touchstoneexternal.ebay.com

- eBay, Inc. -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number a5:6e:b6:aa:e3:e7:55:85:e4:b5:6d:f8:11:13:f8:1e was issued on by Sectigo Limited.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

eBay, Inc.

Organization: eBay, Inc.
State / Province: California
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): a5:6e:b6:aa:e3:e7:55:85:e4:b5:6d:f8:11:13:f8:1e
Serial Number (int): 219897476896818205062045583831410669598
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: fc:7a:15:6c:ca:21:a9:fe:b1:96:20:e8:aa:1c:01:95:e2:98:18:fb
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): df:a9:1b:cf:47:26:79:91:93:0b:5c:83:18:16:fa:dd:07:74:1a:41
Fingerprint (sha256): 09:18:fd:7b:b2:98:96:0b:f3:05:e8:5b:8a:d2:53:b0:b6:42:78:ff:93:fa:7a:d9:bf:a7:55:cd:bd:5f:da:00

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate touchstoneexternal.ebay.com

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for touchstoneexternal.ebay.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

touchstoneexternal.ebay.com
tsexternal.befr.ebay.be
tsexternal.benl.ebay.be
tsexternal.cafr.ebay.ca
tsexternal.ebay.at
tsexternal.ebay.ca
tsexternal.ebay.ch
tsexternal.ebay.cn
tsexternal.ebay.co.uk
tsexternal.ebay.com
tsexternal.ebay.com.au
tsexternal.ebay.com.hk
tsexternal.ebay.com.my
tsexternal.ebay.com.sg
tsexternal.ebay.com.tw
tsexternal.ebay.cz
tsexternal.ebay.de
tsexternal.ebay.dk
tsexternal.ebay.es
tsexternal.ebay.fi
tsexternal.ebay.fr
tsexternal.ebay.gr
tsexternal.ebay.ie
tsexternal.ebay.in
tsexternal.ebay.it
tsexternal.ebay.nl
tsexternal.ebay.no
tsexternal.ebay.ph
tsexternal.ebay.pl
tsexternal.ebay.se
ufesnew-touchstoneexternal-public-rnoaz03-1-1.ebay.com

Other certificates including the domain name ebay.com

(limited to 100 certificates)
apix.ebay.com
shorturisvc1.ebay.com
app-api.altus.vip.ebay.com
ocshelpbotweb.ebay.com
mobixo.ebay.com
postorder.ebay.com
sso.gumtreeau.salesforce.ebay.com
secureregistration.ebay.com
www.kiosk.ebay.com
byron.vip.ebay.com
sonar-01.vip.qa.ebay.com
sppil.ebay.com
reshubui.ebay.com
ebay01.secure.lithium.com
mdmlab.corp.ebay.com
eBay Inc.
giftcards.ebay.com
ufesnew-kgvrfn-public-rnoaz03-1-1.ebay.com
sso.ebay.com
triton-alpha.ebay.com
www.ebay.com
sgapacshippingtool.ebay.com
offer.ebay.com
ir.ebay.com
mesg.befr.ebay.be
mesg.ebay.com
metrics.ebay.com
stores.ebay.com
zeus-na.corp.ebay.com
payments.shopping.ebay.com
lvs-pcmqa-014.corp.ebay.com
bizpolicy.ebay.com
rtm-ext.befr.ebay.be
PHX-PCMQA-001.corp.ebay.com
ocsrest.ebay.com
corpcitrix.corp.ebay.com
ficapp.ebay.com
paicapp.ebay.com
mesg.ebay.com
DUBSIPLB.corp.ebay.com
lyltrwdsecapplication.ebay.com
epn.ebay.ca
securefeedback.ebay.com
remedyhub.ebay.com
poces6testhttps-slc07-kibana-vip-nmgm2.vip.stratus.slc.ebay.com
sarweb.ebay.com
www.ebay.com
affaires.stores.shop.cafr.ebay.ca
pgcservice.ebay.com
shiptrack.ebay.com
vod.ebay.com
cart-new.sandbox.ebay.com
autosug.ebay.com
lyltrwdcore.ebay.com
rppbrw.ebay.com
ocsnode.ebay.com
lvs-pcmas-013.corp.ebay.com
spesvc.ebay.com
idauth.ebay.com
apinot.sandbox.ebay.com
ocshelpbotweb.ebay.com
xtestmail.corp.ebay.com
pages.ebay.com
checkout.half.ebay.com
fedauth.sandbox.ebay.com
developer.ebay.com
mbuy.ebay.com
psoc-pixel.ebay.com
payments.in.paradise.qa.ebay.com
picupload.g.sandbox.ebay.com
k2b-bulk.sandbox.ebay.com
reward.befr.ebay.be
ocs.ebay.com
aanbiedingen.stores.shop.benl.ebay.be
qsx-dev.corp.ebay.com
pls.ebay.com
backstory.shopping.com
cskb-search.vip.ebay.com
stratus.ebay.com
idauth.ebay.com
app.altus.vip.ebay.com
msa-lfn.ebay.com
mobipushpkg.ebay.com
ilowebapp.ebay.com
den-qntas-qa.corp.ebay.com
mediasvcs-new.sandbox.ebay.com
members.befr.ebay.be
sellerstandards.ebay.com
fedauth.ebay.com
tokenaccess.corp.ebay.com
loyalty.ebay.com
stores.strnewcustompage.ebay.com
abbigliamento.stores.shop.ebay.it
www.ebay.com.tw
abbigliamento.stores.shop.ebay.it
r1mediasvc.ebay.com
shipportal.ebay.com
bhssecure.stratus.ebay.com
ssoqa.corp.ebay.com
guestcheckout.payments.ebay.com

