*.vo.msecnd.net

- Microsoft Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 02:ee:4f:91:58:bb:cd:cb:ca:3f:26:0f:72:9d:98:04 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: Washington
Locality: Redmond
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:ee:4f:91:58:bb:cd:cb:ca:3f:26:0f:72:9d:98:04
Serial Number (int): 3895836469805095608628060854381549572
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: a3:16:39:32:c9:9b:d4:4d:1f:8a:a9:c5:dd:e1:18:3b:47:ad:9b:7e
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 5b:fd:90:a1:47:00:ff:3d:e6:5f:5f:25:50:dc:5f:77:02:4e:5a:f9
Fingerprint (sha256): 3a:f2:aa:94:c0:46:da:9d:9f:82:0b:c7:c5:50:b7:90:3c:11:df:77:49:72:bd:f9:de:20:93:b5:c5:b6:7c:cb

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertSHA2SecureServerCA.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertSHA2SecureServerCA.crl

Check the revocation status for certificate *.vo.msecnd.net

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.vo.msecnd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vo.msecnd.net
*.cmsresources.windowsphone-int.com
*.ads2.msads.net
*.aspnetcdn.com
*.cmsresources.windowsphone.com
*.microsoft-sbs-domains.com
ajax.microsoft.com
*.dev.skype.com
*.azureedge.net
*.wpc.azureedge.net
*.wac.azureedge.net
*.adn.azureedge.net
*.fms.azureedge.net
*.azurecomcdn.net
*.cdn.skype.net
*.cdn.skype.com
*.streaming.media-test.windows-int.net
*.streaming.mediaservices.windows.net
*.secure.skypeassets.com
*.secure.skypeassets.net
*.yammer.com
*.azureedge-test.net
cdnads.msads.net
cdn-resources.windowsphone.com
cdn-resources-beta.windowsphone.com
ecnads1.msn.com
iecvlist.microsoft.com
images-cms-pn.windowsphone-int.com
images-cms-tst.windowsphone-int.com
lumiahelptipscdn.microsoft.com
lumiahelptipscdnqa.microsoft.com
montage.msn.com
mscrl.microsoft.com
r20swj13mr.microsoft.com
lumiahelptipsmscdn.microsoft.com
lumiahelptipsmscdnqa.microsoft.com
*.origin.mediaservices.windows.net
download.sysinternals.com
amp.azure.net
rt.ms-studiosmedia.com
gtm.ms-studiosmedia.com
prss.centralvalidation.com
software-download.microsoft.com
datafactory.azure.com
*.aisvc.visualstudio.com
*.cdn.powerbi.com
downloads.subscriptionsint.tfsallin.net
download.my.visualstudio.com
dist.asp.net
dxtembed.powerbi.com
msitembed.powerbi.com
embed.powerbi.com
*.ec.azureedge.net
*.wpc.ec.azureedge.net
*.wac.ec.azureedge.net
*.adn.ec.azureedge.net
*.fms.ec.azureedge.net
*.cdn.powerappscdn.net
stream.microsoft.com
*.applicationinsights.io
*.applicationinsights.net
cdn.vsassets.io
cdnppe.vsassets.io
*.cortanaanalytics.com
do.skype.com
software-download.office.microsoft.com
*.gallerycdn.vsassets.io
*.gallerycdnppe.vsassets.io
download.learningdownloadcenter.microsoft.com
global.asazure.windows.net
cdn.wallet.microsoft-ppe.com
cdn.wallet.microsoft.com
www.videobreakdown.com
www.breakdown.me
*.gallerycdntest.vsassets.io
software-download.coem.microsoft.com
natick.research.microsoft.com
agavecdn.o365weve-dev.com
agavecdn.o365weve-ppe.com
agavecdn.o365weve.com
download.visualstudio.com
*.Applicationinsights.microsoft.com
*.sfbassets.com
*.sfbassets.net
*.origin.mediaservices.windows-int.net
download.mono-project.com
*.mp.microsoft.com
download.visualstudio.microsoft.com
vi.microsoft.com
*.streaming.media.azure-test.net
*.streaming.media.azure.net
cdn.botframework.com
cdn.cloudappsecurity.com
*.videoindexer.ai
*.api.videoindexer.ai

Other certificates including the domain name msecnd.net

(limited to 100 certificates)
az793892.vo.msecnd.net
sa155gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
images.partner.windowsphone.com
sa31gl.wpc.edgecastcdn.net
az473729.vo.msecnd.net
