ssl.wsj.com
- Dow Jones and Company -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 77:62:9e:2f:c8:dd:46:f1:d3:13:9f:75:4c:3e:a7:28 was issued on by GeoTrust Inc..
With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Dow Jones and Company
Organization:
Dow Jones and Company
Organization unit: Dow Jones and Company
Organization unit: Dow Jones and Company
State / Province:
New Jersey
Locality: Princeton
Country: US
Locality: Princeton
Country: US
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 77:62:9e:2f:c8:dd:46:f1:d3:13:9f:75:4c:3e:a7:28Serial Number (int): 158690184997146926714432524500326065960
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): f9:1a:65:60:93:ae:df:44:c7:c4:73:5b:2b:f0:2a:d5:e1:b6:2d:6f
Fingerprint (sha256): 03:62:83:61:26:72:b9:f8:79:b6:8c:68:3e:74:f6:be:ad:c3:8c:42:a0:70:2c:f4:2f:c2:d3:ca:39:4d:e2:69
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate ssl.wsj.com
76
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ssl.wsj.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
secure.marketwatch.com
store.barrons.com
s3.marketwatch.com
asset.wsj.net
api-staging-secure.wsj.net
cdn.smpdev.wsj.com
si3.wsj.net
vir.www.wsj.com
sfonts.wsj.net
sg.wsj.net
rwidget.wsj.net
wsjsafehouse.com
art-secure.wsj.net
assets.efinancialnews.com
s1.wsj.net
kr.wsj.com
s3.wsj.net
wn.wsj.com
si4.wsj.net
ore.www.wsj.com
s1.marketwatch.com
www.ssl.wsj.com
si.wsj.net
blogs.wsj.com
widgets.stg.dowjones.com
video-api-secure.stg.wsj.com
video-api-secure.wsj.com
s.marketwatch.com
blogs.marketwatch.com
services.dowjones.com
www.wsjsafehouse.com
s4.wsj.net
djlogin.stg.dowjones.com
cdn.store.wsj.net
portfolio.wsj.com
realtime.wsj.com
help.wsj.com
services-secure.stg.dowjones.com
ss.wsj.net
cdn.smpdev.wsj.net
s.wsj.net
si2.wsj.net
global.stg.factiva.com
professor.wsj.com
cbuy.wsj.com
m-secure.wsj.net
city.wsj.com
s4.marketwatch.com
newsletters.barrons.com
si1.wsj.net
apistg.dowjones.com
wsjproreg.wsj.com
suggest.stg.dowjones.com
student.wsj.com
api-secure.wsj.net
admin.stream.wsj.com
services-secure.dowjones.com
portfolio.marketwatch.com
sj.wsj.net
fonts.wsj.net
api.stg.dowjones.com
guides.wsj.com
s.smartmoney.net
portfolio.barrons.com
v-secure.wsj.net
cdn.store.wsj.com
indo.wsj.com
s2.wsj.net
utilities.stg.dowjones.com
sf.wsj.net
sc.wsj.net
s2.marketwatch.com
fonts-ssl.wsj.net
admin.stream.marketwatch.com
blogs.barrons.com
ssl.wsj.com
store.barrons.com
s3.marketwatch.com
asset.wsj.net
api-staging-secure.wsj.net
cdn.smpdev.wsj.com
si3.wsj.net
vir.www.wsj.com
sfonts.wsj.net
sg.wsj.net
rwidget.wsj.net
wsjsafehouse.com
art-secure.wsj.net
assets.efinancialnews.com
s1.wsj.net
kr.wsj.com
s3.wsj.net
wn.wsj.com
si4.wsj.net
ore.www.wsj.com
s1.marketwatch.com
www.ssl.wsj.com
si.wsj.net
blogs.wsj.com
widgets.stg.dowjones.com
video-api-secure.stg.wsj.com
video-api-secure.wsj.com
s.marketwatch.com
blogs.marketwatch.com
services.dowjones.com
www.wsjsafehouse.com
s4.wsj.net
djlogin.stg.dowjones.com
cdn.store.wsj.net
portfolio.wsj.com
realtime.wsj.com
help.wsj.com
services-secure.stg.dowjones.com
ss.wsj.net
cdn.smpdev.wsj.net
s.wsj.net
si2.wsj.net
global.stg.factiva.com
professor.wsj.com
cbuy.wsj.com
m-secure.wsj.net
city.wsj.com
s4.marketwatch.com
newsletters.barrons.com
si1.wsj.net
apistg.dowjones.com
wsjproreg.wsj.com
suggest.stg.dowjones.com
student.wsj.com
api-secure.wsj.net
admin.stream.wsj.com
services-secure.dowjones.com
portfolio.marketwatch.com
sj.wsj.net
fonts.wsj.net
api.stg.dowjones.com
guides.wsj.com
s.smartmoney.net
portfolio.barrons.com
v-secure.wsj.net
cdn.store.wsj.com
indo.wsj.com
s2.wsj.net
