subs.communications.yahoo.com

- Oath Holdings Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 09:bf:f7:78:74:d4:08:f3:77:ca:6e:90:85:9b:f7:03 was issued on by DigiCert Inc.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Oath Holdings Inc.

Organization: Oath Holdings Inc.
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:bf:f7:78:74:d4:08:f3:77:ca:6e:90:85:9b:f7:03
Serial Number (int): 12959799960752594290655649966245803779
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 93:74:77:54:08:8c:12:d8:1f:3e:00:2a:66:65:d2:d2:1d:fa:17:f1
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): da:e4:02:54:06:63:60:c9:60:75:c9:ee:41:de:c0:fa:a4:86:5b:2c
Fingerprint (sha256): 06:05:d8:90:3a:a0:7e:3c:94:42:e9:2d:e2:ec:ad:2f:24:04:77:13:f3:58:2c:00:6b:9c:e3:98:e1:d0:f3:2e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate subs.communications.yahoo.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for subs.communications.yahoo.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

subs.communications.yahoo.com
location.userloc.geotech.yahoo.com
astra.assistant.yahoo.com
testvideo.advertising.yahoo.com
mgwsb.maps.yahoo.com
mgws2.maps.yahoo.com
mgws2.dev.maps.yahoo.com
dev.checkout.fantasysports.yahoo.com
qa.checkout.fantasysports.yahoo.com
stage.checkout.fantasysports.yahoo.com
checkout.fantasysports.yahoo.com
ds.cctools.mail.yahoo.com
test.ds.cctools.mail.yahoo.com
*.edna.yahoo.net
cdn.ssp.yahoo.com
geoip.yahoo.net
apis.falcon.yahoo.com
us-east-1-web.ssp.yahoo.com
us-west-1-web.ssp.yahoo.com
ap-southeast-1-web.ssp.yahoo.com
eu-central-1-web.ssp.yahoo.com
stg-pub.msd.athenz.yahoo.com
msd-pub.athenz.yahoo.com
dmxml.simplicita.overture.com
dmxml.skenzo.overture.com
dmxml.dheera.overture.com
dmxml.geocities.overture.com
dmxml.embarq.overture.com
dmxml.nameadmin.overture.com
dmxml.centralnic.overture.com
dmxml.ibario.overture.com
demo.insight.yahoo.com
*.push.yahoo.com
api.radar.yahoo.com
api-stage.radar.yahoo.com
qa-xdrproxy-ycpi.aerospike.yahoo.com
app-caas-public.fp.yahoo.com
hp-darla-proxy-public.fp.yahoo.com
tdv2-app-nel-public.fp.yahoo.com
finance-modserver-content-public.media.yahoo.com
sports-module-server-content-public.media.yahoo.com
public.tdv2-app-fp-production.frontpage-k8s-frontend.omega.yahoo.com
*.aerospike.yahoo.com
*.sherpa-aws-nonprod.yahoo.com
*.sherpa-aws-prod.yahoo.com
assets.video.yahoo.net
a.video.yahoo.net
fp-fallback-service-public.fp.yahoo.com
scrappy-production-public.frontpage-k8s-frontend.omega.yahoo.com
us-scrappy-production-public.frontpage-k8s-frontend.omega.yahoo.com
public.creative-assistant-mtls-production.datascience-creative-assistant.omega.yahoo.com
proxy-onramp.dh.yahoo.com
ingest-ycpi.monitoring.yahoo.com
*.cd.vespahosted.yahoo.com
*.vespahosted.yahoo.com
alpha-gam.mail.yahoosandbox.net
beta-gam.mail.yahoosandbox.net
canary-gam.mail.yahoosandbox.net
gam.mail.yahoosandbox.net
dev-sdk.amp.commerce.yahoo.com
asc-forwarder.stage.splunk.member.yahoo.com
tdv2-app-fp-public.staging.fp.yahoo.com
origin-ncp-gw-frontpage-staging-public.media.yahoo.com
api-qe2bm-prod-gq1-pub.testing-openstack.yahoo.com
*.openstack.yahoo.com
calendar.comms-calendar.us-east-3.ycpi.vespa.oath.cloud
calendar.comms-calendar.us-west-1.ycpi.vespa.oath.cloud
midas.midasbeta.ap-northeast-1.ycpi.vespa.oath.cloud
glance-qe2bm-prod-gq1-pub.testing-openstack.yahoo.com
ycpi.canary-pipeline.global.vespa.oath.cloud
midas.midasbeta.ycpi.nevec.yahoo.com
api.attribution.yahoo.com
stgapi.attribution.yahoo.com

