wwaw.svcs.qa.weightwatchers.com

- Weight Watchers International -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 3f:53:13:1d:03:14:38:52:d0:23:a9:7d:45:87:b8:e8 was issued on by GeoTrust Inc..

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Weight Watchers International

Organization: Weight Watchers International
Organization unit: IT
State / Province: New York
Locality: New York
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:53:13:1d:03:14:38:52:d0:23:a9:7d:45:87:b8:e8
Serial Number (int): 84172712038060172507522121277096048872
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 09:d9:a4:ab:64:70:6e:f1:37:b6:16:7e:9b:c9:47:ca:f6:67:eb:c6
Fingerprint (sha256): 05:75:b3:4c:cb:a6:4c:b7:a0:6e:66:6d:00:89:4c:13:e2:10:f4:ca:c5:18:cd:a8:52:dd:60:f5:e0:a3:c7:4f

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate wwaw.svcs.qa.weightwatchers.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wwaw.svcs.qa.weightwatchers.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

community.qat3.weightwatchers.com
cmx.qa.fr.weightwatchers.be
cmx.qat2.fr.weightwatchers.ca
cmx.psqa.weightwatchers.com.au
cmx.qa.fr.weightwatchers.ca
community.qa.weightwatchers.com
wwaw.svcs.qa.weightwatchers.fr
wwaw.svcs.qa.weightwatchers.ca
cmx.qa.weightwatchers.de
cmx.qa.weightwatchers.nl
cmx.qa.weightwatchers.be
community.devstage2.weightwatchers.com
community.devstage6.weightwatchers.com
community.devstage1.weightwatchers.com
cmx.weightwatchers.nl
cmx.psqa.weightwatchers.fr
cmx.psqa.fr.weightwatchers.ca
cmx.fr.weightwatchers.ca
cmx.weightwatchers.fr
cmx.psqa.weightwatchers.ca
cmx.entulinea.es
cmx.weightwatchers.com.au
cmx.qa.viktvaktarna.se
cmx.psqa.weightwatchers.de
cmx.weightwatchers.de
cmx.qa.entulinea.es
www.devstage5.weightwatchers.de
www.devstage7.weightwatchers.de
wwaw.svcs.qa.fr.weightwatchers.ca
community.devstage5.weightwatchers.com
cmx.qat2.weightwatchers.co.uk
cmx.qat2.weightwatchers.ca
wwaw.svcs.qat2.weightwatchers.fr
www.devstage4.weightwatchers.de
cmx.qa.weightwatchers.ca
cmx.psqa.weightwatchers.com
wwaw.svcs.qa.weightwatchers.de
wwaw.svcs.qat2.fr.weightwatchers.ca
community.devstage7.weightwatchers.com
wwaw.svcs.qat2.weightwatchers.ca
wwaw.svcs.psqa.fr.weightwatchers.ca
cmx.qat2.weightwatchers.com.au
cmx.psqa.fr.weightwatchers.be
cmx.psqa.weightwatchers.co.uk
www.devstage2.weightwatchers.de
cmx.qat2.weightwatchers.fr
community.devstage4.weightwatchers.com
cmx.psqa.viktvaktarna.se
community.qat2.weightwatchers.com
wwaw.svcs.psqa.weightwatchers.fr
cmx.weightwatchers.be
cmx.weightwatchers.ca
cmx.qa.weightwatchers.fr
cmx.psqa.weightwatchers.be
cmx.fr.weightwatchers.be
wwaw.svcs.psqa.weightwatchers.ca
cmx.psqa.entulinea.es
cmx.psqa.weightwatchers.nl
wwaw.svcs.qat2.weightwatchers.com
cmx.qa.weightwatchers.com
community.psqa.weightwatchers.com
community.weightwatchers.com
cmx.qat2.weightwatchers.com
wwaw.svcs.qat2.weightwatchers.de
cmx.qa.weightwatchers.com.au
cmx.qat2.weightwatchers.be
wwaw.svcs.psqa.weightwatchers.com
cmx.weightwatchers.co.uk
cmx.qat2.viktvaktarna.se
wwaw.svcs.psqa.weightwatchers.de
cmx.weightwatchers.com
community.devstage3.weightwatchers.com
cmx.qa.weightwatchers.co.uk
www.devstage6.weightwatchers.de
cmx.qat2.fr.weightwatchers.be
www.devstage3.weightwatchers.de
cmx.qat2.entulinea.es
cmx.viktvaktarna.se
www.devstage1.weightwatchers.de
cmx.qat2.weightwatchers.de
cmx.qat2.weightwatchers.nl
wwaw.svcs.qa.weightwatchers.com

