bill.wmconnect.com

- Oath Holdings Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 08:93:7d:a8:ef:b5:da:ea:f9:24:1b:4e:c1:5c:9a:38 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oath Holdings Inc.

Organization: Oath Holdings Inc.
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:93:7d:a8:ef:b5:da:ea:f9:24:1b:4e:c1:5c:9a:38
Serial Number (int): 11399640290202472230871750740639783480
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cc:1c:bc:03:52:4e:51:8a:2b:6e:1b:d1:a7:c4:f6:ef:ad:24:08:3b
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 3b:32:01:4d:5d:25:5f:5f:b5:1d:52:b7:0c:af:12:b9:af:2f:48:51
Fingerprint (sha256): 08:d9:ba:bd:a6:fc:ba:8c:b3:d2:92:e1:5e:0d:c2:07:82:61:7c:ed:2e:82:6f:c8:97:67:2d:3d:ac:fb:e8:12

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate bill.wmconnect.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bill.wmconnect.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bill.wmconnect.com
billupdate.compuserve.com
channels.netscape.com
connect.netscape.com
free.compuserve.com
go.compuserve.com
highspeed.aol.ca
images.compuserve.com
isp.netscape.com
*.isp.netscape.com
lite.aol.com
member.compuserve.com
myaccount.wmconnect.com
mybenefits.compuserve.com
mybenefits.netscape.com
mybenefits.wmconnect.com
netscape.compuserve.com
password.aol.ca
password.compuserve.com
password.wmconnect.com
ps-search.aol.com
pslca.web.aol.com
swdownload.aol.ca
updatemybill.compuserve.com
webcenters.netscape.compuserve.com
websearch.cs.com
www.cs.com
www.getnetscape.com
www.wmconnect.com
www.compuserve.com
membernotifications.aol.com
admin.isp-qe.netscape.com
admin.isp-stage.netscape.com
connect-qa.netscape.com
free-qa.compuserve.com
go-qa.compuserve.com
highspeed-qa.aol.ca
images-dev.compuserve.com
images-qa.compuserve.com
isp-qa.netscape.com
isp-qe.netscape.com
isp-stage.netscape.com
lite-qa.aol.com
member-qa.compuserve.com
myaccount.isp-qe.netscape.com
myaccount.isp-stage.netscape.com
netscape-qa.compuserve.com
ps-search-qa.aol.com
register.isp-qe.netscape.com
register.isp-stage.netscape.com
swdownload-qa.aol.ca
webcenters-qa.netscape.compuserve.com
wmconnect-qa.compuserve.com
www-qa.getnetscape.com
www-qa.compuserve.com
qa.membernotifications.aol.com
chat.desktop.aol.com
*.chat.desktop.aol.com
billupdate.aol.com
bill.aol.com
bill.aol.ca
bill.compuserve.com
bill.netscape.com
changeplan.compuserve.com
cancel.compuserve.com
changeplan.wmconnect.com
cancel.wmconnect.com
changeplan.aol.ca
cancel.aol.ca
changeplan.aol.com
cancel.aol.com
*.billupdate.aol.com
*.bill.aol.com
*.bill.aol.ca
*.bill.compuserve.com
*.changeplan.compuserve.com
*.cancel.compuserve.com
*.changeplan.wmconnect.com
*.cancel.wmconnect.com
*.changeplan.aol.ca
*.cancel.aol.ca
*.changeplan.aol.com
*.cancel.aol.com
marketingpreferences.aol.com
marketingpreferences.aol.ca
marketingpreferences.aol.co.uk
nutzungihrerdaten.aol.de
*.marketingpreferences.aol.com
*.marketingpreferences.aol.ca
*.marketingpreferences.aol.co.uk
*.nutzungihrerdaten.aol.de
subscriptions.aol.com
*.subscriptions.aol.com
psclick.aol.com
qa.psclick.aol.com

Other certificates including the domain name wmconnect.com

(limited to 100 certificates)
consent.oath.com
wppd-web-https.web.aol.com
stage.consent.oath.com
comms.wmconnect.com
stage.guce2.oath.com
admin.isp.netscape.com
stage.consent.oath.com
bill.wmconnect.com
stage.consent.oath.com
src6.yahoo.com
stage.guce2.oath.com
src6.yahoo.com
stage.consent.oath.com
comms.wmconnect.com
src6.yahoo.com
src6.yahoo.com
mybenefits.aol.com
src6.yahoo.com
guce2.oath.com
src6.yahoo.com
stage.guce2.oath.com
trunk.consent.oath.com
stage.guce.huffpost.com
consent.oath.com
consent.oath.com
src6.yahoo.com
