*.vo.msecnd.net

Issued by Microsoft IT TLS CA 5

About this certificate

This digital certificate with serial number 2d:00:00:d7:ce:17:b7:96:12:31:e7:e5:1e:00:00:00:00:d7:ce was issued on by Microsoft Corporation.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=*.vo.msecnd.net

Microsoft Corporation

Organization: Microsoft Corporation
Organization unit: Microsoft IT
State / Province: Washington
Locality: Redmond
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:00:00:d7:ce:17:b7:96:12:31:e7:e5:1e:00:00:00:00:d7:ce
Serial Number (int): 1003533820787991328603566398478505434555668430
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: 48:44:71:d2:ee:be:77:ff:6e:08:59:1f:5c:86:a4:ce:44:a2:0d:80
AuthorityKeyId: 08:fe:25:9f:74:ea:87:04:c2:bc:bb:8e:a8:38:5f:33:c6:d1:6c:65

Fingerprint (sha1): c0:80:70:ef:b8:50:95:e8:03:1d:5c:22:47:77:3d:87:11:b3:a2:76
Fingerprint (sha256): ce:a4:f7:d3:ca:d5:21:56:99:e6:32:0c:8a:ce:1d:78:d1:75:fe:82:5b:e0:de:bd:6f:da:e5:c3:bc:62:c8:f3

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%205.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl

Check the revocation status for certificate *.vo.msecnd.net

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.vo.msecnd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vo.msecnd.net
*.adn.azureedge.net
*.ads2.msads.net
*.aspnetcdn.com
*.azurecomcdn.net
*.azureedge.net
*.azureedge-test.net
*.cdn.skype.com
*.cdn.skype.net
*.cmsresources.windowsphone.com
*.cmsresources.windowsphone-int.com
*.dev.skype.com
*.fms.azureedge.net
*.microsoft-sbs-domains.com
*.secure.skypeassets.com
*.secure.skypeassets.net
*.wac.azureedge.net
*.wpc.azureedge.net
*.ec.azureedge.net
*.wpc.ec.azureedge.net
*.wac.ec.azureedge.net
*.adn.ec.azureedge.net
*.fms.ec.azureedge.net
ajax.microsoft.com
cdnads.msads.net
cdn-resources.windowsphone.com
cdn-resources-beta.windowsphone.com
ecnads1.msn.com
iecvlist.microsoft.com
images-cms-pn.windowsphone-int.com
images-cms-tst.windowsphone-int.com
lumiahelptipscdn.microsoft.com
lumiahelptipscdnqa.microsoft.com
lumiahelptipsmscdn.microsoft.com
lumiahelptipsmscdnqa.microsoft.com
montage.msn.com
mscrl.microsoft.com
r20swj13mr.microsoft.com
*.streaming.mediaservices.windows.net
*.origin.mediaservices.windows.net
download.sysinternals.com
amp.azure.net
rt.ms-studiosmedia.com
gtm.ms-studiosmedia.com
*.aisvc.visualstudio.com
*.cdn.powerbi.com
dist.asp.net
embed.powerbi.com
msitembed.powerbi.com
dxtembed.powerbi.com
*.cdn.powerappscdn.net
downloads.subscriptionsint.tfsallin.net
download.my.visualstudio.com
cdn.vsassets.io
cdnppe.vsassets.io
stream.microsoft.com
datafactory.azure.com
*.cortanaanalytics.com
do.skype.com
software-download.office.microsoft.com
software-download.microsoft.com
prss.centralvalidation.com
*.gallerycdn.vsassets.io
*.gallerycdnppe.vsassets.io
global.asazure.windows.net
download.learningdownloadcenter.microsoft.com
www.videobreakdown.com
www.breakdown.me
*.gallerycdntest.vsassets.io
download2.microsoft.com
cp.dsp.microsoft.com
agavecdn.o365weve-dev.com
agavecdn.o365weve-ppe.com
agavecdn.o365weve.com
download.visualstudio.com
*.Applicationinsights.net
*.Applicationinsights.io
*.Applicationinsights.microsoft.com
*.sfbassets.com
*.sfbassets.net
download.mono-project.com
*.streaming.media-test.windows-int.net
*.origin.mediaservices.windows-int.net
*.mp.microsoft.com
download.visualstudio.microsoft.com
software-download.coem.microsoft.com
cdn.wallet.microsoft-ppe.com
cdn.wallet.microsoft.com
vi.microsoft.com
www.videoindexer.ai
*.nuget.org
*.nugettest.org
cdn.botframework.com
*.streaming.media.azure.net
*.streaming.media.azure-test.net
natick.research.microsoft.com

