*.aol.com
- Oath Inc -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 01:3b:93:0a:f3:23:8b:77:cf:3a:02:9d:95:bc:3c:88 was issued on by DigiCert Inc.
With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Oath Inc
Organization:
Oath Inc
State / Province:
California
Locality: Sunnyvale
Country: US
Locality: Sunnyvale
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:3b:93:0a:f3:23:8b:77:cf:3a:02:9d:95:bc:3c:88Serial Number (int): 1638555892179661050492080288786300040
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 4f:c5:43:93:fc:f8:f4:01:52:d1:e0:80:74:4e:8c:2a:c1:56:f0:ad
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 38:5c:02:58:e3:29:8d:73:0e:f2:ed:14:dc:36:02:1b:12:13:73:4b
Fingerprint (sha256): 2b:ba:bd:d0:e6:28:81:7e:f4:a0:1c:bb:3c:09:67:79:09:97:9c:4a:2a:04:7d:bd:da:e6:ad:40:d8:29:f2:f7
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate *.aol.com
65
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.aol.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.aol.com
*.cashay.com
engadget.com
autoblog.com
*.autoblog.com
huffpost.com
huffingtonpost.com
aol.com
*.engadget.com
m.huffingtonpost.es
www.huffingtonpost.fr
www.huffingtonpost.it
m.huffingtonpost.fr
www.huffingtonpost.gr
m.huffingtonpost.gr
www.huffingtonpost.in
m.huffingtonpost.in
www.huffingtonpost.kr
m.huffingtonpost.it
www.huffingtonpost.jp
m.huffingtonpost.jp
m.huffingtonpost.de
m.huffingtonpost.kr
www.huffpostbrasil.com
m.huffpostbrasil.com
www.huffpostmaghreb.com
m.huffpostmaghreb.com
www.intheknow.com
premium.yahoofinance.com
www.huffingtonpost.es
www.huffingtonpost.de
toshiba.aol.ca
www.huffingtonpost.com
o2.aol.de
www.aol.ca
www.aol.de
www.aol.jp
pixel.techcrunch.com
welcomescreen.aol.de
brb.yahoo.net
www.huffpost.com
m.huffpost.com
news.aol.jp
www.huffingtonpost.ca
m.huffingtonpost.ca
quebec.huffingtonpost.ca
thespoils.huffpost.co.uk
fluxible.io.yahoo.net
acss.io.yahoo.net
o2.welcomescreen.aol.de
talktalk.aol.co.uk
m.quebec.huffingtonpost.ca
www.huffingtonpost.co.za
m.huffingtonpost.com.au
www.huffingtonpost.com.au
m.huffingtonpost.co.za
www.aol.co.uk
www.huffingtonpost.co.uk
m.huffingtonpost.co.uk
venta.automoviles.aol.com
w.main.welcomescreen.aol.com
aolbroadband.welcomescreen.aol.co.uk
w.sb.welcomescreen.aol.com
n.sb.welcomescreen.aol.com
n.main.welcomescreen.aol.com
*.cashay.com
engadget.com
autoblog.com
*.autoblog.com
huffpost.com
huffingtonpost.com
aol.com
*.engadget.com
m.huffingtonpost.es
www.huffingtonpost.fr
www.huffingtonpost.it
m.huffingtonpost.fr
www.huffingtonpost.gr
m.huffingtonpost.gr
www.huffingtonpost.in
m.huffingtonpost.in
www.huffingtonpost.kr
m.huffingtonpost.it
www.huffingtonpost.jp
m.huffingtonpost.jp
m.huffingtonpost.de
m.huffingtonpost.kr
www.huffpostbrasil.com
m.huffpostbrasil.com
www.huffpostmaghreb.com
m.huffpostmaghreb.com
www.intheknow.com
premium.yahoofinance.com
www.huffingtonpost.es
www.huffingtonpost.de
toshiba.aol.ca
www.huffingtonpost.com
o2.aol.de
www.aol.ca
www.aol.de
www.aol.jp
pixel.techcrunch.com
welcomescreen.aol.de
brb.yahoo.net
www.huffpost.com
m.huffpost.com
news.aol.jp
www.huffingtonpost.ca
m.huffingtonpost.ca
quebec.huffingtonpost.ca
thespoils.huffpost.co.uk
fluxible.io.yahoo.net
acss.io.yahoo.net
o2.welcomescreen.aol.de
talktalk.aol.co.uk
m.quebec.huffingtonpost.ca
www.huffingtonpost.co.za
m.huffingtonpost.com.au
www.huffingtonpost.com.au
