trunk.oidc.oath.com

- Oath Holdings Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 03:4e:dd:93:0d:f9:76:f8:ed:17:d9:9b:f2:e2:14:de was issued on by DigiCert Inc.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oath Holdings Inc.

Organization: Oath Holdings Inc.
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4e:dd:93:0d:f9:76:f8:ed:17:d9:9b:f2:e2:14:de
Serial Number (int): 4397177205707650277641518919314445534
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 2a:dd:21:46:15:83:25:f7:ac:5d:aa:2e:e8:c1:1a:a0:cf:f9:32:67
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 95:5b:d7:6e:dc:3e:76:7e:fb:76:83:d1:a9:76:02:51:01:68:d0:57
Fingerprint (sha256): 2f:be:5d:e2:eb:67:e0:29:b4:38:f5:14:5d:a3:2f:81:45:eb:ed:2d:9c:de:87:8e:28:21:38:df:fd:01:99:f7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate trunk.oidc.oath.com

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trunk.oidc.oath.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

trunk.oidc.oath.com
trunk.oidc.mail.aol.com
trunk.oidc.bezahlen.aol.de
trunk.oidc.checkout.aol.com
trunk.oidc.checkout.aol.co.uk
trunk.oidc.connect.netscape.com
trunk.oidc.compuserve.com
trunk.oidc.engadget.com
trunk.oidc.feedback.aol.com
trunk.oidc.get.aol.com
trunk.oidc.help.aol.com
trunk.oidc.help.aol.co.uk
trunk.oidc.identityapp.aol.com
trunk.oidc.marketingpreferences.aol.com
trunk.oidc.marketingpreferences.aol.co.uk
trunk.oidc.meinkonto.aol.de
trunk.oidc.member.compuserve.com
trunk.oidc.membernotifications.aol.com
trunk.oidc.mold.aol.com
trunk.oidc.myaccount.aol.ca
trunk.oidc.myaccount.aol.com
trunk.oidc.myaccount.aol.co.uk
trunk.oidc.myaccount.compuserve.com
trunk.oidc.myaccount.netscape.com
trunk.oidc.mybenefits.aol.com
trunk.oidc.netscape.com
trunk.oidc.netscape.compuserve.com
trunk.oidc.nutzungihrerdaten.aol.de
trunk.oidc.payments.aol.com
trunk.oidc.payments.aol.co.uk
trunk.oidc.payments.compuserve.com
trunk.oidc.paymentsconnect.netscape.com
trunk.oidc.paymentupdate.aol.com
trunk.oidc.productcentral.aol.com
trunk.oidc.publishing.compuserve.com
trunk.oidc.techcrunch.com
trunk.oidc.wmconnect.compuserve.com
trunk.oidc.marketingpreferences.aol.ca
trunk.oidc.search.aol.com
trunk.oidc.hilfe.aol.de
trunk.oidc.autoblog.com
trunk.oidc.checkoutnow.aol.com
trunk.oidc.myservices.aol.com
trunk.oidc.billupdate.aol.com
trunk.oidc.homepage.aol.com
trunk.oidc.fr.moncompte.aol.com
trunk.oidc.www.aol.com
trunk.oidc.mysubscriptions.aol.com
trunk.oidc.builtbygirls.com
trunk.oidc.firefox-startpage.aol.com
trunk.oidc.welcomescreen.aol.com
trunk.oidc.www.aol.co.uk
trunk.oidc.aolbroadband.welcomescreen.aol.co.uk
trunk.oidc.www.aol.ca
trunk.oidc.www.aol.de
trunk.oidc.www.aol.jp
trunk.oidc.news.aol.jp
trunk.oidc.o2.aol.de
trunk.oidc.welcomescreen.aol.de
trunk.oidc.plans.yahoo.com
trunk.oidc.mysubscriptions.yahoo.com
trunk.oidc.checkout.yahoo.com
trunk.oidc.mysubscriptions.finance.yahoo.com
trunk.oidc.checkout.finance.yahoo.com
trunk.oidc.mysubscriptions.mail.yahoo.com
trunk.oidc.checkout.mail.yahoo.com
trunk.oidc.prod.origin.checkout.yahoo.com
trunk.oidc.shop.intheknow.com
trunk.oidc.www.intheknow.com
trunk.oidc.calendar.aol.com
trunk.oidc.subscriptions.aol.com

