secure.ace.advertising.com

- Oath Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 06:86:14:53:56:f5:cc:c8:0c:54:4a:c8:b9:1a:20:75 was issued on by DigiCert Inc.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oath Inc

Organization: Oath Inc
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:86:14:53:56:f5:cc:c8:0c:54:4a:c8:b9:1a:20:75
Serial Number (int): 8671548004795588580435425539097501813
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3a:5b:77:ac:96:6e:3d:d6:71:0b:47:00:98:62:23:f5:c5:13:a5:95
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): f2:11:ce:2c:0a:c2:de:b9:e4:db:ed:3d:ef:a4:6f:3f:39:26:ea:3e
Fingerprint (sha256): 1c:21:71:9c:83:28:45:a5:a3:7c:ea:fa:ce:4c:37:8e:48:b7:e3:86:10:f8:81:52:cf:62:85:0b:49:0a:23:51

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate secure.ace.advertising.com

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.ace.advertising.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.ace.advertising.com
ads.mtc.ace.advertising.com
ads.ntc.ace.advertising.com
mobile.ace.advertising.com
nw-ads.gslb.ace.advertising.com
r3.gslb.ace.advertising.com
secure.ace-tag.advertising.com
smrtpxl.advertising.com
pixel.advertising.com
ads.nexage.com
*.ssp.advertising.com
*.onemobile.yahoo.com
*.admanagerplus.yahoo.com
web.ssp.yahoo.com
c2s.ssp.yahoo.com
c2shb.ssp.yahoo.com
oao-js-tag.onemobile.yahoo.com
web-oao.ssp.yahoo.com
jill.fc.yahoo.com
us-east-1-web-oao.ssp.yahoo.com
us-west-1-web-oao.ssp.yahoo.com
ap-southeast-1-web-oao.ssp.yahoo.com
eu-central-1-web-oao.ssp.yahoo.com
eu-central.jill.fc.yahoo.com
ap-southeast.jill.fc.yahoo.com
us-east.jill.fc.yahoo.com
us-west.jill.fc.yahoo.com
cdn.yahoomedia.net
cdn.cmp.advertising.com
qa-cdn.cmp.advertising.com
qa-cdn.yahoomedia.net
d.cp.yahoo.com
srv.cp.yahoo.com
qa-d.cp.yahoo.com
qa-srv.cp.yahoo.com

Other certificates including the domain name advertising.com

(limited to 100 certificates)
*.pxl.ace.advertising.com
cmp.advertising.com
*.ads.yahoo.com
*.ads.yahoo.com
madseu.advertising.com
*.cmp.advertising.com
consent.oath.com
*.ads.yahoo.com
*.pubgw.ads.yahoo.com
cdn.cmp.advertising.com
cmp.advertising.com
secure.leadback.advertising.com
stage.guce.oath.com
secure.ace-tag.advertising.com
service.sp.advertising.com
stage.consent.oath.com
*.pubgw.ads.yahoo.com
stage.guce2.oath.com
secure.leadback.advertising.com
*.ads.yahoo.com
jp.adlearnop.advertising.com
stage.guce.oath.com
stage.guce.oath.com
dtm.advertising.com
stage.consent.oath.com
ui.aps.ads.yahoo.com
video.adaptv.advertising.com
stage.consent.oath.com
ui.aps.ads.yahoo.com
*.ads.yahoo.com
*.ads.yahoo.com
service-dev.sp.advertising.com
*.ads.yahoo.com
service-dev.idsync.analytics.yahoo.com
trunk.guce.oath.com
trunk.guce.oath.com
*.cp.yahoo.com
stage.consent.oath.com
api.reports.advertising.com
*.ads.yahoo.com
*.ads.yahoo.com
*.adap.tv
stage.guce.oath.com
cmp.advertising.com
*.ads.yahoo.com
dtm.advertising.com
ui.aps.ads.yahoo.com
web.ssp.advertising.com
stage.guce.oath.com
ui.aps.ads.yahoo.com
adgui.prod.advertising.aol.com
*.pubgw.ads.yahoo.com
mads.advertising.com
reports.advertising.com
demo.adlearnop.advertising.com
*.pubgw.ads.yahoo.com
ssp.yahoo.com
video.adaptv.advertising.com
service.idsync.analytics.yahoo.com
*.ads.yahoo.com
secure.ace.advertising.com
trunk.consent.oath.com
*.ads.yahoo.com
service-dev.idsync.analytics.yahoo.com
video.adaptv.advertising.com
ui.aps.ads.yahoo.com
reports.jp.advertising.com
cdn.adap.tv
ui.aps.ads.yahoo.com
guce.oath.com
consent.oath.com
consent.oath.com
*.pubgw.ads.yahoo.com
consent.oath.com
prod-m-node-1111.ssp.ads.yahoo.com
stage.guce.oath.com
secure-leadback.tui.db.advertising.com
content.cmp.advertising.com
secure.uac.advertising.com
services.cmp.advertising.com
cmp.advertising.com
*.ads.yahoo.com
*.af.beap.bc.yahoo.com
smrtpxl.advertising.com
stage.consent.oath.com
guce2.oath.com
secure.qa-ads-auto.advertising.com
secure.ace.advertising.com
trunk.consent.oath.com
*.ads.yahoo.com
tag-dev.sp.advertising.com
video-stage.adaptv.advertising.com
*.ads.yahoo.com
trunk.guce.oath.com
uk.onedisplay.aol.com
cmp.advertising.com
guce.oath.com
video.adaptv.advertising.com
trunk.consent.oath.com
stage.consent.oath.com

