oidc.oath.com

- Oath Holdings Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 09:6f:d7:19:b1:10:93:ac:65:b1:fb:fe:aa:fb:10:10 was issued on by DigiCert Inc.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oath Holdings Inc.

Organization: Oath Holdings Inc.
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:6f:d7:19:b1:10:93:ac:65:b1:fb:fe:aa:fb:10:10
Serial Number (int): 12543759666929343608183526019579973648
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ff:44:6f:cd:bd:cc:8f:5b:f9:97:de:d4:9b:06:8e:41:21:6f:4f:48
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): fd:42:3c:e1:41:ad:93:f8:6f:c7:75:71:36:3a:45:f5:87:2b:f0:9b
Fingerprint (sha256): 0b:be:1e:c6:d5:38:98:54:4f:dc:b8:74:70:d6:5f:99:ae:89:98:14:dc:e5:07:df:9d:ee:d0:c9:9a:20:c0:e8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate oidc.oath.com

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oidc.oath.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oidc.oath.com
oidc.mail.aol.com
oidc.bezahlen.aol.de
oidc.checkout.aol.com
oidc.checkout.aol.co.uk
oidc.connect.netscape.com
oidc.compuserve.com
oidc.engadget.com
oidc.feedback.aol.com
oidc.get.aol.com
oidc.help.aol.com
oidc.help.aol.co.uk
oidc.identityapp.aol.com
oidc.marketingpreferences.aol.com
oidc.marketingpreferences.aol.co.uk
oidc.meinkonto.aol.de
oidc.member.compuserve.com
oidc.membernotifications.aol.com
oidc.mold.aol.com
oidc.myaccount.aol.ca
oidc.myaccount.aol.com
oidc.myaccount.aol.co.uk
oidc.myaccount.compuserve.com
oidc.myaccount.netscape.com
oidc.mybenefits.aol.com
oidc.netscape.com
oidc.netscape.compuserve.com
oidc.nutzungihrerdaten.aol.de
oidc.payments.aol.com
oidc.payments.aol.co.uk
oidc.payments.compuserve.com
oidc.paymentsconnect.netscape.com
oidc.paymentupdate.aol.com
oidc.productcentral.aol.com
oidc.publishing.compuserve.com
oidc.techcrunch.com
oidc.wmconnect.compuserve.com
oidc.marketingpreferences.aol.ca
oidc.search.aol.com
oidc.hilfe.aol.de
oidc.autoblog.com
oidc.checkoutnow.aol.com
oidc.myservices.aol.com
oidc.billupdate.aol.com
oidc.homepage.aol.com
oidc.fr.moncompte.aol.com
oidc.www.aol.com
oidc.mysubscriptions.aol.com
oidc.builtbygirls.com
oidc.firefox-startpage.aol.com
oidc.welcomescreen.aol.com
oidc.www.aol.co.uk
oidc.aolbroadband.welcomescreen.aol.co.uk
oidc.www.aol.ca
oidc.www.aol.de
oidc.www.aol.jp
oidc.news.aol.jp
oidc.o2.aol.de
oidc.welcomescreen.aol.de
oidc.plans.yahoo.com
oidc.mysubscriptions.yahoo.com
oidc.checkout.yahoo.com
oidc.mysubscriptions.finance.yahoo.com
oidc.checkout.finance.yahoo.com
oidc.mysubscriptions.mail.yahoo.com
oidc.checkout.mail.yahoo.com
oidc.prod.origin.checkout.yahoo.com
oidc.shop.intheknow.com
oidc.www.intheknow.com
oidc.calendar.aol.com
oidc.subscriptions.aol.com

