*.vo.msecnd.net

- Microsoft Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:04:da:f5:91:e5:60:87:8f:48:e6:67:ec:eb:f3:e2 was issued on by DigiCert Inc.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: Washington
Locality: Redmond
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:04:da:f5:91:e5:60:87:8f:48:e6:67:ec:eb:f3:e2
Serial Number (int): 19963630145553915747590704771178951650
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 75:cd:4c:a2:78:14:cf:98:a3:8b:8a:c3:38:31:d5:16:a0:98:eb:c3
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 4a:c6:2a:6a:e1:99:5e:6a:be:a4:bc:7a:ef:92:b3:39:a0:40:68:0b
Fingerprint (sha256): 6a:30:eb:27:68:e5:19:ab:6c:44:a9:28:01:91:e1:90:24:e8:6f:de:78:a3:3b:10:e6:b3:9e:de:80:2c:07:3f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate *.vo.msecnd.net

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.vo.msecnd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vo.msecnd.net
*.cmsresources.windowsphone-int.com
*.ads2.msads.net
*.aspnetcdn.com
*.cmsresources.windowsphone.com
*.microsoft-sbs-domains.com
ajax.microsoft.com
*.dev.skype.com
*.azureedge.net
*.wpc.azureedge.net
*.wac.azureedge.net
*.adn.azureedge.net
*.fms.azureedge.net
*.azurecomcdn.net
*.cdn.skype.net
*.cdn.skype.com
*.streaming.media-test.windows-int.net
*.streaming.mediaservices.windows.net
*.secure.skypeassets.com
*.secure.skypeassets.net
*.yammer.com
*.azureedge-test.net
cdnads.msads.net
cdn-resources.windowsphone.com
cdn-resources-beta.windowsphone.com
ecnads1.msn.com
iecvlist.microsoft.com
images-cms-pn.windowsphone-int.com
images-cms-tst.windowsphone-int.com
lumiahelptipscdn.microsoft.com
lumiahelptipscdnqa.microsoft.com
montage.msn.com
mscrl.microsoft.com
r20swj13mr.microsoft.com
lumiahelptipsmscdn.microsoft.com
lumiahelptipsmscdnqa.microsoft.com
*.origin.mediaservices.windows.net
download.sysinternals.com
amp.azure.net
rt.ms-studiosmedia.com
gtm.ms-studiosmedia.com
software-download.microsoft.com
datafactory.azure.com
*.aisvc.visualstudio.com
*.cdn.powerbi.com
downloads.subscriptionsint.tfsallin.net
download.my.visualstudio.com
dist.asp.net
dxtembed.powerbi.com
msitembed.powerbi.com
embed.powerbi.com
*.ec.azureedge.net
*.wpc.ec.azureedge.net
*.wac.ec.azureedge.net
*.adn.ec.azureedge.net
*.fms.ec.azureedge.net
*.cdn.powerappscdn.net
stream.microsoft.com
*.applicationinsights.io
*.applicationinsights.net
cdn.vsassets.io
cdnppe.vsassets.io
*.cortanaanalytics.com
do.skype.com
software-download.office.microsoft.com
*.gallerycdn.vsassets.io
*.gallerycdnppe.vsassets.io
download.learningdownloadcenter.microsoft.com
global.asazure.windows.net
cdn.wallet.microsoft-ppe.com
cdn.wallet.microsoft.com
www.videobreakdown.com
*.gallerycdntest.vsassets.io
software-download.coem.microsoft.com
natick.research.microsoft.com
agavecdn.o365weve-dev.com
agavecdn.o365weve-ppe.com
agavecdn.o365weve.com
download.visualstudio.com
*.Applicationinsights.microsoft.com
*.sfbassets.com
*.sfbassets.net
*.origin.mediaservices.windows-int.net
download.mono-project.com
*.mp.microsoft.com
download.visualstudio.microsoft.com
vi.microsoft.com
*.streaming.media.azure-test.net
*.streaming.media.azure.net
cdn.botframework.com
cdn.cloudappsecurity.com
ec-cert-deploy-prod-default.cdn.azure.net