Other certificates including the domain name yahoo.com

(limited to 100 certificates)
digits3.data.yahoo.com
checkout.yahoo.com
*.sonic.mail.yahoo.com
master.data.yahoo.com
login.yahoo.com
backend.paranoids.corp.yahoo.com
qa.edge.ymon.corp.ne1.yahoo.com
*.store.yahoo.com
www.yahoo.com
chilledfilled.corp.gq1.yahoo.com
san.test-paranoids.yahoo.com
allhands.corp.yahoo.com
*.stage.login.yahoo.com
test012.san.test-paranoids.yahoo.com
tw.preview.campaign.money.yahoo.com
stage.api.onepush.mobile.yahoo.com
endurepoor.corp.ir2.yahoo.com
privbin.corp.yahoo.com
tw.mobi.yahoo.com
tw.knowledge.yahoo.com
stg-sandyui-01.netops.corp.gq1.yahoo.com
cosmos.bcp.search.corp.yahoo.com
testdata.factory.vespa.corp.yahoo.com
mobileexcellence.corp.yahoo.com
staging-origin-life.huffpo.net
lab-uic-pub.lab.rich.corp.yahoo.com
pr.comet.yahoo.com
admin.nevec.yahoo.com
steamedesteemed.corp.sg3.yahoo.com
stage.api.pes.yahoo.com
test.dek.ckms.yahoo.com
goglobal-demo.g11n.corp.gq1.yahoo.com
academy-delivery.cc.corp.yahoo.com
beta.api.backyard3.corp.yahoo.com
tw.billing.yahoo.com
sp.analytics.yahoo.com
dwdevetl02.fin.corp.gq1.yahoo.com
uc-gq1-vcenter1.corp.gq1.yahoo.com
backend-stage.paranoids.corp.yahoo.com
wherehaus.stage.geotech.corp.yahoo.com
gq1-psinprd-clu.psi.corp.gq1.yahoo.com
*.jeditools.mail.yahoo.com
kite-tools.pbp.corp.ne1.yahoo.com
origin.qa.dispatcher.yahoo.com
*.ea.ops.yahoo.com
endurepoor.corp.ir2.yahoo.com
*.report.gemini.yahoo.com
api.soln-stage.isvc.cp.yahoo.com
backend-stage.paranoids.corp.yahoo.com
san.test-paranoids.yahoo.com
san.test-paranoids.yahoo.com
tw.db.media.yahoo.com
*.cs.gq1-1.manhattan.gq1.yahoo.com
sh-gdpr.search.yahoo.com
*.abumedia.yahoo.com
*.answers.ycpi.yahoo.com
*.tee.ops.search.yahoo.com
privbin.corp.yahoo.com
oxy-oxygen-4a0620a5.gq1.yahoo.com
e2.ycpi.aeb.yahoo.com
secure02.lithium.com
telco-sg3-jump.sg3.corp.yahoo.com
legacy.pop.mail.yahoo.com
privbin.corp.yahoo.com
admin.ckms.yahoo.com
sp.analytics.yahoo.com
*.api.gemini.yahoo.com
dev.ui.payments.yahoo.com
dspskadpostback.aaca.yahooinc.com
san.test-paranoids.yahoo.com
splunk1.flurry.gq1.yahoo.com
certreloader.demo.yahoo.com
splunk.dspe.yahoo.com
src2.yahoo.com
profileproxy.prod.tgt.bf1.yahoo.com
legaltoolsstage.corp.yahoo.com
test1.yahoo.com
st39.yahoo.com
beta.edit.client.yahoo.com
chat.ouroath.com
endurepoor.corp.ir2.yahoo.com
*.chef.ops.yahoo.com
backend-stage.paranoids.corp.yahoo.com
san.test-paranoids.yahoo.com
manhattan.yahoo.com
dev.productcentral.aol.com
*.tripod.bf2.yahoo.com
ws.mobile.mail.yahoo.com
vpn2-1-gci.eglbp.corp.yahoo.com
endurepoor.corp.ir2.yahoo.com
yakl-rules.ops.yahoo.com
jp.techcrunch.com
ldap-mgmnt.corp.yahoo.com
yql.onepush.mobile.yahoo.com
*.hlfs.yahoo.com
*.wv.msg.yahoo.com
endurepoor.corp.ir2.yahoo.com
ads.vidible.tv
kronostest.fin.corp.yahoo.com
api.native.yahooinc.com