m.huffingtonpost.co.za
www.aol.co.uk
www.huffingtonpost.co.uk
m.huffingtonpost.co.uk
venta.automoviles.aol.com
w.main.welcomescreen.aol.com
aolbroadband.welcomescreen.aol.co.uk
w.sb.welcomescreen.aol.com
n.sb.welcomescreen.aol.com
n.main.welcomescreen.aol.com
Other certificates including the domain name aol.com
(limited to 100 certificates)
checkout.yahoo.com
login.yahoo.com
dmp-taxonomyui-s3.advertising.aol.com
orca.onevidao.aol.com
onebyaol.com
imspro.oneadserver.aol.com
psclick.aol.com
*.stage.login.yahoo.com
qa5.add.my.aol.com
sapp-dev-dc-v.ops.aol.com
pic.ops.aol.com
sybil.advertising.aol.com
cuda-ul01.red.aol.com
portal.dev.vidible.tv
portal-dev1-os.aol.com
makersnew.aol.com
stage.contenthub.aol.com
fe-jenkins.mail.aol.com
mybenefits.aol.com
lifestream.aol.com
aws.beta.aopui-service.advertising.aol.com
computercheckup.aol.com
crmtools.teamaol.com
egleqa.ops.aol.com
mysql-iwww.itsec.aol.com
vacationrentals.travel.aol.com
batsclient.mx.aol.com
selfcare.aol.com
imspro.oneadserver.aol.com
api.onesdk.aol.com
dev.productcentral.aol.com
release.sandbox.aol.com
jp.techcrunch.com
*.aol.com
relegence.aol.com
panorama-s01.netsec.aol.com
*.yahoo.com
ree-pci-proxy.services.aol.com
one-central-api-qa-mse-eks.mse-dev.aws.oath.cloud
release.sandbox.aol.com
msync.aol.com
*.sandbox.aol.com
help.channels.aol.com
nva9-lcd2.aolwave.aol.com
lifestore.qh.aol.com
mediaserver.qa.advertising.aol.com
services.onecreative.aol.com
onemobile.aol.com
scs.dev.obi.aol.com
casper.ops.aol.com
s2s-rtb-selector.eu-central-1.prod.one4p.aol.com
extuatdc-m01.externalstest.aol.com
apns-db-qa1-m01.mail.aol.com
api.onesdk.aol.com
*.add.my.aol.com
api.qai.obi.aol.com
aoluatdc-m03.aoltest.adlab.office.aol.com
webmail1.webmail.aol.com
*.ssp.verizonmedia.com
dc.aol.com
ibw-ws.aol.com
qa.onecreative.aol.com
buildbot.office.aol.com
checkout.yahoo.com
one.aol.com
*.mail.aol.com
contenthub.aol.com
gp-otp-mtc.remote.aol.com
src3.yahoo.com
src4.yahoo.com
dev.assist.aol.com
area51.aol.com
internal.calendar.yahoo.com
n.main.welcomescreen.aol.com
logstash.itsec.aol.com
src4.yahoo.com
one-demo.aol.com
*.calendar.aol.com
idsvcs.premiumservices.aol.com
migrationassist.aol.com
api.onemobile.aol.com
identity.aol.com
vzwesb.qa.obi.aol.com
ssp.yahooinc.com
membernotifications.aol.com
devopssec-util-a02.paranoids.aol.com
widgets.onemobile.aol.com
*.login.yahoo.com
ntc.remote.aol.com
usersettings-core.search.aol.com
web-qh.lifestream.aol.com
onedisplay.aol.com
searchfe.mail.aol.com
portal-os.aol.com
engineering.aol.com
api.qat.obi.aol.com
*.imap.mail.aol.com
*.ssp.verizonmedia.com
mps-qa.aol.com
wap.aol.com
login.yahoo.com
dmp-taxonomyui-s3.advertising.aol.com
orca.onevidao.aol.com
onebyaol.com
imspro.oneadserver.aol.com
psclick.aol.com
*.stage.login.yahoo.com
qa5.add.my.aol.com
sapp-dev-dc-v.ops.aol.com
pic.ops.aol.com
sybil.advertising.aol.com
cuda-ul01.red.aol.com
portal.dev.vidible.tv
portal-dev1-os.aol.com
makersnew.aol.com
stage.contenthub.aol.com
fe-jenkins.mail.aol.com
mybenefits.aol.com
lifestream.aol.com
aws.beta.aopui-service.advertising.aol.com
computercheckup.aol.com
crmtools.teamaol.com
egleqa.ops.aol.com
mysql-iwww.itsec.aol.com
vacationrentals.travel.aol.com
batsclient.mx.aol.com
selfcare.aol.com
imspro.oneadserver.aol.com
api.onesdk.aol.com
dev.productcentral.aol.com
release.sandbox.aol.com
jp.techcrunch.com
*.aol.com
relegence.aol.com
