www.yahooinc.com

Issued by GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1

About this certificate

This digital certificate with serial number 0f:8a:af:79:3b:64:62:18:69:d3:a6:51:32:20:4d:8a was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.yahooinc.com

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:8a:af:79:3b:64:62:18:69:d3:a6:51:32:20:4d:8a
Serial Number (int): 20658515929920818978286976413655387530
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 84:c4:06:ae:a3:a2:75:ba:cd:a3:22:c5:0d:30:72:ba:bf:52:6b:ad
AuthorityKeyId: 12:c9:88:9b:2f:c9:44:7a:7d:12:f1:df:40:03:42:98:92:c7:24:d6

Fingerprint (sha1): e8:67:7f:b4:99:39:09:b6:ff:df:67:14:5e:ba:80:23:25:34:f8:cc
Fingerprint (sha256): 01:85:54:79:b8:15:47:51:86:83:74:dc:92:14:9e:2d:e7:9e:b3:bc:28:a0:c4:c1:01:a7:de:be:67:c1:a5:2e

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crl

Check the revocation status for certificate www.yahooinc.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.yahooinc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.yahooinc.com
yahooinc.com
beta.www.yahooinc.com
stage.www.yahooinc.com
commerce.adtech.yahooinc.com

Other certificates including the domain name yahooinc.com

(limited to 100 certificates)
dspskadpostback.aaca.yahooinc.com
api.native.yahooinc.com
www.yahooinc.com
*.autos.yahoo.com
*.ssp.verizonmedia.com
src7.yahoo.com
api.gemini.yahoo.com
src4.yahoo.com
src4.yahoo.com
ssp.yahooinc.com
src7.yahoo.com
careers-real.yahoo.com
a.a.b.c.d.yahooinc.com
yho.com
sdk.yahooinc.com
src4.yahoo.com
src1.yahoo.com
src1.yahoo.com
src1.yahoo.com
*.autos.yahoo.com
src4.yahoo.com
src4.yahoo.com
id-uat.b2b.yahooinc.com
www.academy.yahooinc.com
zeus-ui-uat.b2b.yahooinc.com
stage-legal.yahoo.com
blog.postmaster.yahooinc.com
api-uat.amt.yahooinc.com
www.adtech.yahooinc.com
src1.yahoo.com
one-qa.aol.com
api.native.yahooinc.com
dev.reports.yahooinc.com
edgecastpages.yahooinc.com
*.autos.yahoo.com
postmaster.yahooinc.com
dspskadpostback.aaca.yahooinc.com
src2.yahoo.com
src1.yahoo.com
src1.yahoo.com
stage.smp.verizonmedia.com
authz.yahooinc.com
yho.com
src2.yahoo.com
*.eurosport.yahoo.com
theshop.yahooinc.com
dspskadpostback.aaca.yahooinc.com
tw.api.srch.ect.yahoo.com
src4.yahoo.com
id-uat.b2b.yahooinc.com
stage-careers-real.yahoo.com
adtechem.yahooinc.com
src1.yahoo.com
dev.reports.yahooinc.com
src4.yahoo.com
tw.api.srch.ect.yahoo.com
adtechpages.yahooinc.com
www.yahooinc.com
tw.api.srch.ect.yahoo.com
tw.api.srch.ect.yahoo.com
apac1.creativestudios.yahooinc.com
ssp.yahooinc.com
smart.yahooinc.com
tw.api.srch.ect.yahoo.com
widgets.ssp.yahooinc.com
api.native.yahooinc.com
a.a.b.c.d.yahooinc.com
postmaster.yahooinc.com
*.ssp.yahooinc.com
*.help.yahoo.com
*.autos.yahoo.com
src1.yahoo.com
beta-legal.yahoo.com
*.ssp.verizonmedia.com
apac.creativestudios.yahooinc.com
src2.yahoo.com
advertising.yahooinc.com
dev.postmaster.yahooinc.com
dspskadpostback.aaca.yahooinc.com
src2.yahoo.com
stage.consent.oath.com
artifactory.yahooinc.com
yho.com
src2.yahoo.com
*.adtech.backyard.yahooinc.com
widgets.ssp.yahooinc.com
id.b2b.yahooinc.com
yho.com
src1.yahoo.com
yho.com
api.ssp.yahooinc.com
dspskadpostback.aaca.yahooinc.com
dspskadpostback.aaca.yahooinc.com
api.openrtb.ssp.yahooinc.com
dev.gvp.vzbuilders.com
id.b2b.yahooinc.com
id-uat.b2b.yahooinc.com
*.autos.yahoo.com
src2.yahoo.com
id-uat.amt.yahooinc.com

