01:e7:f1:cf:90:c2:8b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:16:00 2024 GMT Not After : Jun 6 09:15:58 2025 GMT Subject: C=US, ST=New Jersey, L=East Hanover, O=Novartis Pharma AG, CN=eu-messaging.novartis.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:cd:23:35:1b:dd:09:b1:14:70:29:01:b2:4b:2c: ad:16:c5:c9:31:85:9c:9c:43:b5:f1:ad:15:54:d3: 4a:e3:f6:f6:2d:43:b3:c3:db:a2:30:59:bb:0e:64: cc:58:5c:cb:a6:c9:a0:b3:f6:ba:2c:1b:95:c0:65: 4b:fc:4a:f8:9b:2a:a6:0c:9e:51:7b:7f:39:0d:12: b1:8a:b3:e3:b3:45:45:24:94:3f:9a:9c:96:69:68: 89:0c:81:59:d8:08:45:3e:90:1a:97:75:31:ef:18: d1:29:56:30:a4:94:ec:46:b7:ab:a7:66:3b:94:f1: 9a:8e:a1:f2:f7:62:c5:71:64:37:90:0a:c2:e2:c3: 95:fb:f4:5b:a9:25:9d:21:a0:bf:7d:c0:fb:0e:27: 89:9d:36:60:7b:62:09:97:aa:27:5f:93:2c:89:65: b3:d6:48:1b:f1:94:2f:9d:71:26:7d:3e:9b:60:6a: 57:cf:f3:0a:8b:84:a4:9e:a5:49:3e:d5:26:c4:d0: 2f:b2:71:89:f6:07:12:14:ad:69:23:68:9f:b0:ea: e5:75:e5:61:73:b8:b3:b5:10:b0:ce:b7:4e:53:c4: 2a:8e:ff:bd:07:6c:c4:aa:be:8e:38:95:01:25:da: b9:65:b1:83:46:68:fb:5e:a7:aa:5c:f0:b8:09:96: a2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: E0:59:85:5B:A7:80:FF:FA:FA:FE:08:6D:D4:7C:21:71:4A:28:22:17 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:eu-messaging.novartis.com, DNS:*.pod51280.outlook.com, DNS:autodiscover.novartis.com, DNS:autodiscover.Novartis.mail.onmicrosoft.com, DNS:autodiscover.novartis.net, DNS:autodiscover.Novartis.onmicrosoft.com, DNS:eurp176-provisioning.internal.outlook.com, DNS:messaging1.novartis.net, DNS:messaging2.novartis.net, DNS:na-messaging.novartis.com, DNS:pod51280.outlook.com, DNS:pod51280ip.outlook.com, DNS:pod51280-pri.outlook.com, DNS:pod51280psh.outlook.com, DNS:webmail1.novartis.net, DNS:webmail2.novartis.net X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Jun 6 09:16:00.302 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:FA:B4:8F:7E:3F:C5:5C:38:B7:BE:A7: 76:61:B3:D0:20:AA:FA:4A:F0:B6:46:38:D7:3C:B3:C8: 94:E8:FF:77:AC:02:21:00:ED:4D:D0:9E:44:10:B4:4C: BE:AE:1F:12:27:92:4D:26:C7:4F:22:F9:9E:C3:BA:D7: 44:B0:2A:EB:17:71:CC:D6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:16:00.276 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F4:80:B0:75:AE:FB:0A:24:B6:48:18: 96:8F:49:16:A4:09:12:2F:73:3E:A2:BF:5A:FD:80:71: 99:90:8B:2B:6C:02:21:00:E6:A7:08:80:67:07:26:BD: 88:29:8E:F2:4C:95:2B:E1:9B:5D:FF:C2:6A:6F:48:BF: 99:57:16:8D:73:52:9E:19 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:16:00.344 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D5:C9:22:2F:C2:AB:01:AE:A7:F6:2F: 66:E4:D7:CD:34:A6:2B:AE:67:7E:C3:5E:78:56:E7:40: 22:FE:20:71:23:02:20:0E:AE:5C:87:C3:BF:04:92:D0: 6C:A8:09:D6:9D:2B:2A:78:90:3D:DE:22:44:32:CA:8A: 