utilities.stg.dowjones.com
sf.wsj.net
sc.wsj.net
s2.marketwatch.com
fonts-ssl.wsj.net
admin.stream.marketwatch.com
blogs.barrons.com
ssl.wsj.com
Other certificates including the domain name wsj.com
(limited to 100 certificates)
mlnewsplus.wsj.com
customercenter.wsj.com
suggest.factiva.com
brand.stg.dowjones.com
cmonetwork.wsj.com
iwap.wsj.com
id.cn.wsj.com
accounts.dowjones.com
suggest.int.factiva.com
on.wsj.com
iphonetest.wsj.com
credit-card-api-00.store.wsj.com
blueprint.stg.wsj.com
blue-partner.wsj.com
customercenter.wsj.com
accounts.dowjones.com
newsplus.int.wsj.com
newsplus.wsj.com
asia.buy.wsj.com
ssl.wsj.com
print.wsj.com
www.wsj.com
conferences.wsj.com
wsjtechhealth.wsj.com
setup.wsj.com
commenting.wsj.com
*.d.dev.wsj.com
ae.wsj.com
confirm.wsj.com
subscribe.wsj.com
ssl.wsj.com
print.wsj.com
update.wsj.com
projects.wsj.com
education.wsj.com
payment-01.store.wsj.com
chat.wsj.com
adfinder.wsj.com
r-uat.smpdev.wsj.com
guides.wsj.com
newsplus.wsj.com
*.wsj.com
stg.accounts.dowjones.com
www.s.dev.wsj.com
professor.wsj.com
www.s.dev.realestate.wsj.com
contact.wsj.com
www.s.dev.wsj.com
amp.wsj.com
sm.wsj.com
confirm.s.dev.wsj.com
CONTACT.WSJ.COM
deloitte.stg.wsj.com
*.s.dev.wsj.com
at.wsj.com
partner.wsj.com
iphonetest.wsj.com
newsplus.web.prod.pib.dowjones.io
professional.wsj.com
financialcrisis.wsj.com
highschool.wsj.com
r.wsj.com
prepare.wsj.com
ceocouncil.wsj.com
*.stg.dowjones.com
partners.wsj.com
foefestival.wsj.com
newsplus.web.prod.pib.dowjones.io
amp.wsj.com
mlsignin.stg.wsj.com
suggest.dowjones.com
chat.s.dev.wsj.com
v2.pixel.djp.data.newscorp.com
*.wsj.com
test9.dowjones.com
sbk-beta.asia.wsj.com
store.wsj.com
login.wsj.com
*.dowjones.com
cyber.pro.wsj.com
commerce.wsj.com
journalist.wsj.com
investinginafrica.wsj.com
am.wsj.com
global.factiva.com
accounts.dowjones.com
classifieds.wsj.com
store.wsj.com
customercenter.wsj.com
buy.wsj.com
confirm.wsj.com
blue-customercenter.wsj.com
journalist.stg.wsj.com
financingthefuture.stg.wsj.com
prod.payment.store.wsj.com
on.wsj.com
bbtest.wsj.com
commercialpartnerships.wsj.com
journalist.wsj.com
print.wsj.com
customercenter.wsj.com
suggest.factiva.com
brand.stg.dowjones.com
cmonetwork.wsj.com
iwap.wsj.com
id.cn.wsj.com
accounts.dowjones.com
suggest.int.factiva.com
on.wsj.com
iphonetest.wsj.com
credit-card-api-00.store.wsj.com
blueprint.stg.wsj.com
blue-partner.wsj.com
customercenter.wsj.com
accounts.dowjones.com
newsplus.int.wsj.com
newsplus.wsj.com
asia.buy.wsj.com
ssl.wsj.com
print.wsj.com
www.wsj.com
conferences.wsj.com
wsjtechhealth.wsj.com
setup.wsj.com
commenting.wsj.com
*.d.dev.wsj.com
ae.wsj.com
confirm.wsj.com
subscribe.wsj.com
ssl.wsj.com
print.wsj.com
update.wsj.com
projects.wsj.com
education.wsj.com
payment-01.store.wsj.com
chat.wsj.com
adfinder.wsj.com
r-uat.smpdev.wsj.com
guides.wsj.com
newsplus.wsj.com
*.wsj.com
stg.accounts.dowjones.com
www.s.dev.wsj.com
professor.wsj.com
www.s.dev.realestate.wsj.com
contact.wsj.com
www.s.dev.wsj.com
amp.wsj.com
sm.wsj.com
confirm.s.dev.wsj.com
CONTACT.WSJ.COM
deloitte.stg.wsj.com
*.s.dev.wsj.com
at.wsj.com
partner.wsj.com
iphonetest.wsj.com
newsplus.web.prod.pib.dowjones.io
professional.wsj.com
financialcrisis.wsj.com
highschool.wsj.com
r.wsj.com
prepare.wsj.com
ceocouncil.wsj.com
*.stg.dowjones.com
partners.wsj.com
foefestival.wsj.com
newsplus.web.prod.pib.dowjones.io
amp.wsj.com
mlsignin.stg.wsj.com
suggest.dowjones.com
chat.s.dev.wsj.com
v2.pixel.djp.data.newscorp.com
*.wsj.com
test9.dowjones.com
sbk-beta.asia.wsj.com
store.wsj.com
login.wsj.com
*.dowjones.com
cyber.pro.wsj.com
commerce.wsj.com
journalist.wsj.com
