dev.reports.yahooinc.com

- Yahoo Holdings Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0a:d9:f7:13:b1:54:f7:3c:5a:82:ff:c4:b2:3c:cf:0c was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Yahoo Holdings Inc.

Organization: Yahoo Holdings Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:d9:f7:13:b1:54:f7:3c:5a:82:ff:c4:b2:3c:cf:0c
Serial Number (int): 14424019691539970103119993225204256524
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 23:06:68:f7:ba:43:54:e8:26:2a:c5:1e:dd:e0:25:81:ca:92:88:68
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 3e:9c:10:df:01:32:51:bf:ce:ba:f2:45:3a:c8:72:b1:59:09:a8:06
Fingerprint (sha256): 10:51:f7:91:d1:13:a7:4f:e5:21:1b:62:97:80:4f:98:94:77:eb:2a:cb:2f:f2:f5:26:42:fa:b6:60:fc:4a:aa

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate dev.reports.yahooinc.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.reports.yahooinc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.reports.yahooinc.com
qa.reports.yahooinc.com
api.stage.onereporting.aol.com
*.one-reporting-dev.aws.oath.cloud

Other certificates including the domain name yahooinc.com

(limited to 100 certificates)
dspskadpostback.aaca.yahooinc.com
api.native.yahooinc.com
www.yahooinc.com
*.autos.yahoo.com
*.ssp.verizonmedia.com
src7.yahoo.com
api.gemini.yahoo.com
src4.yahoo.com
src4.yahoo.com
ssp.yahooinc.com
src7.yahoo.com
careers-real.yahoo.com
a.a.b.c.d.yahooinc.com
yho.com
sdk.yahooinc.com
src4.yahoo.com
src1.yahoo.com
src1.yahoo.com
src1.yahoo.com
*.autos.yahoo.com
src4.yahoo.com
src4.yahoo.com
id-uat.b2b.yahooinc.com
www.academy.yahooinc.com
zeus-ui-uat.b2b.yahooinc.com
stage-legal.yahoo.com
blog.postmaster.yahooinc.com
api-uat.amt.yahooinc.com
www.adtech.yahooinc.com
src1.yahoo.com
one-qa.aol.com
api.native.yahooinc.com
dev.reports.yahooinc.com
edgecastpages.yahooinc.com
*.autos.yahoo.com
postmaster.yahooinc.com
dspskadpostback.aaca.yahooinc.com
src2.yahoo.com
src1.yahoo.com
src1.yahoo.com
stage.smp.verizonmedia.com
authz.yahooinc.com
yho.com
src2.yahoo.com
*.eurosport.yahoo.com
theshop.yahooinc.com
dspskadpostback.aaca.yahooinc.com
tw.api.srch.ect.yahoo.com
src4.yahoo.com
id-uat.b2b.yahooinc.com
stage-careers-real.yahoo.com
adtechem.yahooinc.com
src1.yahoo.com
dev.reports.yahooinc.com
src4.yahoo.com
tw.api.srch.ect.yahoo.com
adtechpages.yahooinc.com
www.yahooinc.com
tw.api.srch.ect.yahoo.com
tw.api.srch.ect.yahoo.com
apac1.creativestudios.yahooinc.com
ssp.yahooinc.com
smart.yahooinc.com
tw.api.srch.ect.yahoo.com
widgets.ssp.yahooinc.com
api.native.yahooinc.com
a.a.b.c.d.yahooinc.com
postmaster.yahooinc.com
*.ssp.yahooinc.com
*.help.yahoo.com
*.autos.yahoo.com
src1.yahoo.com
beta-legal.yahoo.com
*.ssp.verizonmedia.com
apac.creativestudios.yahooinc.com
src2.yahoo.com
advertising.yahooinc.com
dev.postmaster.yahooinc.com
dspskadpostback.aaca.yahooinc.com
src2.yahoo.com
stage.consent.oath.com
artifactory.yahooinc.com
yho.com
src2.yahoo.com
*.adtech.backyard.yahooinc.com
widgets.ssp.yahooinc.com
id.b2b.yahooinc.com
yho.com
src1.yahoo.com
yho.com
api.ssp.yahooinc.com
dspskadpostback.aaca.yahooinc.com
dspskadpostback.aaca.yahooinc.com
api.openrtb.ssp.yahooinc.com
dev.gvp.vzbuilders.com
id.b2b.yahooinc.com
id-uat.b2b.yahooinc.com
*.autos.yahoo.com
src2.yahoo.com
id-uat.amt.yahooinc.com

