*.vo.msecnd.net

Issued by Microsoft IT SSL SHA2

About this certificate

This digital certificate with serial number 5a:00:03:34:7f:08:e5:0f:be:a6:93:99:ae:00:01:00:03:34:7f was issued on by Microsoft Corporation.

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=*.vo.msecnd.net

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:00:03:34:7f:08:e5:0f:be:a6:93:99:ae:00:01:00:03:34:7f
Serial Number (int): 2007068158494314734801956203008494807327913087
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 5e:37:72:4d:01:7e:fb:79:5b:e3:8c:ca:a1:8c:74:e0:19:ad:85:09
AuthorityKeyId: 51:af:24:26:9c:f4:68:22:57:80:26:2b:3b:46:62:15:7b:1e:cc:a5

Fingerprint (sha1): a5:f1:33:20:65:c6:7a:49:9e:c5:28:1c:f8:ab:a2:51:6f:bf:4c:f3
Fingerprint (sha256): 60:0d:50:b1:15:46:29:55:71:10:5d:52:e8:37:7b:25:30:4f:e1:b8:1a:2d:69:67:70:d1:39:25:83:71:f8:bb

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/msitwww2.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/msitwww2.crl

Check the revocation status for certificate *.vo.msecnd.net

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.vo.msecnd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vo.msecnd.net
*.adn.azureedge.net
*.ads2.msads.net
*.aspnetcdn.com
*.azurecomcdn.net
*.azureedge.net
*.azureedge-test.net
*.cdn.skype.com
*.cdn.skype.net
*.cmsresources.windowsphone.com
*.cmsresources.windowsphone-int.com
*.dev.skype.com
*.fms.azureedge.net
*.microsoft-sbs-domains.com
*.secure.skypeassets.com
*.secure.skypeassets.net
*.wac.azureedge.net
*.wpc.azureedge.net
*.ec.azureedge.net
*.wpc.ec.azureedge.net
*.wac.ec.azureedge.net
*.adn.ec.azureedge.net
*.fms.ec.azureedge.net
ajax.microsoft.com
cdnads.msads.net
cdn-resources.windowsphone.com
cdn-resources-beta.windowsphone.com
ecnads1.msn.com
iecvlist.microsoft.com
images-cms-pn.windowsphone-int.com
images-cms-tst.windowsphone-int.com
lumiahelptipscdn.microsoft.com
lumiahelptipscdnqa.microsoft.com
lumiahelptipsmscdn.microsoft.com
lumiahelptipsmscdnqa.microsoft.com
montage.msn.com
mscrl.microsoft.com
r20swj13mr.microsoft.com
*.streaming.mediaservices.windows.net
*.origin.mediaservices.windows.net
download.sysinternals.com
amp.azure.net
api.nuget.org
rt.ms-studiosmedia.com
gtm.ms-studiosmedia.com
dist.nuget.org
*.aisvc.visualstudio.com
*.cdn.powerbi.com
dist.asp.net
embed.powerbi.com
msitembed.powerbi.com
dxtembed.powerbi.com
*.cdn.powerappscdn.net
downloads.subscriptionsint.tfsallin.net
download.my.visualstudio.com
cdn.vsassets.io
cdnppe.vsassets.io
stream.microsoft.com
datafactory.azure.com
*.cortanaanalytics.com
do.skype.com

Other certificates including the domain name msecnd.net

(limited to 100 certificates)
az793892.vo.msecnd.net
sa155gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
images.partner.windowsphone.com
sa31gl.wpc.edgecastcdn.net
az473729.vo.msecnd.net
*.vo.msecnd.net
sa411gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa48gl.wpc.edgecastcdn.net
sa169gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa411gl.wpc.edgecastcdn.net
sa138gl.wpc.edgecastcdn.net
snidf7bgl.wpc.edgecastcdn.net
*.vo.msecnd.net
az415467.vo.msecnd.net
*.vo.msecnd.net
sa268gl.wpc.edgecastcdn.net
sniccf8gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az672105.vo.msecnd.net
sa49gl.wpc.edgecastcdn.net
sa50gl.wpc.edgecastcdn.net
sni1d783gl.wpc.edgecastcdn.net
az646210.vo.msecnd.net
sa49gl.wpc.edgecastcdn.net
sa48gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az724716.vo.msecnd.net
sa31gl.wpc.edgecastcdn.net
az824306.vo.msecnd.net
az657629.vo.msecnd.net
sa138gl.wpc.edgecastcdn.net
az590886.vo.msecnd.net
sa124gl.wpc.edgecastcdn.net
sni5de5gl.wpc.edgecastcdn.net
sa31gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa3gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa73gl.wpc.edgecastcdn.net
sa6gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az831790.vo.msecnd.net
sa50gl.wpc.edgecastcdn.net
az724456.vo.msecnd.net
sa411gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa48gl.wpc.edgecastcdn.net
sa48gl.wpc.edgecastcdn.net
az717412.vo.msecnd.net
sni17f0dgl.wpc.edgecastcdn.net
sa411gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
sa5gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sni.msft.default.adn.edgecastcdn.net
*.vo.msecnd.net
sa50gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
az857794.vo.msecnd.net
sa2gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
az287601.vo.msecnd.net
az683605.vo.msecnd.net
sa5gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
az834239.vo.msecnd.net
sa31gl.wpc.edgecastcdn.net
sni.msft.default.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa411gl.wpc.edgecastcdn.net
snid1e1gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
sa50gl.wpc.edgecastcdn.net
sa138gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az412949.vo.msecnd.net
sa21gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa21gl.wpc.edgecastcdn.net
az809517.vo.msecnd.net
sa31gl.wpc.edgecastcdn.net
az696016.vo.msecnd.net
az721862.vo.msecnd.net
sa21gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa73gl.wpc.edgecastcdn.net
sa138gl.wpc.edgecastcdn.net