Other certificates including the domain name oath.com

(limited to 100 certificates)
login.yahoo.com
*.stage.login.yahoo.com
prod-east.exchange.oath.com
test-paranoids.oath.com
test-paranoids.oath.com
*.video.oath.com
ads.vidible.tv
test-paranoids.oath.com
stage-oathsites-real.yahoo.com
*.autos.yahoo.com
leos.oath.com
quartz-stage-bf01.azurite.bf1.yahoo.com
ads.vidible.tv
stage.int.o2.oath.com
stage.int.o2.oath.com
*.smp.oath.com
*.login.yahoo.com
receiver.stage.lcoe.oath.com
careers-real.yahoo.com
id-ds.corp.aol.com
consent.oath.com
id.b2b.oath.com
om-dev.oath.com
transparency.oath.com
*.autos.yahoo.com
*.media.yahoo.com
test-paranoids.oath.com
yho.com
www.oath.com
ads.stage.vidible.tv
ads.vidible.tv
foo2.bar.pchen06.test.test-paranoids.oath.com
test-paranoids.oath.com
uat.sfdc.services.oath.com
stage.guce.oath.com
ads.vidible.tv
*.smp.oath.com
src1.yahoo.com
src1.yahoo.com
src1.yahoo.com
*.autos.yahoo.com
*.smp.oath.com
stage.consent.oath.com
lawenforcementrequests.oath.com
stage.guce2.oath.com
api.k8s-prod-01-euw1.int.o2.oath.com
*.adf.aasreref.red.yahoo.oath.com
stage.guce.oath.com
stage.guce.oath.com
stage-legal.yahoo.com
*.autos.yahoo.com
receiver.stage.lcoe.oath.com
api.processor.oath.com
api-uat.amt.yahooinc.com
id-uat.corp.aol.com
test-paranoids.oath.com
peering.oath.com
test-paranoids.oath.com
stage.oidc.oath.com
*.video.oath.com
api.stage.processor.oath.com
curate.publishing.oath.com
src1.yahoo.com
store.ouryahoo.com
store-qa.vzbuilders.com
*.stage.login.yahoo.com
stage.consent.oath.com
*.splunk.gdpr.oath.com
ads.vidible.tv
lawenforcementrequests-stage.oath.com
beta-oathsites-real.yahoo.com
dev.postmaster.oath.com
*.autos.yahoo.com
*.media.yahoo.com
*.trunk.login.yahoo.com
stage.consent.oath.com
*.media.yahoo.com
receiver.stage.lcoe.oath.com
*.autos.yahoo.com
*.mydashboard.oath.com
*.media.yahoo.com
ads.stage.vidible.tv
src1.yahoo.com
quartz-prod-bf01.azurite.bf1.yahoo.com
*.stage.mydashboard.oath.com
*.media.yahoo.com
src1.yahoo.com
src1.yahoo.com
*.publishing.oath.com
src6.yahoo.com
stage.guce2.oath.com
test.test-paranoids.oath.com
login.yahoo.com
staging.curate.publishing.oath.com
*.autos.yahoo.com
uat.sfdc.services.oath.com
careers.oath.com
stage.oidc.oath.com
careers-real.oath.com
staging.curate.publishing.oath.com

Certificate

The complete raw certificate details for trunk.oidc.oath.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAERG8s6/cRJCcmOrl+6uaAR7zmnABN
c/lRXaLp3UGONYRYO2Nh8s2MpqQvdgXyXYdRXseblXZFbudNeJPJyaIZJw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4397177205707650277641518919314445534
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Holdings Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trunk.oidc.oath.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004446f2cebf7112427263ab97eeae68047bce69c004d73f9515da2e9dd418e3584583b6361f2cd8ca6a42f7605f25d87515ec79b9576456ee74d7893c9c9a21927
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2add2146158325f7ac5daa2ee8c11aa0cff93267
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2257 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.oath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.mail.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.bezahlen.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.checkout.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.checkout.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.connect.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.engadget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.feedback.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.get.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.help.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.help.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.identityapp.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.marketingpreferences.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.marketingpreferences.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.meinkonto.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.member.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.membernotifications.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.mold.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.myaccount.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.myaccount.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.myaccount.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.myaccount.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.myaccount.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.mybenefits.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.netscape.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.nutzungihrerdaten.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.payments.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.payments.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.payments.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.paymentsconnect.netscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.paymentupdate.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.productcentral.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.publishing.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.techcrunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.wmconnect.compuserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.marketingpreferences.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.search.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.hilfe.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.autoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.checkoutnow.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.myservices.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.billupdate.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.homepage.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.fr.moncompte.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.www.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.mysubscriptions.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.builtbygirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.firefox-startpage.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.welcomescreen.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.www.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.aolbroadband.welcomescreen.aol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.www.aol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.www.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.www.aol.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.news.aol.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.o2.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.welcomescreen.aol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.plans.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.mysubscriptions.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.checkout.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.mysubscriptions.finance.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.checkout.finance.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.mysubscriptions.mail.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.checkout.mail.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.prod.origin.checkout.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.shop.intheknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.www.intheknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.calendar.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.subscriptions.aol.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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