ap.org

- The Associated Press -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 03:92:1f:b1:59:f0:26:91:43:5b:20:8e:62:f4:24:bc was issued on by DigiCert Inc.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Associated Press

Organization: The Associated Press
Organization unit: The Associated Press
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:92:1f:b1:59:f0:26:91:43:5b:20:8e:62:f4:24:bc
Serial Number (int): 4746402134617800879412740739153798332
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 58:8d:c6:55:3f:e9:83:bf:0e:b0:67:19:9b:24:47:54:22:02:a4:4d
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 29:29:53:a5:83:3d:28:2d:85:40:e3:8f:d8:54:24:0d:03:0a:29:6f
Fingerprint (sha256): 0c:18:90:73:09:68:b7:81:16:59:ab:40:4c:89:61:b8:3e:4d:cf:b8:57:cd:59:e5:43:b0:5e:4b:da:0b:e1:d0

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate ap.org

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ap.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ap.org
inside.ap.org
interactivesqa1.ap.org
preview.newsroom.ap.org
summergames.ap.org
racing.ap.org
apvotecount2.ap.org
pro32qa.ap.org
hosted.ap.org
www.applanner.com
collegebasketballqa.ap.org
cvpa20.ap.org
www.wintergames.ap.org
binaryapi.ap.org
wfpreview.ap.org
wintergames.ap.org
www.aparchive.com
www.apimages.com
pronto.ap.org
collegebasketball.ap.org
roam.ap.org
brand.ap.org
digitalservicesqa.ap.org
collegefootball.ap.org
aphelp.ap.org
applanner.com
preview.apvideohub.ap.org
insights.ap.org
careers.ap.org
interactivesqa.ap.org
webmail.ap.org
interactives.ap.org
cvpa10.ap.org
videoproduction.ap.org
mail-ctc.ap.org
backup.ap.org
poll.ap.org
www.pro32.ap.org
apvotecount.ap.org
www.elections.ap.org
polls.ap.org
elections.ap.org
www.apexchange.com
pro32.ap.org
mail-lon.ap.org
wfm.ap.org
www.apvideous.com
webfeeds.ap.org
www.aptop25.com
leads.ap.org
classic.apimages.com
electionsstage.ap.org
newsroom.ap.org
www.collegefootball.ap.org
blog.ap.org
syndication.ap.org
apvc.ap.org
securedrop.ap.org
interactives-staging.ap.org
collegebasketballdev.ap.org
login.ap.org
aptop25.com
bigstory.ap.org
electionsdev.ap.org
www.racing.ap.org
digitalservices.ap.org
apvideohub.ap.org
dne.ap.org
www.collegebasketball.ap.org
digitalservicesdev.ap.org
openings.ap.org
hostedqa.ap.org
apvc2.ap.org

Other certificates including the domain name ap.org

(limited to 100 certificates)
feedback.ap.org
ervaring.nedvice.nl
ervaring.nedvice.nl
playbook.ap.org
ervaring.nedvice.nl
www.ap.org
help.ap.org
nycwlcdmz1.ap.org
ap.org
apipreview.ap.org
careers.ap.org
appbnom11.ap.org
ervaring.nedvice.nl
ctchive01.ap.org
inside.ap.org
cwa-ctc.ap.org
ap.org
partners.apvideohub.ap.org
discover.ap.org
ASSP-EXPC-P.ap.org
ap.org
ap.org
epix.ap.org
mail-ctc.ap.org
ap.org
ap.org
ervaring.nedvice.nl
backup.ap.org
ervaring.nedvice.nl
eapws.ap.org
developer.ap.org
ervaring.nedvice.nl
datakit.ap.org
login.ap.org
kibana.associatedpress.com
api.ap.org
DeveloperAPIPreview.ap.org
ap.org
blog.ap.org
sunshine.ap.org
ipdlonbackhaul.ap.org
approdpbnom11.ap.org
careers.ap.org
easyvista.ap.org
ap.org
ssrpm.ap.org
vault.ap.org
tokive01.ap.org
login.ap.org
ctcgsscasper01.ap.org
ap.org
easyvista.ap.org
crmgw.ap.org
api.ap.org
ervaring.nedvice.nl
ervaring.nedvice.nl
preview.apvideohub.ap.org
ervaring.nedvice.nl
ap.org
sunshine.ap.org
store.ap.org
store.ap.org
origin.hosted.ap.org
ap.org
ap.org
blog.ap.org
store.ap.org
tokive01.ap.org
ap.org
approdpbnom12.ap.org
apipreview.ap.org
ap.org
apvideohub.ap.org
Developerapi.ap.org
eapadmin2.ap.org
ervaring.nedvice.nl
mysap.ap.org
blog.ap.org
discover.ap.org
inside.ap.org
wfm.ap.org
ap.org
discover.ap.org
IMSIPAPGW01.ap.org
ap.org
api-qa.ap.org
ap.org
partners.apvideohub.ap.org
blog.ap.org
store.ap.org
apvideohub.ap.org
sports.ap.org
bejive01.ap.org
discover.ap.org
gamestream.ap.org
apipreview.ap.org
ervaring.nedvice.nl
discover.ap.org
tokive01.ap.org
ervaring.nedvice.nl

