*.media.yahoo.com

- Oath Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 02:b5:f2:45:a8:47:c0:ad:82:ff:16:b7:3f:a9:eb:ea was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oath Inc

Organization: Oath Inc
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:b5:f2:45:a8:47:c0:ad:82:ff:16:b7:3f:a9:eb:ea
Serial Number (int): 3603175584912158013322857406588906474
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 37:f6:3a:38:29:91:3b:88:2c:1a:64:0d:49:c6:3b:da:20:bd:d0:2c
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 62:42:21:83:97:e4:a1:51:85:a8:b2:e9:95:8f:7a:c6:bb:9b:fd:11
Fingerprint (sha256): 03:88:c1:1f:71:f1:34:1c:95:cd:a6:0c:98:bf:7f:cf:28:ce:3e:ac:95:65:a3:bc:4d:a5:5b:72:1d:89:f8:cb

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.media.yahoo.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.media.yahoo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.media.yahoo.com
*.data.yahoo.com
*.fantasysports.yahoo.com
*.finance.yahoo.com
*.flurry.com
*.fp.yahoo.com
*.geo.yahoo.com
*.io.yahoo.net
maw.ouroath.com
*.maw.ouroath.com
*.media.yql.yahoo.com
*.mobile.yahoo.com
*.paas.ec.yahoo.com
*.protrade.com
*.publishing.oath.com
*.query.yahoo.com
*.query.yahooapis.com
*.search.yahoo.com
*.sports.yahoo.com
*.video.yahoo.com
*.yahoo.com
*.yql.yahoo.com
*.yql.yahooapis.com
*.canary1-bf1.media.yahoo.com
*.canary1-gq1.media.yahoo.com
*.canary1-ir2.media.yahoo.com
*.canary1-ne1.media.yahoo.com
*.canary1-sg3.media.yahoo.com
*.canary1-tp2.media.yahoo.com
*.canary1-tw1.media.yahoo.com
*.prod1-bf1.media.yahoo.com
*.prod1-gq1.media.yahoo.com
*.prod1-ir2.media.yahoo.com
*.prod1-ne1.media.yahoo.com
*.prod1-sg3.media.yahoo.com
*.prod1-tp2.media.yahoo.com
*.prod1-tw1.media.yahoo.com
*.alpha1-bf1.media.yahoo.com
*.beta1-bf1.media.yahoo.com
*.stage1-bf1.media.yahoo.com
actservices.oath.com
adspecs.oath.com
*.adspecs.oath.com
*.adspecs.yahoo.com
*.admanagerplus.yahoo-inc.com
admanagerplus.yahoo-inc.com
*.admanagerplus.yahoo.com
*.datatables.org
*.entertainment.yahoo.com
query.yahooapis.com
subs.communications.yahoo.com
*.virtualstudio.yahoo.com
*.yax.yahoo.com
*.yql.yimg.com
api.lps.cp.yahoo.com
*.vads.yahoo.com
*.developer.yahoo.com
ad.com
*.ad.com
*.ad.yahoo.com
adspecs.verizonmedia.com
*.adspecs.verizonmedia.com
*.verizonmedia.com
*.canary1-bf1.omega.yahoo.com
*.canary1-gq1.omega.yahoo.com
*.canary1-ir2.omega.yahoo.com
*.canary1-ne1.omega.yahoo.com
*.canary1-sg3.omega.yahoo.com
*.canary1-tp2.omega.yahoo.com
*.canary1-tw1.omega.yahoo.com
*.prod1-bf1.omega.yahoo.com
*.prod1-gq1.omega.yahoo.com
*.prod1-ir2.omega.yahoo.com
*.prod1-ne1.omega.yahoo.com
*.prod1-sg3.omega.yahoo.com
*.prod1-tp2.omega.yahoo.com
*.prod1-tw1.omega.yahoo.com
*.alpha1-bf1.omega.yahoo.com
*.beta1-bf1.omega.yahoo.com
*.stage1-bf1.omega.yahoo.com
*.test1-gq1.omega.yahoo.com
*.digits.vzbuilders.com
*.vzbuilders.com
*.v2-canary1-gq1.omega.yahoo.com
*.v2-canary1-bf1.omega.yahoo.com
*.v2-canary1-ne1.omega.yahoo.com
*.v2-canary1-ir2.omega.yahoo.com
*.v2-canary1-sg3.omega.yahoo.com
*.v2-canary1-tp2.omega.yahoo.com
*.v2-canary1-tw1.omega.yahoo.com
*.v2-prod1-gq1.omega.yahoo.com
*.v2-prod1-bf1.omega.yahoo.com
*.v2-prod1-ne1.omega.yahoo.com
*.v2-prod1-ir2.omega.yahoo.com
*.v2-prod1-sg3.omega.yahoo.com
*.v2-prod1-tp2.omega.yahoo.com
*.v2-prod1-tw1.omega.yahoo.com
*.tp.vzbuilders.com
*.mmi.vzbuilders.com
*.tripod.yahoo.com