investinginafrica.wsj.com
am.wsj.com
global.factiva.com
accounts.dowjones.com
classifieds.wsj.com
store.wsj.com
customercenter.wsj.com
buy.wsj.com
confirm.wsj.com
blue-customercenter.wsj.com
journalist.stg.wsj.com
financingthefuture.stg.wsj.com
prod.payment.store.wsj.com
on.wsj.com
bbtest.wsj.com
commercialpartnerships.wsj.com
journalist.wsj.com
print.wsj.com
Certificate
The complete raw certificate details for ssl.wsj.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILjTCCCnWgAwIBAgIQd2KeL8jdRvHTE591TD6nKDANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYwMjA0MDAwMDAwWhcNMTcwNDA0MjM1 OTU5WjCBjDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxEjAQBgNV BAcUCVByaW5jZXRvbjEeMBwGA1UEChQVRG93IEpvbmVzIGFuZCBDb21wYW55MR4w HAYDVQQLFBVEb3cgSm9uZXMgYW5kIENvbXBhbnkxFDASBgNVBAMUC3NzbC53c2ou Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zu4vOLDm/4z7Pzh 2QPmQWuoubzT2LxLZSg88EHz4+yIJX/xhJMYz5Bz/3NgnxbxAw/mPvW55XFeR0rV FHqdaoQkOo/kC0xC5+m0TrNDNM4P3J+Qo3IdhXRjexyJLJ2ekgvI/O3i718WA9b4 SkDbl8zJYluKEzmzsrCYRCaPEYsA/MsMGbQk9UKJwByiZuM9kNMssT0MeXuOsJi+ PBNftQyvqWeuDM9B8Q/W5E2HvAQuK4QIu1BRRZ4mqjqLw2nBjEVDk2V0SU1vqMxy yi/7SCuw9YxbDkLgy1Bl9otbX3Wu646GG2s0n2CH+J6paWbPJMzL1tVjrqrpzU4i grKlfwIDAQABo4IIMDCCCCwwggWfBgNVHREEggWWMIIFkoIWc2VjdXJlLm1hcmtl dHdhdGNoLmNvbYIRc3RvcmUuYmFycm9ucy5jb22CEnMzLm1hcmtldHdhdGNoLmNv bYINYXNzZXQud3NqLm5ldIIaYXBpLXN0YWdpbmctc2VjdXJlLndzai5uZXSCEmNk bi5zbXBkZXYud3NqLmNvbYILc2kzLndzai5uZXSCD3Zpci53d3cud3NqLmNvbYIO c2ZvbnRzLndzai5uZXSCCnNnLndzai5uZXSCD3J3aWRnZXQud3NqLm5ldIIQd3Nq c2FmZWhvdXNlLmNvbYISYXJ0LXNlY3VyZS53c2oubmV0ghlhc3NldHMuZWZpbmFu Y2lhbG5ld3MuY29tggpzMS53c2oubmV0ggprci53c2ouY29tggpzMy53c2oubmV0 ggp3bi53c2ouY29tggtzaTQud3NqLm5ldIIPb3JlLnd3dy53c2ouY29tghJzMS5t YXJrZXR3YXRjaC5jb22CD3d3dy5zc2wud3NqLmNvbYIKc2kud3NqLm5ldIINYmxv Z3Mud3NqLmNvbYIYd2lkZ2V0cy5zdGcuZG93am9uZXMuY29tghx2aWRlby1hcGkt c2VjdXJlLnN0Zy53c2ouY29tghh2aWRlby1hcGktc2VjdXJlLndzai5jb22CEXMu bWFya2V0d2F0Y2guY29tghVibG9ncy5tYXJrZXR3YXRjaC5jb22CFXNlcnZpY2Vz LmRvd2pvbmVzLmNvbYIUd3d3LndzanNhZmVob3VzZS5jb22CCnM0Lndzai5uZXSC GGRqbG9naW4uc3RnLmRvd2pvbmVzLmNvbYIRY2RuLnN0b3JlLndzai5uZXSCEXBv cnRmb2xpby53c2ouY29tghByZWFsdGltZS53c2ouY29tggxoZWxwLndzai5jb22C IHNlcnZpY2VzLXNlY3VyZS5zdGcuZG93am9uZXMuY29tggpzcy53c2oubmV0ghJj ZG4uc21wZGV2Lndzai5uZXSCCXMud3NqLm5ldIILc2kyLndzai5uZXSCFmdsb2Jh bC5zdGcuZmFjdGl2YS5jb22CEXByb2Zlc3Nvci53c2ouY29tggxjYnV5Lndzai5j b22CEG0tc2VjdXJlLndzai5uZXSCDGNpdHkud3NqLmNvbYISczQubWFya2V0d2F0 Y2guY29tghduZXdzbGV0dGVycy5iYXJyb25zLmNvbYILc2kxLndzai5uZXSCE2Fw aXN0Zy5kb3dqb25lcy5jb22CEXdzanByb3JlZy53c2ouY29tghhzdWdnZXN0LnN0 Zy5kb3dqb25lcy5jb22CD3N0dWRlbnQud3NqLmNvbYISYXBpLXNlY3VyZS53c2ou bmV0ghRhZG1pbi5zdHJlYW0ud3NqLmNvbYIcc2VydmljZXMtc2VjdXJlLmRvd2pv bmVzLmNvbYIZcG9ydGZvbGlvLm1hcmtldHdhdGNoLmNvbYIKc2oud3NqLm5ldIIN Zm9udHMud3NqLm5ldIIUYXBpLnN0Zy5kb3dqb25lcy5jb22CDmd1aWRlcy53c2ou Y29tghBzLnNtYXJ0bW9uZXkubmV0ghVwb3J0Zm9saW8uYmFycm9ucy5jb22CEHYt c2VjdXJlLndzai5uZXSCEWNkbi5zdG9yZS53c2ouY29tggxpbmRvLndzai5jb22C CnMyLndzai5uZXSCGnV0aWxpdGllcy5zdGcuZG93am9uZXMuY29tggpzZi53c2ou bmV0ggpzYy53c2oubmV0ghJzMi5tYXJrZXR3YXRjaC5jb22CEWZvbnRzLXNzbC53 c2oubmV0ghxhZG1pbi5zdHJlYW0ubWFya2V0d2F0Y2guY29tghFibG9ncy5iYXJy b25zLmNvbYILc3NsLndzai5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAw KwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0G A1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3 dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYB BQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBv c2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNV HSMEGDAWgBTSb/eW9IU/cjwwfSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkwHwYI KwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6 Ly9nbi5zeW1jYi5jb20vZ24uY3J0MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA 3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFSrJm4JwAABAMARzBF AiEAmTrD/ghgeNQmf/AZpz9tXU2/ItEwM7Nx6XYYCh1WpqMCIF14hcmDSKo6+VFs v3xQLbx1YenMKSu+GrGdLRDVFnFtAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+4 43fNDsgN3BAAAAFSrJm4SwAABAMARzBFAiBuOWX2KvHQgrsh1GzmQYATmeJtTpk/ yMxXy4BVbp04EgIhAJgQA9QJy1p9nFfKQkQ49SpTOMuZNaCnG5Ocxh21tWwuMA0G CSqGSIb3DQEBCwUAA4IBAQDC3PrGG8XdZ8Q3ufdIGzS8XhEHsYt9TSn+lILHEMxw lSpGWeMrgkKkzUzUelPehV79va88OZUco+RCVyK5JVU739W1P8zbgV4z1/118GFg gCzck9Lmv0W5lE0P3fhnAaIxAefTDx455HGxHRyz/JtLS80Ei5mdxekbTSDIV/Ow xp7D8yApS4Db1IcTJUgw7FKLlb94BmVdEE4+1Ihvg7oNkk1lZZipbEJEneJ1CFq0 whTsgyaSsqByEC0QBpHuSyh6ldO8ub08GUUqeX7v0cE2hPQl9Pa/boaPvDSZb40g ZelfiW1gmwLJnnzt6FRBwXTJEqT2yhtLyBttLv8YsF1e -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zu4vOLDm/4z7Pzh2QPm QWuoubzT2LxLZSg88EHz4+yIJX/xhJMYz5Bz/3NgnxbxAw/mPvW55XFeR0rVFHqd aoQkOo/kC0xC5+m0TrNDNM4P3J+Qo3IdhXRjexyJLJ2ekgvI/O3i718WA9b4SkDb l8zJYluKEzmzsrCYRCaPEYsA/MsMGbQk9UKJwByiZuM9kNMssT0MeXuOsJi+PBNf tQyvqWeuDM9B8Q/W5E2HvAQuK4QIu1BRRZ4mqjqLw2nBjEVDk2V0SU1vqMxyyi/7 SCuw9YxbDkLgy1Bl9otbX3Wu646GG2s0n2CH+J6paWbPJMzL1tVjrqrpzU4igrKl fwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 158690184997146926714432524500326065960 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Princeton' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Dow Jones and Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Dow Jones and Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ssl.wsj.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27170685402135270159083683599749574301948038370950438269330416154418937344835150766219120642744925970837078225962336737438639724291272749195150528673245965910910347785270108302485523285654726027693110082095947057195445429608865152631564182575912357993383272080621546564984499374926501725299813176098422766090893979746380934855580220313480365948154508190223300822890769238675449513987624691520986907542712877046649037085529032959272054135156431414313604517818881248206202293517900097309100682606396104076859937331830159195473705903553586750502606554123480466065042378498139009948903223453686385971929744436917192271231 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1430 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.marketwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.barrons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.marketwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-staging-secure.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.smpdev.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si3.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vir.www.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfonts.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rwidget.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsjsafehouse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'art-secure.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.efinancialnews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wn.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si4.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ore.www.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.marketwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssl.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.stg.dowjones.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-api-secure.stg.