tw.b-pgws.yahooapis.com

- Oath Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0f:a3:9d:ee:7a:da:20:e4:05:19:a6:a4:a3:25:61:ea was issued on by DigiCert Inc.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oath Inc

Organization: Oath Inc
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:a3:9d:ee:7a:da:20:e4:05:19:a6:a4:a3:25:61:ea
Serial Number (int): 20787967557346239053009180037363360234
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: da:9b:61:27:b3:8e:c9:31:c8:8c:aa:4a:fb:78:1b:88:1c:e8:85:97
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 38:79:e5:fe:3a:1c:31:48:96:0b:d6:a3:c4:7b:8a:a1:7f:73:b8:f7
Fingerprint (sha256): 0a:5a:0f:49:40:c2:f7:35:a4:80:9b:ad:f7:53:5c:3b:a5:d6:eb:48:66:44:e8:b9:d0:1b:8c:fb:79:bc:53:e7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate tw.b-pgws.yahooapis.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tw.b-pgws.yahooapis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tw.b-pgws.yahooapis.com
tw.b-yccapi.yahooapis.com
tw.vault.b-ymq.yahooapis.com
tw.vault.b-ysim.yahooapis.com
tw.pp-pgws.yahooapis.com
tw.pp-yccapi.yahooapis.com
tw.vault.pp-ymq.yahooapis.com
tw.vault.pp-ysim.yahooapis.com
tw.pgws.yahooapis.com
tw.yccapi.yahooapis.com
tw.vault.ymq.yahooapis.com
tw.vault.ysim.yahooapis.com

Other certificates including the domain name yahooapis.com

(limited to 100 certificates)
login.yahoo.com
sp.analytics.yahoo.com
src2.yahoo.com
*.yahoo.com
yboss.yahooapis.com
*.ads.yahoo.com
*.autos.yahoo.com
tw.yccapi.yahooapis.com
*.ads.yahoo.com
src3.yahoo.com
*.login.yahoo.com
*.yimg.com
*.yahoo.com
*.yimg.com
ue1.yahoo.com
*.buy.yahoo.com
*.fantasysports.yahoo.com
*.global.vespa.yahooapis.com
staging.yql.yahooapis.com
*.autos.yahoo.com
*.ads.yahoo.com
*.ue.yahoo.com
yql.yahooapis.com
*.media.yahoo.com
src2.yahoo.com
*.yahoo.com
*.ec.yimg.com
src3.yahoo.com
src3.yahoo.com
yho.com
*.api.fantasysports.yahoo.com
datax.yahoo.com
*.staging.manhattan.yahoo.com
*.ec.yimg.com
src1.yahoo.com
*.mail.yahoo.com
stage.tokenmanager.finance.yahooapis.com
src1.yahoo.com
src1.yahoo.com
*.autos.yahoo.com
www1.yahoo.com
sports.yahoo.com
tw.bid.yahoo.com
src3.yahoo.com
*.autos.yahoo.com
*.answers.search.yahoo.com
*.yahoo.com
*.ads.yahoo.com
*.eurosport.yahoo.com
src2.yahoo.com
*.yahoo.com
*.manhattan.yahoo.com
tw.yccapi.yahooapis.com
sandbox.datax.yahoo.com
*.autos.yahoo.com
*.payment.store.yahooapis.com
*.search.yahoo.com
*.eurosport.yahoo.com
src3.yahoo.com
*.mail.yahoo.com
tw.pgws.yahooapis.com
*.eurosport.yahoo.com
*.checkout.store.yahooapis.com
src1.yahoo.com
*.manhattan.yahoo.com
*.ec.yimg.com
ui.aps.ads.yahoo.com
*.eurosport.yahoo.com
*.autos.yahoo.com
*.media.yahoo.com
*.yahoo.com
*.yahoo.com
ui.aps.ads.yahoo.com
*.media.yahoo.com
ue1.yahoo.com
sp.analytics.yahoo.com
*.autos.yahoo.com
*.media.yahoo.com
*.staging.manhattan.yahoo.com
*.ads.yahoo.com
*.ensemble.yahoo.com
*.ads.yahoo.com
src2.yahoo.com
src1.yahoo.com
tw.yccapi.yahooapis.com
*.yahoo.com
*.yahoo.com
*.eurosport.yahoo.com
*.media.yahoo.com
src1.yahoo.com
src1.yahoo.com
*.search.yahoo.com
*.eurosport.yahoo.com
tw.b-pgws.yahooapis.com
yql.yahooapis.com
login.yahoo.com
*.ads.yahoo.com
*.ads.yahoo.com
*.autos.yahoo.com
tw.bid.yahooapis.com

Certificate

The complete raw certificate details for tw.b-pgws.yahooapis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXRCFniFpj+tvcAA1xrZ
YYhVozVMBNhVFFblEVUhc4bHwqKB/No/iNXg8Axu2ReeAgtitu8FIPy7NwvFVIC2
K1aQoQrLm8sX8pEyyXmcad8H2kM1dkXEgsC0APtcOqrO8SOtcYI+W+vTFniogC6W
Dqef0Tir+8Lpn4nN6XbYmzsCbz5sIZl1Mb8Qe15GxfxqHQ1Iv0ePFOwgNb1vjLa5
Fe5pEZ/4RXNx5InizfVbLDCk/ruYo/OdwVNcDMiNSXT11NeAVNPMzGcxC2UWyzsg
QSzJLzA7E3oqPmKXsNYsCVzTGjKkWdygDrdMqfnhPUX4KfrkKj/FDQ2L6rq6+Cev
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20787967557346239053009180037363360234
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tw.b-pgws.yahooapis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18866836473041474951976805781335408064673898445637182110934376778742671734340859327305580868178153894826207090973016855657991751490301855650444477434445486571778265414135366971663110838135636151317168652368096723476344800490913254160462369611863487063543627135175313501242011845513013926159129757972820113297032480755966587242369551529529109431556053985717332019324063896433298587143337420724946388772546151025752643808477714605820117108423759078088976402716639869336042290631617739506469343372566224543864608948374771440259550473707056331138299393147504546472203085557510537015168934243445418512627060441545013964699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da9b6127b38ec931c88caa4afb781b881ce88597
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (339 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.b-pgws.yahooapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.b-yccapi.yahooapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.vault.b-ymq.yahooapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.vault.b-ysim.yahooapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.pp-pgws.yahooapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.pp-yccapi.yahooapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.vault.pp-ymq.yahooapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.vault.pp-ysim.yahooapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.pgws.yahooapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.yccapi.yahooapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.vault.ymq.yahooapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.vault.ysim.yahooapis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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