uc17.janrainengage.com

- JanRain, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0e:ef:a9:e7:0d:15:a8:c4:fa:bd:c9:44:41:63:bd:92 was issued on by DigiCert Inc.

With 118 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

JanRain, Inc.

Organization: JanRain, Inc.
Organization unit: Operations
State / Province: OR
Locality: Portland
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:ef:a9:e7:0d:15:a8:c4:fa:bd:c9:44:41:63:bd:92
Serial Number (int): 19853596923156693512323890889359605138
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bb:b0:06:0d:f7:e9:72:7a:64:f9:96:3c:d4:cd:81:1e:49:a8:7e:8b
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 38:3a:ed:0d:16:57:c7:69:86:8f:b7:9c:36:e8:6d:2c:b9:31:d6:f5
Fingerprint (sha256): 34:4b:18:08:37:04:91:d8:c9:0a:0a:7b:83:82:df:34:c0:8d:a0:a3:06:29:3d:15:b9:54:b7:16:6c:df:e8:4d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g4.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g4.crl

Check the revocation status for certificate uc17.janrainengage.com

118

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uc17.janrainengage.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uc17.janrainengage.com
login.tbcretail.tbccorp.com
connect.virginaustralia.com
dm-sso.pfizer.com
authenticate.cookingchanneltv.com
login.pac-12.com
login.foxnews.com
share.yels.us
login.yoursextype.com
frontiers-auth.stanford.edu
socx.simplermedia.com
login.sourceinterlinkdigital.com
connect.districtmtvla.com
connect.districtmtv.de
login.shareit.com
connect.districtmtv.es
connect.districtmtv.fr
connect.districtmtv.it
connect.districtmtv.co.uk
engage.macys.com
engage.bloomingdales.com
connect.covertheworld.com
login.pivotcon.com
login.cmgdigital.com
signin-be-nl.siemens-home.com
signin-au.siemens-home.com
signin.insights.md
login.powhealth.com
login.efinancialcareers.com
jrlogin.harryanddavid.com
jrlogin.wolfermans.com
jrlogin.honeybell.com
forge.marvel.com
login.slashdot.org
login.earthknowledge.net
login.uggaustralia.com
login.teva.com
login.sanuk.com
login.ahnu.com
login.maddentips.com
authorization.universalmusic.com
signup.wwe.com
auth.bazaarvoice.com
sdb.globest.com
signin.wearecommunities.org
login.perfectplaces.com
login.philips.com
social.chucklemonster.com
sso.e-tailer.co
social.findmylostmoney.com
sc.bwin.com
sc.bwin.es
sc.partygammon.com
sc.gamebookers.com
sc.partybets.com
sc.binguez.com
sc.binguez.es
sc.partybingo.com
sc.wptcasino.com
sc.partycasino.com
sc.wptpoker.com
sc.partypoker.com
sc.partypoker.fr
sc.partypoker.es
sc.acfpoker.fr
sc.wpt.fr
login.thq.com
login.abccompanion.tv
signin.act.org
login.studylondon.ac.uk
signin.thevoice.com.au
signin.timescolonist.com
login.wellx.com
login.allnurses.com
login.devstore.com
login.mainstreetpark.com
login.har.com
in.voxxi.com
account.sbs.com.au
registration.denverpost.com
register.mercurynews.com
register.contracostatimes.com
registration.twincities.com
registration.medianewsgroup.com
register.journalregister.com
login.dice.com
sc.zyngapluscasino.co.uk
sc.zyngapluspoker.co.uk
login.wildearth.tv
slogintest.ft.com
slogin.ft.com
login.mynrma.com.au
login.hacksurfer.com
login.hgtvgardens.com
login.wornmyway.com
login.mopar.eu
social.denon.com
login.healthcallings.com
signup.ikemu.com
engage.nextlove.com
signin.coca-cola.com.au
signin.cokerewards.com.au
ekta.yels.us
signin.gigapan.com
sso.bbclogin.com
login.musiccityeats.com
login.orionmusicandmore.com
login.travelchannel.com
login.bigdayout.com
login.hubub.com
signin.sonos.com
login.tirrenia.it
login.carbookplus.com
login.romandie360.ch
login.oreilly.com
login.news-gazette.com
login.ulive.com
login.greenhog.com

