stage.login.yahoo.com

- Oath Holdings Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0e:17:b8:c9:4d:10:0e:30:9e:d9:f0:3d:cb:9d:50:cc was issued on by DigiCert Inc.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oath Holdings Inc.

Organization: Oath Holdings Inc.
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:17:b8:c9:4d:10:0e:30:9e:d9:f0:3d:cb:9d:50:cc
Serial Number (int): 18732362680812616109977687003901022412
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bb:b0:c2:b7:9d:bf:91:18:5d:36:2f:81:c3:01:ee:f8:9e:ee:c8:30
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 4b:ff:66:12:50:78:d9:18:ee:20:56:07:16:da:dd:18:28:35:c0:2f
Fingerprint (sha256): 35:1e:3b:31:f0:05:96:82:e3:16:f9:ca:31:c1:58:5d:e0:5c:77:f0:0b:14:ae:d8:ca:56:7f:95:a7:ab:3b:c0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate stage.login.yahoo.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage.login.yahoo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stage.login.yahoo.com
*.perf.login.yahoo.com
*.pr.login.yahoo.com
*.smoke.login.yahoo.com
beta.mail.yahoo-inc.com
beta.fb.member.yahoo.com
beta.sky.mail.yahoo.com
gamma.fb.member.yahoo.com
gamma.mail.yahoo-inc.com
gamma.sky.mail.yahoo.com
beta.api.login.yahoo.com
gamma.api.login.yahoo.com
gamma.openid.yahoo.com
stage.login.yahoo.net
beta.bt.edit.client.yahoo.com
gamma.bt.edit.client.yahoo.com
beta.na.edit.client.yahoo.com
gamma.na.edit.client.yahoo.com
beta.reg.yahoo.com
gamma.login.yahoo.com
smoke.login.yahoo.com
smoke.api.login.yahoo.com
be-perf.login.yahoo.com
beta.frontier.mail.yahoo.com
beta.login.yahoo.com
beta.mts.mail.yahoo.com
beta.ovi.mail.yahoo.com
bvt.login.yahoo.com
captcha-stage.login.yahoo.com
externalbeta.login.yahoo.com
externalgamma.login.yahoo.com
gamma.ats.member.yahoo.com
gamma.frontier.mail.yahoo.com
gamma.mts.mail.yahoo.com
gamma.ovi.mail.yahoo.com
rhelbeta.login.yahoo.com
yosgamma.login.yahoo.com
stage.login.aol.com
stage.api.login.aol.com
stage.login.engadget.com
stage.api.login.engadget.com
stage.login.autoblog.com
stage.api.login.autoblog.com
stage.login.techcrunch.com
stage.api.login.techcrunch.com
stage.oidc.identityapp.aol.com
mock-svc.member.yahoo.com
*.stage.login.oath.com
api.stage.screenname.aol.com
stage.api.login.oath.com
stage.login.oath.com
stage.credstore.login.yahoo.com
stage.credstore.login.aol.com
*.stage.login.aol.com
stage.api.login.yahoo.com
*.stage.api.login.yahoo.com
*.pr.login.aol.com
*.pr.login.engadget.com
*.pr.login.techcrunch.com
*.pr.login.builtbygirls.com
stage.login.builtbygirls.com
stage.api.login.builtbygirls.com
stage.api.device.yahoo.com
stage.recovery.yahoo.com
stage.recovery.aol.com
stage.ws.progrss.yahoo.com
stage.api.login.intheknow.com
stage.login.intheknow.com
*.pr.login.intheknow.com
*.stage.login.yahoo.com
mtls.api.stage.login.aol.com
*.stage.api.login.aol.com
mtls.api.stage.login.yahoo.com
stage.api.oauth2.yahoo.com
stage.api.oauth2.aol.com
perf.api.oauth2.yahoo.com
perf.api.oauth2.aol.com
stage.pfs.yahoo.com
perf.pfs.yahoo.com
sapi.stage.login.yahoo.com
*.stage.api.oauth2.yahoo.com
*.stage.api.oauth2.aol.com
*.perf.api.oauth2.yahoo.com
*.perf.api.oauth2.aol.com
*.pr.api.oauth2.yahoo.com
*.pr.api.oauth2.aol.com
*.stage.pfs.yahoo.com
*.perf.pfs.yahoo.com

Other certificates including the domain name yahoo.com

(limited to 100 certificates)
digits3.data.yahoo.com
checkout.yahoo.com
*.sonic.mail.yahoo.com
master.data.yahoo.com
login.yahoo.com
backend.paranoids.corp.yahoo.com
qa.edge.ymon.corp.ne1.yahoo.com
*.store.yahoo.com
www.yahoo.com
chilledfilled.corp.gq1.yahoo.com
san.test-paranoids.yahoo.com
allhands.corp.yahoo.com