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-api-secure.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.marketwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.marketwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.dowjones.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsjsafehouse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djlogin.stg.dowjones.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.store.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtime.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-secure.stg.dowjones.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.smpdev.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si2.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.stg.factiva.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professor.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbuy.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-secure.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'city.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4.marketwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.barrons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si1.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apistg.dowjones.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsjproreg.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suggest.stg.dowjones.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-secure.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stream.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-secure.dowjones.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.marketwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sj.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonts.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stg.dowjones.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guides.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.smartmoney.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.barrons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v-secure.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.store.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indo.wsj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utilities.stg.dowjones.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.marketwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonts-ssl.wsj.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stream.marketwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.barrons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.wsj.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000152ac99b8270000040300473045022100993ac3fe086078d4267ff019a73f6d5d4dbf22d13033b371e976180a1d56a6a302205d7885c98348aa3af9516cbf7c502dbc7561e9cc292bbe1ab19d2d10d516716d007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000152ac99b84b000004030047304502206e3965f62af1d082bb21d46ce641801399e26d4e993fc8cc57cb80556e9d3812022100981003d409cb5a7d9c57ca424438f52a5338cb9935a0a71b939cc61db5b56c2e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00c2dcfac61bc5dd67c437b9f7481b34bc5e1107b18b7d4d29fe9482c710cc70952a4659e32b8242a4cd4cd47a53de855efdbdaf3c39951ca3e4425722b925553bdfd5b53fccdb815e33d7fd75f06160802cdc93d2e6bf45b9944d0fddf86701a23101e7d30f1e39e471b11d1cb3fc9b4b4bcd048b999dc5e91b4d20c857f3b0c69ec3f320294b80dbd48713254830ec528b95bf7806655d104e3ed4886f83ba0d924d656598a96c42449de275085ab4c214ec832692b2a072102d100691ee4b287a95d3bcb9bd3c19452a797eefd1c13684f425f4f6bf6e868fbc34996f8d2065e95f896d609b02c99e7cede85441c174c912a4f6ca1b4bc81b6d2eff18b05d5e