*.vo.msecnd.net

Issued by Microsoft IT SSL SHA2

About this certificate

This digital certificate with serial number 5a:00:07:4a:f4:44:05:8d:79:c0:69:c6:93:00:00:00:07:4a:f4 was issued on by Microsoft Corporation.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=*.vo.msecnd.net

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:00:07:4a:f4:44:05:8d:79:c0:69:c6:93:00:00:00:07:4a:f4
Serial Number (int): 2007069549475496294652167363878928476602321652
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 80:f9:55:eb:c1:09:2e:ac:f1:42:79:ab:67:52:ee:b9:cc:37:1f:31
AuthorityKeyId: 51:af:24:26:9c:f4:68:22:57:80:26:2b:3b:46:62:15:7b:1e:cc:a5

Fingerprint (sha1): 02:fe:75:46:cd:cc:f6:22:1f:eb:36:89:8a:03:8e:cd:5d:d7:5e:2d
Fingerprint (sha256): a6:f0:81:ca:5f:a2:5b:21:6f:11:2e:72:b3:32:8d:99:d4:a5:ec:03:b8:10:dc:ea:bf:3a:37:f4:fb:b5:83:1c

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/msitwww2.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/msitwww2.crl

Check the revocation status for certificate *.vo.msecnd.net

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.vo.msecnd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vo.msecnd.net
*.adn.azureedge.net
*.ads2.msads.net
*.aspnetcdn.com
*.azurecomcdn.net
*.azureedge.net
*.azureedge-test.net
*.cdn.skype.com
*.cdn.skype.net
*.cmsresources.windowsphone.com
*.cmsresources.windowsphone-int.com
*.dev.skype.com
*.fms.azureedge.net
*.microsoft-sbs-domains.com
*.secure.skypeassets.com
*.secure.skypeassets.net
*.wac.azureedge.net
*.wpc.azureedge.net
*.ec.azureedge.net
*.wpc.ec.azureedge.net
*.wac.ec.azureedge.net
*.adn.ec.azureedge.net
*.fms.ec.azureedge.net
ajax.microsoft.com
cdnads.msads.net
cdn-resources.windowsphone.com
cdn-resources-beta.windowsphone.com
ecnads1.msn.com
iecvlist.microsoft.com
images-cms-pn.windowsphone-int.com
images-cms-tst.windowsphone-int.com
lumiahelptipscdn.microsoft.com
lumiahelptipscdnqa.microsoft.com
lumiahelptipsmscdn.microsoft.com
lumiahelptipsmscdnqa.microsoft.com
montage.msn.com
mscrl.microsoft.com
r20swj13mr.microsoft.com
*.streaming.mediaservices.windows.net
*.origin.mediaservices.windows.net
download.sysinternals.com
amp.azure.net
api.nuget.org
rt.ms-studiosmedia.com
gtm.ms-studiosmedia.com
dist.nuget.org
*.aisvc.visualstudio.com
*.cdn.powerbi.com
dist.asp.net
embed.powerbi.com
msitembed.powerbi.com
dxtembed.powerbi.com
*.cdn.powerappscdn.net
downloads.subscriptionsint.tfsallin.net
download.my.visualstudio.com
cdn.vsassets.io
cdnppe.vsassets.io
stream.microsoft.com
datafactory.azure.com
*.cortanaanalytics.com
do.skype.com
software-download.office.microsoft.com
software-download.microsoft.com
prss.centralvalidation.com
*.gallerycdn.vsassets.io
*.gallerycdnppe.vsassets.io
global.asazure.windows.net
download.learningdownloadcenter.microsoft.com
www.videobreakdown.com
www.breakdown.me
*.gallerycdntest.vsassets.io
download2.microsoft.com
cp.dsp.microsoft.com
agavecdn.o365weve-dev.com
agavecdn.o365weve-ppe.com
agavecdn.o365weve.com
download.visualstudio.com
*.Applicationinsights.net
*.Applicationinsights.io
*.Applicationinsights.microsoft.com
*.sfbassets.com
*.sfbassets.net
download.mono-project.com
*.streaming.media-test.windows-int.net
*.origin.mediaservices.windows-int.net
*.mp.microsoft.com