*.stage.login.yahoo.com
test012.san.test-paranoids.yahoo.com
tw.preview.campaign.money.yahoo.com
stage.api.onepush.mobile.yahoo.com
endurepoor.corp.ir2.yahoo.com
privbin.corp.yahoo.com
tw.mobi.yahoo.com
tw.knowledge.yahoo.com
stg-sandyui-01.netops.corp.gq1.yahoo.com
cosmos.bcp.search.corp.yahoo.com
testdata.factory.vespa.corp.yahoo.com
mobileexcellence.corp.yahoo.com
staging-origin-life.huffpo.net
lab-uic-pub.lab.rich.corp.yahoo.com
pr.comet.yahoo.com
admin.nevec.yahoo.com
steamedesteemed.corp.sg3.yahoo.com
stage.api.pes.yahoo.com
test.dek.ckms.yahoo.com
goglobal-demo.g11n.corp.gq1.yahoo.com
academy-delivery.cc.corp.yahoo.com
beta.api.backyard3.corp.yahoo.com
tw.billing.yahoo.com
sp.analytics.yahoo.com
dwdevetl02.fin.corp.gq1.yahoo.com
uc-gq1-vcenter1.corp.gq1.yahoo.com
backend-stage.paranoids.corp.yahoo.com
wherehaus.stage.geotech.corp.yahoo.com
gq1-psinprd-clu.psi.corp.gq1.yahoo.com
*.jeditools.mail.yahoo.com
kite-tools.pbp.corp.ne1.yahoo.com
origin.qa.dispatcher.yahoo.com
*.ea.ops.yahoo.com
endurepoor.corp.ir2.yahoo.com
*.report.gemini.yahoo.com
api.soln-stage.isvc.cp.yahoo.com
backend-stage.paranoids.corp.yahoo.com
san.test-paranoids.yahoo.com
san.test-paranoids.yahoo.com
tw.db.media.yahoo.com
*.cs.gq1-1.manhattan.gq1.yahoo.com
sh-gdpr.search.yahoo.com
*.abumedia.yahoo.com
*.answers.ycpi.yahoo.com
*.tee.ops.search.yahoo.com
privbin.corp.yahoo.com
oxy-oxygen-4a0620a5.gq1.yahoo.com
e2.ycpi.aeb.yahoo.com
secure02.lithium.com
telco-sg3-jump.sg3.corp.yahoo.com
legacy.pop.mail.yahoo.com
privbin.corp.yahoo.com
admin.ckms.yahoo.com
sp.analytics.yahoo.com
*.api.gemini.yahoo.com
dev.ui.payments.yahoo.com
dspskadpostback.aaca.yahooinc.com
san.test-paranoids.yahoo.com
splunk1.flurry.gq1.yahoo.com
certreloader.demo.yahoo.com
splunk.dspe.yahoo.com
src2.yahoo.com
profileproxy.prod.tgt.bf1.yahoo.com
legaltoolsstage.corp.yahoo.com
test1.yahoo.com
st39.yahoo.com
beta.edit.client.yahoo.com
chat.ouroath.com
endurepoor.corp.ir2.yahoo.com
*.chef.ops.yahoo.com
backend-stage.paranoids.corp.yahoo.com
san.test-paranoids.yahoo.com
manhattan.yahoo.com
dev.productcentral.aol.com
*.tripod.bf2.yahoo.com
ws.mobile.mail.yahoo.com
vpn2-1-gci.eglbp.corp.yahoo.com
endurepoor.corp.ir2.yahoo.com
yakl-rules.ops.yahoo.com
jp.techcrunch.com
ldap-mgmnt.corp.yahoo.com
yql.onepush.mobile.yahoo.com
*.hlfs.yahoo.com
*.wv.msg.yahoo.com
endurepoor.corp.ir2.yahoo.com
ads.vidible.tv
kronostest.fin.corp.yahoo.com
api.native.yahooinc.com

Certificate

The complete raw certificate details for stage.login.yahoo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOfDCCDWSgAwIBAgIQDhe4yU0QDjCe2fA9y51QzDANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0yMzA2MjIwMDAwMDBaFw0yMzEyMTMyMzU5NTla
MHMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRIwEAYDVQQHEwlT
dW5ueXZhbGUxGzAZBgNVBAoTEk9hdGggSG9sZGluZ3MgSW5jLjEeMBwGA1UEAxMV
c3RhZ2UubG9naW4ueWFob28uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsgpz7wIe8WjS+EzWJ13aMH6yZm+9FUgQNi1xHNk0OrtiwnPBac0ZeOVI
U+XJ1QLMY4I1vIKr54n7W90Uwnnmlc/yULu53b+iaPBNIc/s0IbganvWzfjf/pSQ
2cOPedYX3aCelhMptK5u6d950At4r0adwv2uoBOCx+ix0XI90zi1dDDO3/xlnarv
o1bENbGnPmON0VDfi3OUVknw1ElXX4HC7pJzOod7xowO+8SPH4qM5tV9kvTkjlCP
K+vJZAApftA/8RG8wvyIbMZPb39P/krRd5W8CjhXUH2/Gj8LchL76S7RyQz40XhP
B+8YDwMAg3hiYWurAPscDwSfrC648wIDAQABo4ILDTCCCwkwHwYDVR0jBBgwFoAU
UWj/kK8CB3U8zNllZGKiErhZcjswHQYDVR0OBBYEFLuwwredv5EYXTYvgcMB7vie
7sgwMIIJOQYDVR0RBIIJMDCCCSyCFXN0YWdlLmxvZ2luLnlhaG9vLmNvbYIWKi5w
ZXJmLmxvZ2luLnlhaG9vLmNvbYIUKi5wci5sb2dpbi55YWhvby5jb22CFyouc21v
a2UubG9naW4ueWFob28uY29tghdiZXRhLm1haWwueWFob28taW5jLmNvbYIYYmV0
YS5mYi5tZW1iZXIueWFob28uY29tghdiZXRhLnNreS5tYWlsLnlhaG9vLmNvbYIZ