5F:82:59:77:E9:3D:36 Signature Algorithm: sha256WithRSAEncryption Signature Value: 3a:ef:aa:e4:4e:a8:f6:ec:26:df:c5:e2:5c:8c:60:bb:5c:b0: d7:a0:ce:b2:85:32:99:0f:97:1f:72:ec:94:de:d6:2e:62:15: 6b:d1:f9:30:ce:c9:ad:ec:fd:64:3d:4f:df:6d:3b:77:4e:e5: 0b:99:50:5c:91:e4:fd:99:e1:0e:34:da:65:59:7d:d0:91:d8: 9b:ac:09:59:c2:63:7c:29:27:11:b3:a9:bb:d5:81:ae:2c:89: 5c:1a:7a:3d:4a:76:cf:29:bc:84:8e:91:da:a4:e8:31:28:50: 9f:51:3e:10:33:d5:4a:df:bb:2c:73:32:42:61:3f:58:0d:af: 8c:a4:dd:e3:bc:b1:0b:18:55:d9:66:bd:15:62:1a:b2:f3:5f: ed:47:82:65:2a:e3:f8:d5:d5:37:48:bb:0a:2a:0f:b0:f4:87: e6:0b:e3:a1:f7:54:c5:78:6d:f5:8c:4b:11:d7:96:f8:b3:09: c6:35:63:91:8a:db:f0:f8:e5:2f:d6:29:89:8f:2c:f3:aa:03: bb:af:4e:a1:89:bc:9a:f9:e9:bc:3c:b2:32:7d:10:38:6f:c6: 33:c0:d5:c5:40:0d:f2:09:b8:93:e7:6a:db:1c:6e:ca:5a:4a: d0:d8:18:fe:3e:45:15:a1:74:dd:e0:f4:7e:9f:c1:88:3c:d2: dc:55:1a:24
712423970 | 2024-08-25T01:22:31.786076587 / tcp
220 VI1P176CA0023.outlook.office365.com Microsoft ESMTP MAIL Service ready at Sun, 25 Aug 2024 01:22:18 +0000 [08DCC40CAE7A55B0] 250-VI1P176CA0023.outlook.office365.com Hello [224.10.112.4] 250-SIZE 157286400 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
Certificate: Data: Version: 3 (0x2) Serial Number: 16:3c:88:de:62:53:73:00:01:e7:f1:cf:90:c2:8b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:16:00 2024 GMT Not After : Jun 6 09:15:58 2025 GMT Subject: C=US, ST=New Jersey, L=East Hanover, O=Novartis Pharma AG, CN=eu-messaging.novartis.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:cd:23:35:1b:dd:09:b1:14:70:29:01:b2:4b:2c: ad:16:c5:c9:31:85:9c:9c:43:b5:f1:ad:15:54:d3: 4a:e3:f6:f6:2d:43:b3:c3:db:a2:30:59:bb:0e:64: cc:58:5c:cb:a6:c9:a0:b3:f6:ba:2c:1b:95:c0:65: 4b:fc:4a:f8:9b:2a:a6:0c:9e:51:7b:7f:39:0d:12: b1:8a:b3:e3:b3:45:45:24:94:3f:9a:9c:96:69:68: 89:0c:81:59:d8:08:45:3e:90:1a:97:75:31:ef:18: d1:29:56:30:a4:94:ec:46:b7:ab:a7:66:3b:94:f1: 9a:8e:a1:f2:f7:62:c5:71:64:37:90:0a:c2:e2:c3: 95:fb:f4:5b:a9:25:9d:21:a0:bf:7d:c0:fb:0e:27: 89:9d:36:60:7b:62:09:97:aa:27:5f:93:2c:89:65: b3:d6:48:1b:f1:94:2f:9d:71:26:7d:3e:9b:60:6a: 57:cf:f3:0a:8b:84:a4:9e:a5:49:3e:d5:26:c4:d0: 2f:b2:71:89:f6:07:12:14:ad:69:23:68:9f:b0:ea: e5:75:e5:61:73:b8:b3:b5:10:b0:ce:b7:4e:53:c4: 2a:8e:ff:bd:07:6c:c4:aa:be:8e:38:95:01:25:da: b9:65:b1:83:46:68:fb:5e:a7:aa:5c:f0:b8:09:96: a2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: E0:59:85:5B:A7:80:FF:FA:FA:FE:08:6D:D4:7C:21:71:4A:28:22:17 