trunk.oidc.oath.com
- Oath Holdings Inc. -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 03:4e:dd:93:0d:f9:76:f8:ed:17:d9:9b:f2:e2:14:de was issued on by DigiCert Inc.
With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Oath Holdings Inc.
Organization:
Oath Holdings Inc.
State / Province:
California
Locality: Sunnyvale
Country: US
Locality: Sunnyvale
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4e:dd:93:0d:f9:76:f8:ed:17:d9:9b:f2:e2:14:deSerial Number (int): 4397177205707650277641518919314445534
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 2a:dd:21:46:15:83:25:f7:ac:5d:aa:2e:e8:c1:1a:a0:cf:f9:32:67
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 95:5b:d7:6e:dc:3e:76:7e:fb:76:83:d1:a9:76:02:51:01:68:d0:57
Fingerprint (sha256): 2f:be:5d:e2:eb:67:e0:29:b4:38:f5:14:5d:a3:2f:81:45:eb:ed:2d:9c:de:87:8e:28:21:38:df:fd:01:99:f7
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate trunk.oidc.oath.com
71
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for trunk.oidc.oath.com
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
trunk.oidc.oath.com
trunk.oidc.mail.aol.com
trunk.oidc.bezahlen.aol.de
trunk.oidc.checkout.aol.com
trunk.oidc.checkout.aol.co.uk
trunk.oidc.connect.netscape.com
trunk.oidc.compuserve.com
trunk.oidc.engadget.com
trunk.oidc.feedback.aol.com
trunk.oidc.get.aol.com
trunk.oidc.help.aol.com
trunk.oidc.help.aol.co.uk
trunk.oidc.identityapp.aol.com
trunk.oidc.marketingpreferences.aol.com
trunk.oidc.marketingpreferences.aol.co.uk
trunk.oidc.meinkonto.aol.de
trunk.oidc.member.compuserve.com
trunk.oidc.membernotifications.aol.com
trunk.oidc.mold.aol.com
trunk.oidc.myaccount.aol.ca
trunk.oidc.myaccount.aol.com
trunk.oidc.myaccount.aol.co.uk
trunk.oidc.myaccount.compuserve.com
trunk.oidc.myaccount.netscape.com
trunk.oidc.mybenefits.aol.com
trunk.oidc.netscape.com
trunk.oidc.netscape.compuserve.com
trunk.oidc.nutzungihrerdaten.aol.de
trunk.oidc.payments.aol.com
trunk.oidc.payments.aol.co.uk
trunk.oidc.payments.compuserve.com
trunk.oidc.paymentsconnect.netscape.com
trunk.oidc.paymentupdate.aol.com
trunk.oidc.productcentral.aol.com
trunk.oidc.publishing.compuserve.com
trunk.oidc.techcrunch.com
trunk.oidc.wmconnect.compuserve.com
trunk.oidc.marketingpreferences.aol.ca
trunk.oidc.search.aol.com
trunk.oidc.hilfe.aol.de
trunk.oidc.autoblog.com
trunk.oidc.checkoutnow.aol.com
trunk.oidc.myservices.aol.com
trunk.oidc.billupdate.aol.com
trunk.oidc.homepage.aol.com
trunk.oidc.fr.moncompte.aol.com
trunk.oidc.www.aol.com
trunk.oidc.mysubscriptions.aol.com
trunk.oidc.builtbygirls.com
trunk.oidc.firefox-startpage.aol.com
trunk.oidc.welcomescreen.aol.com
trunk.oidc.www.aol.co.uk
trunk.oidc.aolbroadband.welcomescreen.aol.co.uk
trunk.oidc.www.aol.ca
trunk.oidc.www.aol.de
trunk.oidc.www.aol.jp
trunk.oidc.news.aol.jp
trunk.oidc.o2.aol.de
trunk.oidc.welcomescreen.aol.de
trunk.oidc.plans.yahoo.com
trunk.oidc.mysubscriptions.yahoo.com
trunk.oidc.checkout.yahoo.com
trunk.oidc.mysubscriptions.finance.yahoo.com
trunk.oidc.checkout.finance.yahoo.com
trunk.oidc.mysubscriptions.mail.yahoo.com
trunk.oidc.checkout.mail.yahoo.com
trunk.oidc.prod.origin.checkout.yahoo.com
trunk.oidc.shop.intheknow.com
trunk.oidc.www.intheknow.com
trunk.oidc.calendar.aol.com
trunk.oidc.subscriptions.aol.com
trunk.oidc.mail.aol.com
trunk.oidc.bezahlen.aol.de
trunk.oidc.checkout.aol.com
trunk.oidc.checkout.aol.co.uk