admin.isp.netscape.com
src6.yahoo.com
bill.wmconnect.com
consent.oath.com
src6.yahoo.com
mybenefits.aol.com
src6.yahoo.com
bill.wmconnect.com
src6.yahoo.com
stage.consent.oath.com
guce2.oath.com
trunk.consent.oath.com
src6.yahoo.com
view.sports.comms.yahoo.net
src6.yahoo.com
src6.yahoo.com
bill.wmconnect.com
trunk.consent.oath.com
stage.consent.oath.com
admin.isp.netscape.com
origin.www.compuserve.com
mybenefits.aol.com
trunk.consent.oath.com
*.games.yahoo.com
mybenefits.aol.com
stage.consent.oath.com
guce2.oath.com
consent.oath.com
src6.yahoo.com
trunk.consent.oath.com
mybenefits.aol.com
src6.yahoo.com
guce.huffpost.com
bill.wmconnect.com
e.sports.comms.yahoo.net
bill.wmconnect.com
trunk.consent.oath.com
bill.wmconnect.com
stage.consent.oath.com
src6.yahoo.com
consent.oath.com
stage.guce2.oath.com
consent.oath.com
bill.wmconnect.com
stage.consent.oath.com
*.games.yahoo.com
consent.oath.com
src6.yahoo.com
src7.yahoo.com
mybenefits.aol.com
consent.oath.com
wppd-web-https.web.aol.com
stage.consent.oath.com
src6.yahoo.com
trunk.guce.huffpost.com
trunk.consent.oath.com
src6.yahoo.com
src6.yahoo.com
consent.oath.com
stage.guce2.oath.com
comms.wmconnect.com
src6.yahoo.com
src6.yahoo.com
src6.yahoo.com
src6.yahoo.com
admin.isp.netscape.com
trunk.consent.oath.com
bill.wmconnect.com
src6.yahoo.com
trunk.guce2.oath.com
src6.yahoo.com
src6.yahoo.com
consent.oath.com
bill.wmconnect.com

Certificate

The complete raw certificate details for bill.wmconnect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPAjCCDeqgAwIBAgIQCJN9qO+12ur5JBtOwVyaODANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0yMzA2MTMwMDAwMDBaFw0yMzEyMDYyMzU5NTla
MHAxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRIwEAYDVQQHEwlT
dW5ueXZhbGUxGzAZBgNVBAoTEk9hdGggSG9sZGluZ3MgSW5jLjEbMBkGA1UEAxMS
YmlsbC53bWNvbm5lY3QuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEA4ETU7gkyywKHxfsKIEBADjCbce1OTkkoVmFP8wZ3Ytop7yD2tdBhn3JXlJnJ
wk+iOt8BbpYZMmvkB1nonbYHu8vdrOFSLAhih0b2hr7LyWnLXy3tyujigdAtpHJR
eytxAm9vO5UknfACHD33tNMRLy6NDXqcvqCXxpdB1E7O/7C7S5HfmBBh8DGgX9Ec
WQQtWumT133MJWXNQvQM8b6cfZ5Bf2jLQiXXFY9lA8oc+HnlmdvGbHiQXBy1FvoP
2fZ3lfoQsKUAzJL+Dgcg2GlIk6jPA/j0yOHCINmjI6Q8XXntd6jmu+Pg23jUgFYv
TJNBU1nLmhOammFZp4DiKBNPXMXCHBYZ7rsKKB7us5c2sUfcsTwF2u2K0Ebadf/K
W9f6t6iaj/Lg6qlhPB52mn044u4tZBvhieeHYXPdbarmNMefmH4p2hlwNbsXo6cS
VTU1XNJvhKH6nPJFjeb+0TEzbzV6APKS0fcSl2r4Csof7NoKYBhyyc8xU4EFnVVw
9tctvJBtL9S6JrJbZVGwmqkdM2giqUlmjNQb0I7FY6bA8Bhe53uiDgNhcRQoYilO
CNc35QfNCccY9g/0kdhiOSlxGfPmoaO4uNT72JjfmgTAWIXFiv1nGxFY55HW8xy7
QB2i7bGNj3edmLOJ2Elmvp5noi8M0w5roQZpwTyFeEqzrJ0CAwEAAaOCCpYwggqS
MB8GA1UdIwQYMBaAFFFo/5CvAgd1PMzZZWRiohK4WXI7MB0GA1UdDgQWBBTMHLwD
Uk5RiituG9GnxPbvrSQIOzCCCMIGA1UdEQSCCLkwggi1ghJiaWxsLndtY29ubmVj
dC5jb22CGWJpbGx1cGRhdGUuY29tcHVzZXJ2ZS5jb22CFWNoYW5uZWxzLm5ldHNj
YXBlLmNvbYIUY29ubmVjdC5uZXRzY2FwZS5jb22CE2ZyZWUuY29tcHVzZXJ2ZS5j
b22CEWdvLmNvbXB1c2VydmUuY29tghBoaWdoc3BlZWQuYW9sLmNhghVpbWFnZXMu
Y29tcHVzZXJ2ZS5jb22CEGlzcC5uZXRzY2FwZS5jb22CEiouaXNwLm5ldHNjYXBl
LmNvbYIMbGl0ZS5hb2wuY29tghVtZW1iZXIuY29tcHVzZXJ2ZS5jb22CF215YWNj
b3VudC53bWNvbm5lY3QuY29tghlteWJlbmVmaXRzLmNvbXB1c2VydmUuY29tghdt
eWJlbmVmaXRzLm5ldHNjYXBlLmNvbYIYbXliZW5lZml0cy53bWNvbm5lY3QuY29t
ghduZXRzY2FwZS5jb21wdXNlcnZlLmNvbYIPcGFzc3dvcmQuYW9sLmNhghdwYXNz
d29yZC5jb21wdXNlcnZlLmNvbYIWcGFzc3dvcmQud21jb25uZWN0LmNvbYIRcHMt
c2VhcmNoLmFvbC5jb22CEXBzbGNhLndlYi5hb2wuY29tghFzd2Rvd25sb2FkLmFv
bC5jYYIbdXBkYXRlbXliaWxsLmNvbXB1c2VydmUuY29tgiJ3ZWJjZW50ZXJzLm5l
dHNjYXBlLmNvbXB1c2VydmUuY29tghB3ZWJzZWFyY2guY3MuY29tggp3d3cuY3Mu
Y29tghN3d3cuZ2V0bmV0c2NhcGUuY29tghF3d3cud21jb25uZWN0LmNvbYISd3d3
LmNvbXB1c2VydmUuY29tghttZW1iZXJub3RpZmljYXRpb25zLmFvbC5jb22CGWFk
bWluLmlzcC1xZS5uZXRzY2FwZS5jb22CHGFkbWluLmlzcC1zdGFnZS5uZXRzY2Fw