*.vo.msecnd.net
sa411gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa48gl.wpc.edgecastcdn.net
sa169gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa411gl.wpc.edgecastcdn.net
sa138gl.wpc.edgecastcdn.net
snidf7bgl.wpc.edgecastcdn.net
*.vo.msecnd.net
az415467.vo.msecnd.net
*.vo.msecnd.net
sa268gl.wpc.edgecastcdn.net
sniccf8gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az672105.vo.msecnd.net
sa49gl.wpc.edgecastcdn.net
sa50gl.wpc.edgecastcdn.net
sni1d783gl.wpc.edgecastcdn.net
az646210.vo.msecnd.net
sa49gl.wpc.edgecastcdn.net
sa48gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az724716.vo.msecnd.net
sa31gl.wpc.edgecastcdn.net
az824306.vo.msecnd.net
az657629.vo.msecnd.net
sa138gl.wpc.edgecastcdn.net
az590886.vo.msecnd.net
sa124gl.wpc.edgecastcdn.net
sni5de5gl.wpc.edgecastcdn.net
sa31gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa3gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa73gl.wpc.edgecastcdn.net
sa6gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az831790.vo.msecnd.net
sa50gl.wpc.edgecastcdn.net
az724456.vo.msecnd.net
sa411gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa48gl.wpc.edgecastcdn.net
sa48gl.wpc.edgecastcdn.net
az717412.vo.msecnd.net
sni17f0dgl.wpc.edgecastcdn.net
sa411gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
sa5gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sni.msft.default.adn.edgecastcdn.net
*.vo.msecnd.net
sa50gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
az857794.vo.msecnd.net
sa2gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
az287601.vo.msecnd.net
az683605.vo.msecnd.net
sa5gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
az834239.vo.msecnd.net
sa31gl.wpc.edgecastcdn.net
sni.msft.default.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa411gl.wpc.edgecastcdn.net
snid1e1gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
sa50gl.wpc.edgecastcdn.net
sa138gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az412949.vo.msecnd.net
sa21gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa21gl.wpc.edgecastcdn.net
az809517.vo.msecnd.net
sa31gl.wpc.edgecastcdn.net
az696016.vo.msecnd.net
az721862.vo.msecnd.net
sa21gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa73gl.wpc.edgecastcdn.net
sa138gl.wpc.edgecastcdn.net

Certificate

The complete raw certificate details for *.vo.msecnd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOwzCCDaugAwIBAgIQAu5PkVi7zcvKPyYPcp2YBDANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjEwMjExMDAwMDAwWhcN
MjIwMjEwMjM1OTU5WjBuMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv
bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0
aW9uMRgwFgYDVQQDDA8qLnZvLm1zZWNuZC5uZXQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDF+9OSxCXI7IU0XP/jyEKZwl6AZHJLjqtTASZPEhuIqAsV
a3OOz+GBvIY+XszgwgCSc3G49lsHQ3NU/l3eMLEVpNbU4Ah1XfeVf6j6G/4p/KyP
zA7DT0uu0RoVdHPZ/VWTyTHeQxjtOhXkoeNu9lnV/xxETTTP4M5Qx+aaBHYUgt/X
LwVj0WBnKeARSjWvv3N92r4I7Vpm+xE8SuJgdvCCvFG/wGrhIWpYFJxMV1kmYdp+
ng/lV7MDpRzjGAXgeGscTAeiH7gA6dodkqjeQHFhRHW1fOmXiIJB7UNhGEI4JOe/
3dO3Uv/HsoRWa6nfDhZjXH8N8KHuP3hE6A4tPYOBAgMBAAGjggt8MIILeDAfBgNV
HSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUoxY5Msmb1E0f
iqnF3eEYO0etm34wggmXBgNVHREEggmOMIIJioIPKi52by5tc2VjbmQubmV0giMq
LmNtc3Jlc291cmNlcy53aW5kb3dzcGhvbmUtaW50LmNvbYIQKi5hZHMyLm1zYWRz
Lm5ldIIPKi5hc3BuZXRjZG4uY29tgh8qLmNtc3Jlc291cmNlcy53aW5kb3dzcGhv
bmUuY29tghsqLm1pY3Jvc29mdC1zYnMtZG9tYWlucy5jb22CEmFqYXgubWljcm9z
b2Z0LmNvbYIPKi5kZXYuc2t5cGUuY29tgg8qLmF6dXJlZWRnZS5uZXSCEyoud3Bj
LmF6dXJlZWRnZS5uZXSCEyoud2FjLmF6dXJlZWRnZS5uZXSCEyouYWRuLmF6dXJl
ZWRnZS5uZXSCEyouZm1zLmF6dXJlZWRnZS5uZXSCESouYXp1cmVjb21jZG4ubmV0
