newsroom.businesswire.com

- Business Wire, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0e:d3:de:8d:91:9d:2b:e5:4a:b8:1d:d6:b1:1f:78:3e was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Business Wire, Inc.

Organization: Business Wire, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:d3:de:8d:91:9d:2b:e5:4a:b8:1d:d6:b1:1f:78:3e
Serial Number (int): 19709280489307931101600724731079653438
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d9:d9:72:ad:dc:2c:b6:b4:f9:4c:4f:bb:8d:9f:a1:5e:8f:8e:95:f9
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): c1:61:ee:e0:9c:94:13:ac:ce:86:ea:bd:82:db:dc:b4:bb:3c:e3:7a
Fingerprint (sha256): 27:df:42:33:9d:e1:8e:8d:36:19:17:59:a6:a1:f8:20:d3:52:ac:25:46:51:7e:9b:9e:bc:e3:9c:cc:ee:cc:78

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate newsroom.businesswire.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for newsroom.businesswire.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

newsroom.businesswire.com
news.3m.com
media.aace.com
pressroom.aboutschwab.com
news.aetnafoundation.org
news.alibabagroup.com
news.alexion.com
news.alexionpharma.com
news.analogix.com
news.invaluable.com
news.arubanetworks.com
news.averydennison.com
newsroom.axaltacs.com
news.bountytowels.com
news.braun.com
news.charmin.com
news.crc.com
newsroom.dow.com
news.ea.com
media.eqt.com
media.eqtmidstreampartners.com
news.exxonmobil.com
news.exxonmobilchemical.com
news.mobil.com
newsroom.fluor.com
newsroom.garmin.com
news.genzyme.com
news.sanofigenzyme.com
news.gillette.com
newsroom.healthnet.com
news.kraftheinzcompany.com
press.humana.com
news.ihsmarkit.com
presscenter.innovative-ss.com
newsroom.invacare.com
news.jm.com
news.joann.com
news.kbhome.com
newsroom.kaplan.edu
hotnews.krispykreme.com
newsroom.lfg.com
news.logitech.com
www.mrknewsroom.com
news.msagroup.com
news.officedepot.com
news.oldspice.com
media.owenscorning.com
newsroom.owenscorning.com
news.pampers.com
newsroom.pandafunds.com
news.patientslikeme.com
press.pfizer.com
news.pg.com
www.pgnewsroom.de
www.pgnewsroom.ch
www.pgnewsroom.es
www.pgnewsroom.fr
www.pgnewsroom.co.uk
www.pgnewsroom.ie
press.plantronics.com
newsroom.plantronics.com
newsroom.popular.com
news.puffs.com
newsroom.ryder.com
news.usa.siemens.biz
news.silversunresorts.com
news.staples.com
newsroom.statestreet.com
newsroom.sunriseseniorliving.com
newsroom.synchronyfinancial.com
news.tcfbank.com
news.tempursealy.com
news.tide.com
newsroom.trendmicro.com
newsroom.vizientinc.com
news.viacom.com
news.viejasbandofkumeyaay.org
newsroom.washburn.edu
newsroom.washingtongas.com
news.zoetis.com
investor.amberroad.com
investorrelations.bebe.com
investor.caleres.com
investor.catalent.com
investor.cloudpeakenergy.com
investor.eagleus.com
ir.eclipseresources.com
investor.emsc.net
investor.evhc.net
ir.envivabiomass.com
ir.envivapartners.com
www.envivapartners.com
ir.eqt.com
ir.eqtmidstreampartners.com
investor.ff-inc.com
investors.gannett.com
investor.ggp.com
investorrelations.granaymontero.com.pe
newsroom.synchrony.com
media.eqm-midstreampartners.com

