intl.comms.yahoo.net

- Yahoo Holdings Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 08:61:97:fc:a4:7e:8e:a3:0b:a0:04:67:d3:2c:75:91 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Yahoo Holdings Inc.

Organization: Yahoo Holdings Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:61:97:fc:a4:7e:8e:a3:0b:a0:04:67:d3:2c:75:91
Serial Number (int): 11140559421812850107714564660013069713
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 79:54:da:70:c4:7d:d4:76:f6:5c:59:39:7c:69:60:84:09:36:36:56
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): cf:e5:27:85:60:85:29:25:4e:0d:fa:d0:96:96:20:d9:34:6f:03:61
Fingerprint (sha256): 08:52:4a:36:ac:bd:79:9e:fe:be:48:94:86:9e:e1:e4:8a:f8:6a:f9:6e:f8:77:cd:3f:7f:8f:5f:36:e4:b1:27

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate intl.comms.yahoo.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intl.comms.yahoo.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

intl.comms.yahoo.net

Other certificates including the domain name yahoo.net

(limited to 100 certificates)
secure.sportz.io
stacksocial.com
login.yahoo.com
*.store.yahoo.com
*.stage.login.yahoo.com
*.abumedia.yahoo.com
src2.yahoo.com
jp.techcrunch.com
*.aol.com
*.yahoo.com
pp-scm.shp.tw1.yahoo.net
*.abumedia.yahoo.com
src4.yahoo.com
*.ads.yahoo.com
*.autos.yahoo.com
*.add.my.aol.com
*.ads.yahoo.com
subs.communications.yahoo.com
src7.yahoo.com
src3.yahoo.com
src4.yahoo.com
n.main.welcomescreen.aol.com
src4.yahoo.com
partneroffers.comms.yahoo.net
src7.yahoo.com
help.smallbusiness.yahoo.net
*.login.yahoo.com
*.www.yahoo.com
ue1.yahoo.com
*.fantasysports.yahoo.com
*.autos.yahoo.com
*.ads.yahoo.com
*.pubgw.ads.yahoo.com
*.ue.yahoo.com
*.abumedia.yahoo.com
*.media.yahoo.com
yodelers.yahoo.net
src4.yahoo.com
src2.yahoo.com
*.yahoo.com
contextualads.yahoo.net
src3.yahoo.com
src3.yahoo.com
*.csell.store.yahoo.net
contextualads.yahoo.net
yho.com
jp.techcrunch.com
jp.techcrunch.com
community.yahoo.net
*.sni.ue.yahoo.com
hk.mobilecms.auctions.yahoo.net
*.api.fantasysports.yahoo.com
secure02.lithium.com
rtb-cache-useast.hb.yahoo.net
ssb.searchmarketing.yahoo.net
stage.guce.oath.com
fastpush-cricket.yahoo.net
src4.yahoo.com
src1.yahoo.com
*.autos.yahoo.com
www1.yahoo.com
sports.yahoo.com
src4.yahoo.com
ystore.tw
*.aol.com
src4.yahoo.com
premiumservices.comms.yahoo.net
*.style.yahoo.com
*.pubgw.ads.yahoo.com
src3.yahoo.com
subs.communications.yahoo.com
*.autos.yahoo.com
*.answers.search.yahoo.com
tw.screener.finance.yahoo.net
*.ads.yahoo.com
*.eurosport.yahoo.com
finance.comms.yahoo.net
analytics.query.yahoo.com
src2.yahoo.com
jp.techcrunch.com
stage.guce.oath.com
stage.guce.oath.com
stacksocial.com
jp.techcrunch.com
*.yahoo.com
*.manhattan.yahoo.com
*.autos.yahoo.com
*.search.yahoo.com
search.comms.yahoo.net
src3.yahoo.com
yahoo.com
san3.src.yahoo.com
contextualads.yahoo.net
*.answers.search.yahoo.com
*.eurosport.yahoo.com
*.style.yahoo.com
subs.communications.yahoo.com
hk.movies.yahoo.net
intl.comms.yahoo.net
secure02.lithium.com

Certificate

The complete raw certificate details for intl.comms.yahoo.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsELe0d1h660HwniI1/+8
fppxXNwPbYhgjDHwOIjlCrylYRXWthLLOIq4eoDxFaNnSuJqTHVg6NykjL8wjcn4
Mmf/FYBAbBaEZmO5Iy/3of/hrp/z+yIzdsk1oOrAJEmP2LABWBjx7mQ/mv12W71+
rlGIpe7aCXlLwafcbFJV7m8a/bhY5sXDnHzqmfFAgAHfVhz/11GjtagwBm4aBqVR
jGcHBN8UpKgnclewS2fpVUS4Ij90vdV/Dk9+b6QX7BpGg9pheRO/w+y8z5V1QaVZ
JMdvJre2OpMDl4BR8gTveMj36uipHe9x1xB5O2mDbZOc20rq1919xhESnBeGDoL0
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11140559421812850107714564660013069713
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Yahoo Holdings Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intl.comms.yahoo.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22250916692223747914793194867330792468806500998395460676585968161734119489963497843988845333501225588487333954127940731935349140285011845438114736654830178699426018367322835609119947375416041430332166164026514774015768351716759227075247933714994758515053330619140359405919020527092242365134436057713621845985155501754085091022344919497822551478794451608465902264017495207792513346673701014219631899966652912761979272651533747022988485787819134420222122326717599724011264264819627988904465922613421238231359106209968719495198374110124562134759428574416766451822413469036963805066127050488498610641598014661195844482109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7954da70c47dd476f65c59397c69608409363656
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intl.comms.yahoo.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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