Other certificates including the domain name msecnd.net

(limited to 100 certificates)
az793892.vo.msecnd.net
sa155gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
images.partner.windowsphone.com
sa31gl.wpc.edgecastcdn.net
az473729.vo.msecnd.net
*.vo.msecnd.net
sa411gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa48gl.wpc.edgecastcdn.net
sa169gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa411gl.wpc.edgecastcdn.net
sa138gl.wpc.edgecastcdn.net
snidf7bgl.wpc.edgecastcdn.net
*.vo.msecnd.net
az415467.vo.msecnd.net
*.vo.msecnd.net
sa268gl.wpc.edgecastcdn.net
sniccf8gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az672105.vo.msecnd.net
sa49gl.wpc.edgecastcdn.net
sa50gl.wpc.edgecastcdn.net
sni1d783gl.wpc.edgecastcdn.net
az646210.vo.msecnd.net
sa49gl.wpc.edgecastcdn.net
sa48gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az724716.vo.msecnd.net
sa31gl.wpc.edgecastcdn.net
az824306.vo.msecnd.net
az657629.vo.msecnd.net
sa138gl.wpc.edgecastcdn.net
az590886.vo.msecnd.net
sa124gl.wpc.edgecastcdn.net
sni5de5gl.wpc.edgecastcdn.net
sa31gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa3gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa73gl.wpc.edgecastcdn.net
sa6gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az831790.vo.msecnd.net
sa50gl.wpc.edgecastcdn.net
az724456.vo.msecnd.net
sa411gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
*.vo.msecnd.net
sa48gl.wpc.edgecastcdn.net
sa48gl.wpc.edgecastcdn.net
az717412.vo.msecnd.net
sni17f0dgl.wpc.edgecastcdn.net
sa411gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
sa5gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sni.msft.default.adn.edgecastcdn.net
*.vo.msecnd.net
sa50gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
az857794.vo.msecnd.net
sa2gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
az287601.vo.msecnd.net
az683605.vo.msecnd.net
sa5gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
az834239.vo.msecnd.net
sa31gl.wpc.edgecastcdn.net
sni.msft.default.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa411gl.wpc.edgecastcdn.net
snid1e1gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
sa50gl.wpc.edgecastcdn.net
sa138gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
az412949.vo.msecnd.net
sa21gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa1gl.wpc.edgecastcdn.net
sa49gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
sa21gl.wpc.edgecastcdn.net
az809517.vo.msecnd.net
sa31gl.wpc.edgecastcdn.net
az696016.vo.msecnd.net
az721862.vo.msecnd.net
sa21gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa73gl.wpc.edgecastcdn.net
sa138gl.wpc.edgecastcdn.net