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:eu-messaging.novartis.com, DNS:*.pod51280.outlook.com, DNS:autodiscover.novartis.com, DNS:autodiscover.Novartis.mail.onmicrosoft.com, DNS:autodiscover.novartis.net, DNS:autodiscover.Novartis.onmicrosoft.com, DNS:eurp176-provisioning.internal.outlook.com, DNS:messaging1.novartis.net, DNS:messaging2.novartis.net, DNS:na-messaging.novartis.com, DNS:pod51280.outlook.com, DNS:pod51280ip.outlook.com, DNS:pod51280-pri.outlook.com, DNS:pod51280psh.outlook.com, DNS:webmail1.novartis.net, DNS:webmail2.novartis.net X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Jun 6 09:16:00.302 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:FA:B4:8F:7E:3F:C5:5C:38:B7:BE:A7: 76:61:B3:D0:20:AA:FA:4A:F0:B6:46:38:D7:3C:B3:C8: 94:E8:FF:77:AC:02:21:00:ED:4D:D0:9E:44:10:B4:4C: BE:AE:1F:12:27:92:4D:26:C7:4F:22:F9:9E:C3:BA:D7: 44:B0:2A:EB:17:71:CC:D6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:16:00.276 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F4:80:B0:75:AE:FB:0A:24:B6:48:18: 96:8F:49:16:A4:09:12:2F:73:3E:A2:BF:5A:FD:80:71: 99:90:8B:2B:6C:02:21:00:E6:A7:08:80:67:07:26:BD: 88:29:8E:F2:4C:95:2B:E1:9B:5D:FF:C2:6A:6F:48:BF: 99:57:16:8D:73:52:9E:19 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:16:00.344 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D5:C9:22:2F:C2:AB:01:AE:A7:F6:2F: 66:E4:D7:CD:34:A6:2B:AE:67:7E:C3:5E:78:56:E7:40: 22:FE:20:71:23:02:20:0E:AE:5C:87:C3:BF:04:92:D0: 6C:A8:09:D6:9D:2B:2A:78:90:3D:DE:22:44:32:CA:8A: 5F:82:59:77:E9:3D:36 Signature Algorithm: sha256WithRSAEncryption Signature Value: 3a:ef:aa:e4:4e:a8:f6:ec:26:df:c5:e2:5c:8c:60:bb:5c:b0: d7:a0:ce:b2:85:32:99:0f:97:1f:72:ec:94:de:d6:2e:62:15: 6b:d1:f9:30:ce:c9:ad:ec:fd:64:3d:4f:df:6d:3b:77:4e:e5: 0b:99:50:5c:91:e4:fd:99:e1:0e:34:da:65:59:7d:d0:91:d8: 9b:ac:09:59:c2:63:7c:29:27:11:b3:a9:bb:d5:81:ae:2c:89: 5c:1a:7a:3d:4a:76:cf:29:bc:84:8e:91:da:a4:e8:31:28:50: 9f:51:3e:10:33:d5:4a:df:bb:2c:73:32:42:61:3f:58:0d:af: 8c:a4:dd:e3:bc:b1:0b:18:55:d9:66:bd:15:62:1a:b2:f3:5f: ed:47:82:65:2a:e3:f8:d5:d5:37:48:bb:0a:2a:0f:b0:f4:87: e6:0b:e3:a1:f7:54:c5:78:6d:f5:8c:4b:11:d7:96:f8:b3:09: c6:35:63:91:8a:db:f0:f8:e5:2f:d6:29:89:8f:2c:f3:aa:03: bb:af:4e:a1:89:bc:9a:f9:e9:bc:3c:b2:32:7d:10:38:6f:c6: 33:c0:d5:c5:40:0d:f2:09:b8:93:e7:6a:db:1c:6e:ca:5a:4a: d0:d8:18:fe:3e:45:15:a1:74:dd:e0:f4:7e:9f:c1:88:3c:d2: dc:55:1a:24
1102927260 | 2024-08-31T04:29:33.045712993 / tcp
* OK The Microsoft Exchange IMAP4 service is ready. [VgBJADEAUAAxADcANgBDAEEAMAAwADIAMQAuAEUAVQBSAFAAMQA3ADYALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] * CAPABILITY IMAP4 IMAP4rev1 AUTH=PLAIN AUTH=XOAUTH2 SASL-IR UIDPLUS ID UNSELECT CHILDREN IDLE NAMESPACE LITERAL+ A001 OK CAPABILITY completed. * ID ("name" "Microsoft.Exchange.Imap4.Imap4Server" "version" "15.20") A002 OK ID completed A003 BAD Command Error. 12 * BYE Microsoft Exchange Server IMAP4 server signing off. A004 OK LOGOUT completed.