Other certificates including the domain name weightwatchers.com

(limited to 100 certificates)
api.retail.qat2.weightwatchers.com
*.weightwatchers.com
prospective.shared.global.fastly.net
new.weightwatchers.com
wwcruisesweeps.weightwatchers.com
*.weightwatchers.com
*.staging.ctech.weightwatchers.com
*.weightwatchers.com
answers-texaneyecare.pagescdn.com
www.devstage1.weightwatchers.com
*.staging.ctech.weightwatchers.com
www.weightwatchers.co.uk
new.weightwatchers.com
prospective.shared.global.fastly.net
rewards.weightwatchers.com
wwapp.tools.weightwatchers.com
*.corp.weightwatchers.com
e.ww.svcs.qat2.weightwatchers.com
signup.mobile.weightwatchers.com
*.devstage4.weightwatchers.com
shop.live.weightwatchers.com
es.soa.qat2.weightwatchers.com
*.weightwatchers.com
na.erp.weightwatchers.com
mag.corp.weightwatchers.com
clinic.weightwatchers.com
join.weightwatchers.com
wwaw.svcs.qa.weightwatchers.com
www.weightwatchers.co.uk
cfjump.weightwatchers.com
preview.store.weightwatchers.com
auth.eu.weightwatchers.com
*.staging.ctech.weightwatchers.com
*.qa.weightwatchers.com
www.gtm.weightwatchers.com
gtm.weightwatchers.com
*.tools.weightwatchers.com
prospective.shared.global.fastly.net
privacy.weightwatchers.com
prospective.shared.global.fastly.net
rundeck.qa.weightwatchers.com
prospective.shared.global.fastly.net
mobile.psqa.weightwatchers.co.uk
api.devstage1.weightwatchers.com
knapia.weightwatchers.com
mobile.qat4.weightwatchers.com
api.weightwatchers.com
admanager.corp.weightwatchers.com
*.qat2.weightwatchers.com
weightwatchers.com
prospective.shared.global.fastly.net
customer-test.ssl.fastly.net
www.devstage1.weightwatchers.com
mi.weightwatchers.com
wwapp.tools.weightwatchers.com
workshopcoaches.weightwatchers.com
prospective.shared.global.fastly.net
*.weightwatchers.com
www.qa.weightwatchers.com
clinic.weightwatchers.com
*.weightwatchers.com
prospective.shared.global.fastly.net
*.qat2.weightwatchers.com
cms.tools.weightwatchers.com
mobile.psqa.weightwatchers.co.uk
preview.store.weightwatchers.com
*.weightwatchers.com
mi.weightwatchers.com
*.weightwatchers.com
*.weightwatchers.com
www.qa.weightwatchers.com
*.weightwatchers.com
spice.weightwatchers.com
*.devstage4.weightwatchers.com
*.weightwatchers.com
*.weightwatchers.com
customercare.weightwatchers.com
prospective.shared.global.fastly.net
wwaw.svcs.qa.weightwatchers.com
sts.weightwatchers.com
weightwatchers.com
*.weightwatchers.com
blog-hitchhikers.yext.com
help.weightwatchers.com
*.staging.ctech.weightwatchers.com
getstarted.weightwatchers.com
rb87ymi4.weightwatchers.com
prospective.shared.global.fastly.net
dps-stage.pluralsight.com
sts.weightwatchers.com
*.svcs.weightwatchers.com
*.psqa.weightwatchers.com
new.weightwatchers.com
prospective.shared.global.fastly.net
*.qat2.weightwatchers.com
mobile.psqa.weightwatchers.co.uk
help.qa.weightwatchers.com
live.weightwatchers.com
mobile.qa.weightwatchers.com
mi.weightwatchers.com

