*.canary1-bf1.media.yahoo.com

- Oath Holdings Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 09:83:20:3f:d9:49:16:04:cb:c9:3f:6a:55:2f:54:2f was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oath Holdings Inc.

Organization: Oath Holdings Inc.
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:83:20:3f:d9:49:16:04:cb:c9:3f:6a:55:2f:54:2f
Serial Number (int): 12643896946260463224176278322971366447
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0d:02:1e:39:8c:f3:24:39:e7:8b:3b:9e:8b:5f:b3:46:0b:31:d0:19
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): e9:97:01:47:44:71:f9:81:0e:04:f7:79:fc:91:c0:b8:99:df:d3:dc
Fingerprint (sha256): 0c:8d:96:96:5d:1f:3f:8e:cc:ac:e1:d6:e7:07:cf:9d:7b:2e:33:19:db:7a:2a:29:e0:45:a4:3c:f1:4b:08:f1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.canary1-bf1.media.yahoo.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.canary1-bf1.media.yahoo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.canary1-bf1.media.yahoo.com
*.data.yahoo.com
*.fantasysports.yahoo.com
*.finance.yahoo.com
*.flurry.com
*.fp.yahoo.com
*.geo.yahoo.com
*.io.yahoo.net
maw.ouroath.com
*.maw.ouroath.com
*.media.yql.yahoo.com
*.mobile.yahoo.com
*.paas.ec.yahoo.com
*.protrade.com
*.publishing.oath.com
*.query.yahoo.com
*.query.yahooapis.com
*.search.yahoo.com
*.sports.yahoo.com
*.video.yahoo.com
*.yahoo.com
*.yql.yahoo.com
*.yql.yahooapis.com
*.media.yahoo.com
*.canary1-gq1.media.yahoo.com
*.canary1-ir2.media.yahoo.com
*.canary1-ne1.media.yahoo.com
*.canary1-sg3.media.yahoo.com
*.canary1-tp2.media.yahoo.com
*.canary1-tw1.media.yahoo.com
*.prod1-bf1.media.yahoo.com
*.prod1-gq1.media.yahoo.com
*.prod1-ir2.media.yahoo.com
*.prod1-ne1.media.yahoo.com
*.prod1-sg3.media.yahoo.com
*.prod1-tp2.media.yahoo.com
*.prod1-tw1.media.yahoo.com
*.alpha1-bf1.media.yahoo.com
*.beta1-bf1.media.yahoo.com
*.stage1-bf1.media.yahoo.com
actservices.oath.com
adspecs.oath.com
*.adspecs.oath.com
*.adspecs.yahoo.com
*.admanagerplus.yahoo-inc.com
admanagerplus.yahoo-inc.com
*.admanagerplus.yahoo.com
*.datatables.org
*.entertainment.yahoo.com
subs.communications.yahoo.com
*.virtualstudio.yahoo.com
*.yax.yahoo.com
*.yql.yimg.com
api.lps.cp.yahoo.com
*.vads.yahoo.com
*.developer.yahoo.com
ad.com
*.ad.com
*.ad.yahoo.com
adspecs.verizonmedia.com
*.adspecs.verizonmedia.com
*.verizonmedia.com
*.canary1-bf1.omega.yahoo.com
*.canary1-gq1.omega.yahoo.com
*.canary1-ir2.omega.yahoo.com
*.canary1-ne1.omega.yahoo.com
*.canary1-sg3.omega.yahoo.com
*.canary1-tp2.omega.yahoo.com
*.canary1-tw1.omega.yahoo.com
*.prod1-bf1.omega.yahoo.com
*.prod1-gq1.omega.yahoo.com
*.prod1-ir2.omega.yahoo.com
*.prod1-ne1.omega.yahoo.com
*.prod1-sg3.omega.yahoo.com
*.prod1-tp2.omega.yahoo.com
*.prod1-tw1.omega.yahoo.com
*.alpha1-bf1.omega.yahoo.com
*.beta1-bf1.omega.yahoo.com
*.stage1-bf1.omega.yahoo.com
*.test1-gq1.omega.yahoo.com
*.digits.vzbuilders.com
*.vzbuilders.com
*.v2-canary1-gq1.omega.yahoo.com
*.v2-canary1-bf1.omega.yahoo.com
*.v2-canary1-ne1.omega.yahoo.com
*.v2-canary1-ir2.omega.yahoo.com
*.v2-canary1-sg3.omega.yahoo.com
*.v2-canary1-tp2.omega.yahoo.com
*.v2-canary1-tw1.omega.yahoo.com
*.v2-prod1-gq1.omega.yahoo.com
*.v2-prod1-bf1.omega.yahoo.com
*.v2-prod1-ne1.omega.yahoo.com
*.v2-prod1-ir2.omega.yahoo.com
*.v2-prod1-sg3.omega.yahoo.com
*.v2-prod1-tp2.omega.yahoo.com
*.v2-prod1-tw1.omega.yahoo.com
*.tp.vzbuilders.com
*.mmi.vzbuilders.com
*.tripod.yahoo.com
*.yahooapis.com