Other certificates including the domain name msecnd.net

(limited to 100 certificates)
az793892.vo.msecnd.net
sa155gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
images.partner.windowsphone.com
sa31gl.wpc.edgecastcdn.net
az473729.vo.msecnd.net
*.vo.msecnd.net
sa411gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa48gl.wpc.edgecastcdn.net
sa169gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa411gl.wpc.edgecastcdn.net
sa138gl.wpc.edgecastcdn.net
snidf7bgl.wpc.edgecastcdn.net
*.vo.msecnd.net
az415467.vo.msecnd.net
*.vo.msecnd.net
sa268gl.wpc.edgecastcdn.net
sniccf8gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az672105.vo.msecnd.net
sa49gl.wpc.edgecastcdn.net
sa50gl.wpc.edgecastcdn.net
sni1d783gl.wpc.edgecastcdn.net
az646210.vo.msecnd.net
sa49gl.wpc.edgecastcdn.net
sa48gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az724716.vo.msecnd.net
sa31gl.wpc.edgecastcdn.net
az824306.vo.msecnd.net
az657629.vo.msecnd.net
sa138gl.wpc.edgecastcdn.net
az590886.vo.msecnd.net
sa124gl.wpc.edgecastcdn.net
sni5de5gl.wpc.edgecastcdn.net
sa31gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa3gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa73gl.wpc.edgecastcdn.net
sa6gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az831790.vo.msecnd.net
sa50gl.wpc.edgecastcdn.net
az724456.vo.msecnd.net
sa411gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa48gl.wpc.edgecastcdn.net
sa48gl.wpc.edgecastcdn.net
az717412.vo.msecnd.net
sni17f0dgl.wpc.edgecastcdn.net
sa411gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
sa5gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sni.msft.default.adn.edgecastcdn.net
*.vo.msecnd.net
sa50gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
az857794.vo.msecnd.net
sa2gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
az287601.vo.msecnd.net
az683605.vo.msecnd.net
sa5gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
az834239.vo.msecnd.net
sa31gl.wpc.edgecastcdn.net
sni.msft.default.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa411gl.wpc.edgecastcdn.net
snid1e1gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
sa50gl.wpc.edgecastcdn.net
sa138gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az412949.vo.msecnd.net
sa21gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa21gl.wpc.edgecastcdn.net
az809517.vo.msecnd.net
sa31gl.wpc.edgecastcdn.net
az696016.vo.msecnd.net
az721862.vo.msecnd.net
sa21gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa73gl.wpc.edgecastcdn.net
sa138gl.wpc.edgecastcdn.net

Certificate

The complete raw certificate details for *.vo.msecnd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu109ALPU2Kkgis1Deb3w
LLEcQ+uzqwJHhZwH8LQgsas86iYxSAEtc88icrXY5nZr3J/54QraLqcVpFqDXX88
AP9lkIuKgnptHkZr2NSGxfWsQQaJUtjYDlABYnemTEHImmbHZ89SGy/AevlZMF69
nkE/CSBsApSOpoEDCmasTu7a2JYEDzDaJgKzeyqw3f3i2Smx0+YYPHJy7z1/4grq
GugkhMijf3X+KGF0dUumEzFzPWvR2jOIXuN8IdRhY7RaPmALR9c6Fnpk5Jp908mC
ev/kkjwiXaR3pViVwi4DHscunAihCyeGwskuklHuZSfkpY8agA9erij+t7qcdgHv
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19963630145553915747590704771178951650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vo.msecnd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23652540544028237149371302119489393318741220124075083189901295645696717408646034969601481632880969523604267171951291174160557509365287860926629738393978937913959420587632495502589734908927075015859670041481614706435721209687114538295594724226540356079118049842148560302913702191203514496383193501826831967398883867165948689097558173531429257001695856503877515535327624956992282869364673661450024050473493882078396146670832079465848124661088412284022681450590355860946016654794563903766871875657564748355645534537043801330435020644573390715347999771781741247578365594687789936245954110003687761994658155341806794043353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							75cd4ca27814cf98a38b8ac33831d516a098ebc3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2401 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vo.msecnd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmsresources.windowsphone-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ads2.msads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspnetcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmsresources.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microsoft-sbs-domains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajax.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wpc.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wac.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adn.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fms.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azurecomcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.skype.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.media-test.windows-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.mediaservices.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.skypeassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.skypeassets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azureedge-test.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnads.msads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-resources.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-resources-beta.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecnads1.msn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iecvlist.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cms-pn.windowsphone-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cms-tst.windowsphone-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipscdn.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipscdnqa.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montage.msn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mscrl.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r20swj13mr.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipsmscdn.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipsmscdnqa.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.mediaservices.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.sysinternals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt.ms-studiosmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtm.ms-studiosmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-download.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datafactory.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aisvc.visualstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloads.subscriptionsint.tfsallin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.my.visualstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dist.asp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxtembed.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msitembed.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wpc.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wac.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adn.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fms.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.powerappscdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applicationinsights.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applicationinsights.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnppe.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cortanaanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'do.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-download.office.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallerycdn.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallerycdnppe.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.learningdownloadcenter.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.asazure.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wallet.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wallet.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.videobreakdown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallerycdntest.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-download.coem.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natick.research.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agavecdn.o365weve-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agavecdn.o365weve-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agavecdn.o365weve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.visualstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.Applicationinsights.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfbassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfbassets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.mediaservices.windows-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.mono-project.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.visualstudio.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vi.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.media.azure-test.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.media.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.botframework.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cloudappsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ec-cert-deploy-prod-default.cdn.azure.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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