Certificate

The complete raw certificate details for subs.communications.yahoo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAETwF4MiwzUrAP012UrmQCxFPhXin5
dsxmuj07sEA2676hKYY+X9fccsgriofif3aBm4RzAsZXeZiks7JpH5qGfQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12959799960752594290655649966245803779
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Holdings Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subs.communications.yahoo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00044f0178322c3352b00fd35d94ae6402c453e15e29f976cc66ba3d3bb04036ebbea129863e5fd7dc72c82b8a87e27f76819b847302c6577998a4b3b2691f9a867d
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93747754088c12d81f3e002a6665d2d21dfa17f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2543 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subs.communications.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'location.userloc.geotech.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astra.assistant.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testvideo.advertising.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgwsb.maps.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgws2.maps.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgws2.dev.maps.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.checkout.fantasysports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.checkout.fantasysports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.checkout.fantasysports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.fantasysports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds.cctools.mail.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ds.cctools.mail.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edna.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ssp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoip.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.falcon.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-east-1-web.ssp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-west-1-web.ssp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-southeast-1-web.ssp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-central-1-web.ssp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-pub.msd.athenz.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msd-pub.athenz.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmxml.simplicita.overture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmxml.skenzo.overture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmxml.dheera.overture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmxml.geocities.overture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmxml.embarq.overture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmxml.nameadmin.overture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmxml.centralnic.overture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmxml.ibario.overture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.insight.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.push.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.radar.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stage.radar.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-xdrproxy-ycpi.aerospike.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-caas-public.fp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hp-darla-proxy-public.fp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdv2-app-nel-public.fp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance-modserver-content-public.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sports-module-server-content-public.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.tdv2-app-fp-production.frontpage-k8s-frontend.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aerospike.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherpa-aws-nonprod.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherpa-aws-prod.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.video.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.video.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-fallback-service-public.fp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrappy-production-public.frontpage-k8s-frontend.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-scrappy-production-public.frontpage-k8s-frontend.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.creative-assistant-mtls-production.datascience-creative-assistant.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxy-onramp.dh.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingest-ycpi.monitoring.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cd.vespahosted.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vespahosted.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha-gam.mail.yahoosandbox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-gam.mail.yahoosandbox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canary-gam.mail.yahoosandbox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gam.mail.yahoosandbox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-sdk.amp.commerce.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asc-forwarder.stage.splunk.member.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdv2-app-fp-public.staging.fp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-ncp-gw-frontpage-staging-public.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qe2bm-prod-gq1-pub.testing-openstack.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openstack.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendar.comms-calendar.us-east-3.ycpi.vespa.oath.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendar.comms-calendar.us-west-1.ycpi.vespa.oath.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midas.midasbeta.ap-northeast-1.ycpi.vespa.oath.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glance-qe2bm-prod-gq1-pub.testing-openstack.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ycpi.canary-pipeline.global.vespa.oath.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midas.midasbeta.ycpi.nevec.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.attribution.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgapi.attribution.yahoo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003d38789732af23f8334f6d63bf9a7df1d00b6e4ae431b100b13ade910fe2883b9f59826d8a7e4dde64971aece9201c6adc009b54743469381dac08396f9fd4f55e3154d7bd44e40d2d29bcc592e38217f9e7f79e704b42739ae82cd0d9b495a7bc06c3c8ab6eb60b0fa5d34884e0c55d9fd66e8b2a3167f3e852ea8c81e43a2548daa5512a8c489d34b60b300cfe863a395a968da5836cd5f89fb891cb327d8b962088ec458d2e2c4a931525e18d00b56f1d43357c8f20e633f3f154ed55b528885353a54b744b29b1c4f0289bb76711557f0a20c87820bc9a6d8ecbe50734a7463ec19fd738ef2ad9248e8b4b5d11d4585f3c2050f3d05c05c29b061dba02d8