*.vo.msecnd.net

- Microsoft Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:1a:56:45:98:2c:89:17:40:55:c7:60:df:0e:c6:ca was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: Washington
Locality: Redmond
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:1a:56:45:98:2c:89:17:40:55:c7:60:df:0e:c6:ca
Serial Number (int): 20075169456160332761821243803796686538
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c3:38:be:ee:97:7e:08:ed:c4:f0:da:2a:91:09:9a:87:b7:ff:ae:3a
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 2e:14:f0:9f:3e:81:17:52:d1:aa:48:0f:d4:ee:02:b7:0a:e9:89:4d
Fingerprint (sha256): cd:29:bc:42:7d:93:bc:44:53:d1:29:a2:94:cf:d5:e0:82:ea:cb:f3:fe:9a:19:b7:71:8a:50:42:2b:6e:6c:c5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertSHA2SecureServerCA.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertSHA2SecureServerCA.crl

Check the revocation status for certificate *.vo.msecnd.net

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.vo.msecnd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vo.msecnd.net
*.cmsresources.windowsphone-int.com
*.ads2.msads.net
*.aspnetcdn.com
*.cmsresources.windowsphone.com
*.microsoft-sbs-domains.com
ajax.microsoft.com
*.dev.skype.com
*.azureedge.net
*.wpc.azureedge.net
*.wac.azureedge.net
*.adn.azureedge.net
*.fms.azureedge.net
*.azurecomcdn.net
*.cdn.skype.net
*.cdn.skype.com
*.streaming.media-test.windows-int.net
*.streaming.mediaservices.windows.net
*.secure.skypeassets.com
*.secure.skypeassets.net
*.yammer.com
*.azureedge-test.net
cdnads.msads.net
cdn-resources.windowsphone.com
cdn-resources-beta.windowsphone.com
ecnads1.msn.com
iecvlist.microsoft.com
images-cms-pn.windowsphone-int.com
images-cms-tst.windowsphone-int.com
lumiahelptipscdn.microsoft.com
lumiahelptipscdnqa.microsoft.com
montage.msn.com
mscrl.microsoft.com
r20swj13mr.microsoft.com
lumiahelptipsmscdn.microsoft.com
lumiahelptipsmscdnqa.microsoft.com
*.origin.mediaservices.windows.net
download.sysinternals.com
amp.azure.net
rt.ms-studiosmedia.com
gtm.ms-studiosmedia.com
prss.centralvalidation.com
software-download.microsoft.com
datafactory.azure.com
*.aisvc.visualstudio.com
*.cdn.powerbi.com
downloads.subscriptionsint.tfsallin.net
download.my.visualstudio.com
dist.asp.net
dxtembed.powerbi.com
msitembed.powerbi.com
embed.powerbi.com
*.ec.azureedge.net
*.wpc.ec.azureedge.net
*.wac.ec.azureedge.net
*.adn.ec.azureedge.net
*.fms.ec.azureedge.net
*.cdn.powerappscdn.net
stream.microsoft.com
*.applicationinsights.io
*.applicationinsights.net
cdn.vsassets.io
cdnppe.vsassets.io
*.cortanaanalytics.com
do.skype.com
software-download.office.microsoft.com
*.gallerycdn.vsassets.io
*.gallerycdnppe.vsassets.io
download.learningdownloadcenter.microsoft.com
global.asazure.windows.net
cdn.wallet.microsoft-ppe.com
cdn.wallet.microsoft.com
www.videobreakdown.com
www.breakdown.me
*.gallerycdntest.vsassets.io
software-download.coem.microsoft.com
natick.research.microsoft.com
agavecdn.o365weve-dev.com
agavecdn.o365weve-ppe.com
agavecdn.o365weve.com
download.visualstudio.com
*.Applicationinsights.microsoft.com
*.sfbassets.com
*.sfbassets.net
*.origin.mediaservices.windows-int.net
download.mono-project.com
*.mp.microsoft.com
download.visualstudio.microsoft.com
vi.microsoft.com
*.streaming.media.azure-test.net
*.streaming.media.azure.net
cdn.botframework.com
cdn.cloudappsecurity.com
*.videoindexer.ai
*.api.videoindexer.ai

