*.media.yahoo.com

- Oath Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0b:c4:2d:3a:7f:81:b4:22:e3:24:f8:39:86:7d:b0:77 was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oath Inc

Organization: Oath Inc
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:c4:2d:3a:7f:81:b4:22:e3:24:f8:39:86:7d:b0:77
Serial Number (int): 15640115481033889317199318801039863927
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c7:78:b7:e0:50:7a:3d:db:d8:22:92:ea:02:f6:2c:a4:e8:8d:40:df
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 72:72:43:c2:33:fe:28:e3:28:27:8c:e5:0b:99:71:b3:84:53:a1:24
Fingerprint (sha256): 13:79:97:4d:44:7d:05:2e:db:a4:ee:6f:bc:8e:5f:5e:a0:20:e7:2c:7b:7e:aa:7f:19:ed:07:9b:f4:cb:fb:bb

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.media.yahoo.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.media.yahoo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.media.yahoo.com
*.data.yahoo.com
*.fantasysports.yahoo.com
*.finance.yahoo.com
*.flurry.com
*.fp.yahoo.com
*.geo.yahoo.com
*.io.yahoo.net
maw.ouroath.com
*.maw.ouroath.com
*.media.yql.yahoo.com
*.mobile.yahoo.com
*.paas.ec.yahoo.com
*.protrade.com
*.publishing.oath.com
*.query.yahoo.com
*.query.yahooapis.com
*.search.yahoo.com
*.sports.yahoo.com
*.video.yahoo.com
*.yahoo.com
*.yql.yahoo.com
*.yql.yahooapis.com
*.canary1-bf1.media.yahoo.com
*.canary1-gq1.media.yahoo.com
*.canary1-ir2.media.yahoo.com
*.canary1-ne1.media.yahoo.com
*.canary1-sg3.media.yahoo.com
*.canary1-tp2.media.yahoo.com
*.canary1-tw1.media.yahoo.com
*.prod1-bf1.media.yahoo.com
*.prod1-gq1.media.yahoo.com
*.prod1-ir2.media.yahoo.com
*.prod1-ne1.media.yahoo.com
*.prod1-sg3.media.yahoo.com
*.prod1-tp2.media.yahoo.com
*.prod1-tw1.media.yahoo.com
*.alpha1-bf1.media.yahoo.com
*.beta1-bf1.media.yahoo.com
*.stage1-bf1.media.yahoo.com
actservices.oath.com
adspecs.oath.com
*.adspecs.oath.com
*.adspecs.yahoo.com
*.admanagerplus.yahoo-inc.com
admanagerplus.yahoo-inc.com
*.admanagerplus.yahoo.com
*.datatables.org
*.entertainment.yahoo.com
subs.communications.yahoo.com
*.virtualstudio.yahoo.com
*.yax.yahoo.com
*.yql.yimg.com
api.lps.cp.yahoo.com
*.vads.yahoo.com
*.developer.yahoo.com
ad.com
*.ad.com
*.ad.yahoo.com
adspecs.verizonmedia.com
*.adspecs.verizonmedia.com
*.verizonmedia.com
*.canary1-bf1.omega.yahoo.com
*.canary1-gq1.omega.yahoo.com
*.canary1-ir2.omega.yahoo.com
*.canary1-ne1.omega.yahoo.com
*.canary1-sg3.omega.yahoo.com
*.canary1-tp2.omega.yahoo.com
*.canary1-tw1.omega.yahoo.com
*.prod1-bf1.omega.yahoo.com
*.prod1-gq1.omega.yahoo.com
*.prod1-ir2.omega.yahoo.com
*.prod1-ne1.omega.yahoo.com
*.prod1-sg3.omega.yahoo.com
*.prod1-tp2.omega.yahoo.com
*.prod1-tw1.omega.yahoo.com
*.alpha1-bf1.omega.yahoo.com
*.beta1-bf1.omega.yahoo.com
*.stage1-bf1.omega.yahoo.com
*.test1-gq1.omega.yahoo.com
*.digits.vzbuilders.com
*.vzbuilders.com
*.v2-canary1-gq1.omega.yahoo.com
*.v2-canary1-bf1.omega.yahoo.com
*.v2-canary1-ne1.omega.yahoo.com
*.v2-canary1-ir2.omega.yahoo.com
*.v2-canary1-sg3.omega.yahoo.com
*.v2-canary1-tp2.omega.yahoo.com
*.v2-canary1-tw1.omega.yahoo.com
*.v2-prod1-gq1.omega.yahoo.com
*.v2-prod1-bf1.omega.yahoo.com
*.v2-prod1-ne1.omega.yahoo.com
*.v2-prod1-ir2.omega.yahoo.com
*.v2-prod1-sg3.omega.yahoo.com
*.v2-prod1-tp2.omega.yahoo.com
*.v2-prod1-tw1.omega.yahoo.com
*.tp.vzbuilders.com
*.mmi.vzbuilders.com
*.tripod.yahoo.com
*.yahooapis.com