Other certificates including the domain name yahoo.com

(limited to 100 certificates)
digits3.data.yahoo.com
checkout.yahoo.com
*.sonic.mail.yahoo.com
master.data.yahoo.com
login.yahoo.com
backend.paranoids.corp.yahoo.com
qa.edge.ymon.corp.ne1.yahoo.com
*.store.yahoo.com
www.yahoo.com
chilledfilled.corp.gq1.yahoo.com
san.test-paranoids.yahoo.com
allhands.corp.yahoo.com
*.stage.login.yahoo.com
test012.san.test-paranoids.yahoo.com
tw.preview.campaign.money.yahoo.com
stage.api.onepush.mobile.yahoo.com
endurepoor.corp.ir2.yahoo.com
privbin.corp.yahoo.com
tw.mobi.yahoo.com
tw.knowledge.yahoo.com
stg-sandyui-01.netops.corp.gq1.yahoo.com
cosmos.bcp.search.corp.yahoo.com
testdata.factory.vespa.corp.yahoo.com
mobileexcellence.corp.yahoo.com
staging-origin-life.huffpo.net
lab-uic-pub.lab.rich.corp.yahoo.com
pr.comet.yahoo.com
admin.nevec.yahoo.com
steamedesteemed.corp.sg3.yahoo.com
stage.api.pes.yahoo.com
test.dek.ckms.yahoo.com
goglobal-demo.g11n.corp.gq1.yahoo.com
academy-delivery.cc.corp.yahoo.com
beta.api.backyard3.corp.yahoo.com
tw.billing.yahoo.com
sp.analytics.yahoo.com
dwdevetl02.fin.corp.gq1.yahoo.com
uc-gq1-vcenter1.corp.gq1.yahoo.com
backend-stage.paranoids.corp.yahoo.com
wherehaus.stage.geotech.corp.yahoo.com
gq1-psinprd-clu.psi.corp.gq1.yahoo.com
*.jeditools.mail.yahoo.com
kite-tools.pbp.corp.ne1.yahoo.com
origin.qa.dispatcher.yahoo.com
*.ea.ops.yahoo.com
endurepoor.corp.ir2.yahoo.com
*.report.gemini.yahoo.com
api.soln-stage.isvc.cp.yahoo.com
backend-stage.paranoids.corp.yahoo.com
san.test-paranoids.yahoo.com
san.test-paranoids.yahoo.com
tw.db.media.yahoo.com
*.cs.gq1-1.manhattan.gq1.yahoo.com
sh-gdpr.search.yahoo.com
*.abumedia.yahoo.com
*.answers.ycpi.yahoo.com
*.tee.ops.search.yahoo.com
privbin.corp.yahoo.com
oxy-oxygen-4a0620a5.gq1.yahoo.com
e2.ycpi.aeb.yahoo.com
secure02.lithium.com
telco-sg3-jump.sg3.corp.yahoo.com
legacy.pop.mail.yahoo.com
privbin.corp.yahoo.com
admin.ckms.yahoo.com
sp.analytics.yahoo.com
*.api.gemini.yahoo.com
dev.ui.payments.yahoo.com
dspskadpostback.aaca.yahooinc.com
san.test-paranoids.yahoo.com
splunk1.flurry.gq1.yahoo.com
certreloader.demo.yahoo.com
splunk.dspe.yahoo.com
src2.yahoo.com
profileproxy.prod.tgt.bf1.yahoo.com
legaltoolsstage.corp.yahoo.com
test1.yahoo.com
st39.yahoo.com
beta.edit.client.yahoo.com
chat.ouroath.com
endurepoor.corp.ir2.yahoo.com
*.chef.ops.yahoo.com
backend-stage.paranoids.corp.yahoo.com
san.test-paranoids.yahoo.com
manhattan.yahoo.com
dev.productcentral.aol.com
*.tripod.bf2.yahoo.com
ws.mobile.mail.yahoo.com
vpn2-1-gci.eglbp.corp.yahoo.com
endurepoor.corp.ir2.yahoo.com
yakl-rules.ops.yahoo.com
jp.techcrunch.com
ldap-mgmnt.corp.yahoo.com
yql.onepush.mobile.yahoo.com
*.hlfs.yahoo.com
*.wv.msg.yahoo.com
endurepoor.corp.ir2.yahoo.com
ads.vidible.tv
kronostest.fin.corp.yahoo.com
api.native.yahooinc.com