trunk.oidc.connect.netscape.com
trunk.oidc.compuserve.com
trunk.oidc.engadget.com
trunk.oidc.feedback.aol.com
trunk.oidc.get.aol.com
trunk.oidc.help.aol.com
trunk.oidc.help.aol.co.uk
trunk.oidc.identityapp.aol.com
trunk.oidc.marketingpreferences.aol.com
trunk.oidc.marketingpreferences.aol.co.uk
trunk.oidc.meinkonto.aol.de
trunk.oidc.member.compuserve.com
trunk.oidc.membernotifications.aol.com
trunk.oidc.mold.aol.com
trunk.oidc.myaccount.aol.ca
trunk.oidc.myaccount.aol.com
trunk.oidc.myaccount.aol.co.uk
trunk.oidc.myaccount.compuserve.com
trunk.oidc.myaccount.netscape.com
trunk.oidc.mybenefits.aol.com
trunk.oidc.netscape.com
trunk.oidc.netscape.compuserve.com
trunk.oidc.nutzungihrerdaten.aol.de
trunk.oidc.payments.aol.com
trunk.oidc.payments.aol.co.uk
trunk.oidc.payments.compuserve.com
trunk.oidc.paymentsconnect.netscape.com
trunk.oidc.paymentupdate.aol.com
trunk.oidc.productcentral.aol.com
trunk.oidc.publishing.compuserve.com
trunk.oidc.techcrunch.com
trunk.oidc.wmconnect.compuserve.com
trunk.oidc.marketingpreferences.aol.ca
trunk.oidc.search.aol.com
trunk.oidc.hilfe.aol.de
trunk.oidc.autoblog.com
trunk.oidc.checkoutnow.aol.com
trunk.oidc.myservices.aol.com
trunk.oidc.billupdate.aol.com
trunk.oidc.homepage.aol.com
trunk.oidc.fr.moncompte.aol.com
trunk.oidc.www.aol.com
trunk.oidc.mysubscriptions.aol.com
trunk.oidc.builtbygirls.com
trunk.oidc.firefox-startpage.aol.com
trunk.oidc.welcomescreen.aol.com
trunk.oidc.www.aol.co.uk
trunk.oidc.aolbroadband.welcomescreen.aol.co.uk
trunk.oidc.www.aol.ca
trunk.oidc.www.aol.de
trunk.oidc.www.aol.jp
trunk.oidc.news.aol.jp
trunk.oidc.o2.aol.de
trunk.oidc.welcomescreen.aol.de
trunk.oidc.plans.yahoo.com
trunk.oidc.mysubscriptions.yahoo.com
trunk.oidc.checkout.yahoo.com
trunk.oidc.mysubscriptions.finance.yahoo.com
trunk.oidc.checkout.finance.yahoo.com
trunk.oidc.mysubscriptions.mail.yahoo.com
trunk.oidc.checkout.mail.yahoo.com
trunk.oidc.prod.origin.checkout.yahoo.com
trunk.oidc.shop.intheknow.com
trunk.oidc.www.intheknow.com
trunk.oidc.calendar.aol.com
trunk.oidc.subscriptions.aol.com
Other certificates including the domain name oath.com
(limited to 100 certificates)
login.yahoo.com
*.stage.login.yahoo.com
prod-east.exchange.oath.com
test-paranoids.oath.com
test-paranoids.oath.com
*.video.oath.com
ads.vidible.tv
test-paranoids.oath.com
stage-oathsites-real.yahoo.com
*.autos.yahoo.com
leos.oath.com
quartz-stage-bf01.azurite.bf1.yahoo.com
ads.vidible.tv
stage.int.o2.oath.com
stage.int.o2.oath.com
*.smp.oath.com
*.login.yahoo.com
receiver.stage.lcoe.oath.com
careers-real.yahoo.com
id-ds.corp.aol.com
consent.oath.com
id.b2b.oath.com
om-dev.oath.com
transparency.oath.com
*.autos.yahoo.com
*.media.yahoo.com
test-paranoids.oath.com
yho.com
www.oath.com
ads.stage.vidible.tv
ads.vidible.tv
foo2.bar.pchen06.test.test-paranoids.oath.com
test-paranoids.oath.com
uat.sfdc.services.oath.com
stage.guce.oath.com
ads.vidible.tv
*.smp.oath.com
src1.yahoo.com
src1.yahoo.com
src1.yahoo.com
*.autos.yahoo.com
*.smp.oath.com
stage.consent.oath.com
lawenforcementrequests.oath.com
stage.guce2.oath.com
api.k8s-prod-01-euw1.int.o2.oath.com
*.adf.aasreref.red.yahoo.oath.com
stage.guce.oath.com
stage.guce.oath.com
stage-legal.yahoo.com
*.autos.yahoo.com
receiver.stage.lcoe.oath.com
api.processor.oath.com
api-uat.amt.yahooinc.com
id-uat.corp.aol.com
test-paranoids.oath.com