ZS5jb22CF2Nvbm5lY3QtcWEubmV0c2NhcGUuY29tghZmcmVlLXFhLmNvbXB1c2Vy
dmUuY29tghRnby1xYS5jb21wdXNlcnZlLmNvbYITaGlnaHNwZWVkLXFhLmFvbC5j
YYIZaW1hZ2VzLWRldi5jb21wdXNlcnZlLmNvbYIYaW1hZ2VzLXFhLmNvbXB1c2Vy
dmUuY29tghNpc3AtcWEubmV0c2NhcGUuY29tghNpc3AtcWUubmV0c2NhcGUuY29t
ghZpc3Atc3RhZ2UubmV0c2NhcGUuY29tgg9saXRlLXFhLmFvbC5jb22CGG1lbWJl
ci1xYS5jb21wdXNlcnZlLmNvbYIdbXlhY2NvdW50LmlzcC1xZS5uZXRzY2FwZS5j
b22CIG15YWNjb3VudC5pc3Atc3RhZ2UubmV0c2NhcGUuY29tghpuZXRzY2FwZS1x
YS5jb21wdXNlcnZlLmNvbYIUcHMtc2VhcmNoLXFhLmFvbC5jb22CHHJlZ2lzdGVy
LmlzcC1xZS5uZXRzY2FwZS5jb22CH3JlZ2lzdGVyLmlzcC1zdGFnZS5uZXRzY2Fw
ZS5jb22CFHN3ZG93bmxvYWQtcWEuYW9sLmNhgiV3ZWJjZW50ZXJzLXFhLm5ldHNj
YXBlLmNvbXB1c2VydmUuY29tght3bWNvbm5lY3QtcWEuY29tcHVzZXJ2ZS5jb22C
Fnd3dy1xYS5nZXRuZXRzY2FwZS5jb22CFXd3dy1xYS5jb21wdXNlcnZlLmNvbYIe
cWEubWVtYmVybm90aWZpY2F0aW9ucy5hb2wuY29tghRjaGF0LmRlc2t0b3AuYW9s
LmNvbYIWKi5jaGF0LmRlc2t0b3AuYW9sLmNvbYISYmlsbHVwZGF0ZS5hb2wuY29t
ggxiaWxsLmFvbC5jb22CC2JpbGwuYW9sLmNhghNiaWxsLmNvbXB1c2VydmUuY29t
ghFiaWxsLm5ldHNjYXBlLmNvbYIZY2hhbmdlcGxhbi5jb21wdXNlcnZlLmNvbYIV
Y2FuY2VsLmNvbXB1c2VydmUuY29tghhjaGFuZ2VwbGFuLndtY29ubmVjdC5jb22C
FGNhbmNlbC53bWNvbm5lY3QuY29tghFjaGFuZ2VwbGFuLmFvbC5jYYINY2FuY2Vs
LmFvbC5jYYISY2hhbmdlcGxhbi5hb2wuY29tgg5jYW5jZWwuYW9sLmNvbYIUKi5i
aWxsdXBkYXRlLmFvbC5jb22CDiouYmlsbC5hb2wuY29tgg0qLmJpbGwuYW9sLmNh
ghUqLmJpbGwuY29tcHVzZXJ2ZS5jb22CGyouY2hhbmdlcGxhbi5jb21wdXNlcnZl
LmNvbYIXKi5jYW5jZWwuY29tcHVzZXJ2ZS5jb22CGiouY2hhbmdlcGxhbi53bWNv
bm5lY3QuY29tghYqLmNhbmNlbC53bWNvbm5lY3QuY29tghMqLmNoYW5nZXBsYW4u
YW9sLmNhgg8qLmNhbmNlbC5hb2wuY2GCFCouY2hhbmdlcGxhbi5hb2wuY29tghAq
LmNhbmNlbC5hb2wuY29tghxtYXJrZXRpbmdwcmVmZXJlbmNlcy5hb2wuY29tghtt
YXJrZXRpbmdwcmVmZXJlbmNlcy5hb2wuY2GCHm1hcmtldGluZ3ByZWZlcmVuY2Vz
LmFvbC5jby51a4IYbnV0enVuZ2locmVyZGF0ZW4uYW9sLmRlgh4qLm1hcmtldGlu
Z3ByZWZlcmVuY2VzLmFvbC5jb22CHSoubWFya2V0aW5ncHJlZmVyZW5jZXMuYW9s
LmNhgiAqLm1hcmtldGluZ3ByZWZlcmVuY2VzLmFvbC5jby51a4IaKi5udXR6dW5n
aWhyZXJkYXRlbi5hb2wuZGWCFXN1YnNjcmlwdGlvbnMuYW9sLmNvbYIXKi5zdWJz
Y3JpcHRpb25zLmFvbC5jb22CD3BzY2xpY2suYW9sLmNvbYIScWEucHNjbGljay5h
b2wuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNlcnQuY29t
L3NoYTItaGEtc2VydmVyLWc2LmNybDA0oDKgMIYuaHR0cDovL2NybDQuZGlnaWNl
cnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDA+BgNVHSAENzA1MDMGBmeBDAEC
AjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwgYMG
CCsGAQUFBwEBBHcwdTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQu
Y29tME0GCCsGAQUFBzAChkFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGln
aUNlcnRTSEEySGlnaEFzc3VyYW5jZVNlcnZlckNBLmNydDAJBgNVHRMEAjAAMBMG
CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQEvR4VF83c+5C
wZ5Jsy7WX7Fnl0aiv5VHuGDU45zbutBUkwLv5KmFbi3nowxF0tJRGxvH0XlI4Itz
iZAeyRKsjJJjxhjGgAV38p2l1HbUm2cgzxKRUwVHM6s/ikxDk4E+zBHndt0OlZjL
QN2lkcAcXKtjo6lVB+h55rPdoYegMkV8uUYr0w3peXiFaUQ8DIFmb9a8LWwE+06e
H7KCOcbH44C1AWtKe++7qmNEVdAA3djtYHEYb+9CVniWriCqN4Fjas7zbkSkc0wu
1ufVApwSDoBKssEKauiFIPd2PE2pLv0fH5pbr7cQ2FJI29eOqhWRoau2Ud+guzgD
x0Zfw91l
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4ETU7gkyywKHxfsKIEBA
DjCbce1OTkkoVmFP8wZ3Ytop7yD2tdBhn3JXlJnJwk+iOt8BbpYZMmvkB1nonbYH
u8vdrOFSLAhih0b2hr7LyWnLXy3tyujigdAtpHJReytxAm9vO5UknfACHD33tNMR
Ly6NDXqcvqCXxpdB1E7O/7C7S5HfmBBh8DGgX9EcWQQtWumT133MJWXNQvQM8b6c
fZ5Bf2jLQiXXFY9lA8oc+HnlmdvGbHiQXBy1FvoP2fZ3lfoQsKUAzJL+Dgcg2GlI
k6jPA/j0yOHCINmjI6Q8XXntd6jmu+Pg23jUgFYvTJNBU1nLmhOammFZp4DiKBNP
XMXCHBYZ7rsKKB7us5c2sUfcsTwF2u2K0Ebadf/KW9f6t6iaj/Lg6qlhPB52mn04
4u4tZBvhieeHYXPdbarmNMefmH4p2hlwNbsXo6cSVTU1XNJvhKH6nPJFjeb+0TEz
bzV6APKS0fcSl2r4Csof7NoKYBhyyc8xU4EFnVVw9tctvJBtL9S6JrJbZVGwmqkd
M2giqUlmjNQb0I7FY6bA8Bhe53uiDgNhcRQoYilOCNc35QfNCccY9g/0kdhiOSlx
GfPmoaO4uNT72JjfmgTAWIXFiv1nGxFY55HW8xy7QB2i7bGNj3edmLOJ2Elmvp5n