Certificate

The complete raw certificate details for secure.ace.advertising.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8671548004795588580435425539097501813
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.ace.advertising.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753987735110363360427116691864364241490266061454666584988692190793388187756721312987077086237733646489258260801023793503342788463707631400709432042300177475259911480507199912453880442854006651187606378315566634796274001687381398680308172230575024828743116391907077812889764808986148924166260786040922398228762003720228203621819811681130791792836365980903158524540133807830717910512203451783917972012153611418393015224911496895594083812125502089489202388647995125888510437871429852235423832423526848560256664170116406052352711197121487063357183488178625030428915349110651555324922915549871220569209869773161161582486654417851362555813457665966456734224231540425190114016579306768193171625806549682850385808180956015594207364991102915702959229115763040379220623324622245122914220354992515947632293048795589092895945966912110604484990496952791491291286378406658451449121691718347522960322111385554842227170417342913625996590495131047989577068467394064058904678995190042682258564674534668574709161745890014119815082829611839554408111220701594084181397441942628775899813274091397044410079130374656645661132270094253003079997285270083957911098011506249699469276762613187476444808183680757512026517762827044508304412747551605986892780307097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a5b77ac966e3dd6710b4700986223f5c513a595
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (908 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ace.advertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads.mtc.ace.advertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads.ntc.ace.advertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.ace.advertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nw-ads.gslb.ace.advertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r3.gslb.ace.advertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ace-tag.advertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smrtpxl.advertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixel.advertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads.nexage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssp.advertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onemobile.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admanagerplus.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.ssp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c2s.ssp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c2shb.ssp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oao-js-tag.onemobile.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-oao.ssp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jill.fc.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-east-1-web-oao.ssp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-west-1-web-oao.ssp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-southeast-1-web-oao.ssp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-central-1-web-oao.ssp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-central.jill.fc.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-southeast.jill.fc.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-east.jill.fc.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-west.jill.fc.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.yahoomedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cmp.advertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-cdn.cmp.advertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-cdn.yahoomedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd.cp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv.cp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-d.cp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-srv.cp.yahoo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0071b7a4a19932f9c11d7f7ba64f805286eb45312d3360200fa12ba740eeb14cb434b21e38ab231bd3c54550127dd5ae0e9b3dce34f1b413226bfba1854b59ab39af42e49c9e37da5bcb6389364f127d2f57c0f68cbfb65aa06e31f3a29d7fdbed941e040c6c420b6e1d0c2ba3b7b9a529aa35a3fb1a26cfd6ca766d43750bd8cbd80f27a00ece14191b787c79ba831aebfe7ba1ef18edce0c707fb64a9f9ffdd6ad7da605c9d1f7307429e6900e2e0ed3c10f640de295602300f11695ba8cde3557b02339b629eb876c34db3c2d1dd92663a73cf829570618e0f695094ac72c1fe860dd258f92fb8d944c56ef88454a0557af47290fc8138bf7d762cdc0452541