peering.oath.com
test-paranoids.oath.com
stage.oidc.oath.com
*.video.oath.com
api.stage.processor.oath.com
curate.publishing.oath.com
src1.yahoo.com
store.ouryahoo.com
store-qa.vzbuilders.com
*.stage.login.yahoo.com
stage.consent.oath.com
*.splunk.gdpr.oath.com
ads.vidible.tv
lawenforcementrequests-stage.oath.com
beta-oathsites-real.yahoo.com
dev.postmaster.oath.com
*.autos.yahoo.com
*.media.yahoo.com
*.trunk.login.yahoo.com
stage.consent.oath.com
*.media.yahoo.com
receiver.stage.lcoe.oath.com
*.autos.yahoo.com
*.mydashboard.oath.com
*.media.yahoo.com
ads.stage.vidible.tv
src1.yahoo.com
quartz-prod-bf01.azurite.bf1.yahoo.com
*.stage.mydashboard.oath.com
*.media.yahoo.com
src1.yahoo.com
src1.yahoo.com
*.publishing.oath.com
src6.yahoo.com
stage.guce2.oath.com
test.test-paranoids.oath.com
login.yahoo.com
staging.curate.publishing.oath.com
*.autos.yahoo.com
uat.sfdc.services.oath.com
careers.oath.com
stage.oidc.oath.com
careers-real.oath.com
staging.curate.publishing.oath.com
*.stage.login.yahoo.com
prod-east.exchange.oath.com
test-paranoids.oath.com
test-paranoids.oath.com
*.video.oath.com
ads.vidible.tv
test-paranoids.oath.com
stage-oathsites-real.yahoo.com
*.autos.yahoo.com
leos.oath.com
quartz-stage-bf01.azurite.bf1.yahoo.com
ads.vidible.tv
stage.int.o2.oath.com
stage.int.o2.oath.com
*.smp.oath.com
*.login.yahoo.com
receiver.stage.lcoe.oath.com
careers-real.yahoo.com
id-ds.corp.aol.com
consent.oath.com
id.b2b.oath.com
om-dev.oath.com
transparency.oath.com
*.autos.yahoo.com
*.media.yahoo.com
test-paranoids.oath.com
yho.com
www.oath.com
ads.stage.vidible.tv
ads.vidible.tv
foo2.bar.pchen06.test.test-paranoids.oath.com
test-paranoids.oath.com
uat.sfdc.services.oath.com
stage.guce.oath.com
ads.vidible.tv
*.smp.oath.com
src1.yahoo.com
src1.yahoo.com
src1.yahoo.com
*.autos.yahoo.com
*.smp.oath.com
stage.consent.oath.com
lawenforcementrequests.oath.com
stage.guce2.oath.com
api.k8s-prod-01-euw1.int.o2.oath.com
*.adf.aasreref.red.yahoo.oath.com
stage.guce.oath.com
stage.guce.oath.com
stage-legal.yahoo.com
*.autos.yahoo.com
receiver.stage.lcoe.oath.com
api.processor.oath.com
api-uat.amt.yahooinc.com
id-uat.corp.aol.com
test-paranoids.oath.com
peering.oath.com
test-paranoids.oath.com
stage.oidc.oath.com
*.video.oath.com
api.stage.processor.oath.com
curate.publishing.oath.com
src1.yahoo.com
store.ouryahoo.com
store-qa.vzbuilders.com
*.stage.login.yahoo.com
stage.consent.oath.com
*.splunk.gdpr.oath.com
ads.vidible.tv
lawenforcementrequests-stage.oath.com
beta-oathsites-real.yahoo.com
dev.postmaster.oath.com
*.autos.yahoo.com
*.media.yahoo.com
*.trunk.login.yahoo.com
stage.consent.oath.com
*.media.yahoo.com
receiver.stage.lcoe.oath.com
*.autos.yahoo.com
*.mydashboard.oath.com
*.media.yahoo.com
ads.stage.vidible.tv
src1.yahoo.com
quartz-prod-bf01.azurite.bf1.yahoo.com
*.stage.mydashboard.oath.com
*.media.yahoo.com
src1.yahoo.com
src1.yahoo.com
*.publishing.oath.com
src6.yahoo.com
stage.guce2.oath.com
test.test-paranoids.oath.com
login.yahoo.com
staging.curate.publishing.oath.com
*.autos.yahoo.com
uat.sfdc.services.oath.com
careers.oath.com
stage.oidc.oath.com
careers-real.oath.com
staging.curate.publishing.oath.com
Certificate