Certificate: Data: Version: 3 (0x2) Serial Number: 16:3c:88:de:62:53:73:00:01:e7:f1:cf:90:c2:8b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:16:00 2024 GMT Not After : Jun 6 09:15:58 2025 GMT Subject: C=US, ST=New Jersey, L=East Hanover, O=Novartis Pharma AG, CN=eu-messaging.novartis.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:cd:23:35:1b:dd:09:b1:14:70:29:01:b2:4b:2c: ad:16:c5:c9:31:85:9c:9c:43:b5:f1:ad:15:54:d3: 4a:e3:f6:f6:2d:43:b3:c3:db:a2:30:59:bb:0e:64: cc:58:5c:cb:a6:c9:a0:b3:f6:ba:2c:1b:95:c0:65: 4b:fc:4a:f8:9b:2a:a6:0c:9e:51:7b:7f:39:0d:12: b1:8a:b3:e3:b3:45:45:24:94:3f:9a:9c:96:69:68: 89:0c:81:59:d8:08:45:3e:90:1a:97:75:31:ef:18: d1:29:56:30:a4:94:ec:46:b7:ab:a7:66:3b:94:f1: 9a:8e:a1:f2:f7:62:c5:71:64:37:90:0a:c2:e2:c3: 95:fb:f4:5b:a9:25:9d:21:a0:bf:7d:c0:fb:0e:27: 89:9d:36:60:7b:62:09:97:aa:27:5f:93:2c:89:65: b3:d6:48:1b:f1:94:2f:9d:71:26:7d:3e:9b:60:6a: 57:cf:f3:0a:8b:84:a4:9e:a5:49:3e:d5:26:c4:d0: 2f:b2:71:89:f6:07:12:14:ad:69:23:68:9f:b0:ea: e5:75:e5:61:73:b8:b3:b5:10:b0:ce:b7:4e:53:c4: 2a:8e:ff:bd:07:6c:c4:aa:be:8e:38:95:01:25:da: b9:65:b1:83:46:68:fb:5e:a7:aa:5c:f0:b8:09:96: a2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: E0:59:85:5B:A7:80:FF:FA:FA:FE:08:6D:D4:7C:21:71:4A:28:22:17 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:eu-messaging.novartis.com, DNS:*.pod51280.outlook.com, DNS:autodiscover.novartis.com, DNS:autodiscover.Novartis.mail.onmicrosoft.com, DNS:autodiscover.novartis.net, DNS:autodiscover.Novartis.onmicrosoft.com, DNS:eurp176-provisioning.internal.outlook.com, DNS:messaging1.novartis.net, DNS:messaging2.novartis.net, DNS:na-messaging.novartis.com, DNS:pod51280.outlook.com, DNS:pod51280ip.outlook.com, DNS:pod51280-pri.outlook.com, DNS:pod51280psh.outlook.com, DNS:webmail1.novartis.net, DNS:webmail2.novartis.net X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Jun 6 09:16:00.302 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:FA:B4:8F:7E:3F:C5:5C:38:B7:BE:A7: 76:61:B3:D0:20:AA:FA:4A:F0:B6:46:38:D7:3C:B3:C8: 94:E8:FF:77:AC:02:21:00:ED:4D:D0:9E:44:10:B4:4C: BE:AE:1F:12:27:92:4D:26:C7:4F:22:F9:9E:C3:BA:D7: 44:B0:2A:EB:17:71:CC:D6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:16:00.276 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F4:80:B0:75:AE:FB:0A:24:B6:48:18: 96:8F:49:16:A4:09:12:2F:73:3E:A2:BF:5A:FD:80:71: 99:90:8B:2B:6C:02:21:00:E6:A7:08:80:67:07:26:BD: 88:29:8E:F2:4C:95:2B:E1:9B:5D:FF:C2:6A:6F:48:BF: 99:57:16:8D:73:52:9E:19 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:16:00.344 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D5:C9:22:2F:C2:AB:01:AE:A7:F6:2F: 