Other certificates including the domain name yahoo.com

(limited to 100 certificates)
digits3.data.yahoo.com
checkout.yahoo.com
*.sonic.mail.yahoo.com
master.data.yahoo.com
login.yahoo.com
backend.paranoids.corp.yahoo.com
qa.edge.ymon.corp.ne1.yahoo.com
*.store.yahoo.com
www.yahoo.com
chilledfilled.corp.gq1.yahoo.com
san.test-paranoids.yahoo.com
allhands.corp.yahoo.com
*.stage.login.yahoo.com
test012.san.test-paranoids.yahoo.com
tw.preview.campaign.money.yahoo.com
stage.api.onepush.mobile.yahoo.com
endurepoor.corp.ir2.yahoo.com
privbin.corp.yahoo.com
tw.mobi.yahoo.com
tw.knowledge.yahoo.com
stg-sandyui-01.netops.corp.gq1.yahoo.com
cosmos.bcp.search.corp.yahoo.com
testdata.factory.vespa.corp.yahoo.com
mobileexcellence.corp.yahoo.com
staging-origin-life.huffpo.net
lab-uic-pub.lab.rich.corp.yahoo.com
pr.comet.yahoo.com
admin.nevec.yahoo.com
steamedesteemed.corp.sg3.yahoo.com
stage.api.pes.yahoo.com
test.dek.ckms.yahoo.com
goglobal-demo.g11n.corp.gq1.yahoo.com
academy-delivery.cc.corp.yahoo.com
beta.api.backyard3.corp.yahoo.com
tw.billing.yahoo.com
sp.analytics.yahoo.com
dwdevetl02.fin.corp.gq1.yahoo.com
uc-gq1-vcenter1.corp.gq1.yahoo.com
backend-stage.paranoids.corp.yahoo.com
wherehaus.stage.geotech.corp.yahoo.com
gq1-psinprd-clu.psi.corp.gq1.yahoo.com
*.jeditools.mail.yahoo.com
kite-tools.pbp.corp.ne1.yahoo.com
origin.qa.dispatcher.yahoo.com
*.ea.ops.yahoo.com
endurepoor.corp.ir2.yahoo.com
*.report.gemini.yahoo.com
api.soln-stage.isvc.cp.yahoo.com
backend-stage.paranoids.corp.yahoo.com
san.test-paranoids.yahoo.com
san.test-paranoids.yahoo.com
tw.db.media.yahoo.com
*.cs.gq1-1.manhattan.gq1.yahoo.com
sh-gdpr.search.yahoo.com
*.abumedia.yahoo.com
*.answers.ycpi.yahoo.com
*.tee.ops.search.yahoo.com
privbin.corp.yahoo.com
oxy-oxygen-4a0620a5.gq1.yahoo.com
e2.ycpi.aeb.yahoo.com
secure02.lithium.com
telco-sg3-jump.sg3.corp.yahoo.com
legacy.pop.mail.yahoo.com
privbin.corp.yahoo.com
admin.ckms.yahoo.com
sp.analytics.yahoo.com
*.api.gemini.yahoo.com
dev.ui.payments.yahoo.com
dspskadpostback.aaca.yahooinc.com
san.test-paranoids.yahoo.com
splunk1.flurry.gq1.yahoo.com
certreloader.demo.yahoo.com
splunk.dspe.yahoo.com
src2.yahoo.com
profileproxy.prod.tgt.bf1.yahoo.com
legaltoolsstage.corp.yahoo.com
test1.yahoo.com
st39.yahoo.com
beta.edit.client.yahoo.com
chat.ouroath.com
endurepoor.corp.ir2.yahoo.com
*.chef.ops.yahoo.com
backend-stage.paranoids.corp.yahoo.com
san.test-paranoids.yahoo.com
manhattan.yahoo.com
dev.productcentral.aol.com
*.tripod.bf2.yahoo.com
ws.mobile.mail.yahoo.com
vpn2-1-gci.eglbp.corp.yahoo.com
endurepoor.corp.ir2.yahoo.com
yakl-rules.ops.yahoo.com
jp.techcrunch.com
ldap-mgmnt.corp.yahoo.com
yql.onepush.mobile.yahoo.com
*.hlfs.yahoo.com
*.wv.msg.yahoo.com
endurepoor.corp.ir2.yahoo.com
ads.vidible.tv
kronostest.fin.corp.yahoo.com
api.native.yahooinc.com

