stage.oidc.oath.com

- Oath Holdings Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 05:51:65:2b:7d:34:89:d3:f1:c3:b8:ca:b1:53:d4:1a was issued on by DigiCert Inc.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oath Holdings Inc.

Organization: Oath Holdings Inc.
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:51:65:2b:7d:34:89:d3:f1:c3:b8:ca:b1:53:d4:1a
Serial Number (int): 7068767993395998578689558664927499290
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ee:9d:77:e8:13:b8:7d:dd:49:48:cd:56:9c:00:a0:a3:2c:32:de:e5
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): be:75:6c:15:a8:c0:69:ba:fb:a8:33:2f:6f:b0:fa:e2:9d:c1:e5:0b
Fingerprint (sha256): 2a:97:a3:ce:d5:3b:93:11:85:83:8a:2d:2e:78:fa:d6:1c:69:75:76:2d:fb:b3:13:46:b9:78:bb:94:b0:a5:c3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate stage.oidc.oath.com

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage.oidc.oath.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stage.oidc.oath.com
stage.oidc.mail.aol.com
stage.oidc.bezahlen.aol.de
stage.oidc.checkout.aol.com
stage.oidc.checkout.aol.co.uk
stage.oidc.connect.netscape.com
stage.oidc.compuserve.com
stage.oidc.engadget.com
stage.oidc.feedback.aol.com
stage.oidc.get.aol.com
stage.oidc.help.aol.com
stage.oidc.help.aol.co.uk
stage.oidc.identityapp.aol.com
stage.oidc.marketingpreferences.aol.com
stage.oidc.marketingpreferences.aol.co.uk
stage.oidc.meinkonto.aol.de
stage.oidc.member.compuserve.com
stage.oidc.membernotifications.aol.com
stage.oidc.mold.aol.com
stage.oidc.myaccount.aol.ca
stage.oidc.myaccount.aol.com
stage.oidc.myaccount.aol.co.uk
stage.oidc.myaccount.compuserve.com
stage.oidc.myaccount.netscape.com
stage.oidc.mybenefits.aol.com
stage.oidc.netscape.com
stage.oidc.netscape.compuserve.com
stage.oidc.nutzungihrerdaten.aol.de
stage.oidc.payments.aol.com
stage.oidc.payments.aol.co.uk
stage.oidc.payments.compuserve.com
stage.oidc.paymentsconnect.netscape.com
stage.oidc.paymentupdate.aol.com
stage.oidc.productcentral.aol.com
stage.oidc.publishing.compuserve.com
stage.oidc.techcrunch.com
stage.oidc.wmconnect.compuserve.com
stage.oidc.marketingpreferences.aol.ca
stage.oidc.search.aol.com
stage.oidc.hilfe.aol.de
stage.oidc.autoblog.com
stage.oidc.checkoutnow.aol.com
stage.oidc.myservices.aol.com
stage.oidc.billupdate.aol.com
stage.oidc.homepage.aol.com
stage.oidc.fr.moncompte.aol.com
stage.oidc.www.aol.com
stage.oidc.mysubscriptions.aol.com
stage.oidc.builtbygirls.com
stage.oidc.firefox-startpage.aol.com
stage.oidc.welcomescreen.aol.com
stage.oidc.www.aol.co.uk
stage.oidc.aolbroadband.welcomescreen.aol.co.uk
stage.oidc.www.aol.ca
stage.oidc.www.aol.de
stage.oidc.www.aol.jp
stage.oidc.news.aol.jp
stage.oidc.o2.aol.de
stage.oidc.welcomescreen.aol.de
stage.oidc.plans.yahoo.com
stage.oidc.mysubscriptions.yahoo.com
stage.oidc.checkout.yahoo.com
stage.oidc.mysubscriptions.finance.yahoo.com
stage.oidc.checkout.finance.yahoo.com
stage.oidc.mysubscriptions.mail.yahoo.com
stage.oidc.checkout.mail.yahoo.com
stage.oidc.prod.origin.checkout.yahoo.com
stage.oidc.shop.intheknow.com
stage.oidc.www.intheknow.com
stage.oidc.calendar.aol.com
stage.oidc.subscriptions.aol.com
stage.oidc.guce.aol.com
stage.oidc.guce.aol.co.uk
stage.oidc.guce.aol.de
stage.oidc.guce.aol.ca