Certificate

The complete raw certificate details for wwaw.svcs.qa.weightwatchers.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AK3skGwAwBzN09bjsQv
TsBEotFMyDL5R3Za0ZI0b7mnJsgsqomfbjfUpuLXhmvn8EIIqvTDQay1HsIExuZK
3jNKKdVRjrP1av5XjhJGDdiHJeObduUnnoZ0oTxvSAtCCeeM4cUAedKHQ6qrt4pt
bkwvOuM92vgKCtBlfzlBSoey029Tvic64tFKgIkqfaduUEbcssudc9m1zNJbmyP8
+uEopV63F3WXSAvTcOLCIEhxVAkdvACaF/sgV4H1DzHlw83iBNAR/sPXeTyit+v0
yz/z1YlbE0dw+RmbxMYk5p+B2vC+2vx5yTEDmvAPxwe9l+a7lXgSVpDk9JvbPtQP
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84172712038060172507522121277096048872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Weight Watchers International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'wwaw.svcs.qa.weightwatchers.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27773767173153518413407999029196069503954080049750515457457072656487241549585900492473680485236739467855215265091454183624465574121042233685507379136967983968809552453988001699034369037297920657646692127590110145165480937173441630318160171352600413166907321273751042791788078254158958524621057456913894002198647657217750507311411676139630700902999516997787770705793032906986149650958787383736259307792401876195816096029984023413037993806428824474538594891468353310092738364029521294140803374666126631313206505921244673934101636651424607230960159582050763687107467964433277066320435519590790379551502650769699669020521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.qat3.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qa.fr.weightwatchers.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qat2.fr.weightwatchers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.psqa.weightwatchers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qa.fr.weightwatchers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.qa.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwaw.svcs.qa.weightwatchers.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwaw.svcs.qa.weightwatchers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qa.weightwatchers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qa.weightwatchers.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qa.weightwatchers.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.devstage2.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.devstage6.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.devstage1.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.weightwatchers.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.psqa.weightwatchers.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.psqa.fr.weightwatchers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.fr.weightwatchers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.weightwatchers.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.psqa.weightwatchers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.entulinea.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.weightwatchers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qa.viktvaktarna.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.psqa.weightwatchers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.weightwatchers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qa.entulinea.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devstage5.weightwatchers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devstage7.weightwatchers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwaw.svcs.qa.fr.weightwatchers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.devstage5.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qat2.weightwatchers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qat2.weightwatchers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwaw.svcs.qat2.weightwatchers.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devstage4.weightwatchers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qa.weightwatchers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.psqa.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwaw.svcs.qa.weightwatchers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwaw.svcs.qat2.fr.weightwatchers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.devstage7.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwaw.svcs.qat2.weightwatchers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwaw.svcs.psqa.fr.weightwatchers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qat2.weightwatchers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.psqa.fr.weightwatchers.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.psqa.weightwatchers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devstage2.weightwatchers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qat2.weightwatchers.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.devstage4.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.psqa.viktvaktarna.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.qat2.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwaw.svcs.psqa.weightwatchers.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.weightwatchers.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.weightwatchers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qa.weightwatchers.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.psqa.weightwatchers.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.fr.weightwatchers.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwaw.svcs.psqa.weightwatchers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.psqa.entulinea.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.psqa.weightwatchers.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwaw.svcs.qat2.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qa.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.psqa.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qat2.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwaw.svcs.qat2.weightwatchers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qa.weightwatchers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qat2.weightwatchers.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwaw.svcs.psqa.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.weightwatchers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qat2.viktvaktarna.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwaw.svcs.psqa.weightwatchers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.devstage3.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qa.weightwatchers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devstage6.weightwatchers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qat2.fr.weightwatchers.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devstage3.weightwatchers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qat2.entulinea.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.viktvaktarna.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devstage1.weightwatchers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qat2.weightwatchers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmx.qat2.weightwatchers.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwaw.svcs.qa.weightwatchers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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