www.makers.com

- Oath Holdings Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0b:7b:ce:18:54:bf:f9:70:c6:39:5a:ca:6a:87:2b:b4 was issued on by DigiCert Inc.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Oath Holdings Inc.

Organization: Oath Holdings Inc.
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:7b:ce:18:54:bf:f9:70:c6:39:5a:ca:6a:87:2b:b4
Serial Number (int): 15264340571316934592815062351375444916
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 99:b1:1a:b0:af:63:51:35:03:b1:57:fb:cc:92:ae:07:0c:fd:af:ad
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 19:aa:19:4a:34:6b:30:80:13:91:35:e4:c1:ea:48:c1:47:16:16:8a
Fingerprint (sha256): 0e:3b:ce:9c:b1:0f:ae:0f:37:36:24:da:53:f9:d2:36:51:da:46:2b:b6:8e:fd:38:b2:3d:8f:2d:52:a3:e6:c3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate www.makers.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.makers.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.makers.com
www.builtbygirls.com
wave.builtbygirls.com
wave-stage.builtbygirls.com
venta.automoviles.aol.com
support.builtbygirls.com
premium.yahoofinance.com
o2.welcomescreen.aol.de
brb.yahoo.net
aolbroadband.welcomescreen.aol.co.uk
aol.com
*.za.aol.com
*.www.aol.com
*.vn.aol.com
*.us.aol.com
*.uk.aol.com
*.tw.aol.com
*.shop.intheknow.com
*.sg.aol.com
*.se.aol.com
*.sb.welcomescreen.aol.com
*.sandbox.aol.com
*.ro.aol.com
*.rivals.com
*.rivals-staging.com
*.rivals-acceptance.com
*.qc.aol.com
*.ph.aol.com
*.nz.aol.com
*.n.rivals.com
*.my.aol.com
*.malaysia.aol.com
*.main.welcomescreen.aol.com
*.it.aol.com
*.io.yahoo.net
*.intheknow.com
*.in.aol.com
*.ie.aol.com
*.ideanetsetter.aol.com
*.id.aol.com
*.hsrd.aol.com
*.hk.aol.com
*.gr.aol.com
*.frontier.aol.com
*.fr.aol.com
*.fr-ca.rogers.aol.com
*.fr-be.aol.com
*.forums.rivals.com
*.forums.rivals-staging.com
*.forums.rivals-acceptance.com
*.espanol.aol.com
*.es.aol.com
*.engadget.com
*.de.aol.com
*.ddl.fp.aol.com
*.cashay.com
*.ca.my.aol.com
*.ca.aol.com
*.br.aol.com
*.be.aol.com
*.autoblog.com
*.au.aol.com
*.aol.jp
*.aol.de
*.aol.com
*.aol.co.uk
*.aol.ca
*.add.my.aol.com