Certificate

The complete raw certificate details for *.media.yahoo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQTwfv8q25UJJKG4r5Xf
ojSJxNIplEzeo2HQDO+2QvABP/JGoiHP5J0EP603CCYWLXBVJ3xD2e48gKLGLNqn
nGhCpWfG+j+vcjlF06VRVrUl9KZtdXCHbFvFciBG4UxLXhIR92drpJmpdxIQIj+a
V0v3TsFvNNTmYuW374ARxBbcyODqeO+BY82qFBx3937QMZN3gSlFnoA0qVayOFg1
rI+VE2zQeqpq4MRsezOz3bEbl/7nANfila0n9ALnu6mUV9x5TU2upsYCVqHWi6AP
jvBaHbJFzDbMqg+gXmKVgg9Bqt8yrnWJ6PcBo/E5Ce/l9UMllaMHJ9WyE4n8yT1d
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3603175584912158013322857406588906474
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.media.yahoo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18811943167510902397283699536211506875295210001603729612292679029772309073761317729346748943355597738997474164031315804957115742114993811946777432309727288453782232546667652158496936777956102877847972629990299796544361930632293057708645952323082842085216939078862530962937321092212990079565712466328281556500923192353721228388969826403161090809769003775406428089586020210279462028845167803734460906851466526342734314093807424836255929508843078145593258927200654047006159063697736141792387567096061566119248171516010215292288636065460473633632820395602474130289599606315722537500222648974672162667765538595659843460397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37f63a3829913b882c1a640d49c63bda20bdd02c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2554 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.data.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fantasysports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finance.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flurry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geo.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.io.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maw.ouroath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maw.ouroath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.media.yql.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobile.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paas.ec.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.publishing.oath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.query.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.query.yahooapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.search.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yql.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yql.yahooapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-bf1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-gq1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-ir2.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-ne1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-sg3.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-tp2.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-tw1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-bf1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-gq1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-ir2.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-ne1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-sg3.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-tp2.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-tw1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alpha1-bf1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta1-bf1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage1-bf1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actservices.oath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adspecs.oath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adspecs.oath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adspecs.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admanagerplus.yahoo-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admanagerplus.yahoo-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admanagerplus.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datatables.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entertainment.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'query.yahooapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subs.communications.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virtualstudio.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yax.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yql.yimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lps.cp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vads.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.developer.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ad.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adspecs.verizonmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adspecs.verizonmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verizonmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-gq1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-ir2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-ne1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-sg3.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-tp2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-tw1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-gq1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-ir2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-ne1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-sg3.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-tp2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-tw1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alpha1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test1-gq1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digits.vzbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vzbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-gq1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-ne1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-ir2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-sg3.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-tp2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-tw1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-gq1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-ne1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-ir2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-sg3.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-tp2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-tw1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tp.vzbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmi.vzbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tripod.yahoo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016d074b58ae000004030047304502202f4b8dcfaf81f07d1ad8edaf0ae337e160fd392c0698c2479400b0d896d5d43e02210085351b3a1f9aa8b843f2fd17b261e258c3c4e625ab8b9c18e71f40b1bf4661c00075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016d074b5914000004030046304402202de44de94949a10784d91f8bd9ff6f4e0a13e8f64322db8ae3c1b55ce7e0ed1c02206b5cfaaa67ad16652328a2b874c6bf8d49914e500c1c83023b07fd8f570a25f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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