Certificate

The complete raw certificate details for ap.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILYjCCCkqgAwIBAgIQA5IfsVnwJpFDWyCOYvQkvDANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMDAxMDYwMDAwMDBaFw0yMDEyMzExMjAwMDBaMIGCMQswCQYDVQQGEwJVUzER
MA8GA1UECBMITmV3IFlvcmsxETAPBgNVBAcTCE5ldyBZb3JrMR0wGwYDVQQKExRU
aGUgQXNzb2NpYXRlZCBQcmVzczEdMBsGA1UECxMUVGhlIEFzc29jaWF0ZWQgUHJl
c3MxDzANBgNVBAMTBmFwLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOMl++vCZ/ZxuVDHDkN6m8M0ZTsrKs3/YUuf+jmHeKcvi1IXIHX5QXgNB4oP
ELC1xd39GOPPBMSw2JFCerLELF7VqBW0/+DjlQUMu7x95jGscavp0rqVIfdVa+kn
Wxset4uxI27w/d++okN++texp0D9p2Xb9jJeTrMN4uUTk7mK80TbPkM2mO4zCRq5
Jdxu1cCDhhcQiBIk1YrjyOBuwlR8nv5CTVwUzkAs9PiBn/Z+pFQQ96PUeez5OeYj
+tq7/0ddGGWHpesNXPNTtBjcd+DtqcrkfDf/SNuJcgQI9+rPSHedzhxhBezfgeiW
hn2dt32q1Q9h2ErFTqAZZTCHOhMCAwEAAaOCB/UwggfxMB8GA1UdIwQYMBaAFJBY
/7CcdahRVHex7fKjQxY4nmzFMB0GA1UdDgQWBBRYjcZVP+mDvw6wZxmbJEdUIgKk
TTCCBWYGA1UdEQSCBV0wggVZggZhcC5vcmeCDWluc2lkZS5hcC5vcmeCFmludGVy
YWN0aXZlc3FhMS5hcC5vcmeCF3ByZXZpZXcubmV3c3Jvb20uYXAub3JnghJzdW1t
ZXJnYW1lcy5hcC5vcmeCDXJhY2luZy5hcC5vcmeCE2Fwdm90ZWNvdW50Mi5hcC5v
cmeCDnBybzMycWEuYXAub3Jngg1ob3N0ZWQuYXAub3JnghF3d3cuYXBwbGFubmVy
LmNvbYIaY29sbGVnZWJhc2tldGJhbGxxYS5hcC5vcmeCDWN2cGEyMC5hcC5vcmeC
Fnd3dy53aW50ZXJnYW1lcy5hcC5vcmeCEGJpbmFyeWFwaS5hcC5vcmeCEHdmcHJl
dmlldy5hcC5vcmeCEndpbnRlcmdhbWVzLmFwLm9yZ4IRd3d3LmFwYXJjaGl2ZS5j
b22CEHd3dy5hcGltYWdlcy5jb22CDXByb250by5hcC5vcmeCGGNvbGxlZ2ViYXNr
ZXRiYWxsLmFwLm9yZ4ILcm9hbS5hcC5vcmeCDGJyYW5kLmFwLm9yZ4IYZGlnaXRh
bHNlcnZpY2VzcWEuYXAub3JnghZjb2xsZWdlZm9vdGJhbGwuYXAub3Jngg1hcGhl
bHAuYXAub3Jngg1hcHBsYW5uZXIuY29tghlwcmV2aWV3LmFwdmlkZW9odWIuYXAu
b3Jngg9pbnNpZ2h0cy5hcC5vcmeCDmNhcmVlcnMuYXAub3JnghVpbnRlcmFjdGl2
ZXNxYS5hcC5vcmeCDndlYm1haWwuYXAub3JnghNpbnRlcmFjdGl2ZXMuYXAub3Jn
gg1jdnBhMTAuYXAub3JnghZ2aWRlb3Byb2R1Y3Rpb24uYXAub3Jngg9tYWlsLWN0
Yy5hcC5vcmeCDWJhY2t1cC5hcC5vcmeCC3BvbGwuYXAub3JnghB3d3cucHJvMzIu
YXAub3JnghJhcHZvdGVjb3VudC5hcC5vcmeCFHd3dy5lbGVjdGlvbnMuYXAub3Jn
ggxwb2xscy5hcC5vcmeCEGVsZWN0aW9ucy5hcC5vcmeCEnd3dy5hcGV4Y2hhbmdl
LmNvbYIMcHJvMzIuYXAub3Jngg9tYWlsLWxvbi5hcC5vcmeCCndmbS5hcC5vcmeC
EXd3dy5hcHZpZGVvdXMuY29tgg93ZWJmZWVkcy5hcC5vcmeCD3d3dy5hcHRvcDI1
LmNvbYIMbGVhZHMuYXAub3JnghRjbGFzc2ljLmFwaW1hZ2VzLmNvbYIVZWxlY3Rp
b25zc3RhZ2UuYXAub3Jngg9uZXdzcm9vbS5hcC5vcmeCGnd3dy5jb2xsZWdlZm9v
dGJhbGwuYXAub3JnggtibG9nLmFwLm9yZ4ISc3luZGljYXRpb24uYXAub3Jnggth
cHZjLmFwLm9yZ4IRc2VjdXJlZHJvcC5hcC5vcmeCG2ludGVyYWN0aXZlcy1zdGFn
aW5nLmFwLm9yZ4IbY29sbGVnZWJhc2tldGJhbGxkZXYuYXAub3Jnggxsb2dpbi5h
cC5vcmeCC2FwdG9wMjUuY29tgg9iaWdzdG9yeS5hcC5vcmeCE2VsZWN0aW9uc2Rl
di5hcC5vcmeCEXd3dy5yYWNpbmcuYXAub3JnghZkaWdpdGFsc2VydmljZXMuYXAu
b3JnghFhcHZpZGVvaHViLmFwLm9yZ4IKZG5lLmFwLm9yZ4Icd3d3LmNvbGxlZ2Vi
YXNrZXRiYWxsLmFwLm9yZ4IZZGlnaXRhbHNlcnZpY2VzZGV2LmFwLm9yZ4IPb3Bl
bmluZ3MuYXAub3Jngg9ob3N0ZWRxYS5hcC5vcmeCDGFwdmMyLmFwLm9yZzAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1Ud
HwQ3MDUwM6AxoC+GLWh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNB
Q0EyMDE4LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIB
FhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB1BggrBgEF
BQcBAQRpMGcwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29t
MD0GCCsGAQUFBzAChjFodHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1
