The New York Times Company

- The New York Times Company -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0a:60:07:bb:80:3a:e4:05:97:b1:75:f7:77:6a:d6:ee was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

The New York Times Company

Company registration number: 15772
Organization: The New York Times Company
Address: 620 Eighth Avenue
State / Province: New York
Locality: New York
Country: US

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:60:07:bb:80:3a:e4:05:97:b1:75:f7:77:6a:d6:ee
Serial Number (int): 13790897288487393667893375286773470958
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 55:ad:3b:d2:bf:d0:34:ec:44:50:a3:7e:b2:b5:dc:8c:3f:d1:be:f8
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 1c:6d:f3:f4:f5:74:73:47:47:6f:f2:28:51:b0:6a:e7:a4:b2:2e:0f
Fingerprint (sha256): 18:26:d0:4e:d4:d3:a2:94:22:5e:64:03:14:17:e1:cd:06:08:62:44:f9:1b:7e:a8:f9:26:e6:43:fc:eb:c9:24

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate The New York Times Company

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for The New York Times Company

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nytimes.com
newyorktimes.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for The New York Times Company in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILBTCCCO2gAwIBAgIQCmAHu4A65AWXsXX3d2rW7jANBgkqhkiG9w0BAQsFADBf
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNzA1BgNVBAMT
LkRpZ2lDZXJ0IFZlcmlmaWVkIE1hcmsgUlNBNDA5NiBTSEEyNTYgMjAyMSBDQTEw
HhcNMjIwOTEzMDAwMDAwWhcNMjMxMDE0MjM1OTU5WjCCAUYxEzARBgsrBgEEAYI3
PAIBAxMCVVMxGTAXBgsrBgEEAYI3PAIBAhMITmV3IFlvcmsxHTAbBgNVBA8TFFBy
aXZhdGUgT3JnYW5pemF0aW9uMQ4wDAYDVQQFEwUxNTc3MjELMAkGA1UEBhMCVVMx
ETAPBgNVBAgTCE5ldyBZb3JrMREwDwYDVQQHEwhOZXcgWW9yazEaMBgGA1UECRMR
NjIwIEVpZ2h0aCBBdmVudWUxIzAhBgNVBAoTGlRoZSBOZXcgWW9yayBUaW1lcyBD
b21wYW55MSMwIQYDVQQDExpUaGUgTmV3IFlvcmsgVGltZXMgQ29tcGFueTEfMB0G
CisGAQQBg55fAQ0TD1JlZ2lzdGVyZWQgTWFyazESMBAGCisGAQQBg55fAQMTAlVT
MRcwFQYKKwYBBAGDnl8BBBMHMjk1OTI5MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMQNwSSHAHYVk0LrrnbPfJ37xGK+OAWKZ8QoIchCeZs6XrC+Oro+
+HtePyVXvg4uMxWkSGZmiCec39KcbYF3Bvc9N6qFUAQKrKwjdWxfgYnSAIO+pLDi
6O9cJ7K/UGSM92Nk01yrIUy8Zk8iii75/UMqE6Bt6nTeVOHXaBTwk9G0vuA4YqOF
G+Uqll6dNEQx8og51i0q/rYibXUwIb3NjDacdpthxKQgov/G7lDv7VwCwgWeleAY
D+Abh+Z67y9FDkjLCxmcxykOx1BdnwPpkZPAMWCXAlVazLsSvu8cZKY/D/WJGln7
GWN6DzBTxhX3VB8okXVindxy9DkrqkS0ENsCAwEAAaOCBdIwggXOMB8GA1UdIwQY
MBaAFL6fvY1XbZW1rWPDl06rqIRdOgf1MB0GA1UdDgQWBBRVrTvSv9A07ERQo36y
tdyMP9G++DAoBgNVHREEITAfggtueXRpbWVzLmNvbYIQbmV3eW9ya3RpbWVzLmNv
bTATBgNVHSUEDDAKBggrBgEFBQcDHzCBpQYDVR0fBIGdMIGaMEugSaBHhkVodHRw
Oi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRWZXJpZmllZE1hcmtSU0E0MDk2
U0hBMjU2MjAyMUNBMS5jcmwwS6BJoEeGRWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNv
bS9EaWdpQ2VydFZlcmlmaWVkTWFya1JTQTQwOTZTSEEyNTYyMDIxQ0ExLmNybDBQ
BgNVHSAESTBHMDcGCmCGSAGG/WwAAgUwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3
dy5kaWdpY2VydC5jb20vQ1BTMAwGCisGAQQBg55fAQEwZAYIKwYBBQUHAQEEWDBW
MFQGCCsGAQUFBzAChkhodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNl
cnRWZXJpZmllZE1hcmtSU0E0MDk2U0hBMjU2MjAyMUNBMS5jcnQwDAYDVR0TAQH/
BAIwADCCA8gGCCsGAQUFBwEMBIIDujCCA7aiggOyoIIDrjCCA6owggOmMIIDohYN
aW1hZ2Uvc3ZnK3htbDAjMCEwCQYFKw4DAhoFAAQUI8SbRln37XLPDQZ7yO8DjQTH
l5cwggNqFoIDZmRhdGE6aW1hZ2Uvc3ZnK3htbDtiYXNlNjQsSDRzSUFBQUFBQUFB
Q25WVFRXL2JNQXk5OTFjWTJsVmtST3A3aUZOc0EzYmFnQjIySEhaTEV5Y3g0Q1pG
WWlUdHZ4OGxlME12Z3hIbmlhTEo5L2lrNWVQcjg5RGN1c3UxUDU5YVJXaFUwNTIy
NTExL09yVHExOCt2a0ZSekhUZW4zV1k0bjdwV3ZYVlg5Ymg2V0Y1dmgvZWZzV3Fl
TnRmdXgrVzg3d2RKRy92VEc3eGNWWFB2ZCtPeFZaR2w4TEhyRDhkeFh0ejY3djc1