Certificate

The complete raw certificate details for touchstoneexternal.ebay.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PO0CBRCVvddkf2OeBc8
22FPFhk33jVZWTKqJpF29fr5nxoRwRVAd4uA3ZE6oy16v34aC125fXeefsZIzlxS
bNydlxtCWtb7Fvkxdfl+8r+knbqj6nX8wMUxlYwoHZcodmgm4T8zEKGyTiJrV8fB
wjfvSXynDHMBrKejXhCVFRFiV/TINedJicbu85mso1soacEST8at19bseXTAW+lv
PgdaGdTopQZr9BxCjMSGWDNb5iEntEATR9KMAoa/OBrAzCncRlH9+hENJ96PCbKO
6ylwNbIPI42iiuK5Y0EkhOyv2BdeIGXPGMQ1TnUTidiASjc7jX0JqZw3tcIDyD4V
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 219897476896818205062045583831410669598
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eBay, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'touchstoneexternal.ebay.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27387648423361312780428906799602199126309417899617843646061007031992087962981744137836796756583761538983849139018705770212711686924422193349603748436890765459735806481130178522575308590100053871922172646912373173600723265030184938073133535880081619136165188812595176467644715145338962688107202519443815825413136999473513982483544113050942125188838793636524685708398602012851617071924103883910754115014467298298907450771696770152835842691099766408907719643849750755673890873191154150384279046630123549512753030121760688827505275641088561535252169791681747776122816200493343606470142731667117120672337928150678090159431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc7a156cca21a9feb19620e8aa1c0195e29818fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000185b33b3a710000040300473045022100e9bb24974537b0318ed3e007a4234917af4f0d0903f3146951f10cef6646e15d022058ec7715285b88b26045cd3829e297b9ef0767d2bc67307e00d5d770433b3694007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000185b33b3a43000004030046304402206a8cff7a6a4b474eb4e0587e2e8735bdbd208081b219d60dc54a2dfaf76204cd022077d4c9124cddabe0a8054c5b37e5323003527fdc9b98c2c184f2af1a6e437f4b007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000185b33b3a0b0000040300483046022100f835366f2060a4f797e6cf6a24a58d7b78fb4f86f05c0a9b68f3b8f51c0b98090221009b54428fcef2e51464b2a5667807253c257252c70d78b1eebc7dbed33ba72239
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (708 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchstoneexternal.ebay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.befr.ebay.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.benl.ebay.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.cafr.ebay.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsexternal.ebay.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufesnew-touchstoneexternal-public-rnoaz03-1-1.ebay.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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