c3RSU0FDQTIwMTguY3J0MAkGA1UdEwQCMAAwggEEBgorBgEEAdZ5AgQCBIH1BIHy
APAAdwCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAW98avrKAAAE
AwBIMEYCIQCh8QOWRrF03YhQ70dp6/e6WwnsgdCaBRHDdBgt5yAFxgIhAOqlVLAB
vy937XMD6UKideMIRxLSElqIANNS45bhc0JgAHUAXqdz+d9WwOe1Nkh90EngMnqR
mgyEoRIShBh1loFxRVgAAAFvfGr6ZQAABAMARjBEAiASrCV2KaC/I8J5eWFMqu3R
SkbjyjMA+RDPAH0sQ/DlTgIgGY+Vx23EHExD3jmnnlLEfmALbr2CH76r4m+UDWRn
ky0wDQYJKoZIhvcNAQELBQADggEBACYbY47prW7/KeKFaGqCbHHqdSMPiZWrHxoc
qTU6vNitR8oqsewXA9Ugio9ZHVVGNLtJE9ucslgq8B4h55RkqY3ZAs8G1+z9I9Jz
avL6proOvJmCezWcFaEYGjREPVVLy5Kl/gSgPBV5L7Qpg3hd/Y3YqE6uRGXpx6+3
55CzCheP7AIi9fniO3Vbc9hjw7egVevOitk9b0jmwzde9LV11+9C5QA2Teo/bsB0
9odvm0qwJ4rzrTgbS9TQ/Xmqk0Rpd+kY/Zr/9sRYaKKuBqLhUDmPYGdfiFwa7TQg
1XD/xHrDX2rUWA2axe+YNrciukMN3VYcz8lW/B7FhByqH8Aktqs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yX768Jn9nG5UMcOQ3qb
wzRlOysqzf9hS5/6OYd4py+LUhcgdflBeA0Hig8QsLXF3f0Y488ExLDYkUJ6ssQs
XtWoFbT/4OOVBQy7vH3mMaxxq+nSupUh91Vr6SdbGx63i7EjbvD9376iQ37617Gn
QP2nZdv2Ml5Osw3i5ROTuYrzRNs+QzaY7jMJGrkl3G7VwIOGFxCIEiTViuPI4G7C
VHye/kJNXBTOQCz0+IGf9n6kVBD3o9R57Pk55iP62rv/R10YZYel6w1c81O0GNx3
4O2pyuR8N/9I24lyBAj36s9Id53OHGEF7N+B6JaGfZ23farVD2HYSsVOoBllMIc6
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4746402134617800879412740739153798332
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Associated Press'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Associated Press'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ap.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28674825868415874986187556207931607778190621657197144527663437596731934743554921288557782793204068653815074279143062032071385923497196264417785215043384589852065241814998268085266295770431003173786261269629296411062177932064913429819662457356890472548460089727175527113888540109781751594105350850103075411764236431725202055546211434015227753147268764377356922109440808363257942293306165002292885554203199758101337087772370333292125473189066649174179224702523156099214614163628010386481330334636918722879689176367771707410263760318301436892580441429765223602841131332829312182821317888853272491336043636988327684946451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							588dc6553fe983bf0eb067199b2447542202a44d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1373 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactivesqa1.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.newsroom.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summergames.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racing.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apvotecount2.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro32qa.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosted.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegebasketballqa.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvpa20.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wintergames.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binaryapi.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfpreview.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wintergames.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aparchive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pronto.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegebasketball.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roam.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalservicesqa.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegefootball.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aphelp.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.apvideohub.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactivesqa.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvpa10.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoproduction.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-ctc.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poll.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro32.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apvotecount.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elections.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polls.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elections.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro32.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-lon.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfm.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apvideous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webfeeds.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aptop25.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classic.apimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electionsstage.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegefootball.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syndication.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apvc.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedrop.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives-staging.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegebasketballdev.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aptop25.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigstory.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electionsdev.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.racing.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalservices.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apvideohub.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dne.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegebasketball.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalservicesdev.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openings.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostedqa.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apvc2.ap.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016f7c6afaca0000040300483046022100a1f1039646b174dd8850ef4769ebf7ba5b09ec81d09a0511c374182de72005c6022100eaa554b001bf2f77ed7303e942a275e3084712d2125a8800d352e396e17342600075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f7c6afa650000040300463044022012ac257629a0bf23c27979614caaedd14a46e3ca3300f910cf007d2c43f0e54e0220198f95c76dc41c4c43de39a79e52c47e600b6ebd821fbeabe26f940d6467932d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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