Other certificates including the domain name makers.com

(limited to 100 certificates)
stage.guce.oath.com
src1.yahoo.com
src1.yahoo.com
src1.yahoo.com
stage.guce.oath.com
stage.guce.oath.com
src1.yahoo.com
staging.makers.com
src2.yahoo.com
src2.yahoo.com
src1.yahoo.com
src1.yahoo.com
src6.yahoo.com
src6.yahoo.com
trunk.guce.oath.com
trunk.guce.oath.com
src2.yahoo.com
src6.yahoo.com
stage.guce.oath.com
www.makers.com
stage.guce.oath.com
src6.yahoo.com
src1.yahoo.com
src6.yahoo.com
staging.makers.com
src6.yahoo.com
stage.guce.oath.com
guce.oath.com
src6.yahoo.com
src1.yahoo.com
www.makers.com
src6.yahoo.com
stage.guce.oath.com
src6.yahoo.com
src1.yahoo.com
src6.yahoo.com
store.makers.com
src2.yahoo.com
src1.yahoo.com
src6.yahoo.com
src2.yahoo.com
src6.yahoo.com
src2.yahoo.com
src2.yahoo.com
src1.yahoo.com
trunk.guce.oath.com
link.makers.com
src1.yahoo.com
src6.yahoo.com
src1.yahoo.com
src6.yahoo.com
guce.oath.com
src1.yahoo.com
src2.yahoo.com
src1.yahoo.com
*.games.yahoo.com
src2.yahoo.com
src1.yahoo.com
src2.yahoo.com
src1.yahoo.com
src6.yahoo.com
trunk.guce.oath.com
link.makers.com
src1.yahoo.com
trunk.guce.oath.com
trunk.guce.oath.com
src2.yahoo.com
www.makers.com
src1.yahoo.com
src6.yahoo.com
guce.oath.com
src1.yahoo.com
src1.yahoo.com
src1.yahoo.com
stage.guce.oath.com
src6.yahoo.com
src1.yahoo.com
stage.guce.oath.com
src1.yahoo.com
*.games.yahoo.com
trunk.guce.oath.com
src1.yahoo.com
staging.makers.com
src6.yahoo.com
link.makers.com
src2.yahoo.com
src2.yahoo.com
src2.yahoo.com
src6.yahoo.com
guce.oath.com
src2.yahoo.com
trunk.guce.oath.com
trunk.guce.oath.com
trunk.guce.oath.com
stage.guce.oath.com
src2.yahoo.com
src6.yahoo.com
src6.yahoo.com
src1.yahoo.com
trunk.guce.oath.com

Certificate

The complete raw certificate details for www.makers.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqupqoL3bgT4QwEbyKznb
PDudY1KqYa9hRFP2/x+mptsKxaXwEI63O13zqIwt+el7KcA18Bg/FrTubkQnNzzw
RYXHhW0JEq4J3vHkmfXfYcfG1a0dm+HjO8asoXvrYNUKnuMABWxPDIc+QzRQO3DP
Us12Q4MyCg3DeTeyrXkgUQiwKC8UO2ErgprbduIzZy1gX5nV9aAhDotvqp4FwyH3
Ebk4E+TFYVoU9Jc27hpjRRMASh+iyM2OyB/W4A72SE6RwCcXiAMVxLK74e3QkvQN
Jwfmu+rCa3ongWXKCBLDJM8vSoqwETFeqggBgx/TU4Lv6GyZtOPAwND/ykOlXbr0
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15264340571316934592815062351375444916
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Holdings Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.makers.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21576106936174324226224997133702068860220909161049377894217307368991292525743006178762659866410007944996787332263484034763308004835173042453571805194267417705321231289709500905073822222684770659323225901516866391525174805618639325739883680915211970341731862061997883488787874513864690096384903967812848509900286226593840801510427867898388909979025801124033543061108391253467764885727850533327525109729198624838395593077610968300651123119680317331296191129746685964488876184931920745807367887479925285931271290074548352821011869967908951177720452350622199942408558183555064703268991267950806504375854754291626687525889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99b11ab0af63513503b157fbcc92ae070cfdafad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1210 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.builtbygirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wave.builtbygirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wave-stage.builtbygirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venta.automoviles.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.builtbygirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premium.yahoofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o2.welcomescreen.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brb.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aolbroadband.welcomescreen.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.za.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vn.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uk.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tw.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shop.intheknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sg.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.se.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sb.welcomescreen.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ro.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rivals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rivals-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rivals-acceptance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qc.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ph.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nz.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.n.rivals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malaysia.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.main.welcomescreen.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.it.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.io.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intheknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.in.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ie.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ideanetsetter.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.id.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsrd.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hk.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gr.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frontier.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fr.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fr-ca.rogers.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fr-be.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forums.rivals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forums.rivals-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forums.rivals-acceptance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espanol.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.es.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engadget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ddl.fp.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cashay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ca.my.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ca.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.br.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.be.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.au.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aol.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.add.my.aol.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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