Other certificates including the domain name msecnd.net

(limited to 100 certificates)
az793892.vo.msecnd.net
sa155gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
images.partner.windowsphone.com
sa31gl.wpc.edgecastcdn.net
az473729.vo.msecnd.net
*.vo.msecnd.net
sa411gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa48gl.wpc.edgecastcdn.net
sa169gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa411gl.wpc.edgecastcdn.net
sa138gl.wpc.edgecastcdn.net
snidf7bgl.wpc.edgecastcdn.net
*.vo.msecnd.net
az415467.vo.msecnd.net
*.vo.msecnd.net
sa268gl.wpc.edgecastcdn.net
sniccf8gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az672105.vo.msecnd.net
sa49gl.wpc.edgecastcdn.net
sa50gl.wpc.edgecastcdn.net
sni1d783gl.wpc.edgecastcdn.net
az646210.vo.msecnd.net
sa49gl.wpc.edgecastcdn.net
sa48gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az724716.vo.msecnd.net
sa31gl.wpc.edgecastcdn.net
az824306.vo.msecnd.net
az657629.vo.msecnd.net
sa138gl.wpc.edgecastcdn.net
az590886.vo.msecnd.net
sa124gl.wpc.edgecastcdn.net
sni5de5gl.wpc.edgecastcdn.net
sa31gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa3gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa73gl.wpc.edgecastcdn.net
sa6gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az831790.vo.msecnd.net
sa50gl.wpc.edgecastcdn.net
az724456.vo.msecnd.net
sa411gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa48gl.wpc.edgecastcdn.net
sa48gl.wpc.edgecastcdn.net
az717412.vo.msecnd.net
sni17f0dgl.wpc.edgecastcdn.net
sa411gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
sa5gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sni.msft.default.adn.edgecastcdn.net
*.vo.msecnd.net
sa50gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
az857794.vo.msecnd.net
sa2gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
az287601.vo.msecnd.net
az683605.vo.msecnd.net
sa5gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
az834239.vo.msecnd.net
sa31gl.wpc.edgecastcdn.net
sni.msft.default.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa411gl.wpc.edgecastcdn.net
snid1e1gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
sa50gl.wpc.edgecastcdn.net
sa138gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az412949.vo.msecnd.net
sa21gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa21gl.wpc.edgecastcdn.net
az809517.vo.msecnd.net
sa31gl.wpc.edgecastcdn.net
az696016.vo.msecnd.net
az721862.vo.msecnd.net
sa21gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa73gl.wpc.edgecastcdn.net
sa138gl.wpc.edgecastcdn.net

Certificate

The complete raw certificate details for *.vo.msecnd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraftWjUD0dTBdU8drorU
uCUTZy5SnrL5RDletmhaDxdbuaXF4iDGoa0PPvgsYGBmScOyg4jtfj/TRoQWShxw
uMrhu16partjobtsmjQyWdvL6dFn+FfIoRMI+G1nqogVQ2yyXAhPxYAn/fmBcezN
7bAh4RVQeKPADACdHzCDUVdKRjiM4d7XjBdUJLp70CPzfIVY+Ler3a0aXxLqLGIC
n6/t1bjlYXAAT7/JI/j1wK3l8ECPH6y66xWxWQhaHG8MfpIP6BCGhCfZevRYgjYr
jQzh5SXBKKdj3cA8W+URyOFC39upR3iQEXVrTWKVTGjprNLswwYCWHKQNLfwfJPn
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2007069549475496294652167363878928476602321652
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT SSL SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-22 05:48:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-22 05:48:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vo.msecnd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21922034726885704498074457995762106829685951689791198231605358610594724331368507730588429639926918993346549033638136847017191854683968908706264140388591982938804910296758634034522580738233478950664272719782869234746477091051743789162893204780246230188599741191505079376595234476054716078704692167806600660924535401457875108806371307723131551056515658119461922701693978154048117929710325531082540246952668501492243051121253165665543692130899477745535239115450442353960332996801286393713256506432063198661813660404118764065047936554331023420361550319504334151691684594875774379290169436060748768098277148315826148075469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2177 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vo.msecnd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adn.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ads2.msads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspnetcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azurecomcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azureedge-test.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.skype.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmsresources.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmsresources.windowsphone-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fms.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microsoft-sbs-domains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.skypeassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.skypeassets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wac.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wpc.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wpc.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wac.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adn.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fms.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajax.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnads.msads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-resources.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-resources-beta.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecnads1.msn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iecvlist.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cms-pn.windowsphone-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cms-tst.windowsphone-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipscdn.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipscdnqa.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipsmscdn.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipsmscdnqa.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montage.msn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mscrl.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r20swj13mr.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.mediaservices.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.mediaservices.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.sysinternals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nuget.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt.ms-studiosmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtm.ms-studiosmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dist.nuget.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aisvc.visualstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dist.asp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msitembed.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxtembed.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.powerappscdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloads.subscriptionsint.tfsallin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.my.visualstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnppe.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datafactory.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cortanaanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'do.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-download.office.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-download.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prss.centralvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallerycdn.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallerycdnppe.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.asazure.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.learningdownloadcenter.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.videobreakdown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breakdown.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallerycdntest.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download2.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.dsp.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agavecdn.o365weve-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agavecdn.o365weve-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agavecdn.o365weve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.visualstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.Applicationinsights.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.Applicationinsights.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.Applicationinsights.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfbassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfbassets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.mono-project.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.media-test.windows-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.mediaservices.windows-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp.microsoft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							80f955ebc1092eacf14279ab6752eeb9cc371f31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 51af24269cf468225780262b3b4662157b1ecca5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/msitwww2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/msitwww2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/msitwww2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.7587021.751874.11030412.6202749.3702260.207.15542268.3366194
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps�'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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