Certificate

The complete raw certificate details for dev.reports.yahooinc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHNDCCBhygAwIBAgIQCtn3E7FU9zxagv/EsjzPDDANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0yNDA2MDQwMDAwMDBaFw0yNDExMjcyMzU5NTla
MHQxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9yazERMA8GA1UEBxMITmV3
IFlvcmsxHDAaBgNVBAoTE1lhaG9vIEhvbGRpbmdzIEluYy4xITAfBgNVBAMTGGRl
di5yZXBvcnRzLnlhaG9vaW5jLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAL+IMkrbEUk7Tl8cIeMii+xlwYpwtibuiX5e3RLHCwD56YmjAseFruyd
iYvVSqZ+NDj+rOEYG7OZmU+KfU0C3ZUWaDJgX606xrBdjyMtw45sTCOeOiw1ueB/
C10SlQCo5g0P0eN08XC7Rr+rPIKiyAzrNuwV1Y021xYOaP9CWlKvAhfQF8e1NKl7
81swCWJd7zRsobMS1NWzoILKak2DeThDKzV1wi2rwLSsBSeWiMvb1tNil3282p/L
2RpD+kFBdFbiNM3dgoz7owsF0MTM0EZFYtd+RiUL8mag+glThQbA7zx8qWZ4zzx8
27sypriTZ7YexFz2hanuKkvFf+2SI0ECAwEAAaOCA8QwggPAMB8GA1UdIwQYMBaA
FFFo/5CvAgd1PMzZZWRiohK4WXI7MB0GA1UdDgQWBBQjBmj3ukNU6CYqxR7d4CWB
ypKIaDCBgAYDVR0RBHkwd4IYZGV2LnJlcG9ydHMueWFob29pbmMuY29tghdxYS5y
ZXBvcnRzLnlhaG9vaW5jLmNvbYIeYXBpLnN0YWdlLm9uZXJlcG9ydGluZy5hb2wu
Y29tgiIqLm9uZS1yZXBvcnRpbmctZGV2LmF3cy5vYXRoLmNsb3VkMD4GA1UdIAQ3
MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQu
Y29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNv
bS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2lj
ZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwgYMGCCsGAQUFBwEBBHcwdTAk
BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME0GCCsGAQUFBzAC
hkFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEySGlnaEFz
c3VyYW5jZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIE
AgSCAW8EggFrAWkAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAA
AY/lPgVTAAAEAwBHMEUCIGJYXuwmxXBivCp0se9GtVxkNnybkUwgq3N7UP0XvRTC
AiEAlJ0+3N++/44SjCQ3AI4fLHp86RTerilDbqz2spzv5aEAdgBIsONr2qZHNA/l
agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY/lPgUzAAAEAwBHMEUCIQCW1Lezl4rF
GARd+0fFOn8kEGBAsCPz3lbXAeh7k/JWpQIgb7mmmB46LAbuxIPQRvbf81DuLTG/
+QBdGJzAudBaFjMAdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAA
AY/lPgUqAAAEAwBIMEYCIQD8X1xJBOjhFmIufNn2X5XCkFScZp/LZkyRqo90A+wC
9AIhAJSfOEfkyMXJ5C+kjZAoXupUp6DPD1ZwQVSmGRzkdNgnMA0GCSqGSIb3DQEB
CwUAA4IBAQAy8gg/qP7dBq7+jSBhawiwc4fqRQsh4p8zuSF0iGIPXuChg3/vCb8f
SZgsnZ52icFrxlrGqFO3U99SuurkJ/i4Ab00ee0eOPVqKLzqMo4LfIp1Yn/CazR1
7glgF3Ql8suekcGz4/BcKn8GFwSU2KZCFxbvwJwmGu0GdXp/vHIqlt3VXtkCrVsi
KuLd5gpn0/IHeaeHB2qxNurXCTs7ib+1T2nFYOdEgxIKtcpvVQ7Z92Qln1QWRUXX
CjgC+o7bXt71O0UM2JWzPLOpOZ4thxmZ3SuGWNpV5ahkL7XONn0Ha7HBSbPecL3n
FqLQLvK4pYaKTN6QLDPJR4Qta06q1OGd
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4gyStsRSTtOXxwh4yKL
7GXBinC2Ju6Jfl7dEscLAPnpiaMCx4Wu7J2Ji9VKpn40OP6s4Rgbs5mZT4p9TQLd
lRZoMmBfrTrGsF2PIy3DjmxMI546LDW54H8LXRKVAKjmDQ/R43TxcLtGv6s8gqLI
DOs27BXVjTbXFg5o/0JaUq8CF9AXx7U0qXvzWzAJYl3vNGyhsxLU1bOggspqTYN5
OEMrNXXCLavAtKwFJ5aIy9vW02KXfbzan8vZGkP6QUF0VuI0zd2CjPujCwXQxMzQ
RkVi135GJQvyZqD6CVOFBsDvPHypZnjPPHzbuzKmuJNnth7EXPaFqe4qS8V/7ZIj
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14424019691539970103119993225204256524
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Yahoo Holdings Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.reports.yahooinc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24178677223457444340467853738939574855809464083764498372849303594548649261865965555266321999417514063587369706820576125848150583292754927171444888845520522234566576766492712892107640238905051961413288703067502031078658405139427470766222032917619416146103099151590440422584993340157928139737140284538902575521280566102183340442318809202974241141052579131024623969197123053871506389259178834771382067354115706165492497372373956309037358123536652693103981256970265629693995019199613016325692028876699564635257999135692846589788350146738959379651981691494332311040736442805481955196159445724905822702009003428777389335361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							230668f7ba4354e8262ac51edde02581ca928868
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.reports.yahooinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.reports.yahooinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.onereporting.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.one-reporting-dev.aws.oath.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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