Certificate

The complete raw certificate details for *.vo.msecnd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz50JgN4ZVXeMjPUGor3v
KimFseh0KHf3PYv99JpxdPE0Xt3wSlDmZfV6DDvmN9o8y0myMmak+KJqGZHBb5El
TLWimsRBJq84fo26XzbqlmYR2GwGByLPf2LrOWwhfbEwLcuWYUrF4wzws3RATsYj
iEEoPDEnogl9tA6iZ5SepptHLNdRCKL5zc0uy6Xh/eXJr6YPiPPgSLIjOzJa3gk8
9bUU2f0BMQP15cfQQ7dBwoi8NJTTahA7NW49+BRXz+GpA7w1hsIm+b7wmP9GKRxg
dslMcLbNiUF0OVnBs/o4Kco14hbFzQn0mo8DM+LAUpyjMpW2G3/bgI/6M6wVeoMW
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1003533820787991328603566398478505434555668430
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft IT TLS CA 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-18 01:14:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 01:14:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vo.msecnd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26208767019284402778117259353358397522411600707278362331392716714592171320767098134375304649566617054074767592861198475870315038608457695626145954369651761101938607197799069839251527899820658293670685658347470766195028725461139097408312696303528393542969856771517552243773855002615639842726825331948422581104239754648450502448492591942697718855574418675704075914654517076831838176270693215098486369027565108567765693903198494531715675304573103246660618759548244129416711856602393924327461999805279244670830330179930754104299640332791223289214887457914304868858943587237535586399647729616109246115916792216836838200953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2462 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vo.msecnd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adn.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ads2.msads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspnetcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azurecomcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azureedge-test.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.skype.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmsresources.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmsresources.windowsphone-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fms.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microsoft-sbs-domains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.skypeassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.skypeassets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wac.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wpc.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wpc.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wac.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adn.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fms.ec.azureedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajax.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnads.msads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-resources.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-resources-beta.windowsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecnads1.msn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iecvlist.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cms-pn.windowsphone-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cms-tst.windowsphone-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipscdn.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipscdnqa.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipsmscdn.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiahelptipsmscdnqa.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montage.msn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mscrl.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r20swj13mr.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.mediaservices.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.mediaservices.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.sysinternals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt.ms-studiosmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtm.ms-studiosmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aisvc.visualstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dist.asp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msitembed.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxtembed.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.powerappscdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloads.subscriptionsint.tfsallin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.my.visualstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnppe.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datafactory.azure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cortanaanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'do.skype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-download.office.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-download.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prss.centralvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallerycdn.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallerycdnppe.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.asazure.windows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.learningdownloadcenter.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.videobreakdown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breakdown.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallerycdntest.vsassets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download2.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.dsp.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agavecdn.o365weve-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agavecdn.o365weve-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agavecdn.o365weve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.visualstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.Applicationinsights.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.Applicationinsights.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.Applicationinsights.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfbassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfbassets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.mono-project.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.media-test.windows-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.mediaservices.windows-int.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.visualstudio.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-download.coem.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wallet.microsoft-ppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wallet.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vi.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.videoindexer.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuget.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nugettest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.botframework.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.media.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaming.media.azure-test.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natick.research.microsoft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							484471d2eebe77ff6e08591f5c86a4ce44a20d80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 08fe259f74ea8704c2bcbb8ea8385f33c6d16c65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20IT%20TLS%20CA%205.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.9744322.5884410
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		008a9f94b867003baa7d09a44826f05ddd22b4225b5c9985cdf711799e95fa6457c31e63a8d4ab7ab12570e7d513b7de268752891752175d4a5f84da73188eda4f4fb3d0ca8822ca2da32603bd451215c4387da89d58449f797cffdb36fba3839eddb33987932d30d088ead7c97d477cbc090755eb8627bfc089671328d58332ccc1709194017039a054dda9dc5a78f4ab116cf2c70f7822efd8f97da9698cc5f61160d84b4cf8a6992087aa3f4cdf3b3f8643e1ac9494bb4f9c405eb6eaf366fb5b2d9c59101478b580a2df82631828e4a4d43156475ab0b29997e4bf6da8c786515ce2de83f3f285654728fbc667929477d90016455ddf3f45aadd4813296058f3bc6b7e500cf31c27e93f8a813ca7f43f4f6a017ec60f90a3ad1487f54eaee47884f00ab9ae292e63b8edb03460e0cd76752c02f18143199d025ee0e17a9550962127205927aef09baf6e8c9a225e15f228d77b7243e41299af00dce90fc4579952d329c9bb879a967ac8e4d163ee1ad92a529f1b76e9a5aa4862f5fbbf5fa7af32fe0392267c6534b70b55973c1c4232cbb1682b8f00a2df6dea2146956589ca843b23b4d0100be24a0d18e6d3889630c48021b9983c166c13365ddef24d0c28d9c69367a6cd15bb61a6231746a5a57b58b3adf7f7ddf6d39332648f3185245d59158afedd6c05f3f35fe63fa6f09b7a3919efbbcfc53e7c305a1817755c12