Other certificates including the domain name oath.com

(limited to 100 certificates)
login.yahoo.com
*.stage.login.yahoo.com
prod-east.exchange.oath.com
test-paranoids.oath.com
test-paranoids.oath.com
*.video.oath.com
ads.vidible.tv
test-paranoids.oath.com
stage-oathsites-real.yahoo.com
*.autos.yahoo.com
leos.oath.com
quartz-stage-bf01.azurite.bf1.yahoo.com
ads.vidible.tv
stage.int.o2.oath.com
stage.int.o2.oath.com
*.smp.oath.com
*.login.yahoo.com
receiver.stage.lcoe.oath.com
careers-real.yahoo.com
id-ds.corp.aol.com
consent.oath.com
id.b2b.oath.com
om-dev.oath.com
transparency.oath.com
*.autos.yahoo.com
*.media.yahoo.com
test-paranoids.oath.com
yho.com
www.oath.com
ads.stage.vidible.tv
ads.vidible.tv
foo2.bar.pchen06.test.test-paranoids.oath.com
test-paranoids.oath.com
uat.sfdc.services.oath.com
stage.guce.oath.com
ads.vidible.tv
*.smp.oath.com
src1.yahoo.com
src1.yahoo.com
src1.yahoo.com
*.autos.yahoo.com
*.smp.oath.com
stage.consent.oath.com
lawenforcementrequests.oath.com
stage.guce2.oath.com
api.k8s-prod-01-euw1.int.o2.oath.com
*.adf.aasreref.red.yahoo.oath.com
stage.guce.oath.com
stage.guce.oath.com
stage-legal.yahoo.com
*.autos.yahoo.com
receiver.stage.lcoe.oath.com
api.processor.oath.com
api-uat.amt.yahooinc.com
id-uat.corp.aol.com
test-paranoids.oath.com
peering.oath.com
test-paranoids.oath.com
stage.oidc.oath.com
*.video.oath.com
api.stage.processor.oath.com
curate.publishing.oath.com
src1.yahoo.com
store.ouryahoo.com
store-qa.vzbuilders.com
*.stage.login.yahoo.com
stage.consent.oath.com
*.splunk.gdpr.oath.com
ads.vidible.tv
lawenforcementrequests-stage.oath.com
beta-oathsites-real.yahoo.com
dev.postmaster.oath.com
*.autos.yahoo.com
*.media.yahoo.com
*.trunk.login.yahoo.com
stage.consent.oath.com
*.media.yahoo.com
receiver.stage.lcoe.oath.com
*.autos.yahoo.com
*.mydashboard.oath.com
*.media.yahoo.com
ads.stage.vidible.tv
src1.yahoo.com
quartz-prod-bf01.azurite.bf1.yahoo.com
*.stage.mydashboard.oath.com
*.media.yahoo.com
src1.yahoo.com
src1.yahoo.com
*.publishing.oath.com
src6.yahoo.com
stage.guce2.oath.com
test.test-paranoids.oath.com
login.yahoo.com
staging.curate.publishing.oath.com
*.autos.yahoo.com
uat.sfdc.services.oath.com
careers.oath.com
stage.oidc.oath.com
careers-real.oath.com
staging.curate.publishing.oath.com

Certificate

The complete raw certificate details for oidc.oath.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp4BmYRhqlX1IFe1CFZs
4RzDl/AvN7wfFhijGidgffiRVh8j56odz1Dx7WtPffWjbHLcBMGR4Edj3dy14Ct2
UXlfBn+LlQEDm5EaOj9e1plPZjUDgr7qLmK5G3fyclrNiUxTQeeQ1hUw8q16QJ+7
CarW8rA37kIUWsUpjR4FiVR+UySbbi7eoOM7OOnLWBnfjDC4GxUvrJS7ThdQLS9B
YRcL9cK6iuN2lntaVd+wGClBUAhpX8gR5WOSYpF0xccUmCIWjwtkrdXDVQcJPVgu
DMsqndYojrJ3KaWXyMhtKA4/u99AlnVHR3RnoHvP/BJHjk4JCjDdvJy59YDOg3fV
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12543759666929343608183526019579973648
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Holdings Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oidc.oath.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22043380849306649828180516423589783249697779955380183876925306216667696448083406965363474988957928647533214293124815602950713417047058953234095700786073316566949720769915852975485118998576418859451289638509484215384190003500060112781798648083208902276893033480298354979137311892553734783715574523130612215838742887568559986305940744209343654856770811931691672783432122372810623326444565832663400015840291246751091169761819312182065215356315422811519041440971506069970621218391197747744459253574134571219401550995836491445952170580805682863918225836451123798601882720239743623333676094706578935589395341837609666598229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff446fcdbdcc8f5bf997ded49b068e41216f4f48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1831 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.oath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.mail.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.bezahlen.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.checkout.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.checkout.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.connect.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.engadget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.feedback.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.get.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.help.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.help.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.identityapp.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.marketingpreferences.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.marketingpreferences.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.meinkonto.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.member.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.membernotifications.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.mold.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.myaccount.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.myaccount.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.myaccount.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.myaccount.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.myaccount.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.mybenefits.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.netscape.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.nutzungihrerdaten.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.payments.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.payments.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.payments.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.paymentsconnect.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.paymentupdate.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.productcentral.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.publishing.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.techcrunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.wmconnect.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.marketingpreferences.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.search.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.hilfe.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.autoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.checkoutnow.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.myservices.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.billupdate.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.homepage.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.fr.moncompte.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.www.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.mysubscriptions.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.builtbygirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.firefox-startpage.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.welcomescreen.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.www.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.aolbroadband.welcomescreen.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.www.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.www.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.www.aol.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.news.aol.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.o2.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.welcomescreen.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.plans.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.mysubscriptions.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.checkout.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.mysubscriptions.finance.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.checkout.finance.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.mysubscriptions.mail.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.checkout.mail.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.prod.origin.checkout.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.shop.intheknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.www.intheknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.calendar.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidc.subscriptions.aol.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006af9c08b5c680d8188b0e563d4ac704d12702e5e16496ebb38181f1ba262cafade24166c6175cd35823f05b8d13ca8d9666c23607156a7d07aa5f47a8002c282e09e1b58e17fa4da44aa027f65bf4aac601eac4f40d86723eb7ac501a063ba147c06e709dfc3f467008969c01915085eb684fc6809de2bf6c9f5bb828fae4716f60b263faba72d18102539514127722c370027cf24e76154e5e21687a9b080473ca23fd1a3043698954d737b7dcf7de4253f296f66e4255909deadb72b702eaa7f6a2df65da5851a9f63f8619cf7c1b085139214060fb471da8d9dce3245c2a226092911a7779e503604c092001fb8676c877a7e41c735c4b9bc96058e78681a