Certificate

The complete raw certificate details for *.canary1-bf1.media.yahoo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFgbhFRFz6dUqAiRqrtS
ItJPXon0sMzBMJF3coeiB7JEF7kOi9g2xeKD+l9N8H+8yaycSMj/Q9ONOIH4AO+l
KPAbABLT/wf9mvue2uUN3Z+MQudYtQrb06/ZPV90WeOfiPcpCYpgS4lqZVVSCN1Z
a4rubfsH7PL709L+7OHNtZuPQ9fkMgaWvB2b3A9lW3Jx0m2sUS7tKWspwEIKaStf
YcxG+BDsZCWW55N0w9pAkBhTURwJ3jCqLhanUHTwIyF2ndWG+VYF5pp+EOCmKP3u
cOQsxYhN+MwTGVdzTUQmwFdd2FnK5BHx8lZgNi7okYvj77tFHNaUhtXhlwtZN+eW
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12643896946260463224176278322971366447
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Holdings Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.canary1-bf1.media.yahoo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23776248755226461242713630653353322154509599816713465361187015911031265090086533078726609029459187079824096804306467620413058750979637116350082602961619672771128461096362339856589345227117877918941980416573067031280065289560444937818828807790415758451470868102004929376139375019939052565748953972434010924721294692023694800590205390044753847031323426947107895221973346380709019359036409036731192978433376546937515881026622293620695298108291530447806326854122100250964046993252116673474637737840530118593041948674884712302155383274909035965300735789691168477169214823997747196172889092775301963555857036347805887075929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d021e398cf32439e78b3b9e8b5fb3460b31d019
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2550 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-bf1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.data.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fantasysports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finance.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flurry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geo.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.io.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maw.ouroath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maw.ouroath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.media.yql.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobile.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paas.ec.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.publishing.oath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.query.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.query.yahooapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.search.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yql.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yql.yahooapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-gq1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-ir2.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-ne1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-sg3.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-tp2.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-tw1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-bf1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-gq1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-ir2.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-ne1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-sg3.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-tp2.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-tw1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alpha1-bf1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta1-bf1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage1-bf1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actservices.oath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adspecs.oath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adspecs.oath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adspecs.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admanagerplus.yahoo-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admanagerplus.yahoo-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admanagerplus.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datatables.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entertainment.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subs.communications.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virtualstudio.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yax.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yql.yimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lps.cp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vads.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.developer.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ad.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adspecs.verizonmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adspecs.verizonmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verizonmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-gq1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-ir2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-ne1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-sg3.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-tp2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-tw1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-gq1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-ir2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-ne1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-sg3.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-tp2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-tw1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alpha1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test1-gq1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digits.vzbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vzbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-gq1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-ne1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-ir2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-sg3.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-tp2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-tw1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-gq1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-ne1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-ir2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-sg3.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-tp2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-tw1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tp.vzbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmi.vzbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tripod.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yahooapis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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