gg8qLmNkbi5za3lwZS5uZXSCDyouY2RuLnNreXBlLmNvbYImKi5zdHJlYW1pbmcu
bWVkaWEtdGVzdC53aW5kb3dzLWludC5uZXSCJSouc3RyZWFtaW5nLm1lZGlhc2Vy
dmljZXMud2luZG93cy5uZXSCGCouc2VjdXJlLnNreXBlYXNzZXRzLmNvbYIYKi5z
ZWN1cmUuc2t5cGVhc3NldHMubmV0ggwqLnlhbW1lci5jb22CFCouYXp1cmVlZGdl
LXRlc3QubmV0ghBjZG5hZHMubXNhZHMubmV0gh5jZG4tcmVzb3VyY2VzLndpbmRv
d3NwaG9uZS5jb22CI2Nkbi1yZXNvdXJjZXMtYmV0YS53aW5kb3dzcGhvbmUuY29t
gg9lY25hZHMxLm1zbi5jb22CFmllY3ZsaXN0Lm1pY3Jvc29mdC5jb22CImltYWdl
cy1jbXMtcG4ud2luZG93c3Bob25lLWludC5jb22CI2ltYWdlcy1jbXMtdHN0Lndp
bmRvd3NwaG9uZS1pbnQuY29tgh5sdW1pYWhlbHB0aXBzY2RuLm1pY3Jvc29mdC5j
b22CIGx1bWlhaGVscHRpcHNjZG5xYS5taWNyb3NvZnQuY29tgg9tb250YWdlLm1z
bi5jb22CE21zY3JsLm1pY3Jvc29mdC5jb22CGHIyMHN3ajEzbXIubWljcm9zb2Z0
LmNvbYIgbHVtaWFoZWxwdGlwc21zY2RuLm1pY3Jvc29mdC5jb22CImx1bWlhaGVs
cHRpcHNtc2NkbnFhLm1pY3Jvc29mdC5jb22CIioub3JpZ2luLm1lZGlhc2Vydmlj
ZXMud2luZG93cy5uZXSCGWRvd25sb2FkLnN5c2ludGVybmFscy5jb22CDWFtcC5h
enVyZS5uZXSCFnJ0Lm1zLXN0dWRpb3NtZWRpYS5jb22CF2d0bS5tcy1zdHVkaW9z
bWVkaWEuY29tghpwcnNzLmNlbnRyYWx2YWxpZGF0aW9uLmNvbYIfc29mdHdhcmUt
ZG93bmxvYWQubWljcm9zb2Z0LmNvbYIVZGF0YWZhY3RvcnkuYXp1cmUuY29tghgq
LmFpc3ZjLnZpc3VhbHN0dWRpby5jb22CESouY2RuLnBvd2VyYmkuY29tgidkb3du
bG9hZHMuc3Vic2NyaXB0aW9uc2ludC50ZnNhbGxpbi5uZXSCHGRvd25sb2FkLm15
LnZpc3VhbHN0dWRpby5jb22CDGRpc3QuYXNwLm5ldIIUZHh0ZW1iZWQucG93ZXJi
aS5jb22CFW1zaXRlbWJlZC5wb3dlcmJpLmNvbYIRZW1iZWQucG93ZXJiaS5jb22C
EiouZWMuYXp1cmVlZGdlLm5ldIIWKi53cGMuZWMuYXp1cmVlZGdlLm5ldIIWKi53
YWMuZWMuYXp1cmVlZGdlLm5ldIIWKi5hZG4uZWMuYXp1cmVlZGdlLm5ldIIWKi5m
bXMuZWMuYXp1cmVlZGdlLm5ldIIWKi5jZG4ucG93ZXJhcHBzY2RuLm5ldIIUc3Ry
ZWFtLm1pY3Jvc29mdC5jb22CGCouYXBwbGljYXRpb25pbnNpZ2h0cy5pb4IZKi5h
cHBsaWNhdGlvbmluc2lnaHRzLm5ldIIPY2RuLnZzYXNzZXRzLmlvghJjZG5wcGUu
dnNhc3NldHMuaW+CFiouY29ydGFuYWFuYWx5dGljcy5jb22CDGRvLnNreXBlLmNv
bYImc29mdHdhcmUtZG93bmxvYWQub2ZmaWNlLm1pY3Jvc29mdC5jb22CGCouZ2Fs
bGVyeWNkbi52c2Fzc2V0cy5pb4IbKi5nYWxsZXJ5Y2RucHBlLnZzYXNzZXRzLmlv
gi1kb3dubG9hZC5sZWFybmluZ2Rvd25sb2FkY2VudGVyLm1pY3Jvc29mdC5jb22C
Gmdsb2JhbC5hc2F6dXJlLndpbmRvd3MubmV0ghxjZG4ud2FsbGV0Lm1pY3Jvc29m
dC1wcGUuY29tghhjZG4ud2FsbGV0Lm1pY3Jvc29mdC5jb22CFnd3dy52aWRlb2Jy
ZWFrZG93bi5jb22CEHd3dy5icmVha2Rvd24ubWWCHCouZ2FsbGVyeWNkbnRlc3Qu
dnNhc3NldHMuaW+CJHNvZnR3YXJlLWRvd25sb2FkLmNvZW0ubWljcm9zb2Z0LmNv
bYIdbmF0aWNrLnJlc2VhcmNoLm1pY3Jvc29mdC5jb22CGWFnYXZlY2RuLm8zNjV3
ZXZlLWRldi5jb22CGWFnYXZlY2RuLm8zNjV3ZXZlLXBwZS5jb22CFWFnYXZlY2Ru
Lm8zNjV3ZXZlLmNvbYIZZG93bmxvYWQudmlzdWFsc3R1ZGlvLmNvbYIjKi5BcHBs
aWNhdGlvbmluc2lnaHRzLm1pY3Jvc29mdC5jb22CDyouc2ZiYXNzZXRzLmNvbYIP
Ki5zZmJhc3NldHMubmV0giYqLm9yaWdpbi5tZWRpYXNlcnZpY2VzLndpbmRvd3Mt
aW50Lm5ldIIZZG93bmxvYWQubW9uby1wcm9qZWN0LmNvbYISKi5tcC5taWNyb3Nv
ZnQuY29tgiNkb3dubG9hZC52aXN1YWxzdHVkaW8ubWljcm9zb2Z0LmNvbYIQdmku
bWljcm9zb2Z0LmNvbYIgKi5zdHJlYW1pbmcubWVkaWEuYXp1cmUtdGVzdC5uZXSC
Gyouc3RyZWFtaW5nLm1lZGlhLmF6dXJlLm5ldIIUY2RuLmJvdGZyYW1ld29yay5j
b22CGGNkbi5jbG91ZGFwcHNlY3VyaXR5LmNvbYIRKi52aWRlb2luZGV4ZXIuYWmC
FSouYXBpLnZpZGVvaW5kZXhlci5haTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGIBgNVHR8EgYAwfjA9oDugOYY3aHR0cDov
L2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNy
bDA9oDugOYY3aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMlNl
Y3VyZVNlcnZlckNBLmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUF
BwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwfgYIKwYBBQUHAQEEcjBw
MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSAYIKwYBBQUH
MAKGPGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1
cmVTZXJ2ZXJDQS0yLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8E
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDWCkxzX7wT5sZnkbt4cgaPm66kJ1nM3l8D
LO1HZNzg0LCxjNR+8twRlYUAjlX30AIMwvLzafmgKY1oxnYt953e0uRaMdHE2Ync