Certificate

The complete raw certificate details for www.yahooinc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG3jCCBcagAwIBAgIQD4qveTtkYhhp06ZRMiBNijANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypH
ZW9UcnVzdCBUTFMgRFYgUlNBIE1peGVkIFNIQTI1NiAyMDIwIENBLTEwHhcNMjEw
OTE1MDAwMDAwWhcNMjIwNzE0MjM1OTU5WjAbMRkwFwYDVQQDExB3d3cueWFob29p
bmMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ87nDMKH+k3
YXM0UwdVgZOLL5rXX8j3jshG4YF8z+yO8RHmYE69z8NWGj+e39nfsAlTNdzopj/P
+jY1QmK5TOs7PjB7Gg1kQZHqhUMo4vyZLBu7oQtWHNV27KARMsCTEWzUPHdsgheF
1iX17d/Gsh9YOGcTk6Wkat8ZOlHsedoLS0nQLCDtf5DW2iBpdH/4nj8aYNj79fSv
l3S0YhusIXNBP/AI9uxnsKm63l2Nv5v1nTVhNgZ/mNy+Kuq2nmrNnHtTF1BJZ+Zq
yGZuwHDUsWDOwGEaGDyh8S2JiIMYkhnLhRa/vshWDXCZ2GNBg8PEUSAJMkUHBbYY
W0J3SYbVqwIDAQABo4ID3jCCA9owHwYDVR0jBBgwFoAUEsmImy/JRHp9EvHfQANC
mJLHJNYwHQYDVR0OBBYEFITEBq6jonW6zaMixQ0wcrq/UmutMHYGA1UdEQRvMG2C
EHd3dy55YWhvb2luYy5jb22CDHlhaG9vaW5jLmNvbYIVYmV0YS53d3cueWFob29p
bmMuY29tghZzdGFnZS53d3cueWFob29pbmMuY29tghxjb21tZXJjZS5hZHRlY2gu
eWFob29pbmMuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwgZsGA1UdHwSBkzCBkDBGoESgQoZAaHR0cDovL2NybDMuZGln
aWNlcnQuY29tL0dlb1RydXN0VExTRFZSU0FNaXhlZFNIQTI1NjIwMjBDQS0xLmNy
bDBGoESgQoZAaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0dlb1RydXN0VExTRFZS
U0FNaXhlZFNIQTI1NjIwMjBDQS0xLmNybDA+BgNVHSAENzA1MDMGBmeBDAECATAp
MCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwgYUGCCsG
AQUFBwEBBHkwdzAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t
ME8GCCsGAQUFBzAChkNodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vR2VvVHJ1
c3RUTFNEVlJTQU1peGVkU0hBMjU2MjAyMENBLTEuY3J0MAkGA1UdEwQCMAAwggF+
BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2ACl5vvCeOTkh8FZzn2Old+W+V32cYAr4
+U1dJlwlXceEAAABe+ddHqEAAAQDAEcwRQIgSWtlhDCqFGAoMlrb/SZ5LDXzhLR7
HtM/693dypey+X8CIQC+Rnxk0wzi8ZhiEA431spsPb6jHxWDugjB9afIHGtnUwB2
AFGjsPX9AXmcVm24N3iPDKR6zBsny/eeiEKaDf7UiwXlAAABe+ddHw0AAAQDAEcw
RQIgOIxppiUD6meJGOjJpIA1lgldYx0t2GPuLwS3Tzrqm20CIQDid1hFMtxv7+pV
80IG7luNFMFD4PhnECFkF9dVHKJBRgB2AEHIyrHfIkZKEMahOglCh15OMYsbA+vr
S8do8JBilgb2AAABe+ddHpkAAAQDAEcwRQIhAIiAuL39cEPSJWEPNleiS2jA2cEz
9av6Uuex2KeUYP5sAiBHm2Uu/2GWEzUxoODV16IdA7ZnZjQ+Z3CHPi1h7aqvkzAN
BgkqhkiG9w0BAQsFAAOCAQEAea+V045l8gGIbt3N8WFMI0k8QdB5Iwt9pxPCg0aB
YmZpP74JsSoIRy3lxG105AGIe6vnYMwtnDeTm+LKgFMxjJwOP0IzgDzyG4c61zJG
MsN4eRc0+AJO8yBgBME6zloQrcbOVt5QGZiOLr35bA/vUYX6xBNH8ZBbnUph+HGm
jfxb2OeidacoPmNcp5RaAd8sGDp5GS6nzI68I8wJf6lT9QW/01u9LUdE/uNjlsY0
566xDKp7fPADTWJoE+15gbWzJoO+iF6TPaX8nSCX7IMUkpKXcHZf/XwOrPX+pFGN
Mhy/ph6lnX/9OnNqH9YFcUn4l8Wy5P7ZZSlT3x0P21LR5w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ87nDMKH+k3YXM0UwdV
gZOLL5rXX8j3jshG4YF8z+yO8RHmYE69z8NWGj+e39nfsAlTNdzopj/P+jY1QmK5
TOs7PjB7Gg1kQZHqhUMo4vyZLBu7oQtWHNV27KARMsCTEWzUPHdsgheF1iX17d/G
sh9YOGcTk6Wkat8ZOlHsedoLS0nQLCDtf5DW2iBpdH/4nj8aYNj79fSvl3S0Yhus
IXNBP/AI9uxnsKm63l2Nv5v1nTVhNgZ/mNy+Kuq2nmrNnHtTF1BJZ+ZqyGZuwHDU
sWDOwGEaGDyh8S2JiIMYkhnLhRa/vshWDXCZ2GNBg8PEUSAJMkUHBbYYW0J3SYbV
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20658515929920818978286976413655387530
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.yahooinc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19826925479034063194853122820483781361744387014135568643503800523941112475819001686224636523895706299883848292280323521840004395486881556574907609264771018823624365613778484413951585659327066923542285051432764632810752283755958684832734354382390025121389363031725572932532172961324883770047442743679895723363033572543853748491828600767827910730509750643046210703297160874140688568242864186414104876342729008838557920530325314706906406219727262309018567162140515270323692019272498064413753725565739703457714439574806667082659009767438949818978655199259565132698591043107693082170458348334051745620612933477953264080299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 12c9889b2fc9447a7d12f1df4003429892c724d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84c406aea3a275bacda322c50d3072babf526bad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yahooinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahooinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.www.yahooinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.www.yahooinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce.adtech.yahooinc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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