*.ec.yimg.com
- Oath Holdings Inc. -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 03:50:e1:e1:9c:bc:30:47:60:83:40:04:ed:92:66:ab was issued on by DigiCert Inc.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Oath Holdings Inc.
Organization:
Oath Holdings Inc.
State / Province:
California
Locality: Sunnyvale
Country: US
Locality: Sunnyvale
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:50:e1:e1:9c:bc:30:47:60:83:40:04:ed:92:66:abSerial Number (int): 4407649153042088740797068187865867947
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: f7:84:63:39:00:1f:a4:78:e1:d1:6f:7e:ae:79:cd:9b:86:2f:45:26
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 2b:26:85:bc:2d:c9:03:01:de:4f:17:49:e3:00:c4:11:e1:dd:10:2d
Fingerprint (sha256): 04:bb:1e:ae:71:a5:b2:e5:81:47:f8:4c:be:c1:14:14:89:6d:cf:1b:17:bb:b4:eb:75:2d:61:54:72:14:b6:0e
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate *.ec.yimg.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.ec.yimg.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.ec.yimg.com
*.yimg.com
cdn.flurry.com
yui-s.yahooapis.com
cdn.yahooapis.com
ecp.yusercontent.com
cdn.yahoofinance.com
widgets.yahoofinance.com
*.yimg.com
cdn.flurry.com
yui-s.yahooapis.com
cdn.yahooapis.com
ecp.yusercontent.com
cdn.yahoofinance.com
widgets.yahoofinance.com
Other certificates including the domain name yimg.com
(limited to 100 certificates)
tw.bid.yimg.com
*.abumedia.yahoo.com
*.yahoo.com
*.abumedia.yahoo.com
src3.yahoo.com
*.www.yahoo.com
*.yimg.com
*.www.yahoo.com
*.yimg.com
ue1.yahoo.com
*.buy.yahoo.com
*.fantasysports.yahoo.com
*.ue.yahoo.com
*.abumedia.yahoo.com
*.media.yahoo.com
*.yahoo.com
*.ec.yimg.com
src3.yahoo.com
src3.yahoo.com
*.api.fantasysports.yahoo.com
tw.ptnr.yimg.com
*.ec.yimg.com
ystore.tw
*.vpg.cdn.yimg.com
src3.yahoo.com
*.yahoo.com
*.yahoo.com
*.manhattan.yahoo.com
store1.yimg.com
src3.yahoo.com
yahoo.com
*.manhattan.yahoo.com
*.ec.yimg.com
*.media.yahoo.com
*.yahoo.com
*.yahoo.com
*.media.yahoo.com
ue1.yahoo.com
*.media.yahoo.com
*.abumedia.yahoo.com
*.yahoo.com
http.stgatlas.cdn.yimg.com
*.media.yahoo.com
*.api.fantasysports.yahoo.com
*.api.fantasysports.yahoo.com
*.yahoo.com
*.canary1-bf1.media.yahoo.com
*.ue.yahoo.com
*.abumedia.yahoo.com
*.yahoo.com
*.www.yahoo.com
*.mrs.yimg.com
yahoo.com
*.yahoo.com
*.yahoo.com
*.manhattan.yahoo.com
sr.ycdn.yahoo.com
*.api.fantasysports.yahoo.com
tw.bid.yimg.com
ue1.yahoo.com
src3.yahoo.com
store1.yimg.com
*.yahoo.com
aunz.yimg.com
s-test.yimg.com
*.manhattan.yahoo.com
*.mrs.yimg.com
*.fantasysports.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
yui.yahooapis.com
*.www.yahoo.com
*.yahoo.com
*.weather.yahoo.com
*.abumedia.yahoo.com
*.deals.yahoo.com
*.media.yahoo.com
*.yahoo.com
ue1.yahoo.com
*.yimg.com
store1.yimg.com
*.ue.yahoo.com
*.ec.yimg.com
*.fantasysports.yahoo.com
*.fantasysports.yahoo.com
*.fantasysports.yahoo.com
reg.yimg.com
*.yahoo.com