Certificate

The complete raw certificate details for *.vo.msecnd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXQWzpQ17/yQyHQa8Thu
GivQbpLILN25sm/iTGSHaeLQuAdTnYUKitWMfsxgS9efbgQCl9dfvPFRFzc/rlKn
mPXWcwSIF8RF4HmKBtt5SoKw5FegWJxRfcVQDKkUeQBII/AQLNd1SCJwLhKAD9+j
nwbMn0UkWyKEk1IMzgV6NB06BDfu7+YytcyC3wkkQE2Br4MmQMjtFT43aEZIr2z9
pG0aI7ciFHLaEHOxAJpYiIFKNK1c6fDXZaCTHsRsOoMUKEH54hP7Zn9igMKK0GSl
u45Y2O2ibPmuUqPpWG8OSmhtf44R4mHz3cNRLF2xjzucyhUKee7Pn9Q8zDUI6DXG
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2007068158494314734801956203008494807327913087
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT SSL SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-20 23:37:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-20 23:37:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vo.msecnd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23916285302263931943253465318988332216880063113925658308373862008127091907362526632555756488879441367414998223690424505036557526168396822808002061177552574204800322650518779236245590792598891180741439027688112768655495861525327796529882450822136070701668967767244800241610578140277039866948172262965336343194471580214471182200931026895631303376423319016815079496504398620815201297490932688156730139642957207676770242786819226053807209286994156382649985697501754164773347460556124304258222274879384380263426566415883374220571431000112547016569649897368094879732238573563939790949259715730361324841048907793177154799231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1472 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vo.msecnd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adn.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ads2.msads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspnetcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azurecomcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azureedge-test.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.skype.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmsresources.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmsresources.windowsphone-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fms.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microsoft-sbs-domains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.skypeassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.skypeassets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wac.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wpc.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wpc.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wac.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adn.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fms.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajax.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnads.msads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-resources.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-resources-beta.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecnads1.msn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iecvlist.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cms-pn.windowsphone-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cms-tst.windowsphone-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipscdn.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipscdnqa.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipsmscdn.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipsmscdnqa.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montage.msn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mscrl.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r20swj13mr.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.mediaservices.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.mediaservices.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.sysinternals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nuget.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt.ms-studiosmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtm.ms-studiosmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dist.nuget.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aisvc.visualstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dist.asp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msitembed.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxtembed.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.powerappscdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloads.subscriptionsint.tfsallin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.my.visualstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnppe.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datafactory.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cortanaanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'do.skype.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5e37724d017efb795be38ccaa18c74e019ad8509
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 51af24269cf468225780262b3b4662157b1ecca5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/msitwww2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/msitwww2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps�'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00aaebf30225df442f39557f7c10988384aea317c9fc769d77048abefbc6c7ee39fdbf94dbde0c80b4478d81c36a6cd73b05c7db15c6f7aacfbd6c7babbcf02402bd9af70f1917a0d8d8b495e4a6ed504d004f445aa49e6ebcb76c02b58a108b0575e0957954e0c3d8f2b3c5e799e865b744e1821c102bc1924297ad17437d1197b06c4bdd74116692bc3e207a6a2c423230fa8e75d8771549e8f18c50aaeb4d37e5245b5d82bf25a7dd05ac2459caa87ead0b472bc953e22d79dc3526243e2ad0b264ae4eba02a08afdee7ba9209d48bf76c6e527511a9d03f5ec535e723a5d178e04deedbe2f11e9b13cc5fef3daf6638ab3006eaed4fb2e175bd2b1725c511815b183dfd58971276c9bb6758c2b51ae0ac72b8150785f8156d6480976ea65e3d2bbdcfab1a991aba4373889a45533e489ee88e719a11aee3a3aadca41442cc40c4df3714af106be029508e567149f7b98d5fffb1571c060a331d1bc451fd2f23431cf004c4c1efecc36b59b2fc34df4b47a3de5e0579e989c8185198ca0c12c723ba089330806b61e0c94429bae0ed38ccd99380ce25d606671d4a3ad5d1b69be25097c1ff248c9cb6382d3abc168cf25c37f30daefa28844b87a8b433c406faa1b00018c9cc99ed8c9679ff2de282619e449d21af3ccff2d473623355e12656929dcd1af4a706effa200088f9126ac1d7baec658934923788180ec0fc57166