The complete raw certificate details for trunk.oidc.oath.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIINUDCCDDigAwIBAgIQA07dkw35dvjtF9mb8uIU3jANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0yMzA1MjMwMDAwMDBaFw0yMzExMTUyMzU5NTla MHExCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRIwEAYDVQQHEwlT dW5ueXZhbGUxGzAZBgNVBAoTEk9hdGggSG9sZGluZ3MgSW5jLjEcMBoGA1UEAxMT dHJ1bmsub2lkYy5vYXRoLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABERv LOv3ESQnJjq5furmgEe85pwATXP5UV2i6d1BjjWEWDtjYfLNjKakL3YF8l2HUV7H m5V2RW7nTXiTycmiGSejggquMIIKqjAfBgNVHSMEGDAWgBRRaP+QrwIHdTzM2WVk YqISuFlyOzAdBgNVHQ4EFgQUKt0hRhWDJfesXaou6MEaoM/5MmcwggjaBgNVHREE ggjRMIIIzYITdHJ1bmsub2lkYy5vYXRoLmNvbYIXdHJ1bmsub2lkYy5tYWlsLmFv bC5jb22CGnRydW5rLm9pZGMuYmV6YWhsZW4uYW9sLmRlght0cnVuay5vaWRjLmNo ZWNrb3V0LmFvbC5jb22CHXRydW5rLm9pZGMuY2hlY2tvdXQuYW9sLmNvLnVrgh90 cnVuay5vaWRjLmNvbm5lY3QubmV0c2NhcGUuY29tghl0cnVuay5vaWRjLmNvbXB1 c2VydmUuY29tghd0cnVuay5vaWRjLmVuZ2FkZ2V0LmNvbYIbdHJ1bmsub2lkYy5m ZWVkYmFjay5hb2wuY29tghZ0cnVuay5vaWRjLmdldC5hb2wuY29tghd0cnVuay5v aWRjLmhlbHAuYW9sLmNvbYIZdHJ1bmsub2lkYy5oZWxwLmFvbC5jby51a4IedHJ1 bmsub2lkYy5pZGVudGl0eWFwcC5hb2wuY29tgid0cnVuay5vaWRjLm1hcmtldGlu Z3ByZWZlcmVuY2VzLmFvbC5jb22CKXRydW5rLm9pZGMubWFya2V0aW5ncHJlZmVy ZW5jZXMuYW9sLmNvLnVrght0cnVuay5vaWRjLm1laW5rb250by5hb2wuZGWCIHRy dW5rLm9pZGMubWVtYmVyLmNvbXB1c2VydmUuY29tgiZ0cnVuay5vaWRjLm1lbWJl cm5vdGlmaWNhdGlvbnMuYW9sLmNvbYIXdHJ1bmsub2lkYy5tb2xkLmFvbC5jb22C G3RydW5rLm9pZGMubXlhY2NvdW50LmFvbC5jYYIcdHJ1bmsub2lkYy5teWFjY291 bnQuYW9sLmNvbYIedHJ1bmsub2lkYy5teWFjY291bnQuYW9sLmNvLnVrgiN0cnVu ay5vaWRjLm15YWNjb3VudC5jb21wdXNlcnZlLmNvbYIhdHJ1bmsub2lkYy5teWFj Y291bnQubmV0c2NhcGUuY29tgh10cnVuay5vaWRjLm15YmVuZWZpdHMuYW9sLmNv bYIXdHJ1bmsub2lkYy5uZXRzY2FwZS5jb22CInRydW5rLm9pZGMubmV0c2NhcGUu Y29tcHVzZXJ2ZS5jb22CI3RydW5rLm9pZGMubnV0enVuZ2locmVyZGF0ZW4uYW9s LmRlght0cnVuay5vaWRjLnBheW1lbnRzLmFvbC5jb22CHXRydW5rLm9pZGMucGF5 bWVudHMuYW9sLmNvLnVrgiJ0cnVuay5vaWRjLnBheW1lbnRzLmNvbXB1c2VydmUu Y29tgid0cnVuay5vaWRjLnBheW1lbnRzY29ubmVjdC5uZXRzY2FwZS5jb22CIHRy dW5rLm9pZGMucGF5bWVudHVwZGF0ZS5hb2wuY29tgiF0cnVuay5vaWRjLnByb2R1 Y3RjZW50cmFsLmFvbC5jb22CJHRydW5rLm9pZGMucHVibGlzaGluZy5jb21wdXNl cnZlLmNvbYIZdHJ1bmsub2lkYy50ZWNoY3J1bmNoLmNvbYIjdHJ1bmsub2lkYy53 bWNvbm5lY3QuY29tcHVzZXJ2ZS5jb22CJnRydW5rLm9pZGMubWFya2V0aW5ncHJl ZmVyZW5jZXMuYW9sLmNhghl0cnVuay5vaWRjLnNlYXJjaC5hb2wuY29tghd0cnVu ay5vaWRjLmhpbGZlLmFvbC5kZYIXdHJ1bmsub2lkYy5hdXRvYmxvZy5jb22CHnRy dW5rLm9pZGMuY2hlY2tvdXRub3cuYW9sLmNvbYIddHJ1bmsub2lkYy5teXNlcnZp Y2VzLmFvbC5jb22CHXRydW5rLm9pZGMuYmlsbHVwZGF0ZS5hb2wuY29tght0cnVu ay5vaWRjLmhvbWVwYWdlLmFvbC5jb22CH3RydW5rLm9pZGMuZnIubW9uY29tcHRl LmFvbC5jb22CFnRydW5rLm9pZGMud3d3LmFvbC5jb22CInRydW5rLm9pZGMubXlz dWJzY3JpcHRpb25zLmFvbC5jb22CG3RydW5rLm9pZGMuYnVpbHRieWdpcmxzLmNv bYIkdHJ1bmsub2lkYy5maXJlZm94LXN0YXJ0cGFnZS5hb2wuY29tgiB0cnVuay5v aWRjLndlbGNvbWVzY3JlZW4uYW9sLmNvbYIYdHJ1bmsub2lkYy53d3cuYW9sLmNv LnVrgi90cnVuay5vaWRjLmFvbGJyb2FkYmFuZC53ZWxjb21lc2NyZWVuLmFvbC5j by51a4IVdHJ1bmsub2lkYy53d3cuYW9sLmNhghV0cnVuay5vaWRjLnd3dy5hb2wu ZGWCFXRydW5rLm9pZGMud3d3LmFvbC5qcIIWdHJ1bmsub2lkYy5uZXdzLmFvbC5q cIIUdHJ1bmsub2lkYy5vMi5hb2wuZGWCH3RydW5rLm9pZGMud2VsY29tZXNjcmVl bi5hb2wuZGWCGnRydW5rLm9pZGMucGxhbnMueWFob28uY29tgiR0cnVuay5vaWRj Lm15c3Vic2NyaXB0aW9ucy55YWhvby5jb22CHXRydW5rLm9pZGMuY2hlY2tvdXQu eWFob28uY29tgix0cnVuay5vaWRjLm15c3Vic2NyaXB0aW9ucy5maW5hbmNlLnlh aG9vLmNvbYIldHJ1bmsub2lkYy5jaGVja291dC5maW5hbmNlLnlhaG9vLmNvbYIp dHJ1bmsub2lkYy5teXN1YnNjcmlwdGlvbnMubWFpbC55YWhvby5jb22CInRydW5r Lm9pZGMuY2hlY2tvdXQubWFpbC55YWhvby5jb22CKXRydW5rLm9pZGMucHJvZC5v cmlnaW4uY2hlY2tvdXQueWFob28uY29tgh10cnVuay5vaWRjLnNob3AuaW50aGVr