4wogbxIgJQdEWAgUhKQ2J7qpgp/drLr+7E6uS7iDfpPVUY56ENdDfjDbwsw5z37l
6p3y/IOD29b9TlUx/q5waU8s4Yd/Koz4uSNWnHFhM1QUa9SA/IYc0HHlg14vCKNC
hzYUKLLQrS3Q7V1SNitzECJyDPZJJbe+f1Plcpt0lxicC6z43na+pE5HbWEEV+hk
IDf/m4+UgehftelUvXy0prp1Vy5FD56IL1AwJjc7upqgh7odlIhs
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfvTksQlyOyFNFz/48hC
mcJegGRyS46rUwEmTxIbiKgLFWtzjs/hgbyGPl7M4MIAknNxuPZbB0NzVP5d3jCx
FaTW1OAIdV33lX+o+hv+Kfysj8wOw09LrtEaFXRz2f1Vk8kx3kMY7ToV5KHjbvZZ
1f8cRE00z+DOUMfmmgR2FILf1y8FY9FgZyngEUo1r79zfdq+CO1aZvsRPEriYHbw
grxRv8Bq4SFqWBScTFdZJmHafp4P5VezA6Uc4xgF4HhrHEwHoh+4AOnaHZKo3kBx
YUR1tXzpl4iCQe1DYRhCOCTnv93Tt1L/x7KEVmup3w4WY1x/DfCh7j94ROgOLT2D
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3895836469805095608628060854381549572
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vo.msecnd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24993126333125533891069342111362652463975863989814959629985862578215960079607019914501493866589260566833127247981989290378534028011464407159220792565914462067946100323345563197406676235538775588099151390887314179163002124896917692790789472952729164030592865593542968709827138145520658294186386946921578878190460228543260998954913208802292541765461847242024632115588050010154257180603283677830031508335836145252345057069195391493350469223977659654686253774717217374698627437180217655715399298585117737590190763882947073732313158186395021267830760040206018116566415964682049565160421875317194043078080895376294370182017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3163932c99bd44d1f8aa9c5dde1183b47ad9b7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2446 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vo.msecnd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmsresources.windowsphone-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ads2.msads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspnetcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmsresources.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microsoft-sbs-domains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajax.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wpc.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wac.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adn.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fms.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azurecomcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.skype.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.media-test.windows-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.mediaservices.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.skypeassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.skypeassets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azureedge-test.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnads.msads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-resources.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-resources-beta.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecnads1.msn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iecvlist.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cms-pn.windowsphone-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cms-tst.windowsphone-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipscdn.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipscdnqa.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montage.msn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mscrl.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r20swj13mr.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipsmscdn.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipsmscdnqa.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.mediaservices.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.sysinternals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt.ms-studiosmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtm.ms-studiosmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prss.centralvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-download.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datafactory.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aisvc.visualstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloads.subscriptionsint.tfsallin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.my.visualstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dist.asp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxtembed.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msitembed.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wpc.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wac.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adn.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fms.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.powerappscdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applicationinsights.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applicationinsights.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnppe.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cortanaanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'do.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-download.office.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallerycdn.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallerycdnppe.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.learningdownloadcenter.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.asazure.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wallet.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wallet.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.videobreakdown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breakdown.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallerycdntest.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-download.coem.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natick.research.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agavecdn.o365weve-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agavecdn.o365weve-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agavecdn.o365weve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.visualstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.Applicationinsights.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfbassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfbassets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.mediaservices.windows-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.mono-project.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.visualstudio.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vi.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.media.azure-test.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.media.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.botframework.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cloudappsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videoindexer.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.videoindexer.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertSHA2SecureServerCA.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertSHA2SecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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