www.adtech.yahooinc.com

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 05:23:9b:70:d1:65:c2:53:d6:ab:ce:af:ef:a3:e1:63 was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.adtech.yahooinc.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:23:9b:70:d1:65:c2:53:d6:ab:ce:af:ef:a3:e1:63
Serial Number (int): 6831023080821452184127441313154195811
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 91:04:a9:17:e7:3f:1a:36:36:e4:b2:8a:49:91:6f:ff:76:d0:85:db
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): fa:1b:ea:b0:25:a5:fd:f9:f0:13:02:a0:7e:80:c7:4b:4c:ca:d1:47
Fingerprint (sha256): 07:aa:8d:82:a0:16:1c:6c:b8:97:78:f4:ef:bf:7c:c3:31:76:47:0b:81:d2:98:47:58:54:9d:16:51:8d:ba:12

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate www.adtech.yahooinc.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.adtech.yahooinc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.adtech.yahooinc.com
adtechb2b.yahooinc.com
es.www.adtech.yahooinc.com
fr.www.adtech.yahooinc.com
de.www.adtech.yahooinc.com
it.www.adtech.yahooinc.com
pt-br.www.adtech.yahooinc.com
pt.www.adtech.yahooinc.com

Other certificates including the domain name yahooinc.com

(limited to 100 certificates)
dspskadpostback.aaca.yahooinc.com
api.native.yahooinc.com
www.yahooinc.com
*.autos.yahoo.com
*.ssp.verizonmedia.com
src7.yahoo.com
api.gemini.yahoo.com
src4.yahoo.com
src4.yahoo.com
ssp.yahooinc.com
src7.yahoo.com
careers-real.yahoo.com
a.a.b.c.d.yahooinc.com
yho.com
sdk.yahooinc.com
src4.yahoo.com
src1.yahoo.com
src1.yahoo.com
src1.yahoo.com
*.autos.yahoo.com
src4.yahoo.com
src4.yahoo.com
id-uat.b2b.yahooinc.com
www.academy.yahooinc.com
zeus-ui-uat.b2b.yahooinc.com
stage-legal.yahoo.com
blog.postmaster.yahooinc.com
api-uat.amt.yahooinc.com
www.adtech.yahooinc.com
src1.yahoo.com
one-qa.aol.com
api.native.yahooinc.com
dev.reports.yahooinc.com
edgecastpages.yahooinc.com
*.autos.yahoo.com
postmaster.yahooinc.com
dspskadpostback.aaca.yahooinc.com
src2.yahoo.com
src1.yahoo.com
src1.yahoo.com
stage.smp.verizonmedia.com
authz.yahooinc.com
yho.com
src2.yahoo.com
*.eurosport.yahoo.com
theshop.yahooinc.com
dspskadpostback.aaca.yahooinc.com
tw.api.srch.ect.yahoo.com
src4.yahoo.com
id-uat.b2b.yahooinc.com
stage-careers-real.yahoo.com
adtechem.yahooinc.com
src1.yahoo.com
src4.yahoo.com
tw.api.srch.ect.yahoo.com
adtechpages.yahooinc.com
www.yahooinc.com
tw.api.srch.ect.yahoo.com
tw.api.srch.ect.yahoo.com
apac1.creativestudios.yahooinc.com
ssp.yahooinc.com
smart.yahooinc.com
tw.api.srch.ect.yahoo.com
widgets.ssp.yahooinc.com
api.native.yahooinc.com
a.a.b.c.d.yahooinc.com
postmaster.yahooinc.com
*.ssp.yahooinc.com
*.help.yahoo.com
*.autos.yahoo.com
src1.yahoo.com
beta-legal.yahoo.com
*.ssp.verizonmedia.com
apac.creativestudios.yahooinc.com
src2.yahoo.com
advertising.yahooinc.com
dev.postmaster.yahooinc.com
dspskadpostback.aaca.yahooinc.com
src2.yahoo.com
stage.consent.oath.com
artifactory.yahooinc.com
yho.com
src2.yahoo.com
*.adtech.backyard.yahooinc.com
widgets.ssp.yahooinc.com
id.b2b.yahooinc.com
yho.com
src1.yahoo.com
yho.com
api.ssp.yahooinc.com
dspskadpostback.aaca.yahooinc.com
dspskadpostback.aaca.yahooinc.com
api.openrtb.ssp.yahooinc.com
dev.gvp.vzbuilders.com
id.b2b.yahooinc.com
id-uat.b2b.yahooinc.com
*.autos.yahoo.com
src2.yahoo.com
id-uat.amt.yahooinc.com
id-perf.b2b.yahooinc.com

Certificate

The complete raw certificate details for www.adtech.yahooinc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJPbKF3vHJllI4T++bcO
it0+aeVI9/hQQXcVQ+sS55/vYcTZw11/4D3/E50PYBywpwgwYVi7Q94mPiL91AwI
S4Zas6rQsVf9pNJYzv/j/fryJzFud8g8BPfxou+stuVIVQjd/Fj35s4NwHcfbMyl
B0nH1J54WNk9nZ946OcD1Uw1U4xKcB5mGTWCfwOrfAJpX9CUBVEDcKfAOD25Czyn
6vFxWA48wtbCJVttleQqFUl7XcqxKkXODSHf0H8qd20c5tNU2cANRtu4c4yHkBJM
UZSbc1Nxksb6TJpAm3YTZ7dhkDK+/JmHHL+ozWOjsaAxgAEMvSOIKhxv2ozKjY+d
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6831023080821452184127441313154195811
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.adtech.yahooinc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18251226467891757807479472679299156963534842911878125593512998273160601932502113280800164518344416559907108561703713507338350717820893218281949527542495987155299336025471925217397381132257953165053256842209626225831367146754963589844109239038634888715020482250132003731868888050221614879372513278890704124912673400973937385307663511157593486773556685454359883374247758202588279663594340189364581138105132108878917975075642741868930593118532899927540096737789470994800652441114359521728854731160437903957291385997393269155493466403654263623755758591018380056797682164383829187156495953880096519388085774978951756619209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9104a917e73f1a3636e4b28a49916fff76d085db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (223 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adtech.yahooinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtechb2b.yahooinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.www.adtech.yahooinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.www.adtech.yahooinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.www.adtech.yahooinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.www.adtech.yahooinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt-br.www.adtech.yahooinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.www.adtech.yahooinc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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