Other certificates including the domain name oath.com

(limited to 100 certificates)
login.yahoo.com
*.stage.login.yahoo.com
prod-east.exchange.oath.com
test-paranoids.oath.com
test-paranoids.oath.com
*.video.oath.com
ads.vidible.tv
test-paranoids.oath.com
stage-oathsites-real.yahoo.com
*.autos.yahoo.com
leos.oath.com
quartz-stage-bf01.azurite.bf1.yahoo.com
ads.vidible.tv
stage.int.o2.oath.com
stage.int.o2.oath.com
*.smp.oath.com
*.login.yahoo.com
receiver.stage.lcoe.oath.com
careers-real.yahoo.com
id-ds.corp.aol.com
consent.oath.com
id.b2b.oath.com
om-dev.oath.com
transparency.oath.com
*.autos.yahoo.com
*.media.yahoo.com
test-paranoids.oath.com
yho.com
www.oath.com
ads.stage.vidible.tv
ads.vidible.tv
foo2.bar.pchen06.test.test-paranoids.oath.com
test-paranoids.oath.com
uat.sfdc.services.oath.com
stage.guce.oath.com
ads.vidible.tv
*.smp.oath.com
src1.yahoo.com
src1.yahoo.com
src1.yahoo.com
*.autos.yahoo.com
*.smp.oath.com
stage.consent.oath.com
lawenforcementrequests.oath.com
stage.guce2.oath.com
api.k8s-prod-01-euw1.int.o2.oath.com
*.adf.aasreref.red.yahoo.oath.com
stage.guce.oath.com
stage.guce.oath.com
stage-legal.yahoo.com
*.autos.yahoo.com
receiver.stage.lcoe.oath.com
api.processor.oath.com
api-uat.amt.yahooinc.com
id-uat.corp.aol.com
test-paranoids.oath.com
peering.oath.com
test-paranoids.oath.com
stage.oidc.oath.com
*.video.oath.com
api.stage.processor.oath.com
curate.publishing.oath.com
src1.yahoo.com
store.ouryahoo.com
store-qa.vzbuilders.com
*.stage.login.yahoo.com
stage.consent.oath.com
*.splunk.gdpr.oath.com
ads.vidible.tv
lawenforcementrequests-stage.oath.com
beta-oathsites-real.yahoo.com
dev.postmaster.oath.com
*.autos.yahoo.com
*.media.yahoo.com
*.trunk.login.yahoo.com
stage.consent.oath.com
*.media.yahoo.com
receiver.stage.lcoe.oath.com
*.autos.yahoo.com
*.mydashboard.oath.com
*.media.yahoo.com
ads.stage.vidible.tv
src1.yahoo.com
quartz-prod-bf01.azurite.bf1.yahoo.com
*.stage.mydashboard.oath.com
*.media.yahoo.com
src1.yahoo.com
src1.yahoo.com
*.publishing.oath.com
src6.yahoo.com
stage.guce2.oath.com
test.test-paranoids.oath.com
login.yahoo.com
staging.curate.publishing.oath.com
*.autos.yahoo.com
uat.sfdc.services.oath.com
careers.oath.com
stage.oidc.oath.com
careers-real.oath.com
staging.curate.publishing.oath.com

Certificate

The complete raw certificate details for stage.oidc.oath.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSVji23W+3GqENXdyyAD
G7QLsG0I8VHhAzSTT/2ALZ261B9/RsehQw7Yd5exo/2NaNHqrQEI1ixO5tYnhhTg
CtbSwu/wk8zZbve5jQjjZ/szeyFG3GjEuqTiAT3BQ1yx0hmS/Lrx+lAN6KB7VmW7
pjs2lO1pAsxRR9zEgUqG/60gx4QqBOTin89c/H8HG5gdxi6pA4q6BECZmN0k+AfH
gywR8vj8sYLjNAIMkhf0Hcv4fyAt/vtvUmB7qPCMoCuYsLoK1BQED8RD0MAs1w7Z
3YEQs3Me9PA4GIg4nY+DRJ4hKSyQZ6pmxB1Sw3W1M5vISYvx9HyBRgkeOK3ufXHb
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7068767993395998578689558664927499290
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Holdings Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage.oidc.oath.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20342804226791647995392786385151008497940297664677236006505107404483136111749338787717517755765718763862898160885174587996017066295852802618374303960059729426425051553955140772872945037345064054352994385727031808043144949818005101244457955591417280246964611517119502084035237466987906179106454977372490361047505358497571819251724432899395689871730842771224266138675480840089811548761905857392039361470232254657261254065614117942269260323627232523900283874880459020631171080986482770390103429324478696301298057864319791713162541892985681898893591159580043678005779058814317662380587525686248981350974725465868208298859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee9d77e813b87ddd4948cd569c00a0a32c32dee5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2357 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.oath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.mail.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.bezahlen.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.checkout.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.checkout.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.connect.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.engadget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.feedback.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.get.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.help.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.help.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.identityapp.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.marketingpreferences.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.marketingpreferences.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.meinkonto.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.member.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.membernotifications.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.mold.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.myaccount.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.myaccount.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.myaccount.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.myaccount.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.myaccount.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.mybenefits.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.netscape.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.nutzungihrerdaten.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.payments.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.payments.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.payments.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.paymentsconnect.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.paymentupdate.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.productcentral.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.publishing.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.techcrunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.wmconnect.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.marketingpreferences.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.search.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.hilfe.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.autoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.checkoutnow.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.myservices.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.billupdate.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.homepage.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.fr.moncompte.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.www.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.mysubscriptions.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.builtbygirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.firefox-startpage.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.welcomescreen.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.www.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.aolbroadband.welcomescreen.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.www.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.www.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.www.aol.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.news.aol.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.o2.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.welcomescreen.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.plans.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.mysubscriptions.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.checkout.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.mysubscriptions.finance.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.checkout.finance.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.mysubscriptions.mail.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.checkout.mail.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.prod.origin.checkout.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.shop.intheknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.www.intheknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.calendar.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.subscriptions.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.guce.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.guce.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.guce.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.guce.aol.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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