Other certificates including the domain name msecnd.net

(limited to 100 certificates)
az793892.vo.msecnd.net
sa155gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
images.partner.windowsphone.com
sa31gl.wpc.edgecastcdn.net
az473729.vo.msecnd.net
*.vo.msecnd.net
sa411gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa48gl.wpc.edgecastcdn.net
sa169gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa411gl.wpc.edgecastcdn.net
sa138gl.wpc.edgecastcdn.net
snidf7bgl.wpc.edgecastcdn.net
*.vo.msecnd.net
az415467.vo.msecnd.net
*.vo.msecnd.net
sa268gl.wpc.edgecastcdn.net
sniccf8gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az672105.vo.msecnd.net
sa49gl.wpc.edgecastcdn.net
sa50gl.wpc.edgecastcdn.net
sni1d783gl.wpc.edgecastcdn.net
az646210.vo.msecnd.net
sa49gl.wpc.edgecastcdn.net
sa48gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az724716.vo.msecnd.net
sa31gl.wpc.edgecastcdn.net
az824306.vo.msecnd.net
az657629.vo.msecnd.net
sa138gl.wpc.edgecastcdn.net
az590886.vo.msecnd.net
sa124gl.wpc.edgecastcdn.net
sni5de5gl.wpc.edgecastcdn.net
sa31gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa3gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa73gl.wpc.edgecastcdn.net
sa6gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az831790.vo.msecnd.net
sa50gl.wpc.edgecastcdn.net
az724456.vo.msecnd.net
sa411gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa48gl.wpc.edgecastcdn.net
sa48gl.wpc.edgecastcdn.net
az717412.vo.msecnd.net
sni17f0dgl.wpc.edgecastcdn.net
sa411gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
sa5gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sni.msft.default.adn.edgecastcdn.net
*.vo.msecnd.net
sa50gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
az857794.vo.msecnd.net
sa2gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
az287601.vo.msecnd.net
az683605.vo.msecnd.net
sa5gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
az834239.vo.msecnd.net
sa31gl.wpc.edgecastcdn.net
sni.msft.default.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa411gl.wpc.edgecastcdn.net
snid1e1gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
sa50gl.wpc.edgecastcdn.net
sa138gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az412949.vo.msecnd.net
sa21gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa21gl.wpc.edgecastcdn.net
az809517.vo.msecnd.net
sa31gl.wpc.edgecastcdn.net
az696016.vo.msecnd.net
az721862.vo.msecnd.net
sa21gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa73gl.wpc.edgecastcdn.net
sa138gl.wpc.edgecastcdn.net

Certificate

The complete raw certificate details for *.vo.msecnd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Zves0ZrGu5DyVIWO/oH
sZlC5L9JbdbLn83LAGPhVXFTwTjMoRlINk73XDh+ch8v78xaYkPZLOGuRRs4/Dbm
mcrGa7nj8HfNeSK1/wfCWphB2K6jLMP+1NYBz8IC5YPyfTu+L//05BppMeFhPgil
cdReAMBwtLAO1o4UFa9oMmW9ASuxtyJWJPuNu0dzbU76NLAtg/UDqO2SjN+abX5W
+JSv0oxxc5wp69mhBgwKGTZolLjRcBWbDFDfIgo36QJr/pQWYQ27Hgqakoa1na4H
fzvqMAoNTUubnPhufsCRJZPNAzheTvplQbwodF/iz8eQCjlBQ1eMqdqKPusdBFsv
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20075169456160332761821243803796686538
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vo.msecnd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26965621281509934015362418258947373249316642535057485012028939208291113293125399722134361479091744528672011607519016007187902951321505688331360767864044399351484496906481077447100936503026872780394725537029477580579435571742210112726031398065953075196550978631654924242725840289525425981497126589067119993332275195130331986554929765189581344052951762774771760665253124854141077667573297898806986048281054759031775100763150153202354342878444625786198588449504060240120209905256546074858955947138887308601754463272311786295276299797123672385677502959144055791476511102400406741276758418815340299289044721045393215532949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c338beee977e08edc4f0da2a91099a87b7ffae3a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2446 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vo.msecnd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmsresources.windowsphone-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ads2.msads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspnetcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmsresources.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microsoft-sbs-domains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajax.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wpc.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wac.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adn.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fms.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azurecomcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.skype.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.media-test.windows-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.mediaservices.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.skypeassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.skypeassets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azureedge-test.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnads.msads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-resources.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-resources-beta.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecnads1.msn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iecvlist.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cms-pn.windowsphone-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cms-tst.windowsphone-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipscdn.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipscdnqa.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montage.msn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mscrl.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r20swj13mr.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipsmscdn.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipsmscdnqa.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.mediaservices.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.sysinternals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt.ms-studiosmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtm.ms-studiosmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prss.centralvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-download.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datafactory.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aisvc.visualstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloads.subscriptionsint.tfsallin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.my.visualstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dist.asp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxtembed.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msitembed.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wpc.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wac.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adn.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fms.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.powerappscdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applicationinsights.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applicationinsights.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnppe.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cortanaanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'do.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-download.office.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallerycdn.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallerycdnppe.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.learningdownloadcenter.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.asazure.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wallet.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wallet.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.videobreakdown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breakdown.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallerycdntest.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-download.coem.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natick.research.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agavecdn.o365weve-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agavecdn.o365weve-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agavecdn.o365weve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.visualstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.Applicationinsights.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfbassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfbassets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.mediaservices.windows-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.mono-project.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.visualstudio.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vi.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.media.azure-test.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.media.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.botframework.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cloudappsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videoindexer.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.videoindexer.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertSHA2SecureServerCA.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertSHA2SecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000175d275f7b40000040300483046022100ed19c2a905e300bd54ce7ac293aeb0d1e9892445e2796663729741bcc36e48a30221009602a18e90601db607a3ba87967dbc2e551f4f9978133c19e2548e3900a85a4e0077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000175d275f80b0000040300483046022100c6ea68b61b89a8f6deaa858753816f1e005bc2a5f1b8652e1ca2bc0cb31c8ec40221009a31cc8067edb73a524c0be90c79e484a8521a2724b5a1bbb1fdec07549b231c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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