Other certificates including the domain name yahoo.com

(limited to 100 certificates)
digits3.data.yahoo.com
checkout.yahoo.com
*.sonic.mail.yahoo.com
master.data.yahoo.com
login.yahoo.com
backend.paranoids.corp.yahoo.com
qa.edge.ymon.corp.ne1.yahoo.com
*.store.yahoo.com
www.yahoo.com
chilledfilled.corp.gq1.yahoo.com
san.test-paranoids.yahoo.com
allhands.corp.yahoo.com
*.stage.login.yahoo.com
test012.san.test-paranoids.yahoo.com
tw.preview.campaign.money.yahoo.com
stage.api.onepush.mobile.yahoo.com
endurepoor.corp.ir2.yahoo.com
privbin.corp.yahoo.com
tw.mobi.yahoo.com
tw.knowledge.yahoo.com
stg-sandyui-01.netops.corp.gq1.yahoo.com
cosmos.bcp.search.corp.yahoo.com
testdata.factory.vespa.corp.yahoo.com
mobileexcellence.corp.yahoo.com
staging-origin-life.huffpo.net
lab-uic-pub.lab.rich.corp.yahoo.com
pr.comet.yahoo.com
admin.nevec.yahoo.com
steamedesteemed.corp.sg3.yahoo.com
stage.api.pes.yahoo.com
test.dek.ckms.yahoo.com
goglobal-demo.g11n.corp.gq1.yahoo.com
academy-delivery.cc.corp.yahoo.com
beta.api.backyard3.corp.yahoo.com
tw.billing.yahoo.com
sp.analytics.yahoo.com
dwdevetl02.fin.corp.gq1.yahoo.com
uc-gq1-vcenter1.corp.gq1.yahoo.com
backend-stage.paranoids.corp.yahoo.com
wherehaus.stage.geotech.corp.yahoo.com
gq1-psinprd-clu.psi.corp.gq1.yahoo.com
*.jeditools.mail.yahoo.com
kite-tools.pbp.corp.ne1.yahoo.com
origin.qa.dispatcher.yahoo.com
*.ea.ops.yahoo.com
endurepoor.corp.ir2.yahoo.com
*.report.gemini.yahoo.com
api.soln-stage.isvc.cp.yahoo.com
backend-stage.paranoids.corp.yahoo.com
san.test-paranoids.yahoo.com
san.test-paranoids.yahoo.com
tw.db.media.yahoo.com
*.cs.gq1-1.manhattan.gq1.yahoo.com
sh-gdpr.search.yahoo.com
*.abumedia.yahoo.com
*.answers.ycpi.yahoo.com
*.tee.ops.search.yahoo.com
privbin.corp.yahoo.com
oxy-oxygen-4a0620a5.gq1.yahoo.com
e2.ycpi.aeb.yahoo.com
secure02.lithium.com
telco-sg3-jump.sg3.corp.yahoo.com
legacy.pop.mail.yahoo.com
privbin.corp.yahoo.com
admin.ckms.yahoo.com
sp.analytics.yahoo.com
*.api.gemini.yahoo.com
dev.ui.payments.yahoo.com
dspskadpostback.aaca.yahooinc.com
san.test-paranoids.yahoo.com
splunk1.flurry.gq1.yahoo.com
certreloader.demo.yahoo.com
splunk.dspe.yahoo.com
src2.yahoo.com
profileproxy.prod.tgt.bf1.yahoo.com
legaltoolsstage.corp.yahoo.com
test1.yahoo.com
st39.yahoo.com
beta.edit.client.yahoo.com
chat.ouroath.com
endurepoor.corp.ir2.yahoo.com
*.chef.ops.yahoo.com
backend-stage.paranoids.corp.yahoo.com
san.test-paranoids.yahoo.com
manhattan.yahoo.com
dev.productcentral.aol.com
*.tripod.bf2.yahoo.com
ws.mobile.mail.yahoo.com
vpn2-1-gci.eglbp.corp.yahoo.com
endurepoor.corp.ir2.yahoo.com
yakl-rules.ops.yahoo.com
jp.techcrunch.com
ldap-mgmnt.corp.yahoo.com
yql.onepush.mobile.yahoo.com
*.hlfs.yahoo.com
*.wv.msg.yahoo.com
endurepoor.corp.ir2.yahoo.com
ads.vidible.tv
kronostest.fin.corp.yahoo.com
api.native.yahooinc.com