Z2FtbWEuZmIubWVtYmVyLnlhaG9vLmNvbYIYZ2FtbWEubWFpbC55YWhvby1pbmMu
Y29tghhnYW1tYS5za3kubWFpbC55YWhvby5jb22CGGJldGEuYXBpLmxvZ2luLnlh
aG9vLmNvbYIZZ2FtbWEuYXBpLmxvZ2luLnlhaG9vLmNvbYIWZ2FtbWEub3Blbmlk
LnlhaG9vLmNvbYIVc3RhZ2UubG9naW4ueWFob28ubmV0gh1iZXRhLmJ0LmVkaXQu
Y2xpZW50LnlhaG9vLmNvbYIeZ2FtbWEuYnQuZWRpdC5jbGllbnQueWFob28uY29t
gh1iZXRhLm5hLmVkaXQuY2xpZW50LnlhaG9vLmNvbYIeZ2FtbWEubmEuZWRpdC5j
bGllbnQueWFob28uY29tghJiZXRhLnJlZy55YWhvby5jb22CFWdhbW1hLmxvZ2lu
LnlhaG9vLmNvbYIVc21va2UubG9naW4ueWFob28uY29tghlzbW9rZS5hcGkubG9n
aW4ueWFob28uY29tghdiZS1wZXJmLmxvZ2luLnlhaG9vLmNvbYIcYmV0YS5mcm9u
dGllci5tYWlsLnlhaG9vLmNvbYIUYmV0YS5sb2dpbi55YWhvby5jb22CF2JldGEu
bXRzLm1haWwueWFob28uY29tghdiZXRhLm92aS5tYWlsLnlhaG9vLmNvbYITYnZ0
LmxvZ2luLnlhaG9vLmNvbYIdY2FwdGNoYS1zdGFnZS5sb2dpbi55YWhvby5jb22C
HGV4dGVybmFsYmV0YS5sb2dpbi55YWhvby5jb22CHWV4dGVybmFsZ2FtbWEubG9n
aW4ueWFob28uY29tghpnYW1tYS5hdHMubWVtYmVyLnlhaG9vLmNvbYIdZ2FtbWEu
ZnJvbnRpZXIubWFpbC55YWhvby5jb22CGGdhbW1hLm10cy5tYWlsLnlhaG9vLmNv
bYIYZ2FtbWEub3ZpLm1haWwueWFob28uY29tghhyaGVsYmV0YS5sb2dpbi55YWhv
by5jb22CGHlvc2dhbW1hLmxvZ2luLnlhaG9vLmNvbYITc3RhZ2UubG9naW4uYW9s
LmNvbYIXc3RhZ2UuYXBpLmxvZ2luLmFvbC5jb22CGHN0YWdlLmxvZ2luLmVuZ2Fk
Z2V0LmNvbYIcc3RhZ2UuYXBpLmxvZ2luLmVuZ2FkZ2V0LmNvbYIYc3RhZ2UubG9n
aW4uYXV0b2Jsb2cuY29tghxzdGFnZS5hcGkubG9naW4uYXV0b2Jsb2cuY29tghpz
dGFnZS5sb2dpbi50ZWNoY3J1bmNoLmNvbYIec3RhZ2UuYXBpLmxvZ2luLnRlY2hj
cnVuY2guY29tgh5zdGFnZS5vaWRjLmlkZW50aXR5YXBwLmFvbC5jb22CGW1vY2st
c3ZjLm1lbWJlci55YWhvby5jb22CFiouc3RhZ2UubG9naW4ub2F0aC5jb22CHGFw
aS5zdGFnZS5zY3JlZW5uYW1lLmFvbC5jb22CGHN0YWdlLmFwaS5sb2dpbi5vYXRo
LmNvbYIUc3RhZ2UubG9naW4ub2F0aC5jb22CH3N0YWdlLmNyZWRzdG9yZS5sb2dp
bi55YWhvby5jb22CHXN0YWdlLmNyZWRzdG9yZS5sb2dpbi5hb2wuY29tghUqLnN0
YWdlLmxvZ2luLmFvbC5jb22CGXN0YWdlLmFwaS5sb2dpbi55YWhvby5jb22CGyou
c3RhZ2UuYXBpLmxvZ2luLnlhaG9vLmNvbYISKi5wci5sb2dpbi5hb2wuY29tghcq
LnByLmxvZ2luLmVuZ2FkZ2V0LmNvbYIZKi5wci5sb2dpbi50ZWNoY3J1bmNoLmNv
bYIbKi5wci5sb2dpbi5idWlsdGJ5Z2lybHMuY29tghxzdGFnZS5sb2dpbi5idWls
dGJ5Z2lybHMuY29tgiBzdGFnZS5hcGkubG9naW4uYnVpbHRieWdpcmxzLmNvbYIa
c3RhZ2UuYXBpLmRldmljZS55YWhvby5jb22CGHN0YWdlLnJlY292ZXJ5LnlhaG9v
LmNvbYIWc3RhZ2UucmVjb3ZlcnkuYW9sLmNvbYIac3RhZ2Uud3MucHJvZ3Jzcy55
YWhvby5jb22CHXN0YWdlLmFwaS5sb2dpbi5pbnRoZWtub3cuY29tghlzdGFnZS5s
b2dpbi5pbnRoZWtub3cuY29tghgqLnByLmxvZ2luLmludGhla25vdy5jb22CFyou
c3RhZ2UubG9naW4ueWFob28uY29tghxtdGxzLmFwaS5zdGFnZS5sb2dpbi5hb2wu
Y29tghkqLnN0YWdlLmFwaS5sb2dpbi5hb2wuY29tgh5tdGxzLmFwaS5zdGFnZS5s
b2dpbi55YWhvby5jb22CGnN0YWdlLmFwaS5vYXV0aDIueWFob28uY29tghhzdGFn
ZS5hcGkub2F1dGgyLmFvbC5jb22CGXBlcmYuYXBpLm9hdXRoMi55YWhvby5jb22C
F3BlcmYuYXBpLm9hdXRoMi5hb2wuY29tghNzdGFnZS5wZnMueWFob28uY29tghJw
ZXJmLnBmcy55YWhvby5jb22CGnNhcGkuc3RhZ2UubG9naW4ueWFob28uY29tghwq
LnN0YWdlLmFwaS5vYXV0aDIueWFob28uY29tghoqLnN0YWdlLmFwaS5vYXV0aDIu
YW9sLmNvbYIbKi5wZXJmLmFwaS5vYXV0aDIueWFob28uY29tghkqLnBlcmYuYXBp
Lm9hdXRoMi5hb2wuY29tghkqLnByLmFwaS5vYXV0aDIueWFob28uY29tghcqLnBy
LmFwaS5vYXV0aDIuYW9sLmNvbYIVKi5zdGFnZS5wZnMueWFob28uY29tghQqLnBl
cmYucGZzLnlhaG9vLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRp
Z2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwNKAyoDCGLmh0dHA6Ly9j
cmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwPgYDVR0gBDcw
NTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5j
b20vQ1BTMIGDBggrBgEFBQcBAQR3MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw
LmRpZ2ljZXJ0LmNvbTBNBggrBgEFBQcwAoZBaHR0cDovL2NhY2VydHMuZGlnaWNl
cnQuY29tL0RpZ2lDZXJ0U0hBMkhpZ2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQwCQYD
VR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
LtZYXy2R6ntou3A/Ryy4Hc+7EgBPzKwte5I7k6K0TTfMSmCTVBk+SW9IyBIddo2U
bHW3ciaW7jjuybJOArAUmMwfU+qq0GBAcojm1SxP64MQW1+aHk20vzYSH9fmqY03