Other certificates including the domain name businesswire.com

(limited to 100 certificates)
bw-webproxy-v1.dev.aws.businesswire.com
platform.int.aws.businesswire.com
acsc2.businesswire.com
membership.businesswire.com
*.test.businesswire.com
careers.businesswire.com
platform-internal.test.aws.businesswire.com
pr.businesswire.com
careers.businesswire.com
ir.businesswire.com
bw-webproxy-v1.int.aws.businesswire.com
news-search.aws.businesswire.com
platform.dev.aws.businesswire.com
mtadmz2.nyprod.businesswire.com
platform-internal.dev.aws.businesswire.com
interactive.businesswire.com
*.businesswire.com
newstrak-testing.dev.aws.businesswire.com
*.hqprod.businesswire.com
pr.businesswire.com
*.businesswire.com
platform-duffytest.sandbox.aws.businesswire.com
*.test.newshq.businesswire.com
www-origin.staging.aws.businesswire.com
yahoo-feed.aws.businesswire.com
snrtrak.sandbox.aws.businesswire.com
connect.businesswire.com
resources.businesswire.com
es.dev.aws.businesswire.com
platform-v2.dev.aws.businesswire.com
platform-internal.int.aws.businesswire.com
etools.osimail3.us
snrtrak.aws.businesswire.com
www.businesswire.com
membership.businesswire.com
secure.businesswire.com
newsroom.businesswire.com
www-origin.dev.aws.businesswire.com
platform.aws.businesswire.com
*.newshq.businesswire.com
www.businesswire.com
careers.businesswire.com
*.investorhq.businesswire.com
etools.osimail3.us
platform.prod.aws.businesswire.com
*.newshq.businesswire.com
snrtrak-proxy-v1.dev.aws.businesswire.com
mtadmz1.nyprod.businesswire.com
access.businesswire.com
www.test.businesswire.com
bw-webproxy-v1.int.aws.businesswire.com
*.investorhq.businesswire.com
etools.osimail3.us
platform.sandbox.aws.businesswire.com
platform.sandbox.aws.businesswire.com
test-aws.businesswire.com
services.businesswire.com
odysseyresorts3.test.newshq.businesswire.com
tradeshow.businesswire.com
go.sandbox.aws.businesswire.com
newsroom.businesswire.com
etools.osimail3.us
bw-webproxy-v1.test.aws.businesswire.com
*.investorhq.businesswire.com
etools.osimail3.us
*.qa.investorhq.businesswire.com
*.test.investorhq.businesswire.com
*.newshq.businesswire.com
etools.osimail3.us
platform-internal.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
*.test.newshq.businesswire.com
newsroom.businesswire.com
mtadmz1.scprod.businesswire.com
apidocs.int.aws.businesswire.com
mtadmz1.nyprod.businesswire.com
newsroom.businesswire.com
akamai-logs-v2r1.dev.aws.businesswire.com
*.investorhq.businesswire.com
etools.osimail3.us
cmwb-e.test.investorhq.businesswire.com
education.businesswire.com
platform-internal.int.aws.businesswire.com
investAka2.investorhq.businesswire.com
connect5.dev.aws.businesswire.com
education.businesswire.com
www.businesswire.com
av.dev.aws.businesswire.com
snrtrak.sandbox.aws.businesswire.com
go.sandbox.aws.businesswire.com
etools.osimail3.us
membership.businesswire.com
services.businesswire.com
*.int.businesswire.com
www.test.businesswire.com
*.int.investorhq.businesswire.com
www.test.businesswire.com
connect.test.businesswire.com
snrtrak-proxy-v1.int.aws.businesswire.com
snrtrak-proxy-v1.int.aws.businesswire.com

Certificate

The complete raw certificate details for newsroom.businesswire.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJO4LkfBdMVYraX+XN9L
N+GjD+Ayy+L+B3jaXVBLnLAOP74IFVBPnU/Qgyq3mhVKlut2x9VFMmxVNPoC7zV+
nbGDtr65C4IbKD9MG3P4g95iUGZ9k5iEd0H4nhnvy9tgqM/mfhUpxoSrtOG83+NU
zqqqM/9gAEhZyumGJO15VncPUclvELQaBMT4aBHI7NqTVdQWBhBsWa0c0q8wZJot
9yY0Osa2kECmOotwj9869ZvKWnT+/iuo8m5t7usQPRHtwR27+RvetrrjAWssjR0S
byuFucbsV46QxFojGGgEckQ/8WI0Bflxgwr4D0EMSMq7RWwOSRhsGitoODTNsp/C
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19709280489307931101600724731079653438
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Business Wire, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'newsroom.businesswire.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25825457391821394063879403209255859609924374251128154702181517020140790451241929561507973252433355915604648439896635703390030712721012560838064970381008776838639663280882904856805135126873309435720663581224067819132212744528065697448677755929071219256584182311411388640666038239707494721665281427323220931222370551884486115186141591016137509134820639078535981241339404076311958459439762036193423213774271893236046000114484676251388850281768234709985024421458884575408640468418924982858585361823477076913321359026311082061820605403546571130276887666652203368772254447368361891107554245443246975911377721326335959220757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9d972addc2cb6b4f94c4fbb8d9fa15e8f8e95f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.businesswire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.3m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.aace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressroom.aboutschwab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.aetnafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.alibabagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.alexion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.alexionpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.analogix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.invaluable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.arubanetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.axaltacs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.bountytowels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.braun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.charmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.crc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.dow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.ea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.eqt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.eqtmidstreampartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.exxonmobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.exxonmobilchemical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.mobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.fluor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.garmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.genzyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.sanofigenzyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.gillette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.healthnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.kraftheinzcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'press.humana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.ihsmarkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presscenter.innovative-ss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.invacare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.jm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.joann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.kbhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.kaplan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotnews.krispykreme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.lfg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.logitech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrknewsroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.msagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.officedepot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.oldspice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.owenscorning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.owenscorning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.pampers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.pandafunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.patientslikeme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'press.pfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.pg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pgnewsroom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pgnewsroom.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pgnewsroom.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pgnewsroom.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pgnewsroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pgnewsroom.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'press.plantronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.plantronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.popular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.puffs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.ryder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.usa.siemens.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.silversunresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.staples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.statestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.sunriseseniorliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.synchronyfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.tcfbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.tempursealy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.tide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.trendmicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.vizientinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.viejasbandofkumeyaay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.washburn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.washingtongas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.zoetis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.amberroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorrelations.bebe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.caleres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.catalent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cloudpeakenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.eagleus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eclipseresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.emsc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.evhc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.envivabiomass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.envivapartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.envivapartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eqt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eqtmidstreampartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ff-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gannett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ggp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorrelations.granaymontero.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.synchrony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.eqm-midstreampartners.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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