66:E4:D7:CD:34:A6:2B:AE:67:7E:C3:5E:78:56:E7:40: 22:FE:20:71:23:02:20:0E:AE:5C:87:C3:BF:04:92:D0: 6C:A8:09:D6:9D:2B:2A:78:90:3D:DE:22:44:32:CA:8A: 5F:82:59:77:E9:3D:36 Signature Algorithm: sha256WithRSAEncryption Signature Value: 3a:ef:aa:e4:4e:a8:f6:ec:26:df:c5:e2:5c:8c:60:bb:5c:b0: d7:a0:ce:b2:85:32:99:0f:97:1f:72:ec:94:de:d6:2e:62:15: 6b:d1:f9:30:ce:c9:ad:ec:fd:64:3d:4f:df:6d:3b:77:4e:e5: 0b:99:50:5c:91:e4:fd:99:e1:0e:34:da:65:59:7d:d0:91:d8: 9b:ac:09:59:c2:63:7c:29:27:11:b3:a9:bb:d5:81:ae:2c:89: 5c:1a:7a:3d:4a:76:cf:29:bc:84:8e:91:da:a4:e8:31:28:50: 9f:51:3e:10:33:d5:4a:df:bb:2c:73:32:42:61:3f:58:0d:af: 8c:a4:dd:e3:bc:b1:0b:18:55:d9:66:bd:15:62:1a:b2:f3:5f: ed:47:82:65:2a:e3:f8:d5:d5:37:48:bb:0a:2a:0f:b0:f4:87: e6:0b:e3:a1:f7:54:c5:78:6d:f5:8c:4b:11:d7:96:f8:b3:09: c6:35:63:91:8a:db:f0:f8:e5:2f:d6:29:89:8f:2c:f3:aa:03: bb:af:4e:a1:89:bc:9a:f9:e9:bc:3c:b2:32:7d:10:38:6f:c6: 33:c0:d5:c5:40:0d:f2:09:b8:93:e7:6a:db:1c:6e:ca:5a:4a: d0:d8:18:fe:3e:45:15:a1:74:dd:e0:f4:7e:9f:c1:88:3c:d2: dc:55:1a:24
-1461339814 | 2024-09-06T03:38:46.215805995 / tcp
+OK The Microsoft Exchange POP3 service is ready. [VgBJADEAUAAxADcANgBDAEEAMAAwADIAMQAuAEUAVQBSAFAAMQA3ADYALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==] +OK TOP UIDL SASL PLAIN XOAUTH2 USER .
Certificate: Data: Version: 3 (0x2) Serial Number: 16:3c:88:de:62:53:73:00:01:e7:f1:cf:90:c2:8b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K Validity Not Before: Jun 6 09:16:00 2024 GMT Not After : Jun 6 09:15:58 2025 GMT Subject: C=US, ST=New Jersey, L=East Hanover, O=Novartis Pharma AG, CN=eu-messaging.novartis.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:cd:23:35:1b:dd:09:b1:14:70:29:01:b2:4b:2c: ad:16:c5:c9:31:85:9c:9c:43:b5:f1:ad:15:54:d3: 4a:e3:f6:f6:2d:43:b3:c3:db:a2:30:59:bb:0e:64: cc:58:5c:cb:a6:c9:a0:b3:f6:ba:2c:1b:95:c0:65: 4b:fc:4a:f8:9b:2a:a6:0c:9e:51:7b:7f:39:0d:12: b1:8a:b3:e3:b3:45:45:24:94:3f:9a:9c:96:69:68: 89:0c:81:59:d8:08:45:3e:90:1a:97:75:31:ef:18: d1:29:56:30:a4:94:ec:46:b7:ab:a7:66:3b:94:f1: 9a:8e:a1:f2:f7:62:c5:71:64:37:90:0a:c2:e2:c3: 95:fb:f4:5b:a9:25:9d:21:a0:bf:7d:c0:fb:0e:27: 89:9d:36:60:7b:62:09:97:aa:27:5f:93:2c:89:65: b3:d6:48:1b:f1:94:2f:9d:71:26:7d:3e:9b:60:6a: 57:cf:f3:0a:8b:84:a4:9e:a5:49:3e:d5:26:c4:d0: 2f:b2:71:89:f6:07:12:14:ad:69:23:68:9f:b0:ea: e5:75:e5:61:73:b8:b3:b5:10:b0:ce:b7:4e:53:c4: 2a:8e:ff:bd:07:6c:c4:aa:be:8e:38:95:01:25:da: b9:65:b1:83:46:68:fb:5e:a7:aa:5c:f0:b8:09:96: a2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: E0:59:85:5B:A7:80:FF:FA:FA:FE:08:6D:D4:7C:21:71:4A:28:22:17 X509v3 Authority Key Identifier: 82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF Authority Information Access: OCSP - URI:http://ocsp.entrust.net CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer X509v3 CRL Distribution Points: Full Name: URI:http://crl.entrust.net/level1k.crl X509v3 Subject Alternative Name: DNS:eu-messaging.novartis.com, DNS:*.pod51280.outlook.com, DNS:autodiscover.novartis.com, DNS:autodiscover.Novartis.mail.onmicrosoft.com, DNS:autodiscover.novartis.net, DNS:autodiscover.Novartis.onmicrosoft.com, DNS:eurp176-provisioning.internal.outlook.com, DNS:messaging1.novartis.net, DNS:messaging2.novartis.net, DNS:na-messaging.novartis.com, DNS:pod51280.outlook.com, DNS:pod51280ip.outlook.com, DNS:pod51280-pri.outlook.com, DNS:pod51280psh.outlook.com, DNS:webmail1.novartis.net, DNS:webmail2.novartis.net X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Jun 6 09:16:00.302 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:FA:B4:8F:7E:3F:C5:5C:38:B7:BE:A7: 76:61:B3:D0:20:AA:FA:4A:F0:B6:46:38:D7:3C:B3:C8: 94:E8:FF:77:AC:02:21:00:ED:4D:D0:9E:44:10:B4:4C: BE:AE:1F:12:27:92:4D:26:C7:4F:22:F9:9E:C3:BA:D7: 44:B0:2A:EB:17:71:CC:D6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Jun 6 09:16:00.276 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F4:80:B0:75:AE:FB:0A:24:B6:48:18: 96:8F:49:16:A4:09:12:2F:73:3E:A2:BF:5A:FD:80:71: 99:90:8B:2B:6C:02:21:00:E6:A7:08:80:67:07:26:BD: 88:29:8E:F2:4C:95:2B:E1:9B:5D:FF:C2:6A:6F:48:BF: 99:57:16:8D:73:52:9E:19 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jun 6 09:16:00.344 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D5:C9:22:2F:C2:AB:01:AE:A7:F6:2F: 66:E4:D7:CD:34:A6:2B:AE:67:7E:C3:5E:78:56:E7:40: 22:FE:20:71:23:02:20:0E:AE:5C:87:C3:BF:04:92:D0: 6C:A8:09:D6:9D:2B:2A:78:90:3D:DE:22:44:32:CA:8A: 5F:82:59:77:E9:3D:36 Signature Algorithm: sha256WithRSAEncryption Signature Value: 3a:ef:aa:e4:4e:a8:f6:ec:26:df:c5:e2:5c:8c:60:bb:5c:b0: d7:a0:ce:b2:85:32:99:0f:97:1f:72:ec:94:de:d6:2e:62:15: 6b:d1:f9:30:ce:c9:ad:ec:fd:64:3d:4f:df:6d:3b:77:4e:e5: 0b:99:50:5c:91:e4:fd:99:e1:0e:34:da:65:59:7d:d0:91:d8: 9b:ac:09:59:c2:63:7c:29:27:11:b3:a9:bb:d5:81:ae:2c:89: 5c:1a:7a:3d:4a:76:cf:29:bc:84:8e:91:da:a4:e8:31:28:50: 9f:51:3e:10:33:d5:4a:df:bb:2c:73:32:42:61:3f:58:0d:af: 8c:a4:dd:e3:bc:b1:0b:18:55:d9:66:bd:15:62:1a:b2:f3:5f: ed:47:82:65:2a:e3:f8:d5:d5:37:48:bb:0a:2a:0f:b0:f4:87: e6:0b:e3:a1:f7:54:c5:78:6d:f5:8c:4b:11:d7:96:f8:b3:09: c6:35:63:91:8a:db:f0:f8:e5:2f:d6:29:89:8f:2c:f3:aa:03: bb:af:4e:a1:89:bc:9a:f9:e9:bc:3c:b2:32:7d:10:38:6f:c6: 33:c0:d5:c5:40:0d:f2:09:b8:93:e7:6a:db:1c:6e:ca:5a:4a: d0:d8:18:fe:3e:45:15:a1:74:dd:e0:f4:7e:9f:c1:88:3c:d2: dc:55:1a:24