san1.src.yahoo.com
tw.ptnr.yimg.com
*.yahoo.com
src3.yahoo.com
*.yahoo.com
store1.yimg.com
*.yimg.com
*.yahoo.com
*.yahoo.com
*.yimg.com
src3.yahoo.com
*.yahoo.com
*.abumedia.yahoo.com
*.yahoo.com
*.abumedia.yahoo.com
src3.yahoo.com
*.www.yahoo.com
*.yimg.com
*.www.yahoo.com
*.yimg.com
ue1.yahoo.com
*.buy.yahoo.com
*.fantasysports.yahoo.com
*.ue.yahoo.com
*.abumedia.yahoo.com
*.media.yahoo.com
*.yahoo.com
*.ec.yimg.com
src3.yahoo.com
src3.yahoo.com
*.api.fantasysports.yahoo.com
tw.ptnr.yimg.com
*.ec.yimg.com
ystore.tw
*.vpg.cdn.yimg.com
src3.yahoo.com
*.yahoo.com
*.yahoo.com
*.manhattan.yahoo.com
store1.yimg.com
src3.yahoo.com
yahoo.com
*.manhattan.yahoo.com
*.ec.yimg.com
*.media.yahoo.com
*.yahoo.com
*.yahoo.com
*.media.yahoo.com
ue1.yahoo.com
*.media.yahoo.com
*.abumedia.yahoo.com
*.yahoo.com
http.stgatlas.cdn.yimg.com
*.media.yahoo.com
*.api.fantasysports.yahoo.com
*.api.fantasysports.yahoo.com
*.yahoo.com
*.canary1-bf1.media.yahoo.com
*.ue.yahoo.com
*.abumedia.yahoo.com
*.yahoo.com
*.www.yahoo.com
*.mrs.yimg.com
yahoo.com
*.yahoo.com
*.yahoo.com
*.manhattan.yahoo.com
sr.ycdn.yahoo.com
*.api.fantasysports.yahoo.com
tw.bid.yimg.com
ue1.yahoo.com
src3.yahoo.com
store1.yimg.com
*.yahoo.com
aunz.yimg.com
s-test.yimg.com
*.manhattan.yahoo.com
*.mrs.yimg.com
*.fantasysports.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
yui.yahooapis.com
*.www.yahoo.com
*.yahoo.com
*.weather.yahoo.com
*.abumedia.yahoo.com
*.deals.yahoo.com
*.media.yahoo.com
*.yahoo.com
ue1.yahoo.com
*.yimg.com
store1.yimg.com
*.ue.yahoo.com
*.ec.yimg.com
*.fantasysports.yahoo.com
*.fantasysports.yahoo.com
*.fantasysports.yahoo.com
reg.yimg.com
*.yahoo.com
san1.src.yahoo.com
tw.ptnr.yimg.com
*.yahoo.com
src3.yahoo.com
*.yahoo.com
store1.yimg.com
*.yimg.com
*.yahoo.com
*.yahoo.com
*.yimg.com
src3.yahoo.com
*.yahoo.com
Certificate
The complete raw certificate details for *.ec.yimg.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIQA1Dh4Zy8MEdgg0AE7ZJmqzANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0yNDAxMDMwMDAwMDBaFw0yNDA0MDMyMzU5NTla MGsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRIwEAYDVQQHEwlT dW5ueXZhbGUxGzAZBgNVBAoTEk9hdGggSG9sZGluZ3MgSW5jLjEWMBQGA1UEAwwN Ki5lYy55aW1nLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0N IhDBThUzEOPW3usw44NlZ9yRnYCbZvYIhDSqoq7YEHnHcakXswlqX2WriHQ1cmvE VLLa00AlfixKuxFJzoGAa7qrQeDSAGIP8cZhgffwkJAj1hMD4gbzErLJmQifFg3x IE9aDZaXZJfOXoFeWOJ+lFKEjsfRGpFgmzZ8NLmm4m9JMJHDR5MpuhoLLRFA10xL eoF7VB+fChqrI4pY9j38aMBD35vZ2XUY2RL8StoK5johIe/lWT3aEB1QWwszdQ1G ptxwLsa4IGb3e63FUD+lNIplsoU8H2q7DaLlxJKaJL4XtocRmq3qVVGMGHYZuxun gNLfBLA35+qRseh+sQkCAwEAAaOCAnowggJ2MB8GA1UdIwQYMBaAFFFo/5CvAgd1 PMzZZWRiohK4WXI7MB0GA1UdDgQWBBT3hGM5AB+keOHRb36uec2bhi9FJjCBpAYD VR0RBIGcMIGZgg0qLmVjLnlpbWcuY29tggoqLnlpbWcuY29tgg5jZG4uZmx1cnJ5 LmNvbYITeXVpLXMueWFob29hcGlzLmNvbYIRY2RuLnlhaG9vYXBpcy5jb22CFGVj cC55dXNlcmNvbnRlbnQuY29tghRjZG4ueWFob29maW5hbmNlLmNvbYIYd2lkZ2V0 cy55YWhvb2ZpbmFuY2UuY29tMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYB BQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAy oDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5j cmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZl ci1nNi5jcmwwgYMGCCsGAQUFBwEBBHcwdTAkBggrBgEFBQcwAYYYaHR0cDovL29j c3AuZGlnaWNlcnQuY29tME0GCCsGAQUFBzAChkFodHRwOi8vY2FjZXJ0cy5kaWdp Y2VydC5jb20vRGlnaUNlcnRTSEEySGlnaEFzc3VyYW5jZVNlcnZlckNBLmNydDAM BgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQCMtM9gVErMQlCFPzkyiWSg8EVeFtCCM3/FbtKZRIYPW+26TRElG9MzC6Hk JFoPCaJWNmsI2A9s5288wwankT+qpypuEPZ2E01UkFrHAypqOcPH92+CyjjP8csZ j0iXTN9POXFG1AUflTo8Oty+SPu5UzsOODb4fUEnTDO8TEUHPKfVsejwfUkYMDZu 8SO9BCQJ9UWCbVxbb1c+uHWbaVzeHxyLz9kXXxpdhnlI71Ulp00FQes1pLq/r5jK TXUxTTWKoEgu6B0Y+ysV8JVozKQlIcBC5Ai6fZaTSrkIWa2Un9CnknUGxFQxw+C2 Qt/HHU8wxYks+TcqfDP17XUfOwg5 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ0iEMFOFTMQ49be6zDj g2Vn3JGdgJtm9giENKqirtgQecdxqRezCWpfZauIdDVya8RUstrTQCV+LEq7EUnO gYBruqtB4NIAYg/xxmGB9/CQkCPWEwPiBvMSssmZCJ8WDfEgT1oNlpdkl85egV5Y 4n6UUoSOx9EakWCbNnw0uabib0kwkcNHkym6GgstEUDXTEt6gXtUH58KGqsjilj2 PfxowEPfm9nZdRjZEvxK2grmOiEh7+VZPdoQHVBbCzN1DUam3HAuxrggZvd7rcVQ P6U0imWyhTwfarsNouXEkpokvhe2hxGarepVUYwYdhm7G6eA0t8EsDfn6pGx6H6x CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4407649153042088740797068187865867947 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Holdings Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ec.yimg.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21845702916408758453575796818635373793368570797579093637801687660923966998799374770731603800846189242481646380261941664511461481684995176236189919852583462307125477783715020905962185868212036590695733949401775429426180010587547575946596677113399376808970257816090283724211925000209179414477456283103985828995547443320079686895653105376966023691926363362419169059881272252309173235715221239556579437980620773974169233858861863250203956479649380165943008526087468611298134313689766469688632345146482686686241947403034882979174485292800808019564091065209681657269934893835277536406007420668594302021741835691190957027593 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f7846339001fa478e1d16f7eae79cd9b862f4526 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (156 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ec.yimg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yimg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.flurry.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yui-s.yahooapis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.yahooapis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecp.yusercontent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.yahoofinance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.yahoofinance.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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