oi8M0w5roQZpwTyFeEqzrJ0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11399640290202472230871750740639783480
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Holdings Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bill.wmconnect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 914937181665054801057686295302763699907225389944964972040388246453856972172273655275551789086695812386750562028016676583740327491992790120554093624433300662998173795882538539837051688755463113951960364966129659901248125877630779355030906277038297700160418739709238310237931519729328634781501060036630605478330252334475804130617931194206236643223117999851538518501433853019896212968831983062329817065077561093184089481823379940372997809150881727824820964270678754441068587205773433421706082382736492010345891992537120704568908880410339668653148151864062649814847063993628261385679323927964943340522285283547740855112301878308813994272756281361616655803121739410764205313726153686352439621303230568382409622053472273209393797642156479697481107738702682900675487898747235834318934246617527515129425480194805835094006946454230490071963933890637984872180631505770179120119729460798945542542653815341109695559711537841814818757004527177440419649982683336398537241605043981929158323089853808067290729208948140803135016540129205256257372429577432727730429466339391158336167985074367745242548303496285809230638136070825734988772381317387760594602214995599906260068515678641549513913615547901516542691329572014283228875625287405060935988259997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc1cbc03524e518a2b6e1bd1a7c4f6efad24083b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2233 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bill.wmconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billupdate.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'channels.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'free.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highspeed.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isp.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isp.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lite.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'member.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.wmconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybenefits.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybenefits.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybenefits.wmconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netscape.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'password.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'password.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'password.wmconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-search.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pslca.web.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swdownload.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updatemybill.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcenters.netscape.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websearch.cs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getnetscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membernotifications.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.isp-qe.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.isp-stage.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-qa.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'free-qa.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go-qa.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highspeed-qa.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-dev.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-qa.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isp-qa.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isp-qe.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isp-stage.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lite-qa.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'member-qa.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.isp-qe.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.isp-stage.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netscape-qa.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-search-qa.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.isp-qe.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.isp-stage.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swdownload-qa.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcenters-qa.netscape.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmconnect-qa.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa.getnetscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.membernotifications.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.desktop.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chat.desktop.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billupdate.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bill.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bill.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bill.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bill.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changeplan.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancel.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changeplan.wmconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancel.wmconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changeplan.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancel.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changeplan.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancel.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billupdate.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bill.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bill.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bill.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.changeplan.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cancel.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.changeplan.wmconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cancel.wmconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.changeplan.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cancel.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.changeplan.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cancel.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingpreferences.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingpreferences.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingpreferences.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutzungihrerdaten.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketingpreferences.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketingpreferences.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketingpreferences.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nutzungihrerdaten.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriptions.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.subscriptions.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psclick.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.psclick.aol.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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