panorama-s01.netsec.aol.com
*.yahoo.com
ree-pci-proxy.services.aol.com
one-central-api-qa-mse-eks.mse-dev.aws.oath.cloud
release.sandbox.aol.com
msync.aol.com
*.sandbox.aol.com
help.channels.aol.com
nva9-lcd2.aolwave.aol.com
lifestore.qh.aol.com
mediaserver.qa.advertising.aol.com
services.onecreative.aol.com
onemobile.aol.com
scs.dev.obi.aol.com
casper.ops.aol.com
s2s-rtb-selector.eu-central-1.prod.one4p.aol.com
extuatdc-m01.externalstest.aol.com
apns-db-qa1-m01.mail.aol.com
api.onesdk.aol.com
*.add.my.aol.com
api.qai.obi.aol.com
aoluatdc-m03.aoltest.adlab.office.aol.com
webmail1.webmail.aol.com
*.ssp.verizonmedia.com
dc.aol.com
ibw-ws.aol.com
qa.onecreative.aol.com
buildbot.office.aol.com
checkout.yahoo.com
one.aol.com
*.mail.aol.com
contenthub.aol.com
gp-otp-mtc.remote.aol.com
src3.yahoo.com
src4.yahoo.com
dev.assist.aol.com
area51.aol.com
internal.calendar.yahoo.com
n.main.welcomescreen.aol.com
logstash.itsec.aol.com
src4.yahoo.com
one-demo.aol.com
*.calendar.aol.com
idsvcs.premiumservices.aol.com
migrationassist.aol.com
api.onemobile.aol.com
identity.aol.com
vzwesb.qa.obi.aol.com
ssp.yahooinc.com
membernotifications.aol.com
devopssec-util-a02.paranoids.aol.com
widgets.onemobile.aol.com
*.login.yahoo.com
ntc.remote.aol.com
usersettings-core.search.aol.com
web-qh.lifestream.aol.com
onedisplay.aol.com
searchfe.mail.aol.com
portal-os.aol.com
engineering.aol.com
api.qat.obi.aol.com
*.imap.mail.aol.com
*.ssp.verizonmedia.com
mps-qa.aol.com
wap.aol.com
Certificate
The complete raw certificate details for *.aol.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILmTCCCoGgAwIBAgIQATuTCvMji3fPOgKdlbw8iDANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0yMDA0MDgwMDAwMDBaFw0yMDEwMDUxMjAwMDBa MF0xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRIwEAYDVQQHEwlT dW5ueXZhbGUxETAPBgNVBAoTCE9hdGggSW5jMRIwEAYDVQQDDAkqLmFvbC5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBSpbTcZO2qWrGWr8SsudO F+Er46uhxLvfA33Si73m+EFSThF38ll0+uVYyAKc7EZG/2spwYu2BytpgZ5kygO4 b4bzcXuqHZmsJiqE4iYfujI0f8vBf/3LYAori1FI3gYigk5qLwn3Cbuz0c0DxlDb H4YZjGotK58dwOPmR6/QZMPn60Jw3hFWQkzYMyyqWUWJUdEJ/YdMeUpWmY9Pl8GS 0Df7h4RnYlQJQBrUlNZBJ7iyiQm6IXMLbnan88eFLJM6/4M4Q6YmzE5s7EzApl0x BdQLRLkHPGZXfSdRkRoPWh1bL2q78HQOafX4LlI/wDkx1pCDplmAZFgkirVLi+QN AgMBAAGjgghAMIIIPDAfBgNVHSMEGDAWgBRRaP+QrwIHdTzM2WVkYqISuFlyOzAd BgNVHQ4EFgQUT8VDk/z49AFS0eCAdE6MKsFW8K0wggVoBgNVHREEggVfMIIFW4IJ Ki5hb2wuY29tggwqLmNhc2hheS5jb22CDGVuZ2FkZ2V0LmNvbYIMYXV0b2Jsb2cu Y29tgg4qLmF1dG9ibG9nLmNvbYIMaHVmZnBvc3QuY29tghJodWZmaW5ndG9ucG9z dC5jb22CB2FvbC5jb22CDiouZW5nYWRnZXQuY29tghNtLmh1ZmZpbmd0b25wb3N0 LmVzghV3d3cuaHVmZmluZ3RvbnBvc3QuZnKCFXd3dy5odWZmaW5ndG9ucG9zdC5p dIITbS5odWZmaW5ndG9ucG9zdC5mcoIVd3d3Lmh1ZmZpbmd0b25wb3N0LmdyghNt Lmh1ZmZpbmd0b25wb3N0LmdyghV3d3cuaHVmZmluZ3RvbnBvc3QuaW6CE20uaHVm ZmluZ3RvbnBvc3QuaW6CFXd3dy5odWZmaW5ndG9ucG9zdC5rcoITbS5odWZmaW5n dG9ucG9zdC5pdIIVd3d3Lmh1ZmZpbmd0b25wb3N0LmpwghNtLmh1ZmZpbmd0b25w b3N0LmpwghNtLmh1ZmZpbmd0b25wb3N0LmRlghNtLmh1ZmZpbmd0b25wb3N0Lmty ghZ3d3cuaHVmZnBvc3RicmFzaWwuY29tghRtLmh1ZmZwb3N0YnJhc2lsLmNvbYIX d3d3Lmh1ZmZwb3N0bWFnaHJlYi5jb22CFW0uaHVmZnBvc3RtYWdocmViLmNvbYIR d3d3LmludGhla25vdy5jb22CGHByZW1pdW0ueWFob29maW5hbmNlLmNvbYIVd3d3 Lmh1ZmZpbmd0b25wb3N0LmVzghV3d3cuaHVmZmluZ3RvbnBvc3QuZGWCDnRvc2hp YmEuYW9sLmNhghZ3d3cuaHVmZmluZ3RvbnBvc3QuY29tgglvMi5hb2wuZGWCCnd3 dy5hb2wuY2GCCnd3dy5hb2wuZGWCCnd3dy5hb2wuanCCFHBpeGVsLnRlY2hjcnVu