L05vcTA1aEdJazJOQ3B2VHRWWEhjWHo1dUZqYzczZThXenhmRGdzMnhpeWtxVm85
Tk0xeTdNZWhXejMxenoxSURHbzNZbW00WEV4YkplblNiY2YvOWwvVWxKZk5lR3gy
cmZydXJVR3kycG1JSm02QkhKTFhOcUtONEF5eURnSFpRWXpvZzA2RW50ZFQ2dUFj
Umx0ellJSTJZN0EzOEdFcndSaUFNVmtkc3VTQ2ZZZERTZE1HWEVJaDdqd21EOEVq
UVNUTUZXMUtOOUxUMjVRSDJHQjJtcEhEbWh4dExUb0pKM1FaMEVkTkltRkdwYWhz
V2NKWTl5ZkVEbk1wUll6T1EwMmZZc0FKTFUzNGk4MFJROUNVUlpQTXdIbE5YcHFt
V01nTDNFTGhBeW1VK1dSYlFBem9hcjhTME14b2t2WUdiZFlpakxQMkNWTWFoSmxN
ZzJXOE10Y0FEcjJGUWlYQVRLamltU1NReUtoVEVlcmt0UFVZNG96ZExJOVlna2xN
SzBJb1dwenhzWlMrK1lDQmh1b0thM0hGQkQzaFl0WXRNUVl2UnFkU0lXRE1NSkV2
dG9DUEdOMEVZekcxMEJGVm5LRHErYnNnOGNQbkRTWFc1VmM4RXIrS05sK3FEN1pp
S3NOWk81a1J1U0dLcEFCV25GdHpaTFR1RzhlRVROcEtTZktmaU1Vb1VUNzlUUld0
RUhaSnMrZWh1QXV5dFoxNTFkcHlXbU9aZ0J5K0daRUl5RjQrRml2bHdGU3RraXU5
cGJUMHkvOFdSazViYWVKRnJJTlEweW5JZ0VoNHg5K3FrZXM4dE9yRGZyOHZWMlpa
cnVEcUR4eDFqcnMxQkFBQTATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B
AQsFAAOCAgEAV9lV2UXzUifQvQF4LDQDBa+2UrB1qStzm6Mvbk6Bq8v3bZ45CCix
1v7XC9wE92NeFhoYyYkGxyeB4DzwyKja+WmnqTBaSJ51uY52EaHRaovXGbp9iTpY
UFrtMhV0s1MHpkkpTSV6eRawrywc/ORlkohDX8S1x2Va8NgHzoYOdmNX+9f5KHRQ
B5xL7JWXh0J/6qMNQNSmDtehWUXD9oTIfxOISrkkbUAC2Dxg6FVL8v3TPEvoXDFc
+/MD+MC1sltyRspTSTqByG5qeXwrWVSoVqwW3fOuIZac7QsJZbzUZUd/XZtMMuRV
W+nbwUJ5ZXo8tonDFyCa2Unz2KdbwNW3l+x9iWAReYv6YVwWvrwqOYup7TDRyMgK
3xVW7eKK877wfBoK5l5x0KIIwosgOwcjm0/iYlO5JPZfQlAre4kP9Dy4JEZpsyeG
VY9Wwrz47It71okALJ0A4RTkTSGM/jZv7hoShsRaSmVukrVlnH9G2hE+y9WLIq28
J5nXa4fcA+xf3590hU0HxGLjAozsioRiM+//GEbIqgY7Paa8DmW2w/UNGDHWMgeb
7hMh56fR7AtPV+dAMN6hYO+pYu3iAAAvc0u4tQ/ICBZ7WpS/orhIX7BUMf3yr4JA
36BmM/oK8s1W8ky+HL9153TYIqxo5pfbt/LDv1I6FhisNybF2aMQrx8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA3BJIcAdhWTQuuuds98
nfvEYr44BYpnxCghyEJ5mzpesL46uj74e14/JVe+Di4zFaRIZmaIJ5zf0pxtgXcG
9z03qoVQBAqsrCN1bF+BidIAg76ksOLo71wnsr9QZIz3Y2TTXKshTLxmTyKKLvn9
QyoToG3qdN5U4ddoFPCT0bS+4Dhio4Ub5SqWXp00RDHyiDnWLSr+tiJtdTAhvc2M
Npx2m2HEpCCi/8buUO/tXALCBZ6V4BgP4BuH5nrvL0UOSMsLGZzHKQ7HUF2fA+mR
k8AxYJcCVVrMuxK+7xxkpj8P9YkaWfsZY3oPMFPGFfdUHyiRdWKd3HL0OSuqRLQQ
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13790897288487393667893375286773470958
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '15772'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '620 Eighth Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The New York Times Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The New York Times Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2959293'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24749490352145303289618225061324666085517001601106128663866411216255644788993504861006413205230169850156287437847141925781146618414195009010712077404300915838266380809667561375851287048859945751417250660502572397564299218932754428721266360437703049068458252278114983678491825174240030075792914399691748053357967365965964114772672446681807430066975004925142749523634154509654056761210949064740430072510232463480046447846884548932821475817180013435338864960180230380283587708089372030619684492757530083247161514273278166480352815598762921012598907068890917430231584103738836319572169869761843065300719436262532095152347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55ad3bd2bfd034ec4450a37eb2b5dc8c3fd1bef8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorktimes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (954 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															23c49b4659f7ed72cf0d067bc8ef038d04c79797
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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