Certificate

The complete raw certificate details for *.media.yahoo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBJCbvSzzcCTtN+su7+A
9Biwa6AXbiNwad2DjS2mPl/cdDm4CGWRv2hNXhl+R/TF3U2CzhHHKuAmALMdp1L1
m7aRg/ukgytlRrdf0qs7LqAUz0oyTAUJHU2jMI4Lqy/6vFNwkXgFOpryvpy1qo4a
SA2x+ARcN2Lq8RrI2DUPTVSYk8OD2IDZf2MqMh1hHNA5PtY0uH63aF9XQnFJ8eVh
RmG/4V0qo7gQ2oOh9xUdco/s76WlMm+oeJIDOrFS8DO34pLxhRQyl6Kh9OMWaCZO
Yk/Vw3pdPuHZrWDRWq3nFrwaBWrXlHFV1AweRPE4G0ATFu2Klp0NYc1BAKiuLTnY
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15640115481033889317199318801039863927
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.media.yahoo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16167507133430610325494536887671842755504633877335903423271676301807224194991217636542820252534543086946700525819640450127046438860703652962217708578514888011883254402562772478701041034464092930801017803278844843029406231677022109358817481142620137711661206452833773627922537445685639877509042827272302339080672030948440460680695836375704130018635466707161385935662099495849067406111404640138040008352217704558250477886475916269335835181653858515130743063162393216357818684003485808445451650443794372542903192986914203883463419307419565732194492800502385123958100301076719767287105164952146667117539685033716775245947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c778b7e0507a3ddbd82292ea02f62ca4e88d40df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2550 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.data.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fantasysports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finance.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flurry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geo.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.io.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maw.ouroath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maw.ouroath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.media.yql.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobile.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paas.ec.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.publishing.oath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.query.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.query.yahooapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.search.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yql.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yql.yahooapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-bf1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-gq1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-ir2.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-ne1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-sg3.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-tp2.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-tw1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-bf1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-gq1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-ir2.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-ne1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-sg3.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-tp2.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-tw1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alpha1-bf1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta1-bf1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage1-bf1.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actservices.oath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adspecs.oath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adspecs.oath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adspecs.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admanagerplus.yahoo-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admanagerplus.yahoo-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admanagerplus.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datatables.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entertainment.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subs.communications.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virtualstudio.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yax.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yql.yimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lps.cp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vads.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.developer.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ad.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adspecs.verizonmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adspecs.verizonmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verizonmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-gq1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-ir2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-ne1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-sg3.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-tp2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary1-tw1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-gq1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-ir2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-ne1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-sg3.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-tp2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod1-tw1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alpha1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test1-gq1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digits.vzbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vzbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-gq1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-ne1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-ir2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-sg3.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-tp2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-canary1-tw1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-gq1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-bf1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-ne1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-ir2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-sg3.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-tp2.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2-prod1-tw1.omega.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tp.vzbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmi.vzbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tripod.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yahooapis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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