bm93LmNvbYIcdHJ1bmsub2lkYy53d3cuaW50aGVrbm93LmNvbYIbdHJ1bmsub2lk Yy5jYWxlbmRhci5hb2wuY29tgiB0cnVuay5vaWRjLnN1YnNjcmlwdGlvbnMuYW9s LmNvbTAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9z aGEyLWhhLXNlcnZlci1nNi5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0 LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIw KTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMIGDBggr BgEFBQcBAQR3MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNv bTBNBggrBgEFBQcwAoZBaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lD ZXJ0U0hBMkhpZ2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQwCQYDVR0TBAIwADATBgor BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRDm2K8+6CADCm8w eZ3Vc9Donl+9IRbLhScJjMMnCW87a9TTzKepI5+ItTWhI9lEeJcNEdqySEEOfvtS hpb/FrHIQ+ffLuq8XVkoY5k14OvdSKZl1tLhuSDz5ai2US/rkt/zE1sR+OOQDpA2 hqy2xsVvHA7qrYAh0c1YzAE8YKA8Kb6bip0aMjXTz25BHnQsxPittFFG8zRM1emZ rPjBFOsUCYMcC0AvypPUctxZfoYzl7rDzNUvyin5fRbNIAm2TU5Q3DoeG5jFlq+x VQRCsitqghxbwuhXVgFMIyhLLl1kyoA0TKCU1AGLf0mWRRsb3Y5tpYEX4LxSFR6R Ebaq3w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAERG8s6/cRJCcmOrl+6uaAR7zmnABN c/lRXaLp3UGONYRYO2Nh8s2MpqQvdgXyXYdRXseblXZFbudNeJPJyaIZJw== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4397177205707650277641518919314445534 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Holdings Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trunk.oidc.oath.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004446f2cebf7112427263ab97eeae68047bce69c004d73f9515da2e9dd418e3584583b6361f2cd8ca6a42f7605f25d87515ec79b9576456ee74d7893c9c9a21927 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2add2146158325f7ac5daa2ee8c11aa0cff93267 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2257 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.oath.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.mail.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.bezahlen.aol.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.checkout.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.checkout.aol.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.connect.netscape.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.compuserve.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.engadget.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.feedback.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.get.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.help.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.help.aol.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.identityapp.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.marketingpreferences.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.marketingpreferences.aol.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.meinkonto.aol.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.member.compuserve.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.membernotifications.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.mold.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.myaccount.aol.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.myaccount.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.myaccount.aol.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.myaccount.compuserve.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.myaccount.netscape.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.mybenefits.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.netscape.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.netscape.compuserve.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.nutzungihrerdaten.aol.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.payments.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.payments.aol.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.payments.compuserve.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.paymentsconnect.netscape.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.paymentupdate.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.productcentral.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.publishing.compuserve.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.techcrunch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.wmconnect.compuserve.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.marketingpreferences.aol.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.search.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.hilfe.aol.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.autoblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.checkoutnow.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.myservices.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.billupdate.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.homepage.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.fr.moncompte.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.www.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.mysubscriptions.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.builtbygirls.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.firefox-startpage.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.welcomescreen.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.www.aol.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.aolbroadband.welcomescreen.aol.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.www.aol.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.www.aol.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.www.aol.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.news.aol.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.o2.aol.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.welcomescreen.aol.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.plans.yahoo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.mysubscriptions.yahoo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.checkout.yahoo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.mysubscriptions.finance.yahoo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.checkout.finance.yahoo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.mysubscriptions.mail.yahoo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.checkout.mail.yahoo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.prod.origin.checkout.yahoo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.shop.intheknow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.www.intheknow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.calendar.aol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk.oidc.subscriptions.aol.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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