Other certificates including the domain name janrainengage.com

(limited to 100 certificates)
*.rpxnow.com
uc17.janrainengage.com
uc13.janrainengage.com
uc12.janrainengage.com
uc16.janrainengage.com
uc13.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc14.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
uc16.janrainengage.com
uc16.janrainengage.com
uc16.janrainengage.com
*.rpxnow.com
uc17.janrainengage.com
uc13.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
*.eval.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc15.janrainengage.com
uc16.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc16.janrainengage.com
uc13.janrainengage.com
uc17.janrainengage.com
*.eval.janrainengage.com
uc15.janrainengage.com
uc09.janrainengage.com
*.eval.janraincapture.com
uc16.janrainengage.com
*.eval.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc15.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
*.eval.janrainengage.com
uc14.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
*.eval.janrainengage.com
uc16.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
uc15.janrainengage.com
uc15.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
*.rpxnow.com
uc18.janrainengage.com
*.rpxnow.com
*.rpxnow.com
uc18.janrainengage.com
uc09.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc19.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
*.rpxnow.com
uc16.janrainengage.com
uc15.janrainengage.com
uc17.janrainengage.com
uc12.janrainengage.com
uc18.janrainengage.com
uc09.janrainengage.com
uc16.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc09.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc18.janrainengage.com

Certificate

The complete raw certificate details for uc17.janrainengage.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKoPbYMRYwq5nVKkerzA
IbCID4MqXZuv3JkkUKzpUArAPNBoYXV+0XeOSO1sPDDRqZuHs3ItykK0K8KUaSem
LbTWEHSDiv+HARFH6JN+QlwDcjs2vWA5W4g6pSAB3gftXJHDWDsAaaW9OLs5o1UA
f0HCIWtEARtsSgGjcheIMxut5UiC+F/XIbeiJRLsgB8c/Krf+SDjsZmPpo4wUn0z
Dfg93g6TYQM4TymX/CQax1UolOYqjCx/vgVpmry1BCaPmlBtOoPzSNqFSxhCX0BP
s3pHIoOmUY7ibSO8D46IxJc0yXdKk9vc6Bu0rH3+3EHbtchERIgOZrtwnp1a238f
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19853596923156693512323890889359605138
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JanRain, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uc17.janrainengage.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23311707955812119787649416431034983212950050279064693448192292343492898196772012455997519253704085988971081302122925472016749171163939828553172533751691490402617121477423232018252869102873033228702469266967375590644778938567857347910973285770454639662590756553398422207921496514244489978485188255613719791328736231233438879709965237216105233103057107264237504787808516130215380550045347756743855301221665609657979880306717229724877326655233782908949783888889781098870096629544875941017557451049545784309146128904437140683127623689961558001125344891127009048719923483125296597576602090540257691510089746976188110151501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbb0060df7e9727a64f9963cd4cd811e49a87e8b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2579 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uc17.janrainengage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.tbcretail.tbccorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.virginaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dm-sso.pfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authenticate.cookingchanneltv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.pac-12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.foxnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.yels.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.yoursextype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontiers-auth.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socx.simplermedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.sourceinterlinkdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.districtmtvla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.districtmtv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.shareit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.districtmtv.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.districtmtv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.districtmtv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.districtmtv.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.macys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.bloomingdales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.covertheworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.pivotcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.cmgdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin-be-nl.siemens-home.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin-au.siemens-home.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.insights.md'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.powhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.efinancialcareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrlogin.harryanddavid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrlogin.wolfermans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrlogin.honeybell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forge.marvel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.slashdot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.earthknowledge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.uggaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.teva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.sanuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.ahnu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.maddentips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization.universalmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.wwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.bazaarvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdb.globest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.wearecommunities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.perfectplaces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.philips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.chucklemonster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.e-tailer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.findmylostmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.bwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.bwin.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.partygammon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.gamebookers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.partybets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.binguez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.binguez.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.partybingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.wptcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.partycasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.wptpoker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.partypoker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.partypoker.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.partypoker.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.acfpoker.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.wpt.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.abccompanion.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.act.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.studylondon.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.thevoice.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.timescolonist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.wellx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.allnurses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.devstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mainstreetpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.har.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.voxxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.sbs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.denverpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.mercurynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.contracostatimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.twincities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.medianewsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.journalregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.zyngapluscasino.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.zyngapluspoker.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.wildearth.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slogintest.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slogin.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mynrma.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hacksurfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hgtvgardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.wornmyway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mopar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.denon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.healthcallings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.ikemu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.nextlove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.coca-cola.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.cokerewards.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekta.yels.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.gigapan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.bbclogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.musiccityeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.orionmusicandmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.travelchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.bigdayout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hubub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.sonos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.tirrenia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.carbookplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.romandie360.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.oreilly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.news-gazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.ulive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.greenhog.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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