zsY+qRBQdi+Gw22CsvBA7+GBEBSuck498coCuz5U9UX1atbUntc0IxIpzmdgQZRR
bRFwws059k9/9mc5y/sRr7Vwh6mnQqHZanE5xc9JgkCyvnyurEBRqg54Ua1Cmshy
b7Q+jmUMsGAuw1zAMyYmfoV1DGXs83zgAIAvbjiuysqJdsnnUrHEshnzAbFbuE8z
2PuLyO2oLAB2ZKy0gCLgqg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgpz7wIe8WjS+EzWJ13a
MH6yZm+9FUgQNi1xHNk0OrtiwnPBac0ZeOVIU+XJ1QLMY4I1vIKr54n7W90Uwnnm
lc/yULu53b+iaPBNIc/s0IbganvWzfjf/pSQ2cOPedYX3aCelhMptK5u6d950At4
r0adwv2uoBOCx+ix0XI90zi1dDDO3/xlnarvo1bENbGnPmON0VDfi3OUVknw1ElX
X4HC7pJzOod7xowO+8SPH4qM5tV9kvTkjlCPK+vJZAApftA/8RG8wvyIbMZPb39P
/krRd5W8CjhXUH2/Gj8LchL76S7RyQz40XhPB+8YDwMAg3hiYWurAPscDwSfrC64
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18732362680812616109977687003901022412
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Holdings Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage.login.yahoo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22475572784159271682068718587376643393989529369329224915052718570848203779244850022257508174622240365776353008295835080020048733750213625698194447580434609223141783104128199331738576588513258319980202648955074550100838135167823949119260846298335134331565756197219652728091093894917706428998757613984903560388102392179328184931624375975697629682717274925333481936504134100993618963751376043848414069067987708414746246628022151632047044057813706187247638663431522205702231639977664965201632937191926182263353274220260896913270468887521308186602397236205463805771113703135858529075399876748527017598308999899172651841779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbb0c2b79dbf91185d362f81c301eef89eeec830
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2352 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perf.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pr.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smoke.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.mail.yahoo-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.fb.member.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.sky.mail.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamma.fb.member.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamma.mail.yahoo-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamma.sky.mail.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.api.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamma.api.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamma.openid.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.login.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.bt.edit.client.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamma.bt.edit.client.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.na.edit.client.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamma.na.edit.client.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.reg.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamma.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smoke.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smoke.api.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-perf.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.frontier.mail.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.mts.mail.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.ovi.mail.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bvt.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captcha-stage.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'externalbeta.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'externalgamma.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamma.ats.member.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamma.frontier.mail.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamma.mts.mail.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamma.ovi.mail.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhelbeta.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yosgamma.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.login.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.login.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.login.engadget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.login.engadget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.login.autoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.login.autoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.login.techcrunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.login.techcrunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oidc.identityapp.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mock-svc.member.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.login.oath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.screenname.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.login.oath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.login.oath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.credstore.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.credstore.login.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.login.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.api.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pr.login.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pr.login.engadget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pr.login.techcrunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pr.login.builtbygirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.login.builtbygirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.login.builtbygirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.device.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.recovery.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.recovery.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ws.progrss.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.login.intheknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.login.intheknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pr.login.intheknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtls.api.stage.login.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.api.login.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtls.api.stage.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.oauth2.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.oauth2.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.api.oauth2.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.api.oauth2.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.pfs.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.pfs.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapi.stage.login.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.api.oauth2.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.api.oauth2.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perf.api.oauth2.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perf.api.oauth2.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pr.api.oauth2.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pr.api.oauth2.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.pfs.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perf.pfs.yahoo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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