Y2guY29tghR3ZWxjb21lc2NyZWVuLmFvbC5kZYINYnJiLnlhaG9vLm5ldIIQd3d3 Lmh1ZmZwb3N0LmNvbYIObS5odWZmcG9zdC5jb22CC25ld3MuYW9sLmpwghV3d3cu aHVmZmluZ3RvbnBvc3QuY2GCE20uaHVmZmluZ3RvbnBvc3QuY2GCGHF1ZWJlYy5o dWZmaW5ndG9ucG9zdC5jYYIYdGhlc3BvaWxzLmh1ZmZwb3N0LmNvLnVrghVmbHV4 aWJsZS5pby55YWhvby5uZXSCEWFjc3MuaW8ueWFob28ubmV0ghdvMi53ZWxjb21l c2NyZWVuLmFvbC5kZYISdGFsa3RhbGsuYW9sLmNvLnVrghptLnF1ZWJlYy5odWZm aW5ndG9ucG9zdC5jYYIYd3d3Lmh1ZmZpbmd0b25wb3N0LmNvLnphghdtLmh1ZmZp bmd0b25wb3N0LmNvbS5hdYIZd3d3Lmh1ZmZpbmd0b25wb3N0LmNvbS5hdYIWbS5o dWZmaW5ndG9ucG9zdC5jby56YYINd3d3LmFvbC5jby51a4IYd3d3Lmh1ZmZpbmd0 b25wb3N0LmNvLnVrghZtLmh1ZmZpbmd0b25wb3N0LmNvLnVrghl2ZW50YS5hdXRv bW92aWxlcy5hb2wuY29tghx3Lm1haW4ud2VsY29tZXNjcmVlbi5hb2wuY29tgiRh b2xicm9hZGJhbmQud2VsY29tZXNjcmVlbi5hb2wuY28udWuCGncuc2Iud2VsY29t ZXNjcmVlbi5hb2wuY29tghpuLnNiLndlbGNvbWVzY3JlZW4uYW9sLmNvbYIcbi5t YWluLndlbGNvbWVzY3JlZW4uYW9sLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6 Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwNKAyoDCG Lmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmww TAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93 d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwgYMGCCsGAQUFBwEBBHcwdTAk BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME0GCCsGAQUFBzAC hkFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEySGlnaEFz c3VyYW5jZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMIIBBAYKKwYBBAHWeQIE AgSB9QSB8gDwAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFx WlumdAAABAMARzBFAiEA7cUKnogIdzh9tQ7DR6/fu64d9qX75JeOwnN61wZc6McC IEzwJfR6V3u7fVy0uQN1Plu+Lz5Qz9lHk6ykNJGM82LXAHYA8JWkWfIA0YJAEC0v k4iOrUv+HUfjmeHQNKawqKqOsnMAAAFxWlumkwAABAMARzBFAiA9rZe1GOQjaVXG VhDRf4IARpciR0+HyF/Vp7HqdWOkCgIhANNEBbGiyIT/a1+PBF1SeotLJZf4dZ+/ 4dPAw4ofoWMQMA0GCSqGSIb3DQEBCwUAA4IBAQAQ/crKpW3HlWSVzzVHNB824rSO I3yuoS3omkjdMpBSZJauTC/Ycsoj/fgWMTUitDGgRJafHnB/JHkHMGjedpN4VrYC IHnpkF2BSm6cq+kJNuryBYZZ/cXOF58QaweNKFKM8jylewU0OjV+76ZH1pZu8Hs3 iOjuQt+qXlbjcBM5x/Jrls8SxRpCis/J3X3GTiIZPLtsNILzbBF+3VsXHVtEfDVz 94IIbItzCEzn9VMu6F1mRLCoqvoKiXN7OyI350aAxwoFpbVRYM6y5BnM/slML3r0 SfdwlPgvtU++LhrLTHI7bx7X9b8qJJiKSCWrAnK1Iu9SWXOUJQaexfqhTs2M -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUqW03GTtqlqxlq/ErLn ThfhK+OrocS73wN90ou95vhBUk4Rd/JZdPrlWMgCnOxGRv9rKcGLtgcraYGeZMoD uG+G83F7qh2ZrCYqhOImH7oyNH/LwX/9y2AKK4tRSN4GIoJOai8J9wm7s9HNA8ZQ 2x+GGYxqLSufHcDj5kev0GTD5+tCcN4RVkJM2DMsqllFiVHRCf2HTHlKVpmPT5fB ktA3+4eEZ2JUCUAa1JTWQSe4sokJuiFzC252p/PHhSyTOv+DOEOmJsxObOxMwKZd MQXUC0S5BzxmV30nUZEaD1odWy9qu/B0Dmn1+C5SP8A5MdaQg6ZZgGRYJIq1S4vk DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1638555892179661050492080288786300040 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-05 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.aol.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16321522628185295686479725068922800955021731818086778496271951811471338879569559524974732299511073950550121477193311846852395531605803502125838476767550672556254815046407129242114636367016063896997533036486989530529323112942056653535355280930025935631681308159043334426615660697969384907972988738911244727862284743925912970984162290555178809896791169687638227875833575192233473953144029287837380687870504153793020958055265516065082342346476787510730713036548343595463050350216980993700065384650231425996448195004334973646599125251899622652136661938668553833468098806037307421585064788237085112102423049943873816880141 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4fc54393fcf8f40152d1e080744e8c2ac156f0ad . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1375 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cashay.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engadget.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huffpost.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huffingtonpost.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engadget.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.gr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.gr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.kr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.kr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffpostbrasil.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffpostbrasil.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffpostmaghreb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffpostmaghreb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intheknow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premium.yahoofinance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toshiba.aol.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o2.aol.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aol.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aol.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aol.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixel.techcrunch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcomescreen.aol.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brb.yahoo.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffpost.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffpost.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.aol.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quebec.huffingtonpost.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thespoils.huffpost.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluxible.io.yahoo.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acss.io.yahoo.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o2.welcomescreen.aol.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talktalk.aol.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.quebec.huffingtonpost.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aol.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venta.automoviles.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w.main.welcomescreen.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aolbroadband.welcomescreen.aol.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w.sb.welcomescreen.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'n.sb.welcomescreen.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'n.main.welcomescreen.aol.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001715a5ba6740000040300473045022100edc50a9e880877387db50ec347afdfbbae1df6a5fbe4978ec2737ad7065ce8c702204cf025f47a577bbb7d5cb4b903753e5bbe2f3e50cfd94793aca434918cf362d7007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001715a5ba693000004030047304502203dad97b518e4236955c65610d17f8200469722474f87c85fd5a7b1ea7563a40a022100d34405b1a2c884ff6b5f8f045d527a8b4b2597f8759fbfe1d3c0c38a1fa16310 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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