settings3.ebay.com

- eBay, Inc. -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number ca:7a:a7:f6:b0:9e:b2:de:fa:e9:00:c1:7c:b4:26:ba was issued on by Sectigo Limited.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

eBay, Inc.

Organization: eBay, Inc.
State / Province: California
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): ca:7a:a7:f6:b0:9e:b2:de:fa:e9:00:c1:7c:b4:26:ba
Serial Number (int): 269140922072487260337784555607180977850
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 20:32:f8:a5:a8:bf:b8:08:60:ac:bf:64:68:75:74:35:30:8a:ef:ba
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 3f:9c:d4:cc:c6:5c:23:4c:50:76:6b:24:42:85:a6:e0:4b:c2:cf:b4
Fingerprint (sha256): 04:cb:6d:38:bf:41:40:45:9c:be:61:fe:d7:4a:67:ea:67:ac:e2:91:c7:6e:08:20:76:fb:bf:b2:8f:2c:dc:22

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate settings3.ebay.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for settings3.ebay.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

settings3.ebay.com
settings3.befr.ebay.be
settings3.benl.ebay.be
settings3.cafr.ebay.ca
settings3.ebay.at
settings3.ebay.ca
settings3.ebay.ch
settings3.ebay.co.uk
settings3.ebay.com.au
settings3.ebay.com.hk
settings3.ebay.com.my
settings3.ebay.com.sg
settings3.ebay.de
settings3.ebay.es
settings3.ebay.fr
settings3.ebay.ie
settings3.ebay.in
settings3.ebay.it
settings3.ebay.nl
settings3.ebay.ph
settings3.ebay.pl

Other certificates including the domain name ebay.com

(limited to 100 certificates)
apix.ebay.com
shorturisvc1.ebay.com
app-api.altus.vip.ebay.com
ocshelpbotweb.ebay.com
mobixo.ebay.com
postorder.ebay.com
sso.gumtreeau.salesforce.ebay.com
secureregistration.ebay.com
www.kiosk.ebay.com
byron.vip.ebay.com
sonar-01.vip.qa.ebay.com
sppil.ebay.com
reshubui.ebay.com
ebay01.secure.lithium.com
mdmlab.corp.ebay.com
eBay Inc.
giftcards.ebay.com
ufesnew-kgvrfn-public-rnoaz03-1-1.ebay.com
sso.ebay.com
triton-alpha.ebay.com
www.ebay.com
sgapacshippingtool.ebay.com
offer.ebay.com
ir.ebay.com
mesg.befr.ebay.be
mesg.ebay.com
metrics.ebay.com
stores.ebay.com
zeus-na.corp.ebay.com
payments.shopping.ebay.com
lvs-pcmqa-014.corp.ebay.com
bizpolicy.ebay.com
rtm-ext.befr.ebay.be
PHX-PCMQA-001.corp.ebay.com
ocsrest.ebay.com
corpcitrix.corp.ebay.com
ficapp.ebay.com
paicapp.ebay.com
mesg.ebay.com
DUBSIPLB.corp.ebay.com
lyltrwdsecapplication.ebay.com
epn.ebay.ca
securefeedback.ebay.com
remedyhub.ebay.com
poces6testhttps-slc07-kibana-vip-nmgm2.vip.stratus.slc.ebay.com
sarweb.ebay.com
www.ebay.com
affaires.stores.shop.cafr.ebay.ca
pgcservice.ebay.com
shiptrack.ebay.com
vod.ebay.com
cart-new.sandbox.ebay.com
autosug.ebay.com
lyltrwdcore.ebay.com
rppbrw.ebay.com
ocsnode.ebay.com
lvs-pcmas-013.corp.ebay.com
spesvc.ebay.com
idauth.ebay.com
apinot.sandbox.ebay.com
ocshelpbotweb.ebay.com
xtestmail.corp.ebay.com
pages.ebay.com
checkout.half.ebay.com
fedauth.sandbox.ebay.com
developer.ebay.com
mbuy.ebay.com
psoc-pixel.ebay.com
payments.in.paradise.qa.ebay.com
picupload.g.sandbox.ebay.com
k2b-bulk.sandbox.ebay.com
reward.befr.ebay.be
ocs.ebay.com
aanbiedingen.stores.shop.benl.ebay.be
qsx-dev.corp.ebay.com
pls.ebay.com
backstory.shopping.com
cskb-search.vip.ebay.com
stratus.ebay.com
idauth.ebay.com
app.altus.vip.ebay.com
msa-lfn.ebay.com
mobipushpkg.ebay.com
ilowebapp.ebay.com
den-qntas-qa.corp.ebay.com
mediasvcs-new.sandbox.ebay.com
members.befr.ebay.be
sellerstandards.ebay.com
fedauth.ebay.com
tokenaccess.corp.ebay.com
loyalty.ebay.com
stores.strnewcustompage.ebay.com
abbigliamento.stores.shop.ebay.it
www.ebay.com.tw
abbigliamento.stores.shop.ebay.it
r1mediasvc.ebay.com
shipportal.ebay.com
bhssecure.stratus.ebay.com
ssoqa.corp.ebay.com
guestcheckout.payments.ebay.com

Certificate

The complete raw certificate details for settings3.ebay.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg02nN1c9j8S+t2nZfvga
QWLQoS/stPPQ9Y7noZ1B2ErIggw1OT22+secemGJA+6s+HAXYf06avdWsrMR8izw
6aepFsj7/BnTNjEVV8hyKCokPm3U56VmrByMNNPpRDEmz/nrc4KETzqT6MxmChTg
dJwLpNy8QjVMKYaOXbtzyL6a+dwpqXvvc+I/06sq0IZOxDuWY9ZYKkX5flmVlvTH
3Hilx16WFigw90Y3KujmYPx/0NQCxcpMPkX+ee+9nbwCwuupq0QXGE1g1XwPjXJh
5ttOsTnsZx1yW3COFYFPAbnddXgkRH3QurIHduarYkPpbbnGwQ/bEpxCP09qnHyY
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269140922072487260337784555607180977850
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eBay, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'settings3.ebay.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16575510164817252581656049694587944977853554000041654026830432954930275629029000529314442312654157726790673781791292225872237305058666225368636510459084726256045728433878225717604597915938243281472419611704286313199788832689221179880924958766415041074475279138668282923004900515882731379211586422853645555057298366786359632280331493892013741196159228207102821625081620498191662826596830632486831232522349307328159501958627404384636034085803337462760129057937709395311909128321771560353837847415677613997961627319987003574595850190700582602571411269187106701005868259981139487670414284610977227318750975856152065906923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2032f8a5a8bfb80860acbf6468757435308aefba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (438 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.ebay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.befr.ebay.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.benl.ebay.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.cafr.ebay.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.ebay.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.ebay.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.ebay.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.ebay.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.ebay.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.ebay.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.ebay.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.ebay.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.ebay.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.ebay.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.ebay.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.ebay.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.ebay.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